<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-15T06:33:55.552369+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/14b7dd46-94f0-45b3-82ac-a3771d419d9a/export</id>
    <title>14b7dd46-94f0-45b3-82ac-a3771d419d9a</title>
    <updated>2026-06-15T06:33:56.012027+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "14b7dd46-94f0-45b3-82ac-a3771d419d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26789", "type": "seen", "source": "https://t.me/cibsecurity/61452", "content": "\u203c CVE-2023-26789 \u203c\n\nVeritas NetBackUp OpsCenter Version 9.1.0.1 is vulnerable to Reflected Cross-site scripting (XSS). The Web App fails to adequately sanitize special characters. By leveraging this issue, an attacker is able to cause arbitrary HTML and JavaScript code to be executed in a user's browser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-05T16:26:12.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/14b7dd46-94f0-45b3-82ac-a3771d419d9a/export"/>
    <published>2023-04-05T16:26:12+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5527387e-43b0-490c-8630-cac7b99d6119/export</id>
    <title>5527387e-43b0-490c-8630-cac7b99d6119</title>
    <updated>2026-06-15T06:33:56.011904+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5527387e-43b0-490c-8630-cac7b99d6119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26788", "type": "seen", "source": "https://t.me/cibsecurity/61746", "content": "\u203c CVE-2023-26788 \u203c\n\nVeritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected ways. Any changes made to the header would just cause the request to be sent to a completely different Domain/IP address.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T16:36:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5527387e-43b0-490c-8630-cac7b99d6119/export"/>
    <published>2023-04-10T16:36:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90e62725-5c25-4b1a-ada4-a9ceb63179ba/export</id>
    <title>90e62725-5c25-4b1a-ada4-a9ceb63179ba</title>
    <updated>2026-06-15T06:33:56.011783+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90e62725-5c25-4b1a-ada4-a9ceb63179ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26781", "type": "seen", "source": "https://t.me/cibsecurity/63094", "content": "\u203c CVE-2023-26781 \u203c\n\nSQL injection vulnerability in mccms 2.6 allows remote attackers to run arbitrary SQL commands via Author Center -&amp;gt;Reader Comments -&amp;gt;Search.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:33.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90e62725-5c25-4b1a-ada4-a9ceb63179ba/export"/>
    <published>2023-04-29T00:27:33+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e5b0b166-78c5-47c4-9805-8153b74d1aee/export</id>
    <title>e5b0b166-78c5-47c4-9805-8153b74d1aee</title>
    <updated>2026-06-15T06:33:56.011661+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e5b0b166-78c5-47c4-9805-8153b74d1aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26782", "type": "seen", "source": "https://t.me/cibsecurity/63109", "content": "\u203c CVE-2023-26782 \u203c\n\nAn issue discovered in mccms 2.6.1 allows remote attackers to cause a denial of service via Backend management interface -&amp;gt;System Configuration-&amp;gt;Cache Configuration-&amp;gt;Cache security characters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-29T00:27:52.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e5b0b166-78c5-47c4-9805-8153b74d1aee/export"/>
    <published>2023-04-29T00:27:52+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46e0dfb3-5354-4aba-8173-0ee1637cb8f1/export</id>
    <title>46e0dfb3-5354-4aba-8173-0ee1637cb8f1</title>
    <updated>2026-06-15T06:33:56.011525+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46e0dfb3-5354-4aba-8173-0ee1637cb8f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2678", "type": "seen", "source": "https://t.me/cibsecurity/64006", "content": "\u203c CVE-2023-2678 \u203c\n\nA vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /file_manager/admin/save_user.php of the component POST Parameter Handler. The manipulation of the argument firstname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228892.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T14:27:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46e0dfb3-5354-4aba-8173-0ee1637cb8f1/export"/>
    <published>2023-05-12T14:27:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e410f383-edc4-4b3c-91d8-b8aa0e132d54/export</id>
    <title>e410f383-edc4-4b3c-91d8-b8aa0e132d54</title>
    <updated>2026-06-15T06:33:56.011392+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e410f383-edc4-4b3c-91d8-b8aa0e132d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26785", "type": "seen", "source": "https://t.me/cvedetector/8259", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-26785 - MariaDB Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-26785 \nPublished : Oct. 17, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-18T01:01:10.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e410f383-edc4-4b3c-91d8-b8aa0e132d54/export"/>
    <published>2024-10-18T01:01:10+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cb6f2469-c568-4114-b552-2476b7793212/export</id>
    <title>cb6f2469-c568-4114-b552-2476b7793212</title>
    <updated>2026-06-15T06:33:56.011268+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cb6f2469-c568-4114-b552-2476b7793212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26782", "type": "seen", "source": "Telegram/btAkYf7eEWR_EyxbUMSSG0JJDYM18s8geRLg6jRWIbDPBEZj", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cb6f2469-c568-4114-b552-2476b7793212/export"/>
    <published>2025-02-01T17:28:11+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/48e687bf-7f84-42be-801a-b6fc9130dc61/export</id>
    <title>48e687bf-7f84-42be-801a-b6fc9130dc61</title>
    <updated>2026-06-15T06:33:56.011135+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "48e687bf-7f84-42be-801a-b6fc9130dc61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26781", "type": "seen", "source": "Telegram/Hwfpp2PMA2liOompnBLV-JcALZpdANDnQjGaPCWsRwUDIZ-E", "content": "", "creation_timestamp": "2025-02-01T17:28:11.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/48e687bf-7f84-42be-801a-b6fc9130dc61/export"/>
    <published>2025-02-01T17:28:11+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d458f274-91d7-45dd-9330-498d1ed42dea/export</id>
    <title>d458f274-91d7-45dd-9330-498d1ed42dea</title>
    <updated>2026-06-15T06:33:56.010981+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d458f274-91d7-45dd-9330-498d1ed42dea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26788", "type": "seen", "source": "Telegram/MVJm6BMfb6w3flKVV7gdZK4Q92bLNcwvcsirWxvGcNgqtQTK", "content": "", "creation_timestamp": "2025-02-14T10:03:10.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d458f274-91d7-45dd-9330-498d1ed42dea/export"/>
    <published>2025-02-14T10:03:10+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/68ab2ccc-451d-43f0-9678-8e45108e09c0/export</id>
    <title>68ab2ccc-451d-43f0-9678-8e45108e09c0</title>
    <updated>2026-06-15T06:33:56.009294+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "68ab2ccc-451d-43f0-9678-8e45108e09c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26780", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-26780\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: CleverStupidDog yf-exam v 1.8.0 is vulnerable to SQL Injection.\n\ud83d\udccf Published: 2023-03-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T17:22:47.152Z\n\ud83d\udd17 References:\n1. https://github.com/CleverStupidDog/yf-exam/issues/4\n2. https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2023-26780", "creation_timestamp": "2025-03-07T17:35:21.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/68ab2ccc-451d-43f0-9678-8e45108e09c0/export"/>
    <published>2025-03-07T17:35:21+00:00</published>
  </entry>
</feed>
