<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-04T03:35:23.551569+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3d87934a-375b-455c-95b2-714d80d46214/export</id>
    <title>3d87934a-375b-455c-95b2-714d80d46214</title>
    <updated>2026-06-04T03:35:23.964983+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3d87934a-375b-455c-95b2-714d80d46214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewko3au2t", "content": "\ud83d\udd34 CVE-2026-36760 - Critical (9.6)\n\nAn issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:40.696927Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3d87934a-375b-455c-95b2-714d80d46214/export"/>
    <published>2026-04-30T19:46:40.696927+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6184840d-ab85-483c-b9c2-231432758afe/export</id>
    <title>6184840d-ab85-483c-b9c2-231432758afe</title>
    <updated>2026-06-04T03:35:23.964907+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6184840d-ab85-483c-b9c2-231432758afe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqewscpgn2w", "content": "\ud83d\udd34 CVE-2026-36767 - Critical (10)\n\nA path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:46:48.772992Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6184840d-ab85-483c-b9c2-231432758afe/export"/>
    <published>2026-04-30T19:46:48.772992+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/158687c5-6cc3-4d50-ad1e-30d73c6b0d6b/export</id>
    <title>158687c5-6cc3-4d50-ad1e-30d73c6b0d6b</title>
    <updated>2026-06-04T03:35:23.964821+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "158687c5-6cc3-4d50-ad1e-30d73c6b0d6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexdt5sx2c", "content": "\ud83d\udd34 CVE-2026-36760 - Critical (9.6)\n\nAn issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authen...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36760/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:47:06.962206Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/158687c5-6cc3-4d50-ad1e-30d73c6b0d6b/export"/>
    <published>2026-04-30T19:47:06.962206+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8662aac1-b178-42c5-a167-1fa50a224517/export</id>
    <title>8662aac1-b178-42c5-a167-1fa50a224517</title>
    <updated>2026-06-04T03:35:23.964733+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8662aac1-b178-42c5-a167-1fa50a224517", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqexlowma2q", "content": "\ud83d\udd34 CVE-2026-36767 - Critical (10)\n\nA path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows atta...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-36767/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-04-30T19:47:15.060752Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8662aac1-b178-42c5-a167-1fa50a224517/export"/>
    <published>2026-04-30T19:47:15.060752+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cd78480c-d5a1-4584-b0b2-09cc3e96c5a9/export</id>
    <title>cd78480c-d5a1-4584-b0b2-09cc3e96c5a9</title>
    <updated>2026-06-04T03:35:23.964654+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cd78480c-d5a1-4584-b0b2-09cc3e96c5a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqi4gdeud2n", "content": "CVE-2026-36767 - Shopizer Path Traversal File Write Vulnerability\nCVE ID : CVE-2026-36767\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers w...", "creation_timestamp": "2026-04-30T20:43:37.778988Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cd78480c-d5a1-4584-b0b2-09cc3e96c5a9/export"/>
    <published>2026-04-30T20:43:37.778988+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e80520dd-1747-492e-8f81-343535987f4a/export</id>
    <title>e80520dd-1747-492e-8f81-343535987f4a</title>
    <updated>2026-06-04T03:35:23.964560+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e80520dd-1747-492e-8f81-343535987f4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqi7lpp552k", "content": "CVE-2026-36760 - JeeSite File Upload Path Traversal Write Arbitrary Files\nCVE ID : CVE-2026-36760\n \n Published : April 30, 2026, 5:16 p.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authe...", "creation_timestamp": "2026-04-30T20:45:24.126871Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e80520dd-1747-492e-8f81-343535987f4a/export"/>
    <published>2026-04-30T20:45:24.126871+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/28bb15a9-6e8e-4334-bc2a-bc45cf220777/export</id>
    <title>28bb15a9-6e8e-4334-bc2a-bc45cf220777</title>
    <updated>2026-06-04T03:35:23.964462+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "28bb15a9-6e8e-4334-bc2a-bc45cf220777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36767", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqicxj6fo2c", "content": "CVE-2026-36767 - Shopizer Path Traversal File Write Vulnerability\nCVE ID : CVE-2026-36767\n \n Published : April 30, 2026, 5:16 p.m. | 3\u00a0hours, 2\u00a0minutes ago\n \n Description : A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers w...", "creation_timestamp": "2026-04-30T20:47:17.158071Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/28bb15a9-6e8e-4334-bc2a-bc45cf220777/export"/>
    <published>2026-04-30T20:47:17.158071+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/babf8b0b-2269-4d6b-b886-ff46db0ebe7e/export</id>
    <title>babf8b0b-2269-4d6b-b886-ff46db0ebe7e</title>
    <updated>2026-06-04T03:35:23.964280+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "babf8b0b-2269-4d6b-b886-ff46db0ebe7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36764", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqigkdoqy2h", "content": "CVE-2026-36764 - SpringBlade SSRF Vulnerability\nCVE ID : CVE-2026-36764\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authe...", "creation_timestamp": "2026-04-30T20:49:17.501639Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/babf8b0b-2269-4d6b-b886-ff46db0ebe7e/export"/>
    <published>2026-04-30T20:49:17.501639+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0189ff1c-8fa5-49dd-a8d3-9d7d2b297809/export</id>
    <title>0189ff1c-8fa5-49dd-a8d3-9d7d2b297809</title>
    <updated>2026-06-04T03:35:23.961761+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0189ff1c-8fa5-49dd-a8d3-9d7d2b297809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36760", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mkqj5bvtaq2p", "content": "CVE-2026-36760 - JeeSite File Upload Path Traversal Write Arbitrary Files\nCVE ID : CVE-2026-36760\n \n Published : April 30, 2026, 5:16 p.m. | 1\u00a0hour, 12\u00a0minutes ago\n \n Description : An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authe...", "creation_timestamp": "2026-04-30T21:02:00.542701Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0189ff1c-8fa5-49dd-a8d3-9d7d2b297809/export"/>
    <published>2026-04-30T21:02:00.542701+00:00</published>
  </entry>
</feed>
