https://vulnerability.circl.lu/sightings/feed 2026-08-28T13:08:10.780602+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0214085c-cc0c-4d64-96e1-73960cc563a5/export 2026-08-28T13:08:10.807513+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0214085c-cc0c-4d64-96e1-73960cc563a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-12T00:00:48.785895Z"} 2026-07-12T00:00:48.785895+00:00 https://vulnerability.circl.lu/sighting/3e85c374-1265-43a4-9d3b-4aea32eb1ea4/export 2026-08-28T13:08:10.810050+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3e85c374-1265-43a4-9d3b-4aea32eb1ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-11T13:00:05.289814Z"} 2026-07-11T13:00:05.289814+00:00 https://vulnerability.circl.lu/sighting/48752a9a-551d-4a86-a2c0-ef0930be7030/export 2026-08-28T13:08:10.810140+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "48752a9a-551d-4a86-a2c0-ef0930be7030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-10T00:00:32.271113Z"} 2026-07-10T00:00:32.271113+00:00 https://vulnerability.circl.lu/sighting/d20da2ab-a361-4073-a534-25bedfa370cb/export 2026-08-28T13:08:10.810209+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d20da2ab-a361-4073-a534-25bedfa370cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-09T03:00:08.726356Z"} 2026-07-09T03:00:08.726356+00:00 https://vulnerability.circl.lu/sighting/e22bdbc8-bd1a-47bd-ba3d-298b94e41f9d/export 2026-08-28T13:08:10.810274+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e22bdbc8-bd1a-47bd-ba3d-298b94e41f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51471", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:01.000000Z"} 2025-09-16T03:45:01+00:00 https://vulnerability.circl.lu/sighting/a98f291d-7c14-4b42-a2c5-6eafde4ac186/export 2026-08-28T13:08:10.810338+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a98f291d-7c14-4b42-a2c5-6eafde4ac186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51471", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"} 2025-09-15T13:28:31+00:00 https://vulnerability.circl.lu/sighting/683fdcc7-5486-43d9-8c9b-70c817b3bdae/export 2026-08-28T13:08:10.810400+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "683fdcc7-5486-43d9-8c9b-70c817b3bdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:00.000000Z"} 2025-09-10T07:48:00+00:00 https://vulnerability.circl.lu/sighting/cd9fb7d5-4984-437c-84b9-b33efdc4770e/export 2026-08-28T13:08:10.810463+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cd9fb7d5-4984-437c-84b9-b33efdc4770e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"} 2025-08-10T18:27:45+00:00 https://vulnerability.circl.lu/sighting/86f5b970-dffe-448f-ab54-c0a0ca7bd42e/export 2026-08-28T13:08:10.810523+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86f5b970-dffe-448f-ab54-c0a0ca7bd42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-51475\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.\n\ud83d\udccf Published: 2025-05-16T00:44:43.744Z\n\ud83d\udccf Modified: 2025-05-16T00:44:43.744Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7233695", "creation_timestamp": "2025-05-16T01:34:20.000000Z"} 2025-05-16T01:34:20+00:00 https://vulnerability.circl.lu/sighting/1dd6d475-8c40-4e87-8a30-c9264db78f0a/export 2026-08-28T13:08:10.810592+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1dd6d475-8c40-4e87-8a30-c9264db78f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7709", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2025-04-06T23:09:44.000000Z"} 2025-04-06T23:09:44+00:00