<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T03:00:30.817416+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08d3d4a2-c57c-4f62-9646-1311ed8cfd35/export</id>
    <title>08d3d4a2-c57c-4f62-9646-1311ed8cfd35</title>
    <updated>2026-10-11T03:00:30.840585+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08d3d4a2-c57c-4f62-9646-1311ed8cfd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4jubhas2n", "content": "2. CVE-2026-105889 \u00b7 2 people\n\ud83d\udfe5 Critical 9.3 \u00b7 Tickera\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.", "creation_timestamp": "2026-10-10T18:27:58.218790Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08d3d4a2-c57c-4f62-9646-1311ed8cfd35/export"/>
    <published>2026-10-10T18:27:58.218790+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/28274ae1-8219-4cbb-b310-092abc77e588/export</id>
    <title>28274ae1-8219-4cbb-b310-092abc77e588</title>
    <updated>2026-10-11T03:00:30.842226+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "28274ae1-8219-4cbb-b310-092abc77e588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3mxk4ju6bos2n", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-104398 \u00b7 3 people\n2. CVE-2026-105889 \u00b7 2 people\n3. CVE-2026-93945 \u00b7 2 people\n4. CVE-2026-102126 \u00b7 1 person\n5. CVE-2026-103071 \u00b7 1 person\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "creation_timestamp": "2026-10-10T18:27:57.236686Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/28274ae1-8219-4cbb-b310-092abc77e588/export"/>
    <published>2026-10-10T18:27:57.236686+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/92798d8b-da79-4332-b379-c91e4a9c8e75/export</id>
    <title>92798d8b-da79-4332-b379-c91e4a9c8e75</title>
    <updated>2026-10-11T03:00:30.842360+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "92798d8b-da79-4332-b379-c91e4a9c8e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxk3jvwwjc22", "content": "CVE-2026-105889 - tickera\nThe Tickera ticketing plugin for WordPress (versions up to 3.6.0.6) does not properly check data it receives, allowing a hidden SQL injection attack. An attacker could use this to view or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#tickera #CVE #infosec", "creation_timestamp": "2026-10-10T18:10:04.660698Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/92798d8b-da79-4332-b379-c91e4a9c8e75/export"/>
    <published>2026-10-10T18:10:04.660698+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd7b49c7-c318-4d6b-adf3-35790bebc0eb/export</id>
    <title>cd7b49c7-c318-4d6b-adf3-35790bebc0eb</title>
    <updated>2026-10-11T03:00:30.842473+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd7b49c7-c318-4d6b-adf3-35790bebc0eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxk3f2or3222", "content": "\ud83d\udea8 CVE-2026-105889 \u2014 CVSS 9.3 CRITICAL\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ticke...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105889\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T18:07:21.573926Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd7b49c7-c318-4d6b-adf3-35790bebc0eb/export"/>
    <published>2026-10-10T18:07:21.573926+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ac2f0b54-c79e-4e93-8010-fecc54257008/export</id>
    <title>ac2f0b54-c79e-4e93-8010-fecc54257008</title>
    <updated>2026-10-11T03:00:30.842584+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ac2f0b54-c79e-4e93-8010-fecc54257008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/a2hes6brznyzf", "content": "CVE-2026-105889 - WordPress Tickera plugin\nCVE ID : CVE-2026-105889\n \n Published : Oct. 10, 2026, 5 p.m. | 22\u00a0minutes ago\n \n Description : Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticket...", "creation_timestamp": "2026-10-10T17:43:09.505481Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ac2f0b54-c79e-4e93-8010-fecc54257008/export"/>
    <published>2026-10-10T17:43:09.505481+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/465ab1a9-0c85-43e1-a18e-401e83dd6215/export</id>
    <title>465ab1a9-0c85-43e1-a18e-401e83dd6215</title>
    <updated>2026-10-11T03:00:30.842678+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "465ab1a9-0c85-43e1-a18e-401e83dd6215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxjzdyx2tq2b", "content": "\ud83d\udd34 CVE-2026-105889 - Critical (9.3)\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105889/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-10T17:30:59.458663Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/465ab1a9-0c85-43e1-a18e-401e83dd6215/export"/>
    <published>2026-10-10T17:30:59.458663+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/efb3bf1a-40f9-4a3a-91d7-6d5388839bbc/export</id>
    <title>efb3bf1a-40f9-4a3a-91d7-6d5388839bbc</title>
    <updated>2026-10-11T03:00:30.842770+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "efb3bf1a-40f9-4a3a-91d7-6d5388839bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105889", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417729819184287", "content": "CVE-2026-105889 WordPress Tickera plugin &amp;lt;= 3.6.0.6 - SQL Injection vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tickera Tickera tickera-event-ticketing-system allows Blind SQL Injection.This issue affects Tickera: from n/a through 3.6.0.6.\nhttps://www.cve.org/CVERecord?id=CVE-2026-105889https://patchstack.com/database/wordpress/plugin/tickera-event-ticketing-system/vulnerability/wordpress-tickera-plugin-3-6-0-6-sql-injection-vulnerability?_s_id=cve#Tickera#CVE_2026_105889#bot", "creation_timestamp": "2026-10-10T17:12:52.172989Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/efb3bf1a-40f9-4a3a-91d7-6d5388839bbc/export"/>
    <published>2026-10-10T17:12:52.172989+00:00</published>
  </entry>
</feed>
