https://vulnerability.circl.lu/sightings/feed 2026-09-17T09:01:33.233184+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/75e9157c-98c9-4a12-b01c-9d8ee150c3cd/export 2026-09-17T09:01:33.260459+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "75e9157c-98c9-4a12-b01c-9d8ee150c3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:08.233530Z"} 2026-09-15T10:00:08.233530+00:00 https://vulnerability.circl.lu/sighting/2ab396fc-ea55-40e2-895a-5a56c58b6eb6/export 2026-09-17T09:01:33.263151+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2ab396fc-ea55-40e2-895a-5a56c58b6eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.531071Z"} 2026-09-15T00:00:24.531071+00:00 https://vulnerability.circl.lu/sighting/6660802b-ff2b-46fe-bac0-cee7796eb86d/export 2026-09-17T09:01:33.263377+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6660802b-ff2b-46fe-bac0-cee7796eb86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:09.442738Z"} 2026-09-14T03:00:09.442738+00:00 https://vulnerability.circl.lu/sighting/77f66c51-7ecd-49c7-baaf-d1e0ebee1a88/export 2026-09-17T09:01:33.263542+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "77f66c51-7ecd-49c7-baaf-d1e0ebee1a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:07.234330Z"} 2026-09-13T10:00:07.234330+00:00 https://vulnerability.circl.lu/sighting/01222b15-9307-4ccb-91b4-9722ca571d43/export 2026-09-17T09:01:33.263722+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "01222b15-9307-4ccb-91b4-9722ca571d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:05.977005Z"} 2026-09-13T10:00:05.977005+00:00 https://vulnerability.circl.lu/sighting/4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41/export 2026-09-17T09:01:33.263905+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.956809Z"} 2026-09-12T10:00:16.956809+00:00 https://vulnerability.circl.lu/sighting/7b7a162a-4161-4b7f-a4cf-735036645acc/export 2026-09-17T09:01:33.264072+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7b7a162a-4161-4b7f-a4cf-735036645acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:14.659480Z"} 2026-09-12T10:00:14.659480+00:00 https://vulnerability.circl.lu/sighting/f99ab61c-3a04-4b6c-b7ca-55daa9891083/export 2026-09-17T09:01:33.264166+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f99ab61c-3a04-4b6c-b7ca-55daa9891083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"maxibelino\", \"odeez24\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution via file upload.\\n If GestioIP is configured to use no authentication for admin account,\\n no password is required to exploit the vulnerability. Otherwise, an authenticated\\n user with admin right on the web site is required to exploit.\", \"disclosure_date\": \"2025-01-14\", \"fullname\": \"exploit/multi/http/gestioip_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:32:04 +0000\", \"name\": \"GestioIP 3.5.7 Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_rce\", \"references\": [\"CVE-2024-48760\", \"EDB-52204\", \"URL-https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux/unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.710564Z"} 2026-09-08T06:49:47.710564+00:00 https://vulnerability.circl.lu/sighting/6501b942-4730-4bc9-a1d2-961453a5fed2/export 2026-09-17T09:01:33.264333+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6501b942-4730-4bc9-a1d2-961453a5fed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48990", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"h00die\", \"makuga01\", \"qualys\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Local attackers can execute arbitrary code as root by\\n tricking needrestart into running the Python interpreter with an\\n attacker-controlled PYTHONPATH environment variable.\\n\\n Verified against Ubuntu 22.04 with needrestart 3.5-5ubuntu2.1\\n Attempted exploitation against Debian 12, expliotation failed\", \"disclosure_date\": \"2024-11-19\", \"fullname\": \"exploit/linux/local/ubuntu_needrestart_lpe\", \"is_install_path\": true, \"mod_time\": \"2025-01-09 16:23:09 +0000\", \"name\": \"Ubuntu needrestart Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/ubuntu_needrestart_lpe\", \"references\": [\"URL-https://github.com/makuga01/CVE-2024-48990-PoC\", \"URL-https://www.qualys.com/2024/11/19/needrestart/needrestart.txt\", \"CVE-2024-48990\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:13.260348Z"} 2026-09-08T06:49:13.260348+00:00 https://vulnerability.circl.lu/sighting/87f1b8dd-282b-426d-bc10-464147688eb2/export 2026-09-17T09:01:33.264488+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "87f1b8dd-282b-426d-bc10-464147688eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48594", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/prison_management_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86\", \"author\": [\"Alexandru Ionut Raducu\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unrestricted file upload vulnerability in Prison Management System 1.0.\\n An authenticated user can upload a PHP file with arbitrary content by abusing the avatar upload\\n functionality in the add-admin.php endpoint. The application fails to properly validate the\\n uploaded file type, allowing an attacker to upload a PHP webshell.\", \"disclosure_date\": \"2024-10-28\", \"fullname\": \"exploit/linux/http/prison_management_rce\", \"is_install_path\": true, \"mod_time\": \"2026-01-07 14:45:03 +0000\", \"name\": \"Prison Management System 1.0 Authenticated RCE via Unrestricted File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/prison_management_rce.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/prison_management_rce\", \"references\": [\"CVE-2024-48594\", \"URL-https://www.sourcecodester.com/sql/17287/prison-management-system.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:52.426411Z"} 2026-09-08T06:48:52.426411+00:00