https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 11 Jul 2026 14:19:22 +0000 https://vulnerability.circl.lu/sighting/7f43ab16-430a-4a27-8d26-9025111df1ae/export {"uuid": "7f43ab16-430a-4a27-8d26-9025111df1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "exploited", "source": "https://t.me/brutsecurity/1837", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "creation_timestamp": "2026-07-11T13:00:05.459463Z"} {"uuid": "7f43ab16-430a-4a27-8d26-9025111df1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "exploited", "source": "https://t.me/brutsecurity/1837", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "creation_timestamp": "2026-07-11T13:00:05.459463Z"} https://vulnerability.circl.lu/sighting/7f43ab16-430a-4a27-8d26-9025111df1ae/export Sat, 11 Jul 2026 13:00:05 +0000 https://vulnerability.circl.lu/sighting/02f14f4c-0af3-451a-9126-413b871ef752/export {"uuid": "02f14f4c-0af3-451a-9126-413b871ef752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "seen", "source": "https://t.me/brutsecurity/1837", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "creation_timestamp": "2026-07-10T00:00:32.033390Z"} {"uuid": "02f14f4c-0af3-451a-9126-413b871ef752", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "seen", "source": "https://t.me/brutsecurity/1837", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "creation_timestamp": "2026-07-10T00:00:32.033390Z"} https://vulnerability.circl.lu/sighting/02f14f4c-0af3-451a-9126-413b871ef752/export Fri, 10 Jul 2026 00:00:32 +0000 https://vulnerability.circl.lu/sighting/956f52bd-ff65-47c0-894f-f649e19646c8/export {"uuid": "956f52bd-ff65-47c0-894f-f649e19646c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "seen", "source": "https://t.me/brutsecurity/1837", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "creation_timestamp": "2026-07-09T03:00:08.503243Z"} {"uuid": "956f52bd-ff65-47c0-894f-f649e19646c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "seen", "source": "https://t.me/brutsecurity/1837", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "creation_timestamp": "2026-07-09T03:00:08.503243Z"} https://vulnerability.circl.lu/sighting/956f52bd-ff65-47c0-894f-f649e19646c8/export Thu, 09 Jul 2026 03:00:08 +0000 https://vulnerability.circl.lu/sighting/a63825ce-3f22-4ef6-9b0d-e2b979c089d5/export {"uuid": "a63825ce-3f22-4ef6-9b0d-e2b979c089d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://gist.github.com/alon710/d7aaf1c76ca3b28f6e9c13a27aff2873", "content": "", "creation_timestamp": "2026-01-24T22:42:31.000000Z"} {"uuid": "a63825ce-3f22-4ef6-9b0d-e2b979c089d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://gist.github.com/alon710/d7aaf1c76ca3b28f6e9c13a27aff2873", "content": "", "creation_timestamp": "2026-01-24T22:42:31.000000Z"} https://vulnerability.circl.lu/sighting/a63825ce-3f22-4ef6-9b0d-e2b979c089d5/export Sat, 24 Jan 2026 22:42:31 +0000 https://vulnerability.circl.lu/sighting/008e14cd-a437-4610-9400-05f5e637666a/export {"uuid": "008e14cd-a437-4610-9400-05f5e637666a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://gist.github.com/alon710/e589cf0bc7a54574edafd652b4a30658", "content": "", "creation_timestamp": "2026-01-24T21:30:30.000000Z"} {"uuid": "008e14cd-a437-4610-9400-05f5e637666a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://gist.github.com/alon710/e589cf0bc7a54574edafd652b4a30658", "content": "", "creation_timestamp": "2026-01-24T21:30:30.000000Z"} https://vulnerability.circl.lu/sighting/008e14cd-a437-4610-9400-05f5e637666a/export Sat, 24 Jan 2026 21:30:30 +0000 https://vulnerability.circl.lu/sighting/08a069b2-1ab3-408e-a144-3eceb0eca8fd/export {"uuid": "08a069b2-1ab3-408e-a144-3eceb0eca8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://gist.github.com/alon710/9ae22252a01711933c801903c50fff8f", "content": "", "creation_timestamp": "2026-01-24T21:30:29.000000Z"} {"uuid": "08a069b2-1ab3-408e-a144-3eceb0eca8fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://gist.github.com/alon710/9ae22252a01711933c801903c50fff8f", "content": "", "creation_timestamp": "2026-01-24T21:30:29.000000Z"} https://vulnerability.circl.lu/sighting/08a069b2-1ab3-408e-a144-3eceb0eca8fd/export Sat, 24 Jan 2026 21:30:29 +0000 https://vulnerability.circl.lu/sighting/f2ac52d5-e28e-4e73-b084-94d354fbbb9d/export {"uuid": "f2ac52d5-e28e-4e73-b084-94d354fbbb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13769", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32432\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\ud83d\udd39 Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.\n\ud83d\udccf Published: 2025-04-25T15:04:06.272Z\n\ud83d\udccf Modified: 2025-04-29T03:55:14.713Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3\n2. https://github.com/craftcms/cms/commit/e1c85441fa47eeb7c688c2053f25419bc0547b47\n3. https://github.com/craftcms/cms/blob/3.x/CHANGELOG.md#3915---2025-04-10-critical\n4. https://github.com/craftcms/cms/blob/4.x/CHANGELOG.md#41415---2025-04-10-critical\n5. https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md#5617---2025-04-10-critical", "creation_timestamp": "2025-04-29T04:11:16.000000Z"} {"uuid": "f2ac52d5-e28e-4e73-b084-94d354fbbb9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13769", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32432\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\ud83d\udd39 Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.\n\ud83d\udccf Published: 2025-04-25T15:04:06.272Z\n\ud83d\udccf Modified: 2025-04-29T03:55:14.713Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3\n2. https://github.com/craftcms/cms/commit/e1c85441fa47eeb7c688c2053f25419bc0547b47\n3. https://github.com/craftcms/cms/blob/3.x/CHANGELOG.md#3915---2025-04-10-critical\n4. https://github.com/craftcms/cms/blob/4.x/CHANGELOG.md#41415---2025-04-10-critical\n5. https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md#5617---2025-04-10-critical", "creation_timestamp": "2025-04-29T04:11:16.000000Z"} https://vulnerability.circl.lu/sighting/f2ac52d5-e28e-4e73-b084-94d354fbbb9d/export Tue, 29 Apr 2025 04:11:16 +0000 https://vulnerability.circl.lu/sighting/4a688ae0-d59a-45dc-9396-8ebc8317833e/export {"uuid": "4a688ae0-d59a-45dc-9396-8ebc8317833e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114410089366436743", "content": "", "creation_timestamp": "2025-04-27T13:10:21.190091Z"} {"uuid": "4a688ae0-d59a-45dc-9396-8ebc8317833e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-f3gw-9ww9-jmc3", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114410089366436743", "content": "", "creation_timestamp": "2025-04-27T13:10:21.190091Z"} https://vulnerability.circl.lu/sighting/4a688ae0-d59a-45dc-9396-8ebc8317833e/export Sun, 27 Apr 2025 13:10:21 +0000 https://vulnerability.circl.lu/sighting/1c748858-edc2-456b-8acf-1c81ccf29e96/export {"uuid": "1c748858-edc2-456b-8acf-1c81ccf29e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "seen", "source": "Telegram/t8K1XuU9DycjdS-BJ0HBwR2vMp2ysg1gNZKK5Q0_GJ-ZI8I", "content": "", "creation_timestamp": "2025-04-25T18:02:30.000000Z"} {"uuid": "1c748858-edc2-456b-8acf-1c81ccf29e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-F3GW-9WW9-JMC3", "type": "seen", "source": "Telegram/t8K1XuU9DycjdS-BJ0HBwR2vMp2ysg1gNZKK5Q0_GJ-ZI8I", "content": "", "creation_timestamp": "2025-04-25T18:02:30.000000Z"} https://vulnerability.circl.lu/sighting/1c748858-edc2-456b-8acf-1c81ccf29e96/export Fri, 25 Apr 2025 18:02:30 +0000