<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-25T20:59:59.939327+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d8cc1b8e-b017-4298-b8c7-74fdefdfd389/export</id>
    <title>d8cc1b8e-b017-4298-b8c7-74fdefdfd389</title>
    <updated>2026-08-25T20:59:59.952723+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d8cc1b8e-b017-4298-b8c7-74fdefdfd389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtv5cahcny2e", "content": "CVE-2026-78555\nThe RansomLook management interface showed complete API keys hidden in the page source, allowing anyone who could view the page to copy the keys. This could let an attacker use the same permissions as the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-25T06:00:05.812200Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d8cc1b8e-b017-4298-b8c7-74fdefdfd389/export"/>
    <published>2026-08-25T06:00:05.812200+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c4b829cc-d258-407f-baed-2893bc066491/export</id>
    <title>c4b829cc-d258-407f-baed-2893bc066491</title>
    <updated>2026-08-25T20:59:59.954025+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c4b829cc-d258-407f-baed-2893bc066491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtucvjah3q2e", "content": "\ud83d\udea8 CVE-2026-78555 \u2014 CVSS 9.4 CRITICAL\n\nRansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys administration ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78555\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-24T22:07:41.151398Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c4b829cc-d258-407f-baed-2893bc066491/export"/>
    <published>2026-08-24T22:07:41.151398+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e8a60e76-0c43-437f-aab4-aa1b5cd54aa6/export</id>
    <title>e8a60e76-0c43-437f-aab4-aa1b5cd54aa6</title>
    <updated>2026-08-25T20:59:59.954119+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e8a60e76-0c43-437f-aab4-aa1b5cd54aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hsi2l5kmjjwul", "content": "CVE-2026-78555 - RansomLook API Key Disclosure Through /admin/apikeys HTML Source\nCVE ID : CVE-2026-78555\n \n Published : Aug. 24, 2026, 8:17 p.m. | 17\u00a0minutes ago\n \n Description : RansomLook exposed complete API keys in the HTML source of the authenticated /admin/apikeys admin...", "creation_timestamp": "2026-08-24T21:08:27.680048Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e8a60e76-0c43-437f-aab4-aa1b5cd54aa6/export"/>
    <published>2026-08-24T21:08:27.680048+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eb988a29-8cfe-4cf2-ae1c-0a710a9ddac2/export</id>
    <title>eb988a29-8cfe-4cf2-ae1c-0a710a9ddac2</title>
    <updated>2026-08-25T20:59:59.954188+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eb988a29-8cfe-4cf2-ae1c-0a710a9ddac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78555", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtu6ksdv5v25", "content": "CVE-2026-78555 - ransomlook\nThe RansomLook management page showed the entire secret keys in the hidden code of the page, even though only a short version was visible. Anyone who can view the page source or logs\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#ransomlook #CVE #infosec", "creation_timestamp": "2026-08-24T20:50:06.539209Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eb988a29-8cfe-4cf2-ae1c-0a710a9ddac2/export"/>
    <published>2026-08-24T20:50:06.539209+00:00</published>
  </entry>
</feed>
