https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 03 Sep 2026 18:08:22 +0000 https://vulnerability.circl.lu/sighting/590d2ce9-db51-47d4-823b-39f0b7dbb933/export {"uuid": "590d2ce9-db51-47d4-823b-39f0b7dbb933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/155728", "content": "En los \u00faltimos d\u00edas, la comunidad de seguridad ha estado en alerta por el CVE-2025\u201329927, una vulnerabilidad cr\u00edtica en Next.js que\u2026Continue reading on Medium \u00bb (https://medium.com/@juanfelipeoz.rar/cve-2025-29927-bypass-de-middleware-en-next-js-80e900285cf5?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T12:00:05.788791Z"} {"uuid": "590d2ce9-db51-47d4-823b-39f0b7dbb933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/155728", "content": "En los \u00faltimos d\u00edas, la comunidad de seguridad ha estado en alerta por el CVE-2025\u201329927, una vulnerabilidad cr\u00edtica en Next.js que\u2026Continue reading on Medium \u00bb (https://medium.com/@juanfelipeoz.rar/cve-2025-29927-bypass-de-middleware-en-next-js-80e900285cf5?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T12:00:05.788791Z"} https://vulnerability.circl.lu/sighting/590d2ce9-db51-47d4-823b-39f0b7dbb933/export Thu, 03 Sep 2026 12:00:05 +0000 https://vulnerability.circl.lu/sighting/8bfd2e23-aeea-479f-86fb-7eb167e37362/export {"uuid": "8bfd2e23-aeea-479f-86fb-7eb167e37362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/155726", "content": "CVE-2025\u201329927\u200a\u2014\u200aBypass de Middleware en Next.js\nhttps://medium.com/@juanfelipeoz.rar/cve-2025-29927-bypass-de-middleware-en-next-js-80e900285cf5?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T12:00:05.422928Z"} {"uuid": "8bfd2e23-aeea-479f-86fb-7eb167e37362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/155726", "content": "CVE-2025\u201329927\u200a\u2014\u200aBypass de Middleware en Next.js\nhttps://medium.com/@juanfelipeoz.rar/cve-2025-29927-bypass-de-middleware-en-next-js-80e900285cf5?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T12:00:05.422928Z"} https://vulnerability.circl.lu/sighting/8bfd2e23-aeea-479f-86fb-7eb167e37362/export Thu, 03 Sep 2026 12:00:05 +0000 https://vulnerability.circl.lu/sighting/2431f108-f3c6-4b91-964b-ea912aa13e74/export {"uuid": "2431f108-f3c6-4b91-964b-ea912aa13e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158395", "content": "Next.js Middleware Vulnerability: How CVE-2025\u201329927 Enables Authorization Bypass\nhttps://medium.com/@nitinsgavane/next-js-middleware-vulnerability-how-cve-2025-29927-enables-authorization-bypass-1e0293d10e24?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:05.419150Z"} {"uuid": "2431f108-f3c6-4b91-964b-ea912aa13e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158395", "content": "Next.js Middleware Vulnerability: How CVE-2025\u201329927 Enables Authorization Bypass\nhttps://medium.com/@nitinsgavane/next-js-middleware-vulnerability-how-cve-2025-29927-enables-authorization-bypass-1e0293d10e24?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:05.419150Z"} https://vulnerability.circl.lu/sighting/2431f108-f3c6-4b91-964b-ea912aa13e74/export Thu, 03 Sep 2026 11:00:05 +0000 https://vulnerability.circl.lu/sighting/7b6cb2c1-bbd6-4e8d-b66c-23f2c3054224/export {"uuid": "7b6cb2c1-bbd6-4e8d-b66c-23f2c3054224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158397", "content": "Hey there! In today\u2019s blog, I\u2019m diving into the Next.js Middleware Exploit\u200a\u2014\u200aspecifically CVE-2025\u201329927, an authorization bypass\u2026Continue reading on Medium \u00bb (https://medium.com/@nitinsgavane/next-js-middleware-vulnerability-how-cve-2025-29927-enables-authorization-bypass-1e0293d10e24?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:05.361765Z"} {"uuid": "7b6cb2c1-bbd6-4e8d-b66c-23f2c3054224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158397", "content": "Hey there! In today\u2019s blog, I\u2019m diving into the Next.js Middleware Exploit\u200a\u2014\u200aspecifically CVE-2025\u201329927, an authorization bypass\u2026Continue reading on Medium \u00bb (https://medium.com/@nitinsgavane/next-js-middleware-vulnerability-how-cve-2025-29927-enables-authorization-bypass-1e0293d10e24?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:05.361765Z"} https://vulnerability.circl.lu/sighting/7b6cb2c1-bbd6-4e8d-b66c-23f2c3054224/export Thu, 03 Sep 2026 11:00:05 +0000 https://vulnerability.circl.lu/sighting/1cc028ec-bd59-4dbd-8f9a-83a43171ff37/export {"uuid": "1cc028ec-bd59-4dbd-8f9a-83a43171ff37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158099", "content": "A Python (https://www.kitploit.com/search/label/Python) script to check Next.js sites for corrupt middleware (https://www.kitploit.com/search/label/Middleware) vulnerability (https://www.kitploit.com/search/label/Vulnerability) (CVE-2025-29927). The corrupt middleware vulnerability allows an attacker to bypass authentication (https://www.kitploit.com/search/label/Authentication) and access protected routes by send a custom header x-middleware-subrequest. Next JS versions affected: - 11.1.4 and up [!WARNING] This tool is for educational purposes only. Do not use it on websites or systems you do not own or have explicit permission to test. Unauthorized testing may be illegal and unethical.\u00a0 Installation Clone the repo git clone https://github.com/takumade/ghost-route.git\ncd ghost-route\n Create and activate virtual environment python -m venv .venv\nsource .venv/bin/activate\n Install dependencies pip install -r requirements.txt\n Usage python ghost-route.py \n : Base URL of the Next.js site (e.g., https://example.com) : Protected path to test (default: /admin) : Show response headers (default: False) Example Basic Example python ghost-route.py https://example.com /admin\n Show Response Headers (https://www.kitploit.com/search/label/Headers) python ghost-route.py https://example.com /admin True\n License MIT License Credits CVE-2025-29927 (https://nvd.nist.gov/vuln/detail/CVE-2025-29927) Next.js and the corrupt middleware: the authorizing artifact (https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware) Rachid A. (https://x.com/zhero___) Yasser Allam (https://x.com/inzo____) \n\nDownload Ghost-Route (https://github.com/takumade/ghost-route)", "creation_timestamp": "2026-09-03T11:00:05.307811Z"} {"uuid": "1cc028ec-bd59-4dbd-8f9a-83a43171ff37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158099", "content": "A Python (https://www.kitploit.com/search/label/Python) script to check Next.js sites for corrupt middleware (https://www.kitploit.com/search/label/Middleware) vulnerability (https://www.kitploit.com/search/label/Vulnerability) (CVE-2025-29927). The corrupt middleware vulnerability allows an attacker to bypass authentication (https://www.kitploit.com/search/label/Authentication) and access protected routes by send a custom header x-middleware-subrequest. Next JS versions affected: - 11.1.4 and up [!WARNING] This tool is for educational purposes only. Do not use it on websites or systems you do not own or have explicit permission to test. Unauthorized testing may be illegal and unethical.\u00a0 Installation Clone the repo git clone https://github.com/takumade/ghost-route.git\ncd ghost-route\n Create and activate virtual environment python -m venv .venv\nsource .venv/bin/activate\n Install dependencies pip install -r requirements.txt\n Usage python ghost-route.py \n : Base URL of the Next.js site (e.g., https://example.com) : Protected path to test (default: /admin) : Show response headers (default: False) Example Basic Example python ghost-route.py https://example.com /admin\n Show Response Headers (https://www.kitploit.com/search/label/Headers) python ghost-route.py https://example.com /admin True\n License MIT License Credits CVE-2025-29927 (https://nvd.nist.gov/vuln/detail/CVE-2025-29927) Next.js and the corrupt middleware: the authorizing artifact (https://zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware) Rachid A. (https://x.com/zhero___) Yasser Allam (https://x.com/inzo____) \n\nDownload Ghost-Route (https://github.com/takumade/ghost-route)", "creation_timestamp": "2026-09-03T11:00:05.307811Z"} https://vulnerability.circl.lu/sighting/1cc028ec-bd59-4dbd-8f9a-83a43171ff37/export Thu, 03 Sep 2026 11:00:05 +0000 https://vulnerability.circl.lu/sighting/33674751-4162-4fc2-83be-045da04376d6/export {"uuid": "33674751-4162-4fc2-83be-045da04376d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158072", "content": "Next.js CVE-2025\u201329927 hackinghub walkthrough\nhttps://medium.com/@abhishek-ji/next-js-cve-2025-29927-hackinghub-walkthrough-f7893cdd90c4?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:04.902494Z"} {"uuid": "33674751-4162-4fc2-83be-045da04376d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158072", "content": "Next.js CVE-2025\u201329927 hackinghub walkthrough\nhttps://medium.com/@abhishek-ji/next-js-cve-2025-29927-hackinghub-walkthrough-f7893cdd90c4?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:04.902494Z"} https://vulnerability.circl.lu/sighting/33674751-4162-4fc2-83be-045da04376d6/export Thu, 03 Sep 2026 11:00:04 +0000 https://vulnerability.circl.lu/sighting/9953a3da-0e73-45f3-b651-f04dede2a1f4/export {"uuid": "9953a3da-0e73-45f3-b651-f04dede2a1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158074", "content": "So let's deep dive into the web appContinue reading on Medium \u00bb (https://medium.com/@abhishek-ji/next-js-cve-2025-29927-hackinghub-walkthrough-f7893cdd90c4?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:04.769499Z"} {"uuid": "9953a3da-0e73-45f3-b651-f04dede2a1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158074", "content": "So let's deep dive into the web appContinue reading on Medium \u00bb (https://medium.com/@abhishek-ji/next-js-cve-2025-29927-hackinghub-walkthrough-f7893cdd90c4?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:04.769499Z"} https://vulnerability.circl.lu/sighting/9953a3da-0e73-45f3-b651-f04dede2a1f4/export Thu, 03 Sep 2026 11:00:04 +0000 https://vulnerability.circl.lu/sighting/59845b9d-5ecc-439d-98f5-30a675f289ee/export {"uuid": "59845b9d-5ecc-439d-98f5-30a675f289ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158097", "content": "Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)\nhttp://www.kitploit.com/2025/04/ghost-route-ghost-route-detects-if-next.html", "creation_timestamp": "2026-09-03T11:00:04.705232Z"} {"uuid": "59845b9d-5ecc-439d-98f5-30a675f289ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/158097", "content": "Ghost-Route - Ghost Route Detects If A Next JS Site Is Vulnerable To The Corrupt Middleware Bypass Bug (CVE-2025-29927)\nhttp://www.kitploit.com/2025/04/ghost-route-ghost-route-detects-if-next.html", "creation_timestamp": "2026-09-03T11:00:04.705232Z"} https://vulnerability.circl.lu/sighting/59845b9d-5ecc-439d-98f5-30a675f289ee/export Thu, 03 Sep 2026 11:00:04 +0000 https://vulnerability.circl.lu/sighting/05404814-5c8b-4706-926f-8b7e5747526d/export {"uuid": "05404814-5c8b-4706-926f-8b7e5747526d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/156246", "content": "Next.js Middleware Authentication Bypass (CVE-2025\u201329927): Exploitation, Impact, and Mitigation\nhttps://medium.com/@prashunbaral/next-js-middleware-authentication-bypass-cve-2025-29927-exploitation-impact-and-mitigation-2810f6f76bd9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:04.183973Z"} {"uuid": "05404814-5c8b-4706-926f-8b7e5747526d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/156246", "content": "Next.js Middleware Authentication Bypass (CVE-2025\u201329927): Exploitation, Impact, and Mitigation\nhttps://medium.com/@prashunbaral/next-js-middleware-authentication-bypass-cve-2025-29927-exploitation-impact-and-mitigation-2810f6f76bd9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:04.183973Z"} https://vulnerability.circl.lu/sighting/05404814-5c8b-4706-926f-8b7e5747526d/export Thu, 03 Sep 2026 11:00:04 +0000 https://vulnerability.circl.lu/sighting/b19657f3-c601-4a35-bd94-2294b9709e2b/export {"uuid": "b19657f3-c601-4a35-bd94-2294b9709e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/156248", "content": "IntroductionContinue reading on Medium \u00bb (https://medium.com/@prashunbaral/next-js-middleware-authentication-bypass-cve-2025-29927-exploitation-impact-and-mitigation-2810f6f76bd9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:04.128489Z"} {"uuid": "b19657f3-c601-4a35-bd94-2294b9709e2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29927", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/156248", "content": "IntroductionContinue reading on Medium \u00bb (https://medium.com/@prashunbaral/next-js-middleware-authentication-bypass-cve-2025-29927-exploitation-impact-and-mitigation-2810f6f76bd9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:04.128489Z"} https://vulnerability.circl.lu/sighting/b19657f3-c601-4a35-bd94-2294b9709e2b/export Thu, 03 Sep 2026 11:00:04 +0000