<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-15T13:59:42.359271+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a78e302-e89b-47e9-9786-cdc682625eb9/export</id>
    <title>9a78e302-e89b-47e9-9786-cdc682625eb9</title>
    <updated>2026-06-15T13:59:42.372808+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a78e302-e89b-47e9-9786-cdc682625eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnirwyoxo42a", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to anyone. No auth needed. Your wp-config could be next.\n\nUpdate to 4.71. now. \u2192 pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-04T23:33:50.308809Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a78e302-e89b-47e9-9786-cdc682625eb9/export"/>
    <published>2026-06-04T23:33:50.308809+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/45c11c26-00ab-4285-8525-265efa834fb5/export</id>
    <title>45c11c26-00ab-4285-8525-265efa834fb5</title>
    <updated>2026-06-15T13:59:42.372735+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "45c11c26-00ab-4285-8525-265efa834fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnis7ahx5p2k", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to unauthenticated visitors. Your wp-config. Database backups. Client files. All exposed.\n\nUpdate to 4.71 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-04T23:38:26.800071Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/45c11c26-00ab-4285-8525-265efa834fb5/export"/>
    <published>2026-06-04T23:38:26.800071+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/27bb9312-7bef-42f0-ae99-8556f00d921f/export</id>
    <title>27bb9312-7bef-42f0-ae99-8556f00d921f</title>
    <updated>2026-06-15T13:59:42.372664+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "27bb9312-7bef-42f0-ae99-8556f00d921f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnisbxpsiv2l", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to anyone. No auth needed. Your wp-config could be next.\n\nUpdate to 4.71. now. \u2192 pulse-wp.com\n#WordPress #AccessControl #PotatoSecurity", "creation_timestamp": "2026-06-04T23:39:58.520689Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/27bb9312-7bef-42f0-ae99-8556f00d921f/export"/>
    <published>2026-06-04T23:39:58.520689+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6917f2ed-5e50-4526-824d-08bb7bb1bd05/export</id>
    <title>6917f2ed-5e50-4526-824d-08bb7bb1bd05</title>
    <updated>2026-06-15T13:59:42.372588+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6917f2ed-5e50-4526-824d-08bb7bb1bd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 43 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-49858: 11 interactions\nCVE-2026-20230: 6 interactions\nCVE-2026-10737: 4 interactions\n", "creation_timestamp": "2026-06-05T02:30:48.004045Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6917f2ed-5e50-4526-824d-08bb7bb1bd05/export"/>
    <published>2026-06-05T02:30:48.004045+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/86b2ab82-157a-4ddf-b8ed-76b64f7d1279/export</id>
    <title>86b2ab82-157a-4ddf-b8ed-76b64f7d1279</title>
    <updated>2026-06-15T13:59:42.372468+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "86b2ab82-157a-4ddf-b8ed-76b64f7d1279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqhegrqv2b", "content": "CVE-2026-10732 - Decompress Arbitrary File Write via Symlink Race Condition\nCVE ID : CVE-2026-10732\n \n Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extrac...", "creation_timestamp": "2026-06-05T08:39:51.704995Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/86b2ab82-157a-4ddf-b8ed-76b64f7d1279/export"/>
    <published>2026-06-05T08:39:51.704995+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/14198c8b-c55e-427e-b649-0e92cbe9ddc4/export</id>
    <title>14198c8b-c55e-427e-b649-0e92cbe9ddc4</title>
    <updated>2026-06-15T13:59:42.372378+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "14198c8b-c55e-427e-b649-0e92cbe9ddc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqhegrqv2b", "content": "CVE-2026-10732 - Decompress Arbitrary File Write via Symlink Race Condition\nCVE ID : CVE-2026-10732\n \n Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extrac...", "creation_timestamp": "2026-06-05T08:39:51.715297Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/14198c8b-c55e-427e-b649-0e92cbe9ddc4/export"/>
    <published>2026-06-05T08:39:51.715297+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/759ed1ed-b769-403b-9f5c-a7e3e86e61d1/export</id>
    <title>759ed1ed-b769-403b-9f5c-a7e3e86e61d1</title>
    <updated>2026-06-15T13:59:42.372293+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "759ed1ed-b769-403b-9f5c-a7e3e86e61d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnu53r2lny2v", "content": "CVE-2026-10731 - SQL injection in Nemon products\nCVE ID : CVE-2026-10731\n \n Published : June 9, 2026, 10:16 a.m. | 59\u00a0minutes ago\n \n Description : SQL injection in the \u2018two_steps_auth_code\u2019 parameter processed by the \u2018twoStepsAuthVerification\u2019 function within the \u2018/user-login\u2019...", "creation_timestamp": "2026-06-09T11:52:38.287209Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/759ed1ed-b769-403b-9f5c-a7e3e86e61d1/export"/>
    <published>2026-06-09T11:52:38.287209+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21/export</id>
    <title>69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21</title>
    <updated>2026-06-15T13:59:42.372177+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10738", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnwsajzizn2m", "content": "CVE-2026-10738 jquery-hover-footnotes (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-10T13:16:27.080626Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21/export"/>
    <published>2026-06-10T13:16:27.080626+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d3a531c6-b974-467d-adf6-b74c4ff64402/export</id>
    <title>d3a531c6-b974-467d-adf6-b74c4ff64402</title>
    <updated>2026-06-15T13:59:42.371277+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d3a531c6-b974-467d-adf6-b74c4ff64402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10733", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y", "content": "\ud83d\udd17 CVE : CVE-2026-10087, CVE-2026-10733, CVE-2026-1500, CVE-2026-3553, CVE-2026-6269, CVE-2026-6277, CVE-2026-6552, CVE-2026-6976, CVE-2026-7250, CVE-2026-8589, CVE-2026-9204, CVE-2026-9694", "creation_timestamp": "2026-06-11T12:45:12.892530Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d3a531c6-b974-467d-adf6-b74c4ff64402/export"/>
    <published>2026-06-11T12:45:12.892530+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b702b5a5-41d3-4d74-9abb-c754b9cc895d/export</id>
    <title>b702b5a5-41d3-4d74-9abb-c754b9cc895d</title>
    <updated>2026-06-15T13:59:42.369984+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "b702b5a5-41d3-4d74-9abb-c754b9cc895d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10733", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b702b5a5-41d3-4d74-9abb-c754b9cc895d/export"/>
    <published>2026-06-11T18:00:00+00:00</published>
  </entry>
</feed>
