https://vulnerability.circl.lu/sightings/feed 2026-08-06T08:04:49.244669+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b54d014f-0c9d-459b-bce0-9d4ae46630c4/export 2026-08-06T08:04:49.274707+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b54d014f-0c9d-459b-bce0-9d4ae46630c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-04T01:00:19.904723Z"} 2026-08-04T01:00:19.904723+00:00 https://vulnerability.circl.lu/sighting/2516ce29-9ddc-41c7-82d8-1f5cc1866afb/export 2026-08-06T08:04:49.276999+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2516ce29-9ddc-41c7-82d8-1f5cc1866afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/96368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52887-NocoBase-SQLi-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 03:57:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52887 \u2014 NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-04T00:00:48.592690Z"} 2026-08-04T00:00:48.592690+00:00 https://vulnerability.circl.lu/sighting/40fd2a16-a99b-45d5-9619-3652c06bacaa/export 2026-08-06T08:04:49.277144+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "40fd2a16-a99b-45d5-9619-3652c06bacaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-04T00:00:44.084826Z"} 2026-08-04T00:00:44.084826+00:00 https://vulnerability.circl.lu/sighting/1ad996e2-7588-4ec5-af76-af8de0eddccc/export 2026-08-06T08:04:49.277248+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1ad996e2-7588-4ec5-af76-af8de0eddccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "published-proof-of-concept", "source": "Telegram/j-DMWk1jylS6oTK3WkqNWOGjNQLp4_I9IFyoV0ikHsL-Sj8", "content": "", "creation_timestamp": "2026-08-03T11:08:45.204832Z"} 2026-08-03T11:08:45.204832+00:00 https://vulnerability.circl.lu/sighting/1eba33c4-35bd-4065-92b4-cb0511bbc4b9/export 2026-08-06T08:04:49.277342+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1eba33c4-35bd-4065-92b4-cb0511bbc4b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "Telegram/snqalfjRGyeCByylJf6ek_8lwbWnhtUi9PGLk9MnmWsBvV0", "content": "", "creation_timestamp": "2026-08-03T08:00:03.201612Z"} 2026-08-03T08:00:03.201612+00:00 https://vulnerability.circl.lu/sighting/07ebaf4c-e864-4f9f-b24e-e0e96a5c4bc6/export 2026-08-06T08:04:49.277433+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "07ebaf4c-e864-4f9f-b24e-e0e96a5c4bc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://t.me/GithubRedTeam/96368", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-52887-NocoBase-SQLi-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a BiiTts\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-03 03:57:44\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-52887 \u2014 NocoBase SQL injection -> PostgreSQL-superuser RCE (myInAppChannels:list filter, CVSS 10.0). Author PoC + source analysis + docker lab.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-03T05:00:03.076625Z"} 2026-08-03T05:00:03.076625+00:00 https://vulnerability.circl.lu/sighting/6dec95bb-db51-4cee-ad51-edf0c9570e16/export 2026-08-06T08:04:49.277536+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6dec95bb-db51-4cee-ad51-edf0c9570e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqvfustm4y2s", "content": "CVE-2026-52887\nA security issue in NocoBase's notification plugin could allow an authenticated user to execute malicious code on the database. This could lead to unauthorized access and data theft. NocoBase has released a\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-18T04:18:03.711327Z"} 2026-07-18T04:18:03.711327+00:00 https://vulnerability.circl.lu/sighting/5d5386bf-7c45-4299-99f4-54f4a58f48bd/export 2026-08-06T08:04:49.277639+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5d5386bf-7c45-4299-99f4-54f4a58f48bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqpzjwga2c2m", "content": "CVE-2026-52887 - NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE\nCVE ID : CVE-2026-52887\n \n Published : July 15, 2026, 9:16 p.m. | 1\u00a0hour, 17\u00a0minutes ago\n \n Description : NocoBase is an AI-powered no-code/low-code platform for building business ...", "creation_timestamp": "2026-07-16T00:53:54.505971Z"} 2026-07-16T00:53:54.505971+00:00 https://vulnerability.circl.lu/sighting/10446587-7ea4-43a9-800e-78071230b658/export 2026-08-06T08:04:49.277734+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "10446587-7ea4-43a9-800e-78071230b658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqppu2ragj2n", "content": "\ud83d\udd34 CVE-2026-52887 - Critical (10)\n\nNocoBase is an AI-powered no-code/low-code platform for building business applications and enterp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-52887/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-15T22:00:37.725597Z"} 2026-07-15T22:00:37.725597+00:00 https://vulnerability.circl.lu/sighting/1483f96f-83fc-42a4-9094-737a55f038ff/export 2026-08-06T08:04:49.277831+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "1483f96f-83fc-42a4-9094-737a55f038ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52887", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqpmoxunof2w", "content": "CVE-2026-52887 - nocobase\nNocoBase's in-app messaging feature allows attackers to inject malicious SQL code. This could potentially give an attacker control over a database and allow them to execute unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nocobase #CVE #infosec", "creation_timestamp": "2026-07-15T21:04:09.596663Z"} 2026-07-15T21:04:09.596663+00:00