<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 15 Jun 2026 13:59:42 +0000</lastBuildDate>
    <item>
      <title>9a78e302-e89b-47e9-9786-cdc682625eb9</title>
      <link>https://vulnerability.circl.lu/sighting/9a78e302-e89b-47e9-9786-cdc682625eb9/export</link>
      <description>{"uuid": "9a78e302-e89b-47e9-9786-cdc682625eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnirwyoxo42a", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to anyone. No auth needed. Your wp-config could be next.\n\nUpdate to 4.71. now. \u2192 pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-04T23:33:50.308809Z"}</description>
      <content:encoded>{"uuid": "9a78e302-e89b-47e9-9786-cdc682625eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnirwyoxo42a", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to anyone. No auth needed. Your wp-config could be next.\n\nUpdate to 4.71. now. \u2192 pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-04T23:33:50.308809Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a78e302-e89b-47e9-9786-cdc682625eb9/export</guid>
      <pubDate>Thu, 04 Jun 2026 23:33:50 +0000</pubDate>
    </item>
    <item>
      <title>45c11c26-00ab-4285-8525-265efa834fb5</title>
      <link>https://vulnerability.circl.lu/sighting/45c11c26-00ab-4285-8525-265efa834fb5/export</link>
      <description>{"uuid": "45c11c26-00ab-4285-8525-265efa834fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnis7ahx5p2k", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to unauthenticated visitors. Your wp-config. Database backups. Client files. All exposed.\n\nUpdate to 4.71 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-04T23:38:26.800071Z"}</description>
      <content:encoded>{"uuid": "45c11c26-00ab-4285-8525-265efa834fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pulse-wp.com/post/3mnis7ahx5p2k", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to unauthenticated visitors. Your wp-config. Database backups. Client files. All exposed.\n\nUpdate to 4.71 now.\n\nScan your WordPress site: pulse-wp.com\n#WordPress #AccessControl #CyberSecurity", "creation_timestamp": "2026-06-04T23:38:26.800071Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/45c11c26-00ab-4285-8525-265efa834fb5/export</guid>
      <pubDate>Thu, 04 Jun 2026 23:38:26 +0000</pubDate>
    </item>
    <item>
      <title>27bb9312-7bef-42f0-ae99-8556f00d921f</title>
      <link>https://vulnerability.circl.lu/sighting/27bb9312-7bef-42f0-ae99-8556f00d921f/export</link>
      <description>{"uuid": "27bb9312-7bef-42f0-ae99-8556f00d921f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnisbxpsiv2l", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to anyone. No auth needed. Your wp-config could be next.\n\nUpdate to 4.71. now. \u2192 pulse-wp.com\n#WordPress #AccessControl #PotatoSecurity", "creation_timestamp": "2026-06-04T23:39:58.520689Z"}</description>
      <content:encoded>{"uuid": "27bb9312-7bef-42f0-ae99-8556f00d921f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mnisbxpsiv2l", "content": "CVE-2026-10737. CVSS 7.5. SP Project &amp;amp; Document Manager leaks file metadata and download links to anyone. No auth needed. Your wp-config could be next.\n\nUpdate to 4.71. now. \u2192 pulse-wp.com\n#WordPress #AccessControl #PotatoSecurity", "creation_timestamp": "2026-06-04T23:39:58.520689Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27bb9312-7bef-42f0-ae99-8556f00d921f/export</guid>
      <pubDate>Thu, 04 Jun 2026 23:39:58 +0000</pubDate>
    </item>
    <item>
      <title>6917f2ed-5e50-4526-824d-08bb7bb1bd05</title>
      <link>https://vulnerability.circl.lu/sighting/6917f2ed-5e50-4526-824d-08bb7bb1bd05/export</link>
      <description>{"uuid": "6917f2ed-5e50-4526-824d-08bb7bb1bd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 43 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-49858: 11 interactions\nCVE-2026-20230: 6 interactions\nCVE-2026-10737: 4 interactions\n", "creation_timestamp": "2026-06-05T02:30:48.004045Z"}</description>
      <content:encoded>{"uuid": "6917f2ed-5e50-4526-824d-08bb7bb1bd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10737", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mnj3tf3oaw2f", "content": "Top 3 CVE for last 7 days:\nCVE-2025-48595: 136 interactions\nCVE-2026-0257: 43 interactions\nCVE-2026-48778: 23 interactions\n\n\nTop 3 CVE for yesterday:\nCVE-2026-49858: 11 interactions\nCVE-2026-20230: 6 interactions\nCVE-2026-10737: 4 interactions\n", "creation_timestamp": "2026-06-05T02:30:48.004045Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6917f2ed-5e50-4526-824d-08bb7bb1bd05/export</guid>
      <pubDate>Fri, 05 Jun 2026 02:30:48 +0000</pubDate>
    </item>
    <item>
      <title>86b2ab82-157a-4ddf-b8ed-76b64f7d1279</title>
      <link>https://vulnerability.circl.lu/sighting/86b2ab82-157a-4ddf-b8ed-76b64f7d1279/export</link>
      <description>{"uuid": "86b2ab82-157a-4ddf-b8ed-76b64f7d1279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqhegrqv2b", "content": "CVE-2026-10732 - Decompress Arbitrary File Write via Symlink Race Condition\nCVE ID : CVE-2026-10732\n \n Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extrac...", "creation_timestamp": "2026-06-05T08:39:51.704995Z"}</description>
      <content:encoded>{"uuid": "86b2ab82-157a-4ddf-b8ed-76b64f7d1279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqhegrqv2b", "content": "CVE-2026-10732 - Decompress Arbitrary File Write via Symlink Race Condition\nCVE ID : CVE-2026-10732\n \n Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extrac...", "creation_timestamp": "2026-06-05T08:39:51.704995Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/86b2ab82-157a-4ddf-b8ed-76b64f7d1279/export</guid>
      <pubDate>Fri, 05 Jun 2026 08:39:51 +0000</pubDate>
    </item>
    <item>
      <title>14198c8b-c55e-427e-b649-0e92cbe9ddc4</title>
      <link>https://vulnerability.circl.lu/sighting/14198c8b-c55e-427e-b649-0e92cbe9ddc4/export</link>
      <description>{"uuid": "14198c8b-c55e-427e-b649-0e92cbe9ddc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqhegrqv2b", "content": "CVE-2026-10732 - Decompress Arbitrary File Write via Symlink Race Condition\nCVE ID : CVE-2026-10732\n \n Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extrac...", "creation_timestamp": "2026-06-05T08:39:51.715297Z"}</description>
      <content:encoded>{"uuid": "14198c8b-c55e-427e-b649-0e92cbe9ddc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnjqhegrqv2b", "content": "CVE-2026-10732 - Decompress Arbitrary File Write via Symlink Race Condition\nCVE ID : CVE-2026-10732\n \n Published : June 5, 2026, 7:16 a.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extrac...", "creation_timestamp": "2026-06-05T08:39:51.715297Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14198c8b-c55e-427e-b649-0e92cbe9ddc4/export</guid>
      <pubDate>Fri, 05 Jun 2026 08:39:51 +0000</pubDate>
    </item>
    <item>
      <title>759ed1ed-b769-403b-9f5c-a7e3e86e61d1</title>
      <link>https://vulnerability.circl.lu/sighting/759ed1ed-b769-403b-9f5c-a7e3e86e61d1/export</link>
      <description>{"uuid": "759ed1ed-b769-403b-9f5c-a7e3e86e61d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnu53r2lny2v", "content": "CVE-2026-10731 - SQL injection in Nemon products\nCVE ID : CVE-2026-10731\n \n Published : June 9, 2026, 10:16 a.m. | 59\u00a0minutes ago\n \n Description : SQL injection in the \u2018two_steps_auth_code\u2019 parameter processed by the \u2018twoStepsAuthVerification\u2019 function within the \u2018/user-login\u2019...", "creation_timestamp": "2026-06-09T11:52:38.287209Z"}</description>
      <content:encoded>{"uuid": "759ed1ed-b769-403b-9f5c-a7e3e86e61d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnu53r2lny2v", "content": "CVE-2026-10731 - SQL injection in Nemon products\nCVE ID : CVE-2026-10731\n \n Published : June 9, 2026, 10:16 a.m. | 59\u00a0minutes ago\n \n Description : SQL injection in the \u2018two_steps_auth_code\u2019 parameter processed by the \u2018twoStepsAuthVerification\u2019 function within the \u2018/user-login\u2019...", "creation_timestamp": "2026-06-09T11:52:38.287209Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/759ed1ed-b769-403b-9f5c-a7e3e86e61d1/export</guid>
      <pubDate>Tue, 09 Jun 2026 11:52:38 +0000</pubDate>
    </item>
    <item>
      <title>69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21</title>
      <link>https://vulnerability.circl.lu/sighting/69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21/export</link>
      <description>{"uuid": "69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10738", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnwsajzizn2m", "content": "CVE-2026-10738 jquery-hover-footnotes (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-10T13:16:27.080626Z"}</description>
      <content:encoded>{"uuid": "69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10738", "type": "seen", "source": "https://bsky.app/profile/atomicedge.bsky.social/post/3mnwsajzizn2m", "content": "CVE-2026-10738 jquery-hover-footnotes (CVSS Score 6.4) \n\n#WordPress plugin #vulnerability #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge", "creation_timestamp": "2026-06-10T13:16:27.080626Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/69d33bfe-14a1-4cc8-b8fa-ffddc40a2b21/export</guid>
      <pubDate>Wed, 10 Jun 2026 13:16:27 +0000</pubDate>
    </item>
    <item>
      <title>d3a531c6-b974-467d-adf6-b74c4ff64402</title>
      <link>https://vulnerability.circl.lu/sighting/d3a531c6-b974-467d-adf6-b74c4ff64402/export</link>
      <description>{"uuid": "d3a531c6-b974-467d-adf6-b74c4ff64402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10733", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y", "content": "\ud83d\udd17 CVE : CVE-2026-10087, CVE-2026-10733, CVE-2026-1500, CVE-2026-3553, CVE-2026-6269, CVE-2026-6277, CVE-2026-6552, CVE-2026-6976, CVE-2026-7250, CVE-2026-8589, CVE-2026-9204, CVE-2026-9694", "creation_timestamp": "2026-06-11T12:45:12.892530Z"}</description>
      <content:encoded>{"uuid": "d3a531c6-b974-467d-adf6-b74c4ff64402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10733", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mnzaxmissr2y", "content": "\ud83d\udd17 CVE : CVE-2026-10087, CVE-2026-10733, CVE-2026-1500, CVE-2026-3553, CVE-2026-6269, CVE-2026-6277, CVE-2026-6552, CVE-2026-6976, CVE-2026-7250, CVE-2026-8589, CVE-2026-9204, CVE-2026-9694", "creation_timestamp": "2026-06-11T12:45:12.892530Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d3a531c6-b974-467d-adf6-b74c4ff64402/export</guid>
      <pubDate>Thu, 11 Jun 2026 12:45:12 +0000</pubDate>
    </item>
    <item>
      <title>b702b5a5-41d3-4d74-9abb-c754b9cc895d</title>
      <link>https://vulnerability.circl.lu/sighting/b702b5a5-41d3-4d74-9abb-c754b9cc895d/export</link>
      <description>{"uuid": "b702b5a5-41d3-4d74-9abb-c754b9cc895d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10733", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "b702b5a5-41d3-4d74-9abb-c754b9cc895d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-10733", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260612", "content": "", "creation_timestamp": "2026-06-11T18:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b702b5a5-41d3-4d74-9abb-c754b9cc895d/export</guid>
      <pubDate>Thu, 11 Jun 2026 18:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
