
CVE-2025-29927
CVE-2025-29927: Next.js Middleware Bypass Vulnerability

CVE-2025-29927: Next.js Middleware Bypass Vulnerability

Exploit for Oracle Access Manager padding oracle vulnerability (CVE-2018-2879)

Proof of concept for the vulnerability CVE-2018-19410

This script exploits the CVE-2024-0204 vulnerability in Fortra GoAnywhere MFT, allowing the creation of unauthorized administrative users, for…

Analysis and exploitation of a Next.js authorization bypass vulnerability (CVE-2025-29927)

Research and analysis of the ServiceNow Virtual Agent vulnerability (CVE-2025-12420), including attack flow, MITRE ATT&CK mapping, detection…

NSE plugin for Nmap that scans a DotNetNuke (DNN) web application for an Administration Authentication Bypass vulnerability (CVE-2015-2794, EDB-ID:…

Repository for CVE-2023-4800 vulnerability.

Workaround guide for CVE-2022-41923 privilege management vulnerability in Grails Spring Security Core plugin, providing patched filter definitions…

Chrome extension that uses vulnerabilities CVE-2021-33044 and CVE-2021-33045 to log in to Dahua cameras without authentication.

Proof-of-concept exploit for Microsoft SharePoint CVE-2026-55040 that forges JWT tokens, bypasses authentication, auto-discovers metadata, and…

JetBrains TeamCity Authentication Bypass CVE-2023-42793 Exploit

Proof-of-concept exploit for Progress WhatsUp Gold SQL injection authentication bypass (CVE-2024-6670). Includes root cause analysis and automated…

Apache Shiro CVE-2022-32532

CVE-2025-41646 - Critical Authentication bypass

Apache Superset Auth Bypass Vulnerability CVE-2023-27524.

Exploit for CVE-2026-8206 targeting unauthenticated account takeover in the Kirki WordPress plugin. Provides a proof-of-concept for security testing…

SureTriggers <= 1.0.78 - Authorization Bypass Exploit