pouriam23

8 exploits Active since Oct 2016
CVE-2025-29927 NOMISEC CRITICAL WORKING POC
Next.js Middleware Bypass
Next.js is a React framework for building full-stack web applications. Starting in version 1.11.4 and prior to versions 12.3.5, 13.5.9, 14.2.25, and 15.2.3, it is possible to bypass authorization checks within a Next.js application, if the authorization check occurs in middleware. If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next.js application. This vulnerability is fixed in 12.3.5, 13.5.9, 14.2.25, and 15.2.3.
2 stars
CVSS 9.1
CVE-2025-43864 NOMISEC HIGH STUB
React Router 7.2.0-7.5.1 - Cache Poisoning via Forced SPA Mode Switch
React Router is a router for React. Starting in version 7.2.0 and prior to version 7.5.2, it is possible to force an application to switch to SPA mode by adding a header to the request. If the application uses SSR and is forced to switch to SPA, this causes an error that completely corrupts the page. If a cache system is in place, this allows the response containing the error to be cached, resulting in a cache poisoning that strongly impacts the availability of the application. This issue has been patched in version 7.5.2.
1 stars
CVSS 7.5
CVE-2025-31137 NOMISEC HIGH WORKING POC
React Router 7.0.0-7.4.0 and Remix 2.11.1-2.16.2 - HTTP Request Smuggling via Host Header
React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an incoming Request by putting a URL pathname in the port section of a URL that is part of a Host or X-Forwarded-Host header sent to a Remix/React Router request handler. This issue has been patched and released in Remix 2.16.3 and React Router 7.4.1.
1 stars
CVSS 7.5
CVE-2025-43865 NOMISEC HIGH STUB
React Router 7.0.0-pre.0-7.5.1 - Insufficient Verification of Data Authenticity via Request Header
React Router is a router for React. In versions on the 7.0 branch prior to version 7.5.2, it's possible to modify pre-rendered data by adding a header to the request. This allows to completely spoof its contents and modify all the values ​​of the data object passed to the HTML. This issue has been patched in version 7.5.2.
CVSS 8.2
CVE-2024-12583 NOMISEC CRITICAL STUB
Dynamics 365 Integration plugin - RCE
The Dynamics 365 Integration plugin for WordPress is vulnerable to Remote Code Execution and Arbitrary File Read in all versions up to, and including, 1.3.23 via Twig Server-Side Template Injection. This is due to missing input validation and sanitization on the render function. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.
CVSS 9.9
CVE-2016-5180 NOMISEC CRITICAL WORKING POC
c-ares < 1.12.0 - Heap-based Buffer Overflow via Escaped Trailing Dot in Hostname
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
CVSS 9.8
CVE-2016-5180 NOMISEC CRITICAL WORKING POC
c-ares < 1.12.0 - Heap-based Buffer Overflow via Escaped Trailing Dot in Hostname
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
CVSS 9.8
CVE-2016-5180 NOMISEC CRITICAL WORKING POC
c-ares < 1.12.0 - Heap-based Buffer Overflow via Escaped Trailing Dot in Hostname
Heap-based buffer overflow in the ares_create_query function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly execute arbitrary code via a hostname with an escaped trailing dot.
CVSS 9.8