https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 21 Sep 2026 15:08:41 +0000 https://vulnerability.circl.lu/sighting/d719286d-208b-452a-9f3c-b95b557ffce4/export {"uuid": "d719286d-208b-452a-9f3c-b95b557ffce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102953", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94095\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-21 10:51:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNetcore NBR200V2 traceroute command injection PoC (CVE-2026-94095); ubus JSON-RPC -> system() root RCE; for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T15:00:03.859269Z"} {"uuid": "d719286d-208b-452a-9f3c-b95b557ffce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102953", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-94095\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a HackSpeak\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-21 10:51:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNetcore NBR200V2 traceroute command injection PoC (CVE-2026-94095); ubus JSON-RPC -> system() root RCE; for authorized testing\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-21T15:00:03.859269Z"} https://vulnerability.circl.lu/sighting/d719286d-208b-452a-9f3c-b95b557ffce4/export Mon, 21 Sep 2026 15:00:03 +0000 https://vulnerability.circl.lu/sighting/e26177db-ff8d-4bec-81ef-5ba70d4719ee/export {"uuid": "e26177db-ff8d-4bec-81ef-5ba70d4719ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "seen", "source": "https://gist.github.com/ichintu/4d27b2fa4a71489307152f1f3aa025ef", "content": "This digest covers two cybersecurity updates:\n\n\u2022 **PcapSplitter Silent Packet Loss:** A bug in the PcapPlusPlus `PcapSplitter` tool caused silent data corruption and packet loss due to mishandled TCP session reuse. When filenames collided, files were opened in write mode instead of append mode, truncating output. The issue was reproduced, patched, and successfully merged.\n\n\u2022 **Netcore NBR200V2 Command Injection (CVE-2026-94095):** A critical (9.9) remote command injection vulnerability exists in the router's traceroute diagnostic feature. Exploitable via the `url` parameter, the flaw is publicly known and actively exploited, with no vendor patch or acknowledgment issued.", "creation_timestamp": "2026-09-21T04:18:48.832479Z"} {"uuid": "e26177db-ff8d-4bec-81ef-5ba70d4719ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94095", "type": "seen", "source": "https://gist.github.com/ichintu/4d27b2fa4a71489307152f1f3aa025ef", "content": "This digest covers two cybersecurity updates:\n\n\u2022 **PcapSplitter Silent Packet Loss:** A bug in the PcapPlusPlus `PcapSplitter` tool caused silent data corruption and packet loss due to mishandled TCP session reuse. When filenames collided, files were opened in write mode instead of append mode, truncating output. The issue was reproduced, patched, and successfully merged.\n\n\u2022 **Netcore NBR200V2 Command Injection (CVE-2026-94095):** A critical (9.9) remote command injection vulnerability exists in the router's traceroute diagnostic feature. Exploitable via the `url` parameter, the flaw is publicly known and actively exploited, with no vendor patch or acknowledgment issued.", "creation_timestamp": "2026-09-21T04:18:48.832479Z"} https://vulnerability.circl.lu/sighting/e26177db-ff8d-4bec-81ef-5ba70d4719ee/export Mon, 21 Sep 2026 04:18:48 +0000