https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 18 Sep 2026 05:17:03 +0000 https://vulnerability.circl.lu/sighting/01ee51fd-c8e2-473c-9047-e2268aa502a8/export {"uuid": "01ee51fd-c8e2-473c-9047-e2268aa502a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.936109Z"} {"uuid": "01ee51fd-c8e2-473c-9047-e2268aa502a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://gist.github.com/ichintu/4bf7ae5351bf31e7fd8a71db957a56bc", "content": "This threat intelligence briefing highlights four key developments:\n\n\u2022 **Iranian Hacktivism:** The Iran-linked Handala Hack group is deploying the HEAVYGRAM Telegram backdoor and CRUDEEXCLUDE utility to execute remote commands, steal credentials, exfiltrate session data, and capture screenshots.\n\u2022 **AI Agent Vulnerabilities:** AI systems using the Model Context Protocol (MCP) are exposed to attacks via untrusted tool descriptions, enabling metadata poisoning and context manipulation. Experts recommend pinning descriptions, treating them as untrusted input, and applying cryptographic hashing.\n\u2022 **Critical CVEs:** Azure Billing (CVE-2026-62874, CVSS 10.0) contains a privilege escalation flaw due to insufficient data verification. WeGIA charity software (CVE-2026-54670, CVSS 9.1) suffers from unauthenticated auth bypass and local file inclusion, allowing data/financial manipulation; patched in v3.8.5.", "creation_timestamp": "2026-09-18T04:01:52.936109Z"} https://vulnerability.circl.lu/sighting/01ee51fd-c8e2-473c-9047-e2268aa502a8/export Fri, 18 Sep 2026 04:01:52 +0000 https://vulnerability.circl.lu/sighting/ce4f3576-f89d-40b4-a403-6fbfbda8844a/export {"uuid": "ce4f3576-f89d-40b4-a403-6fbfbda8844a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqzxh6da62t", "content": "CVE-2026-54670 - wegia\nThe web manager used by charities (versions before 3.8.5) does not properly check who can call certain functions. This means anyone on the internet can see donation records,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wegia #labredescefetrj #CVE #infosec", "creation_timestamp": "2026-09-18T01:40:06.158501Z"} {"uuid": "ce4f3576-f89d-40b4-a403-6fbfbda8844a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvqzxh6da62t", "content": "CVE-2026-54670 - wegia\nThe web manager used by charities (versions before 3.8.5) does not properly check who can call certain functions. This means anyone on the internet can see donation records,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#wegia #labredescefetrj #CVE #infosec", "creation_timestamp": "2026-09-18T01:40:06.158501Z"} https://vulnerability.circl.lu/sighting/ce4f3576-f89d-40b4-a403-6fbfbda8844a/export Fri, 18 Sep 2026 01:40:06 +0000 https://vulnerability.circl.lu/sighting/f2491dc6-e269-44e7-a832-e8084bd68dba/export {"uuid": "f2491dc6-e269-44e7-a832-e8084bd68dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqusonzzo2t", "content": "\ud83d\udea8 CVE-2026-54670 \u2014 CVSS 9.1 CRITICAL\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54670\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:07:57.804184Z"} {"uuid": "f2491dc6-e269-44e7-a832-e8084bd68dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvqusonzzo2t", "content": "\ud83d\udea8 CVE-2026-54670 \u2014 CVSS 9.1 CRITICAL\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request dispatcher in ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-54670\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T00:07:57.804184Z"} https://vulnerability.circl.lu/sighting/f2491dc6-e269-44e7-a832-e8084bd68dba/export Fri, 18 Sep 2026 00:07:57 +0000 https://vulnerability.circl.lu/sighting/8de03a05-9eef-494b-b6eb-15528ddd1400/export {"uuid": "8de03a05-9eef-494b-b6eb-15528ddd1400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4mzuzc24", "content": "\ud83d\udd34 CVE-2026-54670 - Critical (9.1)\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request disp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54670/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:57.773370Z"} {"uuid": "8de03a05-9eef-494b-b6eb-15528ddd1400", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-54670", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvqr4mzuzc24", "content": "\ud83d\udd34 CVE-2026-54670 - Critical (9.1)\n\nWeGIA is a web manager for charitable institutions. Prior to 3.8.5, the contribution request disp...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-54670/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-17T23:01:57.773370Z"} https://vulnerability.circl.lu/sighting/8de03a05-9eef-494b-b6eb-15528ddd1400/export Thu, 17 Sep 2026 23:01:57 +0000