https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 14:33:16 +0000 https://vulnerability.circl.lu/sighting/3efeefc5-8eec-4a7b-9ef6-c260e8ec0a4d/export {"uuid": "3efeefc5-8eec-4a7b-9ef6-c260e8ec0a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3613", "type": "seen", "source": "https://t.me/cibsecurity/66833", "content": "\u203c CVE-2023-3613 \u203c\n\nMattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing\u00c2\u00a0guest accounts to be added or invited to channels by default.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T20:40:13.000000Z"} {"uuid": "3efeefc5-8eec-4a7b-9ef6-c260e8ec0a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3613", "type": "seen", "source": "https://t.me/cibsecurity/66833", "content": "\u203c CVE-2023-3613 \u203c\n\nMattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing\u00c2\u00a0guest accounts to be added or invited to channels by default.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T20:40:13.000000Z"} https://vulnerability.circl.lu/sighting/3efeefc5-8eec-4a7b-9ef6-c260e8ec0a4d/export Mon, 17 Jul 2023 20:40:13 +0000 https://vulnerability.circl.lu/sighting/7334d1a9-7965-474f-96e5-09ec5458ff75/export {"uuid": "7334d1a9-7965-474f-96e5-09ec5458ff75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36133", "type": "seen", "source": "https://t.me/cibsecurity/67736", "content": "\u203c CVE-2023-36133 \u203c\n\nPHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:30.000000Z"} {"uuid": "7334d1a9-7965-474f-96e5-09ec5458ff75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36133", "type": "seen", "source": "https://t.me/cibsecurity/67736", "content": "\u203c CVE-2023-36133 \u203c\n\nPHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:30.000000Z"} https://vulnerability.circl.lu/sighting/7334d1a9-7965-474f-96e5-09ec5458ff75/export Fri, 04 Aug 2023 07:45:30 +0000 https://vulnerability.circl.lu/sighting/3405fc2b-a3e0-4748-a3c2-57eaa143b622/export {"uuid": "3405fc2b-a3e0-4748-a3c2-57eaa143b622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36137", "type": "seen", "source": "https://t.me/cibsecurity/67735", "content": "\u203c CVE-2023-36137 \u203c\n\nThere is a Cross Site Scripting (XSS) vulnerability in the \"theme\" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:30.000000Z"} {"uuid": "3405fc2b-a3e0-4748-a3c2-57eaa143b622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36137", "type": "seen", "source": "https://t.me/cibsecurity/67735", "content": "\u203c CVE-2023-36137 \u203c\n\nThere is a Cross Site Scripting (XSS) vulnerability in the \"theme\" parameter of preview.php in PHPJabbers Class Scheduling System 1.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:30.000000Z"} https://vulnerability.circl.lu/sighting/3405fc2b-a3e0-4748-a3c2-57eaa143b622/export Fri, 04 Aug 2023 07:45:30 +0000 https://vulnerability.circl.lu/sighting/27c1272b-6f32-4a24-8895-88d00b59bed4/export {"uuid": "27c1272b-6f32-4a24-8895-88d00b59bed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36135", "type": "seen", "source": "https://t.me/cibsecurity/67739", "content": "\u203c CVE-2023-36135 \u203c\n\nUser enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:36.000000Z"} {"uuid": "27c1272b-6f32-4a24-8895-88d00b59bed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36135", "type": "seen", "source": "https://t.me/cibsecurity/67739", "content": "\u203c CVE-2023-36135 \u203c\n\nUser enumeration is found in in PHPJabbers Class Scheduling System v1.0. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:36.000000Z"} https://vulnerability.circl.lu/sighting/27c1272b-6f32-4a24-8895-88d00b59bed4/export Fri, 04 Aug 2023 07:45:36 +0000 https://vulnerability.circl.lu/sighting/1ac678dc-66d4-47a6-b762-9453a10b7fd0/export {"uuid": "1ac678dc-66d4-47a6-b762-9453a10b7fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36138", "type": "seen", "source": "https://t.me/cibsecurity/67743", "content": "\u203c CVE-2023-36138 \u203c\n\nPHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:43.000000Z"} {"uuid": "1ac678dc-66d4-47a6-b762-9453a10b7fd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36138", "type": "seen", "source": "https://t.me/cibsecurity/67743", "content": "\u203c CVE-2023-36138 \u203c\n\nPHPJabbers Cleaning Business Software 1.0 is vulnerable to Cross Site Scripting (XSS) via the theme parameter of preview.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:43.000000Z"} https://vulnerability.circl.lu/sighting/1ac678dc-66d4-47a6-b762-9453a10b7fd0/export Fri, 04 Aug 2023 07:45:43 +0000 https://vulnerability.circl.lu/sighting/1a2db702-be6a-4928-bce5-b229bb03f56c/export {"uuid": "1a2db702-be6a-4928-bce5-b229bb03f56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36132", "type": "seen", "source": "https://t.me/cibsecurity/67744", "content": "\u203c CVE-2023-36132 \u203c\n\nPHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:44.000000Z"} {"uuid": "1a2db702-be6a-4928-bce5-b229bb03f56c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36132", "type": "seen", "source": "https://t.me/cibsecurity/67744", "content": "\u203c CVE-2023-36132 \u203c\n\nPHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:44.000000Z"} https://vulnerability.circl.lu/sighting/1a2db702-be6a-4928-bce5-b229bb03f56c/export Fri, 04 Aug 2023 07:45:44 +0000 https://vulnerability.circl.lu/sighting/0175ad55-cc18-4462-86b0-81d1b4302c47/export {"uuid": "0175ad55-cc18-4462-86b0-81d1b4302c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36131", "type": "seen", "source": "https://t.me/cibsecurity/67747", "content": "\u203c CVE-2023-36131 \u203c\n\nPHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:47.000000Z"} {"uuid": "0175ad55-cc18-4462-86b0-81d1b4302c47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36131", "type": "seen", "source": "https://t.me/cibsecurity/67747", "content": "\u203c CVE-2023-36131 \u203c\n\nPHPJabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control due to improper input validation of password parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:47.000000Z"} https://vulnerability.circl.lu/sighting/0175ad55-cc18-4462-86b0-81d1b4302c47/export Fri, 04 Aug 2023 07:45:47 +0000 https://vulnerability.circl.lu/sighting/eee9b080-3eb5-4fcf-aa1d-0f9dd06bfdba/export {"uuid": "eee9b080-3eb5-4fcf-aa1d-0f9dd06bfdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36134", "type": "seen", "source": "https://t.me/cibsecurity/67752", "content": "\u203c CVE-2023-36134 \u203c\n\nIn PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:55.000000Z"} {"uuid": "eee9b080-3eb5-4fcf-aa1d-0f9dd06bfdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36134", "type": "seen", "source": "https://t.me/cibsecurity/67752", "content": "\u203c CVE-2023-36134 \u203c\n\nIn PHP Jabbers Class Scheduling System 1.0, lack of verification when changing an email address and/or password (on the Profile Page) allows remote attackers to take over accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-04T07:45:55.000000Z"} https://vulnerability.circl.lu/sighting/eee9b080-3eb5-4fcf-aa1d-0f9dd06bfdba/export Fri, 04 Aug 2023 07:45:55 +0000 https://vulnerability.circl.lu/sighting/aa674b2a-389e-445a-adfb-59ee9d17e6b6/export {"uuid": "aa674b2a-389e-445a-adfb-59ee9d17e6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36136", "type": "seen", "source": "https://t.me/cibsecurity/67999", "content": "\u203c CVE-2023-36136 \u203c\n\nPHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-08T18:14:15.000000Z"} {"uuid": "aa674b2a-389e-445a-adfb-59ee9d17e6b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-36136", "type": "seen", "source": "https://t.me/cibsecurity/67999", "content": "\u203c CVE-2023-36136 \u203c\n\nPHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user names and passwords in clear text.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-08T18:14:15.000000Z"} https://vulnerability.circl.lu/sighting/aa674b2a-389e-445a-adfb-59ee9d17e6b6/export Tue, 08 Aug 2023 18:14:15 +0000