https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 09:01:44 +0000 https://vulnerability.circl.lu/sighting/f69fa460-4782-4629-87df-438467bcc32d/export {"uuid": "f69fa460-4782-4629-87df-438467bcc32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7441", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_story_chef_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"xpl0dec\", \"Nayera\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated arbitrary file upload\\n vulnerability in the StoryChief WordPress plugin <= 1.0.42.\\n\\n The plugin exposes a webhook endpoint at\\n /wp-json/storychief/webhook which accepts a forged HMAC.\\n Because the plugin uses an empty secret for HMAC validation,\\n attackers can compute a valid MAC and force WordPress to\\n download and store attacker-controlled PHP content inside\\n the uploads directory, resulting in remote code execution.\", \"disclosure_date\": \"2025-08-04\", \"fullname\": \"exploit/multi/http/wp_plugin_story_chef_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-02-18 02:20:36 +0000\", \"name\": \"WordPress StoryChief Plugin Unauthenticated RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_plugin_story_chef_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_plugin_story_chef_file_upload\", \"references\": [\"CVE-2025-7441\", \"EDB-52422\", \"URL-https://github.com/Story-Chief/wordpress\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:22.533955Z"} {"uuid": "f69fa460-4782-4629-87df-438467bcc32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7441", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_story_chef_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"xpl0dec\", \"Nayera\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated arbitrary file upload\\n vulnerability in the StoryChief WordPress plugin <= 1.0.42.\\n\\n The plugin exposes a webhook endpoint at\\n /wp-json/storychief/webhook which accepts a forged HMAC.\\n Because the plugin uses an empty secret for HMAC validation,\\n attackers can compute a valid MAC and force WordPress to\\n download and store attacker-controlled PHP content inside\\n the uploads directory, resulting in remote code execution.\", \"disclosure_date\": \"2025-08-04\", \"fullname\": \"exploit/multi/http/wp_plugin_story_chef_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-02-18 02:20:36 +0000\", \"name\": \"WordPress StoryChief Plugin Unauthenticated RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_plugin_story_chef_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_plugin_story_chef_file_upload\", \"references\": [\"CVE-2025-7441\", \"EDB-52422\", \"URL-https://github.com/Story-Chief/wordpress\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic Target\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:22.533955Z"} https://vulnerability.circl.lu/sighting/f69fa460-4782-4629-87df-438467bcc32d/export Tue, 08 Sep 2026 06:50:22 +0000 https://vulnerability.circl.lu/sighting/0be24f25-2077-472d-8a45-c2809f0e9443/export {"uuid": "0be24f25-2077-472d-8a45-c2809f0e9443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7441", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:52.089857Z"} {"uuid": "0be24f25-2077-472d-8a45-c2809f0e9443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7441", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:52.089857Z"} https://vulnerability.circl.lu/sighting/0be24f25-2077-472d-8a45-c2809f0e9443/export Tue, 08 Sep 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/123355fa-c79e-4f66-8dfc-f43b383fc9e0/export {"uuid": "123355fa-c79e-4f66-8dfc-f43b383fc9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7441", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.011605Z"} {"uuid": "123355fa-c79e-4f66-8dfc-f43b383fc9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7441", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.011605Z"} https://vulnerability.circl.lu/sighting/123355fa-c79e-4f66-8dfc-f43b383fc9e0/export Mon, 07 Sep 2026 08:00:05 +0000 https://vulnerability.circl.lu/sighting/7d8292c9-77d3-49b5-9321-ec836173ca95/export {"uuid": "7d8292c9-77d3-49b5-9321-ec836173ca95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7431", "type": "published-proof-of-concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "content": "", "creation_timestamp": "2026-09-03T00:00:42.301675Z"} {"uuid": "7d8292c9-77d3-49b5-9321-ec836173ca95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7431", "type": "published-proof-of-concept", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "content": "", "creation_timestamp": "2026-09-03T00:00:42.301675Z"} https://vulnerability.circl.lu/sighting/7d8292c9-77d3-49b5-9321-ec836173ca95/export Thu, 03 Sep 2026 00:00:42 +0000 https://vulnerability.circl.lu/sighting/356db888-112a-4d2f-bd89-3ca08b2f9cd6/export {"uuid": "356db888-112a-4d2f-bd89-3ca08b2f9cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7431", "type": "seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "content": "", "creation_timestamp": "2026-09-02T16:00:04.343072Z"} {"uuid": "356db888-112a-4d2f-bd89-3ca08b2f9cd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7431", "type": "seen", "source": "Telegram/GvfR5TiIz5AGTLxNK0NHF1rEL-rqaKshudCOKUMqTVI5bvk", "content": "", "creation_timestamp": "2026-09-02T16:00:04.343072Z"} https://vulnerability.circl.lu/sighting/356db888-112a-4d2f-bd89-3ca08b2f9cd6/export Wed, 02 Sep 2026 16:00:04 +0000 https://vulnerability.circl.lu/sighting/4f13c046-cc9c-4562-903a-cdad9e7b3591/export {"uuid": "4f13c046-cc9c-4562-903a-cdad9e7b3591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "published-proof-of-concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-30T00:00:08.252001Z"} {"uuid": "4f13c046-cc9c-4562-903a-cdad9e7b3591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "published-proof-of-concept", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-30T00:00:08.252001Z"} https://vulnerability.circl.lu/sighting/4f13c046-cc9c-4562-903a-cdad9e7b3591/export Sun, 30 Aug 2026 00:00:08 +0000 https://vulnerability.circl.lu/sighting/12c6e1b8-e0e3-4bd4-85fa-cb37097242bc/export {"uuid": "12c6e1b8-e0e3-4bd4-85fa-cb37097242bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-29T23:00:05.457973Z"} {"uuid": "12c6e1b8-e0e3-4bd4-85fa-cb37097242bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "seen", "source": "Telegram/pQB4kDvOmUO0-FOWPosgcezK6szsfsV4tQ7NQqEDCAFgSWg", "content": "", "creation_timestamp": "2026-08-29T23:00:05.457973Z"} https://vulnerability.circl.lu/sighting/12c6e1b8-e0e3-4bd4-85fa-cb37097242bc/export Sat, 29 Aug 2026 23:00:05 +0000 https://vulnerability.circl.lu/sighting/d6f393b6-3041-4e7b-b56b-d37fa7d0217d/export {"uuid": "d6f393b6-3041-4e7b-b56b-d37fa7d0217d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "published-proof-of-concept", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-28T00:00:36.311667Z"} {"uuid": "d6f393b6-3041-4e7b-b56b-d37fa7d0217d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "published-proof-of-concept", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-28T00:00:36.311667Z"} https://vulnerability.circl.lu/sighting/d6f393b6-3041-4e7b-b56b-d37fa7d0217d/export Fri, 28 Aug 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/7dcaf17e-7e67-4799-8de7-5f043d3c88ad/export {"uuid": "7dcaf17e-7e67-4799-8de7-5f043d3c88ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "seen", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-27T16:00:04.044614Z"} {"uuid": "7dcaf17e-7e67-4799-8de7-5f043d3c88ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7461", "type": "seen", "source": "Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs", "content": "", "creation_timestamp": "2026-08-27T16:00:04.044614Z"} https://vulnerability.circl.lu/sighting/7dcaf17e-7e67-4799-8de7-5f043d3c88ad/export Thu, 27 Aug 2026 16:00:04 +0000 https://vulnerability.circl.lu/sighting/5eec5890-7adb-420f-94c5-82dbeb971a2f/export {"uuid": "5eec5890-7adb-420f-94c5-82dbeb971a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7424", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mqwtvt73r723", "content": "3/3\n\n[CVE-2025-11731] Fix: End function node ancestor search at document.\n For more information, see:\n https://www.cve.org/CVERecord?id=CVE-2025-9714\n https://www.cve.org/CVERecord?id=CVE-2025-7424\n https://www.cve.org/CVERecord?id=CVE-2025-11731\n (* Security fix *)", "creation_timestamp": "2026-07-18T18:01:49.525089Z"} {"uuid": "5eec5890-7adb-420f-94c5-82dbeb971a2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-7424", "type": "seen", "source": "https://bsky.app/profile/slackers.it/post/3mqwtvt73r723", "content": "3/3\n\n[CVE-2025-11731] Fix: End function node ancestor search at document.\n For more information, see:\n https://www.cve.org/CVERecord?id=CVE-2025-9714\n https://www.cve.org/CVERecord?id=CVE-2025-7424\n https://www.cve.org/CVERecord?id=CVE-2025-11731\n (* Security fix *)", "creation_timestamp": "2026-07-18T18:01:49.525089Z"} https://vulnerability.circl.lu/sighting/5eec5890-7adb-420f-94c5-82dbeb971a2f/export Sat, 18 Jul 2026 18:01:49 +0000