https://vulnerability.circl.lu/sightings/feed 2026-09-21T19:18:12.060603+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c1fe009f-182f-4399-a9cf-e3e17d3e9878/export 2026-09-21T19:18:12.082185+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c1fe009f-182f-4399-a9cf-e3e17d3e9878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvyvfz6mva2t", "content": "CVE-2026-94104\nIf someone with view\u2011only back\u2011office access logs in, they can place a script file in the public image folder and make the server run it. This could let an attacker take control of the web site. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-21T04:40:04.114808Z"} 2026-09-21T04:40:04.114808+00:00 https://vulnerability.circl.lu/sighting/99cf2363-dc2e-49ea-888e-6bdfbb473e3b/export 2026-09-21T19:18:12.085177+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "99cf2363-dc2e-49ea-888e-6bdfbb473e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhso3kse2k", "content": "\ud83d\udfe0 CVE-2026-94104 - High (8.8)\n\nNivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi(...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:57.668577Z"} 2026-09-20T15:03:57.668577+00:00 https://vulnerability.circl.lu/sighting/ca173563-f7bf-4a39-a6e6-80262cfbb567/export 2026-09-21T19:18:12.085400+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ca173563-f7bf-4a39-a6e6-80262cfbb567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://gist.github.com/ichintu/6f6d6a80c56f871cb012c31151e3888f", "content": "This daily digest highlights two cybersecurity updates:\n\n1. **CVE-2026-94104 (NivoCart \u22642.4.0):** A high-severity (8.8) vulnerability that enables remote code execution via arbitrary PHP file uploads. The flaw stems from missing file extension validation in the file manager's `multi()` endpoint and requires only basic back-office access to exploit.\n2. **EchelonGraph Pulse:** A newly launched, rapid CVE notification tool designed for cybersecurity professionals, currently seeking community feedback to refine its features and improve user support.", "creation_timestamp": "2026-09-20T12:01:53.345538Z"} 2026-09-20T12:01:53.345538+00:00