<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 16 Jun 2026 07:48:46 +0000</lastBuildDate>
    <item>
      <title>372e72e9-e740-4bbf-b5b3-7cc460807e15</title>
      <link>https://vulnerability.circl.lu/sighting/372e72e9-e740-4bbf-b5b3-7cc460807e15/export</link>
      <description>{"uuid": "372e72e9-e740-4bbf-b5b3-7cc460807e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0039", "type": "seen", "source": "https://t.me/cibsecurity/55806", "content": "\u203c CVE-2023-0039 \u203c\n\nThe User Post Gallery - UPG plugin for WordPress is vulnerable to authorization bypass which leads to remote command execution due to the use of a nopriv AJAX action and user supplied function calls and parameters in versions up to, and including 2.19. This makes it possible for unauthenticated attackers to call arbitrary PHP functions and perform actions like adding new files that can be webshells and updating the site's options to allow anyone to register as an administrator.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T18:17:17.000000Z"}</description>
      <content:encoded>{"uuid": "372e72e9-e740-4bbf-b5b3-7cc460807e15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0039", "type": "seen", "source": "https://t.me/cibsecurity/55806", "content": "\u203c CVE-2023-0039 \u203c\n\nThe User Post Gallery - UPG plugin for WordPress is vulnerable to authorization bypass which leads to remote command execution due to the use of a nopriv AJAX action and user supplied function calls and parameters in versions up to, and including 2.19. This makes it possible for unauthenticated attackers to call arbitrary PHP functions and perform actions like adding new files that can be webshells and updating the site's options to allow anyone to register as an administrator.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T18:17:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/372e72e9-e740-4bbf-b5b3-7cc460807e15/export</guid>
      <pubDate>Tue, 03 Jan 2023 18:17:17 +0000</pubDate>
    </item>
    <item>
      <title>f7e27f38-e3a9-40f0-86be-8f5da1e6e55c</title>
      <link>https://vulnerability.circl.lu/sighting/f7e27f38-e3a9-40f0-86be-8f5da1e6e55c/export</link>
      <description>{"uuid": "f7e27f38-e3a9-40f0-86be-8f5da1e6e55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0039", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3659", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a\u514d\u6740\uff0c\u7ea2\u961f\uff0c\u84dd\u961f\uff0c\u9632\u5b88\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2023-0039\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-01-16T20:16:28.000000Z"}</description>
      <content:encoded>{"uuid": "f7e27f38-e3a9-40f0-86be-8f5da1e6e55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0039", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3659", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1a\u514d\u6740\uff0c\u7ea2\u961f\uff0c\u84dd\u961f\uff0c\u9632\u5b88\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2023-0039\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-01-16T20:16:28.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f7e27f38-e3a9-40f0-86be-8f5da1e6e55c/export</guid>
      <pubDate>Mon, 16 Jan 2023 20:16:28 +0000</pubDate>
    </item>
  </channel>
</rss>
