https://vulnerability.circl.lu/sightings/feed 2026-07-22T07:40:12.538609+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f98e9158-e861-445e-94bd-16cbc04eafdc/export 2026-07-22T07:40:12.565439+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f98e9158-e861-445e-94bd-16cbc04eafdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrddbcz2g", "content": "Daily IT Security Digest \u2014 2026-07-21\n[Source](https://radar.offseq.com/threat/cve-2026-64625) | [Mastodon](https://infosec.exchange/@offseq/116956084555779110)\n\n**2. Windows Zero-Day Exploit (Nightmare Eclipse/GreatXML) Bypasses BitLocker**\nSecurity researcher Nightmare Eclipse has exposed exploit", "creation_timestamp": "2026-07-21T05:02:39.889675Z"} 2026-07-21T05:02:39.889675+00:00 https://vulnerability.circl.lu/sighting/3f24729b-04cc-4053-9ee0-24b2170b7242/export 2026-07-22T07:40:12.568796+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3f24729b-04cc-4053-9ee0-24b2170b7242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrcsgs52u", "content": "Daily IT Security Digest \u2014 2026-07-21\n# Daily IT Security Digest \u2014 2026-07-21\n\n**1. CVE-2026-64625: Critical OS Command Injection in WWBN AVideo**\nA critical remote code execution vulnerability exists in WWBN AVideo versions prior to 29.0, specifically within the Live plugin's `on_publish.php`", "creation_timestamp": "2026-07-21T05:02:39.256177Z"} 2026-07-21T05:02:39.256177+00:00 https://vulnerability.circl.lu/sighting/781381f0-832e-4a43-895d-0671912149fc/export 2026-07-22T07:40:12.569017+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "781381f0-832e-4a43-895d-0671912149fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr4xxpc4fb2r", "content": "WWBN AVideo <29.0 hit by CRITICAL OS command injection (CVE-2026-64625). Remote code execution possible via Live plugin on_publish.php. Restrict endpoint & check for updates. https://radar.offseq.com/threat/cve-2026-64625-improper-neutralization-of-special-elements-used-in-an-os-command-os-comman...", "creation_timestamp": "2026-07-21T04:30:26.509633Z"} 2026-07-21T04:30:26.509633+00:00 https://vulnerability.circl.lu/sighting/a5e03753-0090-4ff1-a202-1d80f2cc9794/export 2026-07-22T07:40:12.569141+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a5e03753-0090-4ff1-a202-1d80f2cc9794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116956084555779110", "content": "CVE-2026-64625 (CRITICAL): OS command injection in WWBN AVideo <29.0 via Live plugin's on_publish.php. Bypasses escapeshellarg(), enabling remote code execution. Restrict access & upgrade if possible. https://radar.offseq.com/threat/cve-2026-64625-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-2085999102bd753d #OffSeq #CVE202664625 #WWBNAVideo #infosec", "creation_timestamp": "2026-07-21T04:30:24.608520Z"} 2026-07-21T04:30:24.608520+00:00 https://vulnerability.circl.lu/sighting/5b564ec9-bf42-4e00-9011-6be246ec2285/export 2026-07-22T07:40:12.569260+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5b564ec9-bf42-4e00-9011-6be246ec2285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4iuofsq62x", "content": "CVE-2026-64625 - AVideo before 29.0 OS Command Injection via execAsync\nCVE ID : CVE-2026-64625\n \n Published : July 20, 2026, 10:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped...", "creation_timestamp": "2026-07-21T00:00:18.412884Z"} 2026-07-21T00:00:18.412884+00:00 https://vulnerability.circl.lu/sighting/c48e923f-895e-425e-98ee-3312d44d6ae9/export 2026-07-22T07:40:12.569386+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c48e923f-895e-425e-98ee-3312d44d6ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fk6afcg2l", "content": "\ud83d\udd34 CVE-2026-64625 - Critical (9.8)\n\nAVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escap...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-64625/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T23:00:44.944669Z"} 2026-07-20T23:00:44.944669+00:00 https://vulnerability.circl.lu/sighting/920f4974-56c0-488d-9513-2e0842af9d73/export 2026-07-22T07:40:12.569489+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "920f4974-56c0-488d-9513-2e0842af9d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4epx577v2v", "content": "CVE-2026-64625 - avideo\nAVideo versions before 29.0 have a security flaw that allows hackers to execute malicious system commands. This could lead to unauthorized access or data theft. Update to version 29.0 or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-07-20T22:46:04.737277Z"} 2026-07-20T22:46:04.737277+00:00