https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 28 Aug 2026 13:08:10 +0000 https://vulnerability.circl.lu/sighting/0214085c-cc0c-4d64-96e1-73960cc563a5/export {"uuid": "0214085c-cc0c-4d64-96e1-73960cc563a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-12T00:00:48.785895Z"} {"uuid": "0214085c-cc0c-4d64-96e1-73960cc563a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-12T00:00:48.785895Z"} https://vulnerability.circl.lu/sighting/0214085c-cc0c-4d64-96e1-73960cc563a5/export Sun, 12 Jul 2026 00:00:48 +0000 https://vulnerability.circl.lu/sighting/3e85c374-1265-43a4-9d3b-4aea32eb1ea4/export {"uuid": "3e85c374-1265-43a4-9d3b-4aea32eb1ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-11T13:00:05.289814Z"} {"uuid": "3e85c374-1265-43a4-9d3b-4aea32eb1ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-11T13:00:05.289814Z"} https://vulnerability.circl.lu/sighting/3e85c374-1265-43a4-9d3b-4aea32eb1ea4/export Sat, 11 Jul 2026 13:00:05 +0000 https://vulnerability.circl.lu/sighting/48752a9a-551d-4a86-a2c0-ef0930be7030/export {"uuid": "48752a9a-551d-4a86-a2c0-ef0930be7030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-10T00:00:32.271113Z"} {"uuid": "48752a9a-551d-4a86-a2c0-ef0930be7030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-10T00:00:32.271113Z"} https://vulnerability.circl.lu/sighting/48752a9a-551d-4a86-a2c0-ef0930be7030/export Fri, 10 Jul 2026 00:00:32 +0000 https://vulnerability.circl.lu/sighting/d20da2ab-a361-4073-a534-25bedfa370cb/export {"uuid": "d20da2ab-a361-4073-a534-25bedfa370cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-09T03:00:08.726356Z"} {"uuid": "d20da2ab-a361-4073-a534-25bedfa370cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "https://t.me/brutsecurity/1732", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2026-07-09T03:00:08.726356Z"} https://vulnerability.circl.lu/sighting/d20da2ab-a361-4073-a534-25bedfa370cb/export Thu, 09 Jul 2026 03:00:08 +0000 https://vulnerability.circl.lu/sighting/e22bdbc8-bd1a-47bd-ba3d-298b94e41f9d/export {"uuid": "e22bdbc8-bd1a-47bd-ba3d-298b94e41f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51471", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:01.000000Z"} {"uuid": "e22bdbc8-bd1a-47bd-ba3d-298b94e41f9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51471", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:01.000000Z"} https://vulnerability.circl.lu/sighting/e22bdbc8-bd1a-47bd-ba3d-298b94e41f9d/export Tue, 16 Sep 2025 03:45:01 +0000 https://vulnerability.circl.lu/sighting/a98f291d-7c14-4b42-a2c5-6eafde4ac186/export {"uuid": "a98f291d-7c14-4b42-a2c5-6eafde4ac186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51471", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"} {"uuid": "a98f291d-7c14-4b42-a2c5-6eafde4ac186", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51471", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"} https://vulnerability.circl.lu/sighting/a98f291d-7c14-4b42-a2c5-6eafde4ac186/export Mon, 15 Sep 2025 13:28:31 +0000 https://vulnerability.circl.lu/sighting/683fdcc7-5486-43d9-8c9b-70c817b3bdae/export {"uuid": "683fdcc7-5486-43d9-8c9b-70c817b3bdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:00.000000Z"} {"uuid": "683fdcc7-5486-43d9-8c9b-70c817b3bdae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:48:00.000000Z"} https://vulnerability.circl.lu/sighting/683fdcc7-5486-43d9-8c9b-70c817b3bdae/export Wed, 10 Sep 2025 07:48:00 +0000 https://vulnerability.circl.lu/sighting/cd9fb7d5-4984-437c-84b9-b33efdc4770e/export {"uuid": "cd9fb7d5-4984-437c-84b9-b33efdc4770e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"} {"uuid": "cd9fb7d5-4984-437c-84b9-b33efdc4770e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:45.000000Z"} https://vulnerability.circl.lu/sighting/cd9fb7d5-4984-437c-84b9-b33efdc4770e/export Sun, 10 Aug 2025 18:27:45 +0000 https://vulnerability.circl.lu/sighting/86f5b970-dffe-448f-ab54-c0a0ca7bd42e/export {"uuid": "86f5b970-dffe-448f-ab54-c0a0ca7bd42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-51475\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.\n\ud83d\udccf Published: 2025-05-16T00:44:43.744Z\n\ud83d\udccf Modified: 2025-05-16T00:44:43.744Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7233695", "creation_timestamp": "2025-05-16T01:34:20.000000Z"} {"uuid": "86f5b970-dffe-448f-ab54-c0a0ca7bd42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-51475\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Content Navigator 3.0.11, 3.0.15, and 3.1.0 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.\n\ud83d\udccf Published: 2025-05-16T00:44:43.744Z\n\ud83d\udccf Modified: 2025-05-16T00:44:43.744Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7233695", "creation_timestamp": "2025-05-16T01:34:20.000000Z"} https://vulnerability.circl.lu/sighting/86f5b970-dffe-448f-ab54-c0a0ca7bd42e/export Fri, 16 May 2025 01:34:20 +0000 https://vulnerability.circl.lu/sighting/1dd6d475-8c40-4e87-8a30-c9264db78f0a/export {"uuid": "1dd6d475-8c40-4e87-8a30-c9264db78f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7709", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2025-04-06T23:09:44.000000Z"} {"uuid": "1dd6d475-8c40-4e87-8a30-c9264db78f0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51479", "type": "published-proof-of-concept", "source": "https://t.me/suboxone_chatroom/7709", "content": "\ud83c\udf00 This is wild!\n\nYou\u2019ve probably seen the buzz around the Next.js middleware auth bypass (CVE-2025-29927) \u2014 but there\u2019s another less-known yet similar vulnerability: CVE-2024-51479.\n\nThis flaw allows attackers to bypass authentication by abusing the __nextLocale query parameter in the URL, tricking the middleware into granting access to protected routes.\n\nProof of Concept (PoC):\n\ncurl https://target.com/?__nextLocale=/admin\n\nThis vulnerability was fixed in Next.js v14.2.15, and Vercel-hosted apps have already been patched automatically.\n\nI found a very cool article explaining everything in detail:\n\nhttps://gmo-cybersecurity.com/blog/another-nextjs-middleware-bypass-en", "creation_timestamp": "2025-04-06T23:09:44.000000Z"} https://vulnerability.circl.lu/sighting/1dd6d475-8c40-4e87-8a30-c9264db78f0a/export Sun, 06 Apr 2025 23:09:44 +0000