https://vulnerability.circl.lu/sightings/feed 2026-09-21T19:36:31.669466+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d719286d-208b-452a-9f3c-b95b557ffce4/export 2026-09-21T19:36:31.695717+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d719286d-208b-452a-9f3c-b95b557ffce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102953", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94095\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-21 10:51:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNetcore NBR200V2 traceroute command injection PoC (CVE-2026-94095); ubus JSON-RPC -> system() root RCE; for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T15:00:03.859269Z"} 2026-09-21T15:00:03.859269+00:00 https://vulnerability.circl.lu/sighting/e26177db-ff8d-4bec-81ef-5ba70d4719ee/export 2026-09-21T19:36:31.700063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e26177db-ff8d-4bec-81ef-5ba70d4719ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "seen", "source": "https://gist.github.com/ichintu/4d27b2fa4a71489307152f1f3aa025ef", "content": "This digest covers two cybersecurity updates:\n\n\u2022 **PcapSplitter Silent Packet Loss:** A bug in the PcapPlusPlus `PcapSplitter` tool caused silent data corruption and packet loss due to mishandled TCP session reuse. When filenames collided, files were opened in write mode instead of append mode, truncating output. The issue was reproduced, patched, and successfully merged.\n\n\u2022 **Netcore NBR200V2 Command Injection (CVE-2026-94095):** A critical (9.9) remote command injection vulnerability exists in the router's traceroute diagnostic feature. Exploitable via the `url` parameter, the flaw is publicly known and actively exploited, with no vendor patch or acknowledgment issued.", "creation_timestamp": "2026-09-21T04:18:48.832479Z"} 2026-09-21T04:18:48.832479+00:00