Forwarded from آموزش امنیت | HAKFA
There are various methods to bypass and circumvent the CSRF Token, and I managed to bypass this security mechanism in a test on a new target by replacing the token with another user account.
#csrf #bug #hunt
@hakfateam
Write up coming soon 🐱🆕🎯🐛🪲
#csrf #bug #hunt
@hakfateam
Write up coming soon 🐱🆕🎯🐛🪲
❤🔥2❤1✍1
Forwarded from آموزش امنیت | HAKFA
🎯Nexjs Vulnerability Authentication Bypass
🪲If you remember, last year there was a dangerous vulnerability in nexjs with cve-2025-29927, which was a version of the vulnerable nexjs version that used header middleware to authenticate users, allowing access to protected paths without sessions. I found and reported this bug yesterday. There are a lot of site users, so I hope they fix it quickly.
#bug #hunt #vulnerability #hacker #cve #گزارش
@hakfateam
🪲If you remember, last year there was a dangerous vulnerability in nexjs with cve-2025-29927, which was a version of the vulnerable nexjs version that used header middleware to authenticate users, allowing access to protected paths without sessions. I found and reported this bug yesterday. There are a lot of site users, so I hope they fix it quickly.
#bug #hunt #vulnerability #hacker #cve #گزارش
@hakfateam
3❤4