Oracle WebLogic Server Administration Console - Remote Code Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware subcomponent: Web Services versions 0.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0 contain an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic Server. id:...

Oracle Fusion Middleware Weblogic Server - Remote OS Command Execution

The Oracle WebLogic Server component of Oracle Fusion Middleware Web Services versions 10.3.6.0, 12.1.3.0, 12.2.1.0, 12.2.1.1 and 12.2.1.2 is susceptible to a difficult to exploit vulnerability that could allow unauthenticated attackers with network access via HTTP to compromise Oracle WebLogic...

nextjs-middleware-exploit

Next.js Middleware Vulnerability Research CVE-2025-29927 This repository demonstrates a critical vulnerability in Next.js middleware CVE-2025-29927, which affects versions 11.1.4 through 15.1.7. This vulnerability allows for authorization bypass , CSP bypass , and potential DoS attacks through...

nextjs-middleware-exploit

Next.js 미들웨어 취약점 연구 CVE-2025-29927 이 저장소는 Next.js 미들웨어의 심각한 취약점CVE-2025-29927 을 시연합니다. 이 취약점은 버전 11.1.4에서 15.1.7까지 영향을 미칩니다. 이 취약점은 인증 우회 , CSP 우회 , 그리고 캐시 중독을 통한 잠재적 DoS 공격 을 허용합니다. 문제는 x-middleware-subrequest 헤더가 처리되는 방식에서 발생하며, 공격자가 미들웨어 보호 메커니즘을 우회할 수 있게 합니다. 이 개념 증명은 v12 의 취약점에 특화되어 있습니다. 사용...

vulnbox-easy-CVE-2025-29927

Man-in-the-middle This application is named Man-in-the middle because it contains a vulnerability in Next.JS middleware and the flag is in the API call. 🚀 Production Setup 1. .env.production DATABASEURL=postgresql://postgres:password@db:5432/nextauth JWTSECRET=your-production-secret 2. Build and...

vulnerable-nextjs-14-CVE-2025-29927

CVE-2025-29927 Authorization Bypass reproduction This repository is a reproduction of the CVE-2025-29927 vulnerability in the next package How to reproduce 1. Follow the steps below to clone, and run the Next.js application 2. Test authorization denies access to the /api/hello endpoint $ curl...

CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 — Next.js Middleware / RSC Bypass Analysis The author assumes no liability for misuse or damage caused by this research Provided strictly for educational and defensive purposes Description This repository contains a small laboratory and Proof-of-Concept analysis fo...

cve-2025-29927

CVE-2025-29927-PoC-Exploit Proof-of-Concept for Authorization Bypass in Next.js Middleware You can run this against a vulnerable version here: https://github.com/lirantal/vulnerable-nextjs-14-CVE-2025-29927 Running Execution is straightforward. 1. Python3 CVE-2025-29927-PoC-Exploit.py It will...

CVE-2025-29927

Next.js Vulnerability Demo CVE-2025-29927 This repository contains a demonstration of the Next.js vulnerability CVE-2025-29927, which affects Next.js version 15.2.2 and earlier. The vulnerability allows attackers to bypass middleware authentication checks by setting an x-middleware-subrequest...

middleware-auth-bypass

middleware-auth-bypass CVE-2025-29927 a poc of the next.js middleware authentication bypass...

CVE-2025-29927

CVE-2025-29927: The Next.js Middleware Nightmare This repository is provided strictly for educational purposes only. I did not discover this vulnerability - this is a demonstration and explanation of a publicly disclosed security issue. Using this knowledge to exploit vulnerable systems without...

POC-CVE-2025-29927-

Affected Next.js 15.x 15.2.3, 14.x 14.2.25, Next.js 13.x 13.5.9 Self-hosted setups that use Middleware for critical functionality, such as authentication. Guide npm run dev curl --compressed -X GET http://localhost:3000/dashboard \ -H "Host: localhost:3000" \ -H "sec-ch-ua: "Chromium";v="135",...

nextjs-vulnerable-app

Next.js Authentication App This is a Next.js application that implements authentication using NextAuth.js. The app features protected routes that require users to be authenticated to access certain pages. Project Structure nextjs-auth-app ├── components │ ├── Layout.js Layout component for...

nextjs-CVE-2025-29927

nextjs-CVE-2025-29927 A Nuclei template to detect CVE-2025-29927 the Next.js authentication bypass vulnerability. If you want to understand exactly how this vulnerability works, you can read the original researchers excellent article here This template is pretty straight forward. It does two...

NextSploit

🔍 NextSploit: Next.js CVE-2025-29927 Scanner & Exploiter ⚠️ NextSploit is a command-line tool designed to detect and exploit CVE-2025-29927 , a security flaw in Next.js. The tool first identifies if a target website is running Next.js and determines whether its version falls within the vulnerable...

ROOT-APP-NPM-CVE-2024-29180 CVE-2024-29180 in webpack-dev-middleware - Patched by Root

Root has patched CVE-2024-29180 in the webpack-dev-middleware package for Root:npm. Multiple fixed versions available...

Hoverfly-1.11.3-RCE-CVE-2025-54123-Exploit

CVE-2025-54123 — Hoverfly Middleware API Remote Code Execution Authenticated RCE via OS Command Injection in Hoverfly ≤ 1.11.3 Vulnerability Overview Property| Value ---|--- CVE ID| CVE-2025-54123 CVSS Score| 9.8 — Critical CVSS Vector| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CWE| CWE-78 OS...

0xMiddleware

CVE-2025-29927: Next.js ミドルウェアの悪用 このツールは、Next.js の脆弱性である CVE-2025-29927 の悪用を実演し自動化します。この脆弱性により、攻撃者は内部ヘッダー x-middleware-subrequest を悪用して ミドルウェアのチェック （認証など）を バイパス できます。 🔧 脆弱性の仕組み Next.js は内部でヘッダー x-middleware-subrequest を使用して、再帰的なリクエストにおける無限ループを防いでいます。しかし、このヘッダーは特定のバージョンでは外部からの操作に対して保護されておらず...

CVE-2025-29927

CVE-2025-29927 - Demo for Introdcution to Secure Programming 00960267 Background This is a demo of CVE-2025-29927, a critical vulnerability in Next.js that allowed bypassing the middleware with a certain header. The header x-middleware-subrequest was intended to prevent infinite middleware loops...

Malicious code in hardhat-spack (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e59c971c63de9d0a7f66c26093f528164990af10eca00a3a36b97d0c8b0a6d0d The package is published as hardhat-spack but presents itself internally as a pino-like logger. Its main export is a middleware factory that spawns...