https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 09:01:34 +0000 https://vulnerability.circl.lu/sighting/75e9157c-98c9-4a12-b01c-9d8ee150c3cd/export {"uuid": "75e9157c-98c9-4a12-b01c-9d8ee150c3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:08.233530Z"} {"uuid": "75e9157c-98c9-4a12-b01c-9d8ee150c3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:08.233530Z"} https://vulnerability.circl.lu/sighting/75e9157c-98c9-4a12-b01c-9d8ee150c3cd/export Tue, 15 Sep 2026 10:00:08 +0000 https://vulnerability.circl.lu/sighting/2ab396fc-ea55-40e2-895a-5a56c58b6eb6/export {"uuid": "2ab396fc-ea55-40e2-895a-5a56c58b6eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.531071Z"} {"uuid": "2ab396fc-ea55-40e2-895a-5a56c58b6eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.531071Z"} https://vulnerability.circl.lu/sighting/2ab396fc-ea55-40e2-895a-5a56c58b6eb6/export Tue, 15 Sep 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/6660802b-ff2b-46fe-bac0-cee7796eb86d/export {"uuid": "6660802b-ff2b-46fe-bac0-cee7796eb86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:09.442738Z"} {"uuid": "6660802b-ff2b-46fe-bac0-cee7796eb86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:09.442738Z"} https://vulnerability.circl.lu/sighting/6660802b-ff2b-46fe-bac0-cee7796eb86d/export Mon, 14 Sep 2026 03:00:09 +0000 https://vulnerability.circl.lu/sighting/77f66c51-7ecd-49c7-baaf-d1e0ebee1a88/export {"uuid": "77f66c51-7ecd-49c7-baaf-d1e0ebee1a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:07.234330Z"} {"uuid": "77f66c51-7ecd-49c7-baaf-d1e0ebee1a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:07.234330Z"} https://vulnerability.circl.lu/sighting/77f66c51-7ecd-49c7-baaf-d1e0ebee1a88/export Sun, 13 Sep 2026 10:00:07 +0000 https://vulnerability.circl.lu/sighting/01222b15-9307-4ccb-91b4-9722ca571d43/export {"uuid": "01222b15-9307-4ccb-91b4-9722ca571d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:05.977005Z"} {"uuid": "01222b15-9307-4ccb-91b4-9722ca571d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:05.977005Z"} https://vulnerability.circl.lu/sighting/01222b15-9307-4ccb-91b4-9722ca571d43/export Sun, 13 Sep 2026 10:00:05 +0000 https://vulnerability.circl.lu/sighting/4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41/export {"uuid": "4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.956809Z"} {"uuid": "4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.956809Z"} https://vulnerability.circl.lu/sighting/4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41/export Sat, 12 Sep 2026 10:00:16 +0000 https://vulnerability.circl.lu/sighting/7b7a162a-4161-4b7f-a4cf-735036645acc/export {"uuid": "7b7a162a-4161-4b7f-a4cf-735036645acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:14.659480Z"} {"uuid": "7b7a162a-4161-4b7f-a4cf-735036645acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:14.659480Z"} https://vulnerability.circl.lu/sighting/7b7a162a-4161-4b7f-a4cf-735036645acc/export Sat, 12 Sep 2026 10:00:14 +0000 https://vulnerability.circl.lu/sighting/f99ab61c-3a04-4b6c-b7ca-55daa9891083/export {"uuid": "f99ab61c-3a04-4b6c-b7ca-55daa9891083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"maxibelino\", \"odeez24\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution via file upload.\\n If GestioIP is configured to use no authentication for admin account,\\n no password is required to exploit the vulnerability. Otherwise, an authenticated\\n user with admin right on the web site is required to exploit.\", \"disclosure_date\": \"2025-01-14\", \"fullname\": \"exploit/multi/http/gestioip_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:32:04 +0000\", \"name\": \"GestioIP 3.5.7 Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_rce\", \"references\": [\"CVE-2024-48760\", \"EDB-52204\", \"URL-https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux/unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.710564Z"} {"uuid": "f99ab61c-3a04-4b6c-b7ca-55daa9891083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"maxibelino\", \"odeez24\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution via file upload.\\n If GestioIP is configured to use no authentication for admin account,\\n no password is required to exploit the vulnerability. Otherwise, an authenticated\\n user with admin right on the web site is required to exploit.\", \"disclosure_date\": \"2025-01-14\", \"fullname\": \"exploit/multi/http/gestioip_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:32:04 +0000\", \"name\": \"GestioIP 3.5.7 Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_rce\", \"references\": [\"CVE-2024-48760\", \"EDB-52204\", \"URL-https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux/unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.710564Z"} https://vulnerability.circl.lu/sighting/f99ab61c-3a04-4b6c-b7ca-55daa9891083/export Tue, 08 Sep 2026 06:49:47 +0000 https://vulnerability.circl.lu/sighting/6501b942-4730-4bc9-a1d2-961453a5fed2/export {"uuid": "6501b942-4730-4bc9-a1d2-961453a5fed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48990", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"h00die\", \"makuga01\", \"qualys\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Local attackers can execute arbitrary code as root by\\n tricking needrestart into running the Python interpreter with an\\n attacker-controlled PYTHONPATH environment variable.\\n\\n Verified against Ubuntu 22.04 with needrestart 3.5-5ubuntu2.1\\n Attempted exploitation against Debian 12, expliotation failed\", \"disclosure_date\": \"2024-11-19\", \"fullname\": \"exploit/linux/local/ubuntu_needrestart_lpe\", \"is_install_path\": true, \"mod_time\": \"2025-01-09 16:23:09 +0000\", \"name\": \"Ubuntu needrestart Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/ubuntu_needrestart_lpe\", \"references\": [\"URL-https://github.com/makuga01/CVE-2024-48990-PoC\", \"URL-https://www.qualys.com/2024/11/19/needrestart/needrestart.txt\", \"CVE-2024-48990\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:13.260348Z"} {"uuid": "6501b942-4730-4bc9-a1d2-961453a5fed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48990", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"h00die\", \"makuga01\", \"qualys\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Local attackers can execute arbitrary code as root by\\n tricking needrestart into running the Python interpreter with an\\n attacker-controlled PYTHONPATH environment variable.\\n\\n Verified against Ubuntu 22.04 with needrestart 3.5-5ubuntu2.1\\n Attempted exploitation against Debian 12, expliotation failed\", \"disclosure_date\": \"2024-11-19\", \"fullname\": \"exploit/linux/local/ubuntu_needrestart_lpe\", \"is_install_path\": true, \"mod_time\": \"2025-01-09 16:23:09 +0000\", \"name\": \"Ubuntu needrestart Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/ubuntu_needrestart_lpe\", \"references\": [\"URL-https://github.com/makuga01/CVE-2024-48990-PoC\", \"URL-https://www.qualys.com/2024/11/19/needrestart/needrestart.txt\", \"CVE-2024-48990\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:13.260348Z"} https://vulnerability.circl.lu/sighting/6501b942-4730-4bc9-a1d2-961453a5fed2/export Tue, 08 Sep 2026 06:49:13 +0000 https://vulnerability.circl.lu/sighting/87f1b8dd-282b-426d-bc10-464147688eb2/export {"uuid": "87f1b8dd-282b-426d-bc10-464147688eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48594", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/prison_management_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86\", \"author\": [\"Alexandru Ionut Raducu\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unrestricted file upload vulnerability in Prison Management System 1.0.\\n An authenticated user can upload a PHP file with arbitrary content by abusing the avatar upload\\n functionality in the add-admin.php endpoint. The application fails to properly validate the\\n uploaded file type, allowing an attacker to upload a PHP webshell.\", \"disclosure_date\": \"2024-10-28\", \"fullname\": \"exploit/linux/http/prison_management_rce\", \"is_install_path\": true, \"mod_time\": \"2026-01-07 14:45:03 +0000\", \"name\": \"Prison Management System 1.0 Authenticated RCE via Unrestricted File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/prison_management_rce.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/prison_management_rce\", \"references\": [\"CVE-2024-48594\", \"URL-https://www.sourcecodester.com/sql/17287/prison-management-system.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:52.426411Z"} {"uuid": "87f1b8dd-282b-426d-bc10-464147688eb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48594", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/prison_management_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd, x64, x86\", \"author\": [\"Alexandru Ionut Raducu\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unrestricted file upload vulnerability in Prison Management System 1.0.\\n An authenticated user can upload a PHP file with arbitrary content by abusing the avatar upload\\n functionality in the add-admin.php endpoint. The application fails to properly validate the\\n uploaded file type, allowing an attacker to upload a PHP webshell.\", \"disclosure_date\": \"2024-10-28\", \"fullname\": \"exploit/linux/http/prison_management_rce\", \"is_install_path\": true, \"mod_time\": \"2026-01-07 14:45:03 +0000\", \"name\": \"Prison Management System 1.0 Authenticated RCE via Unrestricted File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/prison_management_rce.rb\", \"platform\": \"Linux,PHP,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/prison_management_rce\", \"references\": [\"CVE-2024-48594\", \"URL-https://www.sourcecodester.com/sql/17287/prison-management-system.html\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:52.426411Z"} https://vulnerability.circl.lu/sighting/87f1b8dd-282b-426d-bc10-464147688eb2/export Tue, 08 Sep 2026 06:48:52 +0000