https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 21 Sep 2026 19:18:15 +0000 https://vulnerability.circl.lu/sighting/c1fe009f-182f-4399-a9cf-e3e17d3e9878/export {"uuid": "c1fe009f-182f-4399-a9cf-e3e17d3e9878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvyvfz6mva2t", "content": "CVE-2026-94104\nIf someone with view\u2011only back\u2011office access logs in, they can place a script file in the public image folder and make the server run it. This could let an attacker take control of the web site. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-21T04:40:04.114808Z"} {"uuid": "c1fe009f-182f-4399-a9cf-e3e17d3e9878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvyvfz6mva2t", "content": "CVE-2026-94104\nIf someone with view\u2011only back\u2011office access logs in, they can place a script file in the public image folder and make the server run it. This could let an attacker take control of the web site. Upgrade\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-21T04:40:04.114808Z"} https://vulnerability.circl.lu/sighting/c1fe009f-182f-4399-a9cf-e3e17d3e9878/export Mon, 21 Sep 2026 04:40:04 +0000 https://vulnerability.circl.lu/sighting/99cf2363-dc2e-49ea-888e-6bdfbb473e3b/export {"uuid": "99cf2363-dc2e-49ea-888e-6bdfbb473e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhso3kse2k", "content": "\ud83d\udfe0 CVE-2026-94104 - High (8.8)\n\nNivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi(...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:57.668577Z"} {"uuid": "99cf2363-dc2e-49ea-888e-6bdfbb473e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvxhso3kse2k", "content": "\ud83d\udfe0 CVE-2026-94104 - High (8.8)\n\nNivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi(...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-94104/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-20T15:03:57.668577Z"} https://vulnerability.circl.lu/sighting/99cf2363-dc2e-49ea-888e-6bdfbb473e3b/export Sun, 20 Sep 2026 15:03:57 +0000 https://vulnerability.circl.lu/sighting/ca173563-f7bf-4a39-a6e6-80262cfbb567/export {"uuid": "ca173563-f7bf-4a39-a6e6-80262cfbb567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://gist.github.com/ichintu/6f6d6a80c56f871cb012c31151e3888f", "content": "This daily digest highlights two cybersecurity updates:\n\n1. **CVE-2026-94104 (NivoCart \u22642.4.0):** A high-severity (8.8) vulnerability that enables remote code execution via arbitrary PHP file uploads. The flaw stems from missing file extension validation in the file manager's `multi()` endpoint and requires only basic back-office access to exploit.\n2. **EchelonGraph Pulse:** A newly launched, rapid CVE notification tool designed for cybersecurity professionals, currently seeking community feedback to refine its features and improve user support.", "creation_timestamp": "2026-09-20T12:01:53.345538Z"} {"uuid": "ca173563-f7bf-4a39-a6e6-80262cfbb567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-94104", "type": "seen", "source": "https://gist.github.com/ichintu/6f6d6a80c56f871cb012c31151e3888f", "content": "This daily digest highlights two cybersecurity updates:\n\n1. **CVE-2026-94104 (NivoCart \u22642.4.0):** A high-severity (8.8) vulnerability that enables remote code execution via arbitrary PHP file uploads. The flaw stems from missing file extension validation in the file manager's `multi()` endpoint and requires only basic back-office access to exploit.\n2. **EchelonGraph Pulse:** A newly launched, rapid CVE notification tool designed for cybersecurity professionals, currently seeking community feedback to refine its features and improve user support.", "creation_timestamp": "2026-09-20T12:01:53.345538Z"} https://vulnerability.circl.lu/sighting/ca173563-f7bf-4a39-a6e6-80262cfbb567/export Sun, 20 Sep 2026 12:01:53 +0000