<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-28T16:42:46.635750+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1ca40f25-946e-4101-9019-28e606934496/export</id>
    <title>1ca40f25-946e-4101-9019-28e606934496</title>
    <updated>2026-07-28T16:42:46.652439+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1ca40f25-946e-4101-9019-28e606934496", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrntuzuwmz2a", "content": "CVE-2026-48030 - Pheditor: OS Command Injection in terminal handler via unsanitized 'dir' parameter (CWE-78)\nCVE ID : CVE-2026-48030\n \n Published : July 27, 2026, 6:16 p.m. | 2\u00a0hours, 21\u00a0minutes ago\n \n Description : Pheditor is a single-file editor and file manager written in ...", "creation_timestamp": "2026-07-27T21:32:37.142996Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1ca40f25-946e-4101-9019-28e606934496/export"/>
    <published>2026-07-27T21:32:37.142996+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4bebbc9d-0f6a-4163-bc08-1642cbcae4fe/export</id>
    <title>4bebbc9d-0f6a-4163-bc08-1642cbcae4fe</title>
    <updated>2026-07-28T16:42:46.654995+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4bebbc9d-0f6a-4163-bc08-1642cbcae4fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrnlhuodhd2a", "content": "CVE-2026-48030 - pheditor\nAn attacker can execute arbitrary OS commands on a Pheditor server by injecting malicious characters into the 'dir' parameter in the terminal handler. This allows the attacker to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#pheditor #composer #CVE #infosec", "creation_timestamp": "2026-07-27T19:02:05.330935Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4bebbc9d-0f6a-4163-bc08-1642cbcae4fe/export"/>
    <published>2026-07-27T19:02:05.330935+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/72a816e4-87c7-4045-92cb-7c4b085d6c45/export</id>
    <title>72a816e4-87c7-4045-92cb-7c4b085d6c45</title>
    <updated>2026-07-28T16:42:46.655268+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "72a816e4-87c7-4045-92cb-7c4b085d6c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48030", "type": "seen", "source": "Telegram/mMN-AjvGpcaE-zo6q0YmV9Qj204A53PE-cWPysE2p8vK_VY", "content": "", "creation_timestamp": "2026-05-28T11:00:13.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/72a816e4-87c7-4045-92cb-7c4b085d6c45/export"/>
    <published>2026-05-28T11:00:13+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c8c079a0-f4dc-4ac4-baee-1ed3fd52038c/export</id>
    <title>c8c079a0-f4dc-4ac4-baee-1ed3fd52038c</title>
    <updated>2026-07-28T16:42:46.655486+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "c8c079a0-f4dc-4ac4-baee-1ed3fd52038c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-48030", "type": "published-proof-of-concept", "source": "https://github.com/pheditor/pheditor/security/advisories/GHSA-jvc5-6g7q-c843", "content": "", "creation_timestamp": "2026-05-20T13:11:25.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c8c079a0-f4dc-4ac4-baee-1ed3fd52038c/export"/>
    <published>2026-05-20T13:11:25+00:00</published>
  </entry>
</feed>
