<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-30T04:36:47.014594+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/694dcd33-ad84-430e-a9bc-1fc0dc7fef75/export</id>
    <title>694dcd33-ad84-430e-a9bc-1fc0dc7fef75</title>
    <updated>2026-05-30T04:36:47.035510+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "694dcd33-ad84-430e-a9bc-1fc0dc7fef75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42615", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkmpehp25s26", "content": "\ud83c\udfaf High severity XSS uncovered in GCHQ CyberChef \u26a0\ufe0f\n\nA flaw in the \u201cShow Base64 offsets\u201d feature allows script injection via crafted input (CVE-2026-42615).\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CyberSecurity #CVE #GCHQ #XSS", "creation_timestamp": "2026-04-29T08:42:58.794536Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/694dcd33-ad84-430e-a9bc-1fc0dc7fef75/export"/>
    <published>2026-04-29T08:42:58.794536+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4943c4c3-42ab-470b-bcbb-f4478103d99c/export</id>
    <title>4943c4c3-42ab-470b-bcbb-f4478103d99c</title>
    <updated>2026-05-30T04:36:47.035448+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4943c4c3-42ab-470b-bcbb-f4478103d99c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42615", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkmpeld32c26", "content": "\ud83c\udfaf High severity XSS uncovered in GCHQ CyberChef \u26a0\ufe0f\n\nA flaw in the \u201cShow Base64 offsets\u201d feature allows script injection via crafted input (CVE-2026-42615).\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CyberSecurity #CVE #GCHQ #XSS", "creation_timestamp": "2026-04-29T08:42:59.297975Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4943c4c3-42ab-470b-bcbb-f4478103d99c/export"/>
    <published>2026-04-29T08:42:59.297975+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9012f565-037f-4a78-8692-5da133ea1372/export</id>
    <title>9012f565-037f-4a78-8692-5da133ea1372</title>
    <updated>2026-05-30T04:36:47.035385+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9012f565-037f-4a78-8692-5da133ea1372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42615", "type": "seen", "source": "https://bsky.app/profile/basefortify.bsky.social/post/3mkmpesoyu226", "content": "\ud83c\udfaf High severity XSS uncovered in GCHQ CyberChef \u26a0\ufe0f\n\nA flaw in the \u201cShow Base64 offsets\u201d feature allows script injection via crafted input (CVE-2026-42615).\n\n\ud83d\udd17 basefortify.eu/cve_reports/...\n\n#CyberSecurity #CVE #GCHQ #XSS", "creation_timestamp": "2026-04-29T08:42:59.811225Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9012f565-037f-4a78-8692-5da133ea1372/export"/>
    <published>2026-04-29T08:42:59.811225+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/127073b4-9d00-4488-bcfd-4bf064b7960d/export</id>
    <title>127073b4-9d00-4488-bcfd-4bf064b7960d</title>
    <updated>2026-05-30T04:36:47.035322+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "127073b4-9d00-4488-bcfd-4bf064b7960d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42611", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqp7tblb2e", "content": "\ud83d\udfe0 CVE-2026-42611 - High (8.9)\n\nGrav is a file-based Web platform. Prior to 2.0.0-beta.2, a low-privileged (with the ability to c...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42611/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T16:59:35.919105Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/127073b4-9d00-4488-bcfd-4bf064b7960d/export"/>
    <published>2026-05-11T16:59:35.919105+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e559dc76-8999-4eac-93bb-aae344e2cd95/export</id>
    <title>e559dc76-8999-4eac-93bb-aae344e2cd95</title>
    <updated>2026-05-30T04:36:47.035253+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e559dc76-8999-4eac-93bb-aae344e2cd95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42612", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqph7f7n2k", "content": "\ud83d\udfe0 CVE-2026-42612 - High (8.5)\n\nGrav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vul...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42612/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T16:59:39.071610Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e559dc76-8999-4eac-93bb-aae344e2cd95/export"/>
    <published>2026-05-11T16:59:39.071610+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/53714232-25c5-40a6-ac31-288a87553d23/export</id>
    <title>53714232-25c5-40a6-ac31-288a87553d23</title>
    <updated>2026-05-30T04:36:47.035174+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "53714232-25c5-40a6-ac31-288a87553d23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42613", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqvvrpcy26", "content": "\ud83d\udd34 CVE-2026-42613 - Critical (9.4)\n\nGrav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Log...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42613/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T17:03:26.646654Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/53714232-25c5-40a6-ac31-288a87553d23/export"/>
    <published>2026-05-11T17:03:26.646654+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/687403b9-b32e-4389-a606-636152453ca7/export</id>
    <title>687403b9-b32e-4389-a606-636152453ca7</title>
    <updated>2026-05-30T04:36:47.035108+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "687403b9-b32e-4389-a606-636152453ca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42613", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllqxgcyzs2q", "content": "\ud83d\udd34 CVE-2026-42613 - Critical (9.4)\n\nGrav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Log...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42613/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T17:03:47.225579Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/687403b9-b32e-4389-a606-636152453ca7/export"/>
    <published>2026-05-11T17:03:47.225579+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bd155b4e-816b-4c7e-a825-08cfc368ba40/export</id>
    <title>bd155b4e-816b-4c7e-a825-08cfc368ba40</title>
    <updated>2026-05-30T04:36:47.035032+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bd155b4e-816b-4c7e-a825-08cfc368ba40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42613", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mllr5tmq2q2g", "content": "\ud83d\udd34 CVE-2026-42613 - Critical (9.4)\n\nGrav is a file-based Web platform. Prior to 2.0.0-beta.2, the Login::register() method in the Log...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-42613/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-11T17:07:59.657975Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bd155b4e-816b-4c7e-a825-08cfc368ba40/export"/>
    <published>2026-05-11T17:07:59.657975+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57da2e4b-8cef-4024-a826-dd2cc2a9bad2/export</id>
    <title>57da2e4b-8cef-4024-a826-dd2cc2a9bad2</title>
    <updated>2026-05-30T04:36:47.034936+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57da2e4b-8cef-4024-a826-dd2cc2a9bad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42612", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mmkybdms6y2r", "content": "\ud83d\udccc CVE-2026-42612 - Grav is a file-based Web platform. Prior to 2.0.0-beta.2, a stored Cross-Site Scripting (XSS) vulnerability in getgrav/grav allows publisher-level acc... https://www.cyberhub.blog/cves/CVE-2026-42612", "creation_timestamp": "2026-05-24T03:07:07.702717Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57da2e4b-8cef-4024-a826-dd2cc2a9bad2/export"/>
    <published>2026-05-24T03:07:07.702717+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e15a785-62df-4236-9f02-0c24c3f16582/export</id>
    <title>8e15a785-62df-4236-9f02-0c24c3f16582</title>
    <updated>2026-05-30T04:36:47.032051+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e15a785-62df-4236-9f02-0c24c3f16582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42613", "type": "seen", "source": "https://t.me/realcodeb0ss/444", "content": "https://nvd.nist.gov/vuln/detail/CVE-2026-42613\n\n\nFofa : \"Grav CMS\"\n\nEnjoy;", "creation_timestamp": "2026-05-28T23:58:43.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e15a785-62df-4236-9f02-0c24c3f16582/export"/>
    <published>2026-05-28T23:58:43+00:00</published>
  </entry>
</feed>
