https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 19:05:21 +0000 https://vulnerability.circl.lu/sighting/e4ea2476-f699-41e4-aa98-9f13b9c2f677/export {"uuid": "e4ea2476-f699-41e4-aa98-9f13b9c2f677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gld5vc7kvpp7p", "content": "CVE-2026-4806 - Custom Thank You Page for WooCommerce\nCVE ID : CVE-2026-4806\n \n Published : Sept. 24, 2026, 11:31 a.m. | 22\u00a0minutes ago\n \n Description : The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to ...", "creation_timestamp": "2026-09-24T12:31:56.262255Z"} {"uuid": "e4ea2476-f699-41e4-aa98-9f13b9c2f677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-4806", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gld5vc7kvpp7p", "content": "CVE-2026-4806 - Custom Thank You Page for WooCommerce\nCVE ID : CVE-2026-4806\n \n Published : Sept. 24, 2026, 11:31 a.m. | 22\u00a0minutes ago\n \n Description : The Custom Thank You Page for WooCommerce plugin for WordPress is vulnerable to unauthorized access and loss of data due to ...", "creation_timestamp": "2026-09-24T12:31:56.262255Z"} https://vulnerability.circl.lu/sighting/e4ea2476-f699-41e4-aa98-9f13b9c2f677/export Thu, 24 Sep 2026 12:31:56 +0000 https://vulnerability.circl.lu/sighting/a0b8195a-be64-4f7b-9ba7-bfb9cd308797/export {"uuid": "a0b8195a-be64-4f7b-9ba7-bfb9cd308797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fdu3mz5rzrmwg", "content": "CVE-2026-48063 - Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload\nCVE ID : CVE-2026-48063\n \n Published : Aug. 3, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Baileys is a cocket-based TS/JavaSc...", "creation_timestamp": "2026-08-03T21:56:19.091255Z"} {"uuid": "a0b8195a-be64-4f7b-9ba7-bfb9cd308797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fdu3mz5rzrmwg", "content": "CVE-2026-48063 - Baileys has message upsert / hist sync spoofing and app state corruption when using maliciously crafted protocolMessage payload\nCVE ID : CVE-2026-48063\n \n Published : Aug. 3, 2026, 9:16 p.m. | 28\u00a0minutes ago\n \n Description : Baileys is a cocket-based TS/JavaSc...", "creation_timestamp": "2026-08-03T21:56:19.091255Z"} https://vulnerability.circl.lu/sighting/a0b8195a-be64-4f7b-9ba7-bfb9cd308797/export Mon, 03 Aug 2026 21:56:19 +0000 https://vulnerability.circl.lu/sighting/f88ad1ce-4929-4b62-becf-c8c5c29e376e/export {"uuid": "f88ad1ce-4929-4b62-becf-c8c5c29e376e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7idtofkx2p", "content": "CVE-2026-48063 - baileys\nBaileys users with outdated versions are at risk of receiving fake messages and having their app state corrupted. This can happen if an attacker sends a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#baileys #whiskeysockets #npm #CVE #infosec", "creation_timestamp": "2026-08-03T21:54:04.478393Z"} {"uuid": "f88ad1ce-4929-4b62-becf-c8c5c29e376e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48063", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3ms7idtofkx2p", "content": "CVE-2026-48063 - baileys\nBaileys users with outdated versions are at risk of receiving fake messages and having their app state corrupted. This can happen if an attacker sends a specially crafted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#baileys #whiskeysockets #npm #CVE #infosec", "creation_timestamp": "2026-08-03T21:54:04.478393Z"} https://vulnerability.circl.lu/sighting/f88ad1ce-4929-4b62-becf-c8c5c29e376e/export Mon, 03 Aug 2026 21:54:04 +0000 https://vulnerability.circl.lu/sighting/afaeef93-8be4-4ce3-a398-4be99bb34d3a/export {"uuid": "afaeef93-8be4-4ce3-a398-4be99bb34d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqiccl5662x", "content": "CVE-2026-48060 - Litestar: HTML Injection Through CSRF Token\nCVE ID : CVE-2026-48060\n \n Published : July 28, 2026, 8:17 p.m. | 2\u00a0hours, 20\u00a0minutes ago\n \n Description : Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar inst...", "creation_timestamp": "2026-07-28T22:43:16.619038Z"} {"uuid": "afaeef93-8be4-4ce3-a398-4be99bb34d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48060", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mrqiccl5662x", "content": "CVE-2026-48060 - Litestar: HTML Injection Through CSRF Token\nCVE ID : CVE-2026-48060\n \n Published : July 28, 2026, 8:17 p.m. | 2\u00a0hours, 20\u00a0minutes ago\n \n Description : Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. Prior to version 2.20.0, Litestar inst...", "creation_timestamp": "2026-07-28T22:43:16.619038Z"} https://vulnerability.circl.lu/sighting/afaeef93-8be4-4ce3-a398-4be99bb34d3a/export Tue, 28 Jul 2026 22:43:16 +0000 https://vulnerability.circl.lu/sighting/acc8dca6-6c5a-4cde-8962-b870cf2fd48c/export {"uuid": "acc8dca6-6c5a-4cde-8962-b870cf2fd48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116941397090424685", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:15:11.480005Z"} {"uuid": "acc8dca6-6c5a-4cde-8962-b870cf2fd48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116941397090424685", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:15:11.480005Z"} https://vulnerability.circl.lu/sighting/acc8dca6-6c5a-4cde-8962-b870cf2fd48c/export Sat, 18 Jul 2026 14:15:11 +0000 https://vulnerability.circl.lu/sighting/4f7514f2-9e6a-4cea-a026-50c17d62a32f/export {"uuid": "4f7514f2-9e6a-4cea-a026-50c17d62a32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqwha4guu32t", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:14:56.220121Z"} {"uuid": "4f7514f2-9e6a-4cea-a026-50c17d62a32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqwha4guu32t", "content": "CVE-2026-48062 - Unpatched Code Execution in CodeIgniter. MIME validation bypass allows PHP file upload with GIF content. CVSS 9.8. Update to 4.7.3 immediately. #CVE #CodeIgniter #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-48062/", "creation_timestamp": "2026-07-18T14:14:56.220121Z"} https://vulnerability.circl.lu/sighting/4f7514f2-9e6a-4cea-a026-50c17d62a32f/export Sat, 18 Jul 2026 14:14:56 +0000 https://vulnerability.circl.lu/sighting/97fad8ff-7f7c-4637-88c5-c328b759298e/export {"uuid": "97fad8ff-7f7c-4637-88c5-c328b759298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvoemqk32a", "content": "\ud83d\udd34 CVE-2026-48062 - Critical (9.8)\n\nCodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48062/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T09:00:47.434271Z"} {"uuid": "97fad8ff-7f7c-4637-88c5-c328b759298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqvvoemqk32a", "content": "\ud83d\udd34 CVE-2026-48062 - Critical (9.8)\n\nCodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-48062/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-18T09:00:47.434271Z"} https://vulnerability.circl.lu/sighting/97fad8ff-7f7c-4637-88c5-c328b759298e/export Sat, 18 Jul 2026 09:00:47 +0000 https://vulnerability.circl.lu/sighting/f0cdd9eb-6c20-48a3-a4df-0a49b133788f/export {"uuid": "f0cdd9eb-6c20-48a3-a4df-0a49b133788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j", "content": "CVE-2026-48062 - framework\nCodeIgniter4, a popular web development framework, has a security issue that allows malicious PHP files to be uploaded. This can happen if your application allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#framework #codeigniter4 #composer #CVE #infosec", "creation_timestamp": "2026-07-17T21:20:04.737105Z"} {"uuid": "f0cdd9eb-6c20-48a3-a4df-0a49b133788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mquojfihof2j", "content": "CVE-2026-48062 - framework\nCodeIgniter4, a popular web development framework, has a security issue that allows malicious PHP files to be uploaded. This can happen if your application allows\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#framework #codeigniter4 #composer #CVE #infosec", "creation_timestamp": "2026-07-17T21:20:04.737105Z"} https://vulnerability.circl.lu/sighting/f0cdd9eb-6c20-48a3-a4df-0a49b133788f/export Fri, 17 Jul 2026 21:20:04 +0000 https://vulnerability.circl.lu/sighting/4d18488c-d9d8-4481-a240-65dadee65405/export {"uuid": "4d18488c-d9d8-4481-a240-65dadee65405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483", "content": "\u26a0\ufe0f CVE-2026-48062: CodeIgniter4 RCE RiskCodeIgniter4 has a critical ext_in upload validation bypass with a CVSS 9.8 severity score.\nUnder unsafe upload configurations, a malicious file may bypass extension checks and potentially lead to remote code execution.\nFOFA reports 14,862 matching CodeIgniter results over the past year.\nRisk conditions:\n\u2022 User-controlled uploads\u2022 ext_in used for validation\u2022 Original filenames preserved\u2022 Uploads stored in a web-accessible path\u2022 Script execution allowed in that directory\nPatch: upgrade to CodeIgniter4 4.7.3+\nFOFA Query: app=\"CodeIgniter\"\nFOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJDb2RlSWduaXRlciI=\nSearch results are not confirmed vulnerable hosts. Validate before taking action.", "creation_timestamp": "2026-07-07T18:06:56.031469Z"} {"uuid": "4d18488c-d9d8-4481-a240-65dadee65405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48062", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116880021750277483", "content": "\u26a0\ufe0f CVE-2026-48062: CodeIgniter4 RCE RiskCodeIgniter4 has a critical ext_in upload validation bypass with a CVSS 9.8 severity score.\nUnder unsafe upload configurations, a malicious file may bypass extension checks and potentially lead to remote code execution.\nFOFA reports 14,862 matching CodeIgniter results over the past year.\nRisk conditions:\n\u2022 User-controlled uploads\u2022 ext_in used for validation\u2022 Original filenames preserved\u2022 Uploads stored in a web-accessible path\u2022 Script execution allowed in that directory\nPatch: upgrade to CodeIgniter4 4.7.3+\nFOFA Query: app=\"CodeIgniter\"\nFOFA Link: https://en.fofa.info/result?qbase64=YXBwPSJDb2RlSWduaXRlciI=\nSearch results are not confirmed vulnerable hosts. Validate before taking action.", "creation_timestamp": "2026-07-07T18:06:56.031469Z"} https://vulnerability.circl.lu/sighting/4d18488c-d9d8-4481-a240-65dadee65405/export Tue, 07 Jul 2026 18:06:56 +0000 https://vulnerability.circl.lu/sighting/1db80562-09dc-4a7c-abe7-7ec8f41ec799/export {"uuid": "1db80562-09dc-4a7c-abe7-7ec8f41ec799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow55cb5tf2k", "content": "CVE-2026-48067 - Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields\nCVE ID : CVE-2026-48067\n \n Published : June 22, 2026, 9:46 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : Filament is a collection of full-stack components for accelera...", "creation_timestamp": "2026-06-23T00:24:00.884674Z"} {"uuid": "1db80562-09dc-4a7c-abe7-7ec8f41ec799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48067", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mow55cb5tf2k", "content": "CVE-2026-48067 - Filament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fields\nCVE ID : CVE-2026-48067\n \n Published : June 22, 2026, 9:46 p.m. | 1\u00a0hour, 57\u00a0minutes ago\n \n Description : Filament is a collection of full-stack components for accelera...", "creation_timestamp": "2026-06-23T00:24:00.884674Z"} https://vulnerability.circl.lu/sighting/1db80562-09dc-4a7c-abe7-7ec8f41ec799/export Tue, 23 Jun 2026 00:24:00 +0000