<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T04:42:48.648221+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/12dd2baf-0c2e-4f8e-a063-021c8550af60/export</id>
    <title>12dd2baf-0c2e-4f8e-a063-021c8550af60</title>
    <updated>2026-10-10T04:42:48.674103+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "12dd2baf-0c2e-4f8e-a063-021c8550af60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94503", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxi2ppo2w42l", "content": "CVE-2026-94503 - zombify\nThe Zombify plugin for WordPress (versions up to 1.7.7) lets anyone upload files of any type, including web shells that can run code on your server. This could give an attacker control\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zombify #pxlab #CVE #infosec", "creation_timestamp": "2026-10-09T22:50:06.065533Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/12dd2baf-0c2e-4f8e-a063-021c8550af60/export"/>
    <published>2026-10-09T22:50:06.065533+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d151bd3-eb96-4117-be18-2fb832f55a2e/export</id>
    <title>7d151bd3-eb96-4117-be18-2fb832f55a2e</title>
    <updated>2026-10-10T04:42:48.676375+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d151bd3-eb96-4117-be18-2fb832f55a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94503", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxgwsw7v4e2x", "content": "\ud83d\udea8 CVE-2026-94503 \u2014 CVSS 10 CRITICAL\n\nUnrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-94503\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-09T12:07:38.968472Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d151bd3-eb96-4117-be18-2fb832f55a2e/export"/>
    <published>2026-10-09T12:07:38.968472+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ad2f112f-fe60-4959-81cf-7516d18d1883/export</id>
    <title>ad2f112f-fe60-4959-81cf-7516d18d1883</title>
    <updated>2026-10-10T04:42:48.676514+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ad2f112f-fe60-4959-81cf-7516d18d1883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94503", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxgwgbmqcq2p", "content": "PX-lab Zombify \u22641.7.7 has a CRITICAL flaw (CVE-2026-94503) enabling web shell upload and full system compromise. No patch \u2014 restrict upload features now. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE2...", "creation_timestamp": "2026-10-09T12:00:35.164198Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ad2f112f-fe60-4959-81cf-7516d18d1883/export"/>
    <published>2026-10-09T12:00:35.164198+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02896e2c-b22e-486a-bddd-41fe0fc19f67/export</id>
    <title>02896e2c-b22e-486a-bddd-41fe0fc19f67</title>
    <updated>2026-10-10T04:42:48.676634+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02896e2c-b22e-486a-bddd-41fe0fc19f67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-94503", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117410839431606449", "content": "PX-lab Zombify \u22641.7.7 is affected by CVE-2026-94503 (CRITICAL, CVSS 10): unrestricted upload of dangerous files enables remote code execution. No patch yet \u2014 restrict uploads &amp;amp; monitor for updates. https://radar.offseq.com/threat/cve-2026-94503-unrestricted-upload-of-file-with-dangerous-type-in-px-lab-zombify-8e6fe0b08d444b23 #OffSeq #CVE202694503 #WebSecurity #Infosec", "creation_timestamp": "2026-10-09T12:00:33.341379Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02896e2c-b22e-486a-bddd-41fe0fc19f67/export"/>
    <published>2026-10-09T12:00:33.341379+00:00</published>
  </entry>
</feed>
