https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 31 May 2026 05:45:44 +0000 https://vulnerability.circl.lu/sighting/298d7357-276d-42cd-8e2a-12ead9f299f4/export {"uuid": "298d7357-276d-42cd-8e2a-12ead9f299f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23948\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5.\n\ud83d\udccf Published: 2025-01-22T14:29:24.502Z\n\ud83d\udccf Modified: 2025-01-22T15:24:58.850Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/background-animation-blocks/vulnerability/wordpress-background-animation-blocks-plugin-2-1-5-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"} {"uuid": "298d7357-276d-42cd-8e2a-12ead9f299f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23948\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5.\n\ud83d\udccf Published: 2025-01-22T14:29:24.502Z\n\ud83d\udccf Modified: 2025-01-22T15:24:58.850Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/background-animation-blocks/vulnerability/wordpress-background-animation-blocks-plugin-2-1-5-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"} https://vulnerability.circl.lu/sighting/298d7357-276d-42cd-8e2a-12ead9f299f4/export Wed, 22 Jan 2025 16:01:51 +0000 https://vulnerability.circl.lu/sighting/e17e1475-0d18-449b-a156-7baa16020ad0/export {"uuid": "e17e1475-0d18-449b-a156-7baa16020ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://t.me/cvedetector/16094", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23942 - NgocCode WP Load Gallery Remote File Upload\", \n \"Content\": \"CVE ID : CVE-2025-23942 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"} {"uuid": "e17e1475-0d18-449b-a156-7baa16020ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://t.me/cvedetector/16094", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23942 - NgocCode WP Load Gallery Remote File Upload\", \n \"Content\": \"CVE ID : CVE-2025-23942 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"} https://vulnerability.circl.lu/sighting/e17e1475-0d18-449b-a156-7baa16020ad0/export Wed, 22 Jan 2025 17:13:28 +0000 https://vulnerability.circl.lu/sighting/5421258e-009c-40d0-8080-1deeda783bc1/export {"uuid": "5421258e-009c-40d0-8080-1deeda783bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://t.me/cvedetector/16095", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23944 - WOOEXIM.COM WOOEXIM Object Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23944 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"} {"uuid": "5421258e-009c-40d0-8080-1deeda783bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://t.me/cvedetector/16095", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23944 - WOOEXIM.COM WOOEXIM Object Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23944 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"} https://vulnerability.circl.lu/sighting/5421258e-009c-40d0-8080-1deeda783bc1/export Wed, 22 Jan 2025 17:13:28 +0000 https://vulnerability.circl.lu/sighting/9773bc7c-72ad-4f8c-94e4-34efd566ac54/export {"uuid": "9773bc7c-72ad-4f8c-94e4-34efd566ac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://t.me/cvedetector/16096", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23948 - WebArea PHP Remote File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23948 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:29.000000Z"} {"uuid": "9773bc7c-72ad-4f8c-94e4-34efd566ac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://t.me/cvedetector/16096", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23948 - WebArea PHP Remote File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23948 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:29.000000Z"} https://vulnerability.circl.lu/sighting/9773bc7c-72ad-4f8c-94e4-34efd566ac54/export Wed, 22 Jan 2025 17:13:29 +0000 https://vulnerability.circl.lu/sighting/a3c57bae-c1b7-41bb-85f8-ff0043af92cd/export {"uuid": "a3c57bae-c1b7-41bb-85f8-ff0043af92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/cvedetector/16097", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23949 - Mihajlovic Nenad Improved Sale Badges PHP Remote File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23949 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:33.000000Z"} {"uuid": "a3c57bae-c1b7-41bb-85f8-ff0043af92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/cvedetector/16097", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23949 - Mihajlovic Nenad Improved Sale Badges PHP Remote File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23949 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:33.000000Z"} https://vulnerability.circl.lu/sighting/a3c57bae-c1b7-41bb-85f8-ff0043af92cd/export Wed, 22 Jan 2025 17:13:33 +0000 https://vulnerability.circl.lu/sighting/dbec780f-4231-4d83-add5-24b94127c740/export {"uuid": "dbec780f-4231-4d83-add5-24b94127c740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgg3apvlew2z", "content": "", "creation_timestamp": "2025-01-23T14:19:48.813245Z"} {"uuid": "dbec780f-4231-4d83-add5-24b94127c740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgg3apvlew2z", "content": "", "creation_timestamp": "2025-01-23T14:19:48.813245Z"} https://vulnerability.circl.lu/sighting/dbec780f-4231-4d83-add5-24b94127c740/export Thu, 23 Jan 2025 14:19:48 +0000 https://vulnerability.circl.lu/sighting/46f2186b-cd9d-4c21-ad44-bc8cb754b285/export {"uuid": "46f2186b-cd9d-4c21-ad44-bc8cb754b285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/hOLG--AO3JPkph5SXhaEZPsqsMyW7qsjKUHXu0bcblbq2os", "content": "", "creation_timestamp": "2025-02-25T16:00:09.000000Z"} {"uuid": "46f2186b-cd9d-4c21-ad44-bc8cb754b285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/hOLG--AO3JPkph5SXhaEZPsqsMyW7qsjKUHXu0bcblbq2os", "content": "", "creation_timestamp": "2025-02-25T16:00:09.000000Z"} https://vulnerability.circl.lu/sighting/46f2186b-cd9d-4c21-ad44-bc8cb754b285/export Tue, 25 Feb 2025 16:00:09 +0000 https://vulnerability.circl.lu/sighting/bafada83-907b-444b-910e-3127504523de/export {"uuid": "bafada83-907b-444b-910e-3127504523de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/RTL4c24ehL4PcIHiJWtbR38qnR2ShnHV1PtZpJt4LwM00pI", "content": "", "creation_timestamp": "2025-02-25T20:00:08.000000Z"} {"uuid": "bafada83-907b-444b-910e-3127504523de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/RTL4c24ehL4PcIHiJWtbR38qnR2ShnHV1PtZpJt4LwM00pI", "content": "", "creation_timestamp": "2025-02-25T20:00:08.000000Z"} https://vulnerability.circl.lu/sighting/bafada83-907b-444b-910e-3127504523de/export Tue, 25 Feb 2025 20:00:08 +0000 https://vulnerability.circl.lu/sighting/59427951-2748-4d0c-ac21-7c30c84f7727/export {"uuid": "59427951-2748-4d0c-ac21-7c30c84f7727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2394\n\ud83d\udd25 CVSS Score: 4.7 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.\n\ud83d\udccf Published: 2025-05-23T00:03:32.603Z\n\ud83d\udccf Modified: 2025-05-23T00:04:10.950Z\n\ud83d\udd17 References:\n1. https://www.themissinglink.com.au/security-advisories/cve-2025-2394\n2. https://www.ecovacs.com/global/userhelp/dsa20250507001", "creation_timestamp": "2025-05-23T00:44:03.000000Z"} {"uuid": "59427951-2748-4d0c-ac21-7c30c84f7727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2394\n\ud83d\udd25 CVSS Score: 4.7 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.\n\ud83d\udccf Published: 2025-05-23T00:03:32.603Z\n\ud83d\udccf Modified: 2025-05-23T00:04:10.950Z\n\ud83d\udd17 References:\n1. https://www.themissinglink.com.au/security-advisories/cve-2025-2394\n2. https://www.ecovacs.com/global/userhelp/dsa20250507001", "creation_timestamp": "2025-05-23T00:44:03.000000Z"} https://vulnerability.circl.lu/sighting/59427951-2748-4d0c-ac21-7c30c84f7727/export Fri, 23 May 2025 00:44:03 +0000 https://vulnerability.circl.lu/sighting/fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83/export {"uuid": "fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23945", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"} {"uuid": "fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23945", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"} https://vulnerability.circl.lu/sighting/fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83/export Tue, 19 Aug 2025 13:26:45 +0000