<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 05 May 2026 10:25:52 +0000</lastBuildDate>
    <item>
      <title>5bb7cf0d-48ad-497a-aeec-32722546b495</title>
      <link>https://vulnerability.circl.lu/sighting/5bb7cf0d-48ad-497a-aeec-32722546b495/export</link>
      <description>{"uuid": "5bb7cf0d-48ad-497a-aeec-32722546b495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "seen", "source": "https://t.me/cvedetector/1155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39907 - Panel SQL Injection Vulnerability: RCE Through Unfiltered File Writes\", \n  \"Content\": \"CVE ID : CVE-2024-39907 \nPublished : July 18, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : 1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T19:18:04.000000Z"}</description>
      <content:encoded>{"uuid": "5bb7cf0d-48ad-497a-aeec-32722546b495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "seen", "source": "https://t.me/cvedetector/1155", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39907 - Panel SQL Injection Vulnerability: RCE Through Unfiltered File Writes\", \n  \"Content\": \"CVE ID : CVE-2024-39907 \nPublished : July 18, 2024, 4:15 p.m. | 39\u00a0minutes ago \nDescription : 1Panel is a web-based linux server management control panel. There are many sql injections in the project, and some of them are not well filtered, leading to arbitrary file writes, and ultimately leading to RCEs. These sql injections have been resolved in version 1.10.12-tls. Users are advised to upgrade. There are no known workarounds for these issues. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T19:18:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5bb7cf0d-48ad-497a-aeec-32722546b495/export</guid>
      <pubDate>Thu, 18 Jul 2024 19:18:04 +0000</pubDate>
    </item>
    <item>
      <title>9afa80fc-c96c-4754-bad7-3ba53e8d4942</title>
      <link>https://vulnerability.circl.lu/sighting/9afa80fc-c96c-4754-bad7-3ba53e8d4942/export</link>
      <description>{"uuid": "9afa80fc-c96c-4754-bad7-3ba53e8d4942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7005", "content": "\u200aCVE-2024-39907 (CVSS 9.8): SQLi Flaw Exposes 1Panel Users to Remote Takeover, PoC Published\n\nhttps://securityonline.info/cve-2024-39907-cvss-9-8-sqli-flaw-exposes-1panel-users-to-remote-takeover-poc-published/", "creation_timestamp": "2024-07-23T10:41:54.000000Z"}</description>
      <content:encoded>{"uuid": "9afa80fc-c96c-4754-bad7-3ba53e8d4942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/HackingInsights/7005", "content": "\u200aCVE-2024-39907 (CVSS 9.8): SQLi Flaw Exposes 1Panel Users to Remote Takeover, PoC Published\n\nhttps://securityonline.info/cve-2024-39907-cvss-9-8-sqli-flaw-exposes-1panel-users-to-remote-takeover-poc-published/", "creation_timestamp": "2024-07-23T10:41:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9afa80fc-c96c-4754-bad7-3ba53e8d4942/export</guid>
      <pubDate>Tue, 23 Jul 2024 10:41:54 +0000</pubDate>
    </item>
    <item>
      <title>0deb8621-edfb-47a0-8ca4-17a79e5722c7</title>
      <link>https://vulnerability.circl.lu/sighting/0deb8621-edfb-47a0-8ca4-17a79e5722c7/export</link>
      <description>{"uuid": "0deb8621-edfb-47a0-8ca4-17a79e5722c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2834", "content": "https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6\n\ncve-2024-39907\n#github #poc", "creation_timestamp": "2024-07-23T17:20:16.000000Z"}</description>
      <content:encoded>{"uuid": "0deb8621-edfb-47a0-8ca4-17a79e5722c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/2834", "content": "https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6\n\ncve-2024-39907\n#github #poc", "creation_timestamp": "2024-07-23T17:20:16.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0deb8621-edfb-47a0-8ca4-17a79e5722c7/export</guid>
      <pubDate>Tue, 23 Jul 2024 17:20:16 +0000</pubDate>
    </item>
    <item>
      <title>a0d59c65-9759-4dfc-8145-904ea583cbf6</title>
      <link>https://vulnerability.circl.lu/sighting/a0d59c65-9759-4dfc-8145-904ea583cbf6/export</link>
      <description>{"uuid": "a0d59c65-9759-4dfc-8145-904ea583cbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/592", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "creation_timestamp": "2024-07-26T05:11:20.000000Z"}</description>
      <content:encoded>{"uuid": "a0d59c65-9759-4dfc-8145-904ea583cbf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/592", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "creation_timestamp": "2024-07-26T05:11:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a0d59c65-9759-4dfc-8145-904ea583cbf6/export</guid>
      <pubDate>Fri, 26 Jul 2024 05:11:20 +0000</pubDate>
    </item>
    <item>
      <title>d8f273f2-1902-425b-971f-02854188ef6f</title>
      <link>https://vulnerability.circl.lu/sighting/d8f273f2-1902-425b-971f-02854188ef6f/export</link>
      <description>{"uuid": "d8f273f2-1902-425b-971f-02854188ef6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10884", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "creation_timestamp": "2024-07-27T12:01:41.000000Z"}</description>
      <content:encoded>{"uuid": "d8f273f2-1902-425b-971f-02854188ef6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39907", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10884", "content": "#exploit\n1. CVE-2024-40348:\nUnauth directory traversal in Bazaar 1.4.3\nhttps://github.com/bigb0x/CVE-2024-40348\n\n2. CVE-2024-39907:\nSQLi in Linux 1Panel\nhttps://github.com/1Panel-dev/1Panel/security/advisories/GHSA-5grx-v727-qmq6", "creation_timestamp": "2024-07-27T12:01:41.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d8f273f2-1902-425b-971f-02854188ef6f/export</guid>
      <pubDate>Sat, 27 Jul 2024 12:01:41 +0000</pubDate>
    </item>
  </channel>
</rss>
