https://vulnerability.circl.lu/sightings/feed 2026-09-04T23:30:39.377978+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d3f72e5e-5118-4f94-9702-7f8aab630108/export 2026-09-04T23:30:39.400924+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d3f72e5e-5118-4f94-9702-7f8aab630108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mufqm7gqze2u", "content": "~Cisa~\nFuel-Boss flaws enable remote command/code execution; patch or remove unfixed systems from the internet.\n-\nIOCs: CVE-2019-11043, CVE-2018-19518\n-\n#CVE-2018-19518 #CVE-2019-11043 #ThreatIntel", "creation_timestamp": "2026-08-31T20:28:18.128719Z"} 2026-08-31T20:28:18.128719+00:00 https://vulnerability.circl.lu/sighting/b170741a-b0ea-4826-a9ae-c165c33dd860/export 2026-09-04T23:30:39.402888+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "b170741a-b0ea-4826-a9ae-c165c33dd860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-02", "content": "", "creation_timestamp": "2026-08-27T16:15:03.443526Z"} 2026-08-27T16:15:03.443526+00:00 https://vulnerability.circl.lu/sighting/747ed5c1-a800-474f-98fd-119ec205b317/export 2026-09-04T23:30:39.403766+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "747ed5c1-a800-474f-98fd-119ec205b317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://t.me/sysadmin_tools/529", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP \u0438 PHPMailer\nhttp://www.opennet.ru/opennews/art.shtml?num=49746\n\u0412 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u043d\u044f\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 PHP 5.6.39, 7.0.33, 7.1.25 \u0438 7.2.13 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-19518) \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u043c PHP-\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IMAP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0435\u0449\u0451 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c web-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0446\u0438\u044e disable_functions \u0432 php.ini. #opennet", "creation_timestamp": "2026-08-02T00:00:23.395623Z"} 2026-08-02T00:00:23.395623+00:00 https://vulnerability.circl.lu/sighting/584b5d7e-040e-4b6c-a96a-1aaebf84f007/export 2026-09-04T23:30:39.403880+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "584b5d7e-040e-4b6c-a96a-1aaebf84f007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://t.me/sysadmin_tools/529", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP \u0438 PHPMailer\nhttp://www.opennet.ru/opennews/art.shtml?num=49746\n\u0412 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u043d\u044f\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 PHP 5.6.39, 7.0.33, 7.1.25 \u0438 7.2.13 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-19518) \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u043c PHP-\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IMAP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0435\u0449\u0451 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c web-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0446\u0438\u044e disable_functions \u0432 php.ini. #opennet", "creation_timestamp": "2026-08-01T19:00:04.347960Z"} 2026-08-01T19:00:04.347960+00:00 https://vulnerability.circl.lu/sighting/86b56ab5-39d2-4762-b53e-e9c5d161cddb/export 2026-09-04T23:30:39.403976+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "86b56ab5-39d2-4762-b53e-e9c5d161cddb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://t.me/sysadmin_tools/529", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP \u0438 PHPMailer\nhttp://www.opennet.ru/opennews/art.shtml?num=49746\n\u0412 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u043d\u044f\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 PHP 5.6.39, 7.0.33, 7.1.25 \u0438 7.2.13 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-19518) \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u043c PHP-\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IMAP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0435\u0449\u0451 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c web-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0446\u0438\u044e disable_functions \u0432 php.ini. #opennet", "creation_timestamp": "2026-07-30T00:02:05.586052Z"} 2026-07-30T00:02:05.586052+00:00 https://vulnerability.circl.lu/sighting/d38f0fd3-7510-43e1-96e2-3b2e2dac0165/export 2026-09-04T23:30:39.404063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d38f0fd3-7510-43e1-96e2-3b2e2dac0165", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://t.me/sysadmin_tools/529", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 PHP \u0438 PHPMailer\nhttp://www.opennet.ru/opennews/art.shtml?num=49746\n\u0412 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0434\u043d\u044f\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 PHP 5.6.39, 7.0.33, 7.1.25 \u0438 7.2.13 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2018-19518) \u0432 \u0448\u0442\u0430\u0442\u043d\u043e\u043c PHP-\u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 IMAP, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0435\u0449\u0451 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u0442\u044c web-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043f\u043e\u0447\u0442\u043e\u0439 \u0438\u043b\u0438 \u043e\u0431\u043e\u0439\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u043e\u043f\u0446\u0438\u044e disable_functions \u0432 php.ini. #opennet", "creation_timestamp": "2026-07-29T12:01:54.283391Z"} 2026-07-29T12:01:54.283391+00:00 https://vulnerability.circl.lu/sighting/ec703d60-8c88-40e4-894d-1bb008ad0293/export 2026-09-04T23:30:39.404152+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ec703d60-8c88-40e4-894d-1bb008ad0293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02", "content": "", "creation_timestamp": "2026-01-27T11:00:00.000000Z"} 2026-01-27T11:00:00+00:00 https://vulnerability.circl.lu/sighting/93400835-735f-4bbc-9f24-c5c40d198412/export 2026-09-04T23:30:39.404231+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "93400835-735f-4bbc-9f24-c5c40d198412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:06.000000Z"} 2025-02-23T04:10:06+00:00 https://vulnerability.circl.lu/sighting/0b6ac037-5593-425f-9232-4c62c8536a7a/export 2026-09-04T23:30:39.404308+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0b6ac037-5593-425f-9232-4c62c8536a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:43.000000Z"} 2025-02-06T03:13:43+00:00 https://vulnerability.circl.lu/sighting/43697854-483e-4876-8975-a5ee6e7228c9/export 2026-09-04T23:30:39.404383+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "43697854-483e-4876-8975-a5ee6e7228c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-19518", "type": "seen", "source": "https://t.me/arpsyndicate/4390", "content": "#ExploitObserverAlert\n\nCVE-2018-19518\n\nDESCRIPTION: Exploit Observer has 46 entries in 10 file formats related to CVE-2018-19518. University of Washington IMAP Toolkit 2007f on UNIX, as used in imap_open() in PHP and other products, launches an rsh command (by means of the imap_rimap function in c-client/imap4r1.c and the tcp_aopen function in osdep/unix/tcp_unix.c) without preventing argument injection, which might allow remote attackers to execute arbitrary OS commands if the IMAP server name is untrusted input (e.g., entered by a user of a web application) and if rsh has been replaced by a program with different argument semantics. For example, if rsh is a link to ssh (as seen on Debian and Ubuntu systems), then the attack can use an IMAP server name containing a \"-oProxyCommand\" argument.\n\nFIRST-EPSS: 0.969140000\nNVD-IS: 5.9\nNVD-ES: 1.6", "creation_timestamp": "2024-04-09T05:06:56.000000Z"} 2024-04-09T05:06:56+00:00