https://vulnerability.circl.lu/sightings/feed 2026-05-30T22:37:29.455186+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/eb4383bf-933f-4095-8d05-b3a7fcf2fb51/export 2026-05-30T22:37:29.486507+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "eb4383bf-933f-4095-8d05-b3a7fcf2fb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjhkafkddp2f", "content": "", "creation_timestamp": "2026-04-14T14:02:29.628010Z"} 2026-04-14T14:02:29.628010+00:00 https://vulnerability.circl.lu/sighting/0959ca05-f356-4171-81c2-9758145a88c0/export 2026-05-30T22:37:29.486433+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0959ca05-f356-4171-81c2-9758145a88c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjhkbytrsl2q", "content": "", "creation_timestamp": "2026-04-14T14:03:23.248050Z"} 2026-04-14T14:03:23.248050+00:00 https://vulnerability.circl.lu/sighting/142fe34e-70ba-4b09-bcda-8577199dce49/export 2026-05-30T22:37:29.486357+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "142fe34e-70ba-4b09-bcda-8577199dce49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mjndlief222t", "content": "", "creation_timestamp": "2026-04-16T21:19:35.151242Z"} 2026-04-16T21:19:35.151242+00:00 https://vulnerability.circl.lu/sighting/e5f6f39b-271b-4fb1-a1bd-d46697934c5a/export 2026-05-30T22:37:29.486271+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e5f6f39b-271b-4fb1-a1bd-d46697934c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/9988", "content": "\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043b\u0435\u0436\u0438\u0442 PHP-\u0448\u0435\u043b\u043b\n\n\u0411\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430. \u0411\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f. CVE-2026-0740 \u0432 Ninja Forms \u2014 File Uploads: CVSS 9.8, PR:N, UI:N.\n\n\ud83d\udd0d \u0427\u0442\u043e \u0441\u043b\u043e\u043c\u0430\u043d\u043e: \u0444\u0443\u043d\u043a\u0446\u0438\u044f handle_upload \u043d\u0435 \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u0442\u0438\u043f \u0444\u0430\u0439\u043b\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0448\u043b\u0451\u0442 POST \u043d\u0430 admin-ajax.php \u2014 \u0438 .php-\u0444\u0430\u0439\u043b \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 wp-content/uploads/. \u041a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 CWE-434.\n\n\u26a0\ufe0f \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u2014 \u043f\u0440\u0435\u043c\u0438\u0443\u043c-\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0438\u0434\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 WordPress.org, \u043d\u0443\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e. \u041f\u0430\u0442\u0447 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.27) \u0432\u044b\u0448\u0435\u043b 19 \u043c\u0430\u0440\u0442\u0430 2026-\u0433\u043e, CVE \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u2014 \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0444\u043e\u0440\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 \u0440\u0430\u0437\u0431\u043e\u0440 kill chain \u043f\u043e MITRE ATT\\&CK: \u043e\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 WPScan \u0434\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f DB-credentials \u0438\u0437 wp-config.php, \u043f\u043b\u044e\u0441 detection-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043f\u0430\u0442\u0447-\u0434\u0438\u0444\u0444.\n\nhttps://codeby.net/threads/uyazvimost-ninja-forms-rce-cve-2026-0740-polnyi-razbor-ekspluatatsii-i-zashchity-wordpress.92676/", "creation_timestamp": "2026-04-17T05:02:09.000000Z"} 2026-04-17T05:02:09+00:00 https://vulnerability.circl.lu/sighting/80035ceb-b18b-473e-99cf-92fa1e0a81e9/export 2026-05-30T22:37:29.486201+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "80035ceb-b18b-473e-99cf-92fa1e0a81e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/kFmk3IZ3Z2qzEI0aWgGpXK0TflqqE9Sd4_8Q2OIAfUn3vfM", "content": "", "creation_timestamp": "2026-04-17T07:00:12.000000Z"} 2026-04-17T07:00:12+00:00 https://vulnerability.circl.lu/sighting/8881c87d-79f9-4cd7-9ba5-8c65b7200213/export 2026-05-30T22:37:29.486128+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8881c87d-79f9-4cd7-9ba5-8c65b7200213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/bj8doEkkdNqHpfVQfl8gvA4415dyF2kRdOr9jMxstG-0IPA", "content": "", "creation_timestamp": "2026-04-17T15:00:06.000000Z"} 2026-04-17T15:00:06+00:00 https://vulnerability.circl.lu/sighting/ae1a9a05-a406-4ea8-a151-8d67894c7171/export 2026-05-30T22:37:29.486038+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ae1a9a05-a406-4ea8-a151-8d67894c7171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81668", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-25 23:14:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-26T00:00:04.000000Z"} 2026-04-26T00:00:04+00:00 https://vulnerability.circl.lu/sighting/1c2ccf48-55a5-4a32-a356-befe76f6fe95/export 2026-05-30T22:37:29.485900+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1c2ccf48-55a5-4a32-a356-befe76f6fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs", "content": "", "creation_timestamp": "2026-04-26T03:00:05.000000Z"} 2026-04-26T03:00:05+00:00 https://vulnerability.circl.lu/sighting/599b04df-198e-4f10-9bae-564f285210ba/export 2026-05-30T22:37:29.485685+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "599b04df-198e-4f10-9bae-564f285210ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/83819", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zycoder0day\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-11 14:49:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-11T15:00:05.000000Z"} 2026-05-11T15:00:05+00:00 https://vulnerability.circl.lu/sighting/0e4a7b73-c4a6-4287-a408-741e63922fec/export 2026-05-30T22:37:29.483705+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0e4a7b73-c4a6-4287-a408-741e63922fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/APNnc0rGq8Mw668T50hT40wcIodfx4a7aX3kwnmD3UBVDH4", "content": "", "creation_timestamp": "2026-05-11T15:00:15.000000Z"} 2026-05-11T15:00:15+00:00