https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 23 Aug 2026 18:59:41 +0000 https://vulnerability.circl.lu/sighting/f4ba8585-2170-4e94-a7f7-12fad2cd3061/export {"uuid": "f4ba8585-2170-4e94-a7f7-12fad2cd3061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:36.324713Z"} {"uuid": "f4ba8585-2170-4e94-a7f7-12fad2cd3061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:36.324713Z"} https://vulnerability.circl.lu/sighting/f4ba8585-2170-4e94-a7f7-12fad2cd3061/export Sun, 16 Aug 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/037c1949-bc46-4cc2-a861-e6b19acb295a/export {"uuid": "037c1949-bc46-4cc2-a861-e6b19acb295a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.069330Z"} {"uuid": "037c1949-bc46-4cc2-a861-e6b19acb295a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-29866", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.069330Z"} https://vulnerability.circl.lu/sighting/037c1949-bc46-4cc2-a861-e6b19acb295a/export Sat, 15 Aug 2026 11:00:03 +0000