isee857/cve-2025-29927Python-based proof-of-concept exploit for CVE-2025-29927, a Next.js privilege bypass vulnerability. Supports single-target and batch scanning with configurable paths and threading.
Next.Js permission bypass vulnerability (CVE-2025-29927)
More PoCs at
https://pc.fenchuan8.com/#/index?forum=101158&yqm=DGR4X
#path default /, multi-thread default 10
Batch detection:
python poc.py -f url.txt -p /path -t 10
Single detection:
python poc.py -u your-ip -p /path -t 10
