<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-08T03:59:48.017419+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b98911bb-dd2f-493f-9bd4-134ed31a0a4d/export</id>
    <title>b98911bb-dd2f-493f-9bd4-134ed31a0a4d</title>
    <updated>2026-09-08T03:59:48.035434+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b98911bb-dd2f-493f-9bd4-134ed31a0a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-3092", "type": "seen", "source": "https://t.me/hacking_Attack/27244", "content": "hacking: security in practice\nBypassing linux server authentication by exploiting osvdb-3092?\n\nSo I was given a .ova file containing a linux webserver running apache. We were supposed to retrieve a key from the server but no password was given except to use guest as user. I ran a nikto search to find vulnerabilities in the server and came across OSVDB-3092. A quick google search showed me that CVE-2006-3092 can be exploited to \"bypass authentication and modify data via direct requests with modified parameters to 1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php.\"\n\nI'm stuck on the last part and wasn't able to find anything on google. Still pretty new to hacking so less technical replies are appreciated. Also what is a good way to document my findings?\n\nsubmitted by /u/Razeratorr \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T00:00:51.074953Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b98911bb-dd2f-493f-9bd4-134ed31a0a4d/export"/>
    <published>2026-09-08T00:00:51.074953+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9ebf7faa-c7e2-4092-9348-ea4ec1ca270f/export</id>
    <title>9ebf7faa-c7e2-4092-9348-ea4ec1ca270f</title>
    <updated>2026-09-08T03:59:48.037934+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9ebf7faa-c7e2-4092-9348-ea4ec1ca270f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-3092", "type": "seen", "source": "https://t.me/hacking_Attack/27244", "content": "hacking: security in practice\nBypassing linux server authentication by exploiting osvdb-3092?\n\nSo I was given a .ova file containing a linux webserver running apache. We were supposed to retrieve a key from the server but no password was given except to use guest as user. I ran a nikto search to find vulnerabilities in the server and came across OSVDB-3092. A quick google search showed me that CVE-2006-3092 can be exploited to \"bypass authentication and modify data via direct requests with modified parameters to 1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php.\"\n\nI'm stuck on the last part and wasn't able to find anything on google. Still pretty new to hacking so less technical replies are appreciated. Also what is a good way to document my findings?\n\nsubmitted by /u/Razeratorr \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T10:00:05.823094Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9ebf7faa-c7e2-4092-9348-ea4ec1ca270f/export"/>
    <published>2026-09-07T10:00:05.823094+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93723129-7ae9-4ae1-95f3-e0d5a9c82e74/export</id>
    <title>93723129-7ae9-4ae1-95f3-e0d5a9c82e74</title>
    <updated>2026-09-08T03:59:48.038040+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93723129-7ae9-4ae1-95f3-e0d5a9c82e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-3092", "type": "seen", "source": "https://t.me/hacking_Attack/27244", "content": "hacking: security in practice\nBypassing linux server authentication by exploiting osvdb-3092?\n\nSo I was given a .ova file containing a linux webserver running apache. We were supposed to retrieve a key from the server but no password was given except to use guest as user. I ran a nikto search to find vulnerabilities in the server and came across OSVDB-3092. A quick google search showed me that CVE-2006-3092 can be exploited to \"bypass authentication and modify data via direct requests with modified parameters to 1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php.\"\n\nI'm stuck on the last part and wasn't able to find anything on google. Still pretty new to hacking so less technical replies are appreciated. Also what is a good way to document my findings?\n\nsubmitted by /u/Razeratorr \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:42.529376Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93723129-7ae9-4ae1-95f3-e0d5a9c82e74/export"/>
    <published>2026-09-02T01:02:42.529376+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50f30b44-cb76-41f5-b9ed-e3715f8d979c/export</id>
    <title>50f30b44-cb76-41f5-b9ed-e3715f8d979c</title>
    <updated>2026-09-08T03:59:48.038141+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50f30b44-cb76-41f5-b9ed-e3715f8d979c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2006-3092", "type": "seen", "source": "https://t.me/hacking_Attack/27244", "content": "hacking: security in practice\nBypassing linux server authentication by exploiting osvdb-3092?\n\nSo I was given a .ova file containing a linux webserver running apache. We were supposed to retrieve a key from the server but no password was given except to use guest as user. I ran a nikto search to find vulnerabilities in the server and came across OSVDB-3092. A quick google search showed me that CVE-2006-3092 can be exploited to \"bypass authentication and modify data via direct requests with modified parameters to 1) /tva/ajouter_tva.php, (2) /remises/ajouter_remise.php, (3) /pays/ajouter_pays.php, (4) /pays/modifier_pays.php, (5) /produits/ajouter_cat.php, (6) /produits/ajouter_produit.php, (7) /clients/ajouter_client.php, (8) /clients/modifier_client.php.\"\n\nI'm stuck on the last part and wasn't able to find anything on google. Still pretty new to hacking so less technical replies are appreciated. Also what is a good way to document my findings?\n\nsubmitted by /u/Razeratorr \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:15.267399Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50f30b44-cb76-41f5-b9ed-e3715f8d979c/export"/>
    <published>2026-09-01T20:02:15.267399+00:00</published>
  </entry>
</feed>
