CVE-2025-29927 PoC — Next.js 安全漏洞

Description

New nuclei CVE 

介绍

# CVE-2025-29927 - Next.js Middleware Authentication Bypass (Advanced Bypass)

## 🔥 Overview
An **advanced PoC** for **CVE-2025-29927**, allowing authentication bypass in **Next.js Middleware** by manipulating specific headers.  
This template enhances **WAF evasion** and **security bypass** techniques.

## 🚀 Features
✅ **Multi-Request & HTTP Method Variation** → Uses `GET`, `POST` to maximize detection.  
✅ **WAF Evasion** → Includes `X-Forwarded-For`, `X-Original-URL`, `X-Rewrite-URL`, and more.  
✅ **Randomized Query Parameters** → Prevents caching issues and improves bypass reliability.  
✅ **Multiple Response Matching** → Detects `200 OK`, `Next.js` headers, and sensitive content.  

## 🛠️ Usage
1️⃣ **Install** → `go install -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei@latest`  
2️⃣ **Template** → `git clone https://github.com/lediusa/CVE-2025-29927.git`  
3️⃣ **Run Scan** → `nuclei -t CVE-2025-29927.yaml -u http://target.com`  

📌 **Note:** This template is for **security research & authorized testing only.**

文件快照

备注