https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 16 May 2026 14:35:25 +0000 https://vulnerability.circl.lu/sighting/0db01868-88f2-475a-a024-04ff577160f1/export {"uuid": "0db01868-88f2-475a-a024-04ff577160f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17103", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mlxtbeijgko2", "content": "New from Nightmare-Eclipse, we have MiniPlasma\n\nWorks reliably to get a SYSTEM cmd.exe prompt. Is reportedly a failure to properly fix CVE-2020-17103.", "creation_timestamp": "2026-05-16T12:17:12.967976Z"} {"uuid": "0db01868-88f2-475a-a024-04ff577160f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17103", "type": "seen", "source": "https://bsky.app/profile/wdormann.infosec.exchange.ap.brid.gy/post/3mlxtbeijgko2", "content": "New from Nightmare-Eclipse, we have MiniPlasma\n\nWorks reliably to get a SYSTEM cmd.exe prompt. Is reportedly a failure to properly fix CVE-2020-17103.", "creation_timestamp": "2026-05-16T12:17:12.967976Z"} https://vulnerability.circl.lu/sighting/0db01868-88f2-475a-a024-04ff577160f1/export Sat, 16 May 2026 12:17:12 +0000 https://vulnerability.circl.lu/sighting/75ed669c-c859-4b1f-b6d6-dd97166507b6/export {"uuid": "75ed669c-c859-4b1f-b6d6-dd97166507b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5715", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlxu4adjiv2i", "content": "CVE-2026-5715 voyage-plus (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-16T12:32:06.192352Z"} {"uuid": "75ed669c-c859-4b1f-b6d6-dd97166507b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5715", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlxu4adjiv2i", "content": "CVE-2026-5715 voyage-plus (CVSS Score 6.4) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-16T12:32:06.192352Z"} https://vulnerability.circl.lu/sighting/75ed669c-c859-4b1f-b6d6-dd97166507b6/export Sat, 16 May 2026 12:32:06 +0000 https://vulnerability.circl.lu/sighting/9ed0dc8c-115b-4778-aec5-78a503c0918e/export {"uuid": "9ed0dc8c-115b-4778-aec5-78a503c0918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mlxuty2chi2o", "content": "PoC code is now public for CVE-2026-42945, a critical NGINX heap buffer overflow in ngx_http_rewrite_module that can cause DoS and, with ASLR off, possible RCE. #NGINX #F5 #CVE202642945", "creation_timestamp": "2026-05-16T12:45:23.394397Z"} {"uuid": "9ed0dc8c-115b-4778-aec5-78a503c0918e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42945", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mlxuty2chi2o", "content": "PoC code is now public for CVE-2026-42945, a critical NGINX heap buffer overflow in ngx_http_rewrite_module that can cause DoS and, with ASLR off, possible RCE. #NGINX #F5 #CVE202642945", "creation_timestamp": "2026-05-16T12:45:23.394397Z"} https://vulnerability.circl.lu/sighting/9ed0dc8c-115b-4778-aec5-78a503c0918e/export Sat, 16 May 2026 12:45:23 +0000 https://vulnerability.circl.lu/sighting/356bde62-c939-46ed-a500-d35b2fa605eb/export {"uuid": "356bde62-c939-46ed-a500-d35b2fa605eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45321", "type": "seen", "source": "https://t.me/GithubRedTeam/84450", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a shai-scan\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a digi4care\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-16 12:58:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nZero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like Mini Shai-Hulud (CVE-2026-45321).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-16T13:00:04.000000Z"} {"uuid": "356bde62-c939-46ed-a500-d35b2fa605eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45321", "type": "seen", "source": "https://t.me/GithubRedTeam/84450", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a shai-scan\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a digi4care\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a TypeScript\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-16 12:58:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nZero-dependency CLI scanner for npm/PyPI supply chain compromises. Detects compromised packages in lockfiles and system-level IOCs from attacks like Mini Shai-Hulud (CVE-2026-45321).\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-16T13:00:04.000000Z"} https://vulnerability.circl.lu/sighting/356bde62-c939-46ed-a500-d35b2fa605eb/export Sat, 16 May 2026 13:00:04 +0000 https://vulnerability.circl.lu/sighting/65193618-3963-4555-88c3-31abce512e1d/export {"uuid": "65193618-3963-4555-88c3-31abce512e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxvqfdpmi2w", "content": "\ud83d\udfe0 CVE-2026-8686 - High (7.5)\n\nMissing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQT...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8686/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T13:03:16.411652Z"} {"uuid": "65193618-3963-4555-88c3-31abce512e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8686", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxvqfdpmi2w", "content": "\ud83d\udfe0 CVE-2026-8686 - High (7.5)\n\nMissing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQT...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-8686/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T13:03:16.411652Z"} https://vulnerability.circl.lu/sighting/65193618-3963-4555-88c3-31abce512e1d/export Sat, 16 May 2026 13:03:16 +0000 https://vulnerability.circl.lu/sighting/361711bb-e0ec-4ec2-a250-dbce7a4a50d8/export {"uuid": "361711bb-e0ec-4ec2-a250-dbce7a4a50d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46367", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxvqmi4nx2l", "content": "\ud83d\udfe0 CVE-2026-46367 - High (7.6)\n\nphpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46367/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T13:05:11.448024Z"} {"uuid": "361711bb-e0ec-4ec2-a250-dbce7a4a50d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46367", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxvqmi4nx2l", "content": "\ud83d\udfe0 CVE-2026-46367 - High (7.6)\n\nphpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() t...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46367/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T13:05:11.448024Z"} https://vulnerability.circl.lu/sighting/361711bb-e0ec-4ec2-a250-dbce7a4a50d8/export Sat, 16 May 2026 13:05:11 +0000 https://vulnerability.circl.lu/sighting/ce747fa4-dc42-4e09-8563-a9895712f982/export {"uuid": "ce747fa4-dc42-4e09-8563-a9895712f982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42366", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxwdselvi2h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-42366 GeoVision LPC2011/LPC2211\u00a01.10\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nGeoVision LPC2011/LPC2211 1.10\u306eWeb Interface / ssi.cgi\u6a5f\u80fd\u306b\u8907\u6570\u306e\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T13:12:07.550279Z"} {"uuid": "ce747fa4-dc42-4e09-8563-a9895712f982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-42366", "type": "seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3mlxwdselvi2h", "content": "\u3010\u8106\u5f31\u6027\u60c5\u5831\u3011 CVE-2026-42366 GeoVision LPC2011/LPC2211\u00a01.10\u306e\u8106\u5f31\u6027\u306b\u3064\u3044\u3066\n\nGeoVision LPC2011/LPC2211 1.10\u306eWeb Interface / ssi.cgi\u6a5f\u80fd\u306b\u8907\u6570\u306e\u53cd\u5c04\u578b\u30af\u30ed\u30b9\u30b5\u30a4\u30c8\u30b9\u30af\u30ea\u30d7\u30c6\u30a3\u30f3\u30b0\uff08XSS\uff09\u8106\u5f31\u6027\u304c\u5b58\u5728\u3057\u307e\u3059\u3002", "creation_timestamp": "2026-05-16T13:12:07.550279Z"} https://vulnerability.circl.lu/sighting/ce747fa4-dc42-4e09-8563-a9895712f982/export Sat, 16 May 2026 13:12:07 +0000 https://vulnerability.circl.lu/sighting/fda40a8a-15b5-4ba7-86fd-f3f507c3c450/export {"uuid": "fda40a8a-15b5-4ba7-86fd-f3f507c3c450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7635", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlxxhjeuuq2s", "content": "CVE-2026-7635 coreactivity (CVSS Score 8.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-16T13:32:06.264995Z"} {"uuid": "fda40a8a-15b5-4ba7-86fd-f3f507c3c450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-7635", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mlxxhjeuuq2s", "content": "CVE-2026-7635 coreactivity (CVSS Score 8.1) #WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-05-16T13:32:06.264995Z"} https://vulnerability.circl.lu/sighting/fda40a8a-15b5-4ba7-86fd-f3f507c3c450/export Sat, 16 May 2026 13:32:06 +0000 https://vulnerability.circl.lu/sighting/d5846f50-293d-40b1-850d-6e1d5f349f70/export {"uuid": "d5846f50-293d-40b1-850d-6e1d5f349f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxz3olh6h2z", "content": "\ud83d\udfe0 CVE-2026-46408 - High (7.6)\n\nVvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T14:02:22.153896Z"} {"uuid": "d5846f50-293d-40b1-850d-6e1d5f349f70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-46408", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mlxz3olh6h2z", "content": "\ud83d\udfe0 CVE-2026-46408 - High (7.6)\n\nVvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce s...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-46408/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-16T14:02:22.153896Z"} https://vulnerability.circl.lu/sighting/d5846f50-293d-40b1-850d-6e1d5f349f70/export Sat, 16 May 2026 14:02:22 +0000 https://vulnerability.circl.lu/sighting/a4ffa3f6-b53c-4ce3-b8a0-54f68a252e25/export {"uuid": "a4ffa3f6-b53c-4ce3-b8a0-54f68a252e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6973", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mly2ees4ax24", "content": "Ivanti EPMM Zero-Day Under Active Exploitation: CISA Adds CVE-2026-6973 to KEV Catalog", "creation_timestamp": "2026-05-16T14:25:42.452860Z"} {"uuid": "a4ffa3f6-b53c-4ce3-b8a0-54f68a252e25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-6973", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mly2ees4ax24", "content": "Ivanti EPMM Zero-Day Under Active Exploitation: CISA Adds CVE-2026-6973 to KEV Catalog", "creation_timestamp": "2026-05-16T14:25:42.452860Z"} https://vulnerability.circl.lu/sighting/a4ffa3f6-b53c-4ce3-b8a0-54f68a252e25/export Sat, 16 May 2026 14:25:42 +0000