https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 07:40:11 +0000 https://vulnerability.circl.lu/sighting/f98e9158-e861-445e-94bd-16cbc04eafdc/export {"uuid": "f98e9158-e861-445e-94bd-16cbc04eafdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrddbcz2g", "content": "Daily IT Security Digest \u2014 2026-07-21\n[Source](https://radar.offseq.com/threat/cve-2026-64625) | [Mastodon](https://infosec.exchange/@offseq/116956084555779110)\n\n**2. Windows Zero-Day Exploit (Nightmare Eclipse/GreatXML) Bypasses BitLocker**\nSecurity researcher Nightmare Eclipse has exposed exploit", "creation_timestamp": "2026-07-21T05:02:39.889675Z"} {"uuid": "f98e9158-e861-445e-94bd-16cbc04eafdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrddbcz2g", "content": "Daily IT Security Digest \u2014 2026-07-21\n[Source](https://radar.offseq.com/threat/cve-2026-64625) | [Mastodon](https://infosec.exchange/@offseq/116956084555779110)\n\n**2. Windows Zero-Day Exploit (Nightmare Eclipse/GreatXML) Bypasses BitLocker**\nSecurity researcher Nightmare Eclipse has exposed exploit", "creation_timestamp": "2026-07-21T05:02:39.889675Z"} https://vulnerability.circl.lu/sighting/f98e9158-e861-445e-94bd-16cbc04eafdc/export Tue, 21 Jul 2026 05:02:39 +0000 https://vulnerability.circl.lu/sighting/3f24729b-04cc-4053-9ee0-24b2170b7242/export {"uuid": "3f24729b-04cc-4053-9ee0-24b2170b7242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrcsgs52u", "content": "Daily IT Security Digest \u2014 2026-07-21\n# Daily IT Security Digest \u2014 2026-07-21\n\n**1. CVE-2026-64625: Critical OS Command Injection in WWBN AVideo**\nA critical remote code execution vulnerability exists in WWBN AVideo versions prior to 29.0, specifically within the Live plugin's `on_publish.php`", "creation_timestamp": "2026-07-21T05:02:39.256177Z"} {"uuid": "3f24729b-04cc-4053-9ee0-24b2170b7242", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mr4zrcsgs52u", "content": "Daily IT Security Digest \u2014 2026-07-21\n# Daily IT Security Digest \u2014 2026-07-21\n\n**1. CVE-2026-64625: Critical OS Command Injection in WWBN AVideo**\nA critical remote code execution vulnerability exists in WWBN AVideo versions prior to 29.0, specifically within the Live plugin's `on_publish.php`", "creation_timestamp": "2026-07-21T05:02:39.256177Z"} https://vulnerability.circl.lu/sighting/3f24729b-04cc-4053-9ee0-24b2170b7242/export Tue, 21 Jul 2026 05:02:39 +0000 https://vulnerability.circl.lu/sighting/781381f0-832e-4a43-895d-0671912149fc/export {"uuid": "781381f0-832e-4a43-895d-0671912149fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr4xxpc4fb2r", "content": "WWBN AVideo <29.0 hit by CRITICAL OS command injection (CVE-2026-64625). Remote code execution possible via Live plugin on_publish.php. Restrict endpoint & check for updates. https://radar.offseq.com/threat/cve-2026-64625-improper-neutralization-of-special-elements-used-in-an-os-command-os-comman...", "creation_timestamp": "2026-07-21T04:30:26.509633Z"} {"uuid": "781381f0-832e-4a43-895d-0671912149fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr4xxpc4fb2r", "content": "WWBN AVideo <29.0 hit by CRITICAL OS command injection (CVE-2026-64625). Remote code execution possible via Live plugin on_publish.php. Restrict endpoint & check for updates. https://radar.offseq.com/threat/cve-2026-64625-improper-neutralization-of-special-elements-used-in-an-os-command-os-comman...", "creation_timestamp": "2026-07-21T04:30:26.509633Z"} https://vulnerability.circl.lu/sighting/781381f0-832e-4a43-895d-0671912149fc/export Tue, 21 Jul 2026 04:30:26 +0000 https://vulnerability.circl.lu/sighting/a5e03753-0090-4ff1-a202-1d80f2cc9794/export {"uuid": "a5e03753-0090-4ff1-a202-1d80f2cc9794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116956084555779110", "content": "CVE-2026-64625 (CRITICAL): OS command injection in WWBN AVideo <29.0 via Live plugin's on_publish.php. Bypasses escapeshellarg(), enabling remote code execution. Restrict access & upgrade if possible. https://radar.offseq.com/threat/cve-2026-64625-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-2085999102bd753d #OffSeq #CVE202664625 #WWBNAVideo #infosec", "creation_timestamp": "2026-07-21T04:30:24.608520Z"} {"uuid": "a5e03753-0090-4ff1-a202-1d80f2cc9794", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-64625", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116956084555779110", "content": "CVE-2026-64625 (CRITICAL): OS command injection in WWBN AVideo <29.0 via Live plugin's on_publish.php. Bypasses escapeshellarg(), enabling remote code execution. Restrict access & upgrade if possible. https://radar.offseq.com/threat/cve-2026-64625-improper-neutralization-of-special-elements-used-in-an-os-command-os-command-injection-2085999102bd753d #OffSeq #CVE202664625 #WWBNAVideo #infosec", "creation_timestamp": "2026-07-21T04:30:24.608520Z"} https://vulnerability.circl.lu/sighting/a5e03753-0090-4ff1-a202-1d80f2cc9794/export Tue, 21 Jul 2026 04:30:24 +0000 https://vulnerability.circl.lu/sighting/5b564ec9-bf42-4e00-9011-6be246ec2285/export {"uuid": "5b564ec9-bf42-4e00-9011-6be246ec2285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4iuofsq62x", "content": "CVE-2026-64625 - AVideo before 29.0 OS Command Injection via execAsync\nCVE ID : CVE-2026-64625\n \n Published : July 20, 2026, 10:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped...", "creation_timestamp": "2026-07-21T00:00:18.412884Z"} {"uuid": "5b564ec9-bf42-4e00-9011-6be246ec2285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr4iuofsq62x", "content": "CVE-2026-64625 - AVideo before 29.0 OS Command Injection via execAsync\nCVE ID : CVE-2026-64625\n \n Published : July 20, 2026, 10:17 p.m. | 1\u00a0hour, 25\u00a0minutes ago\n \n Description : AVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escaped...", "creation_timestamp": "2026-07-21T00:00:18.412884Z"} https://vulnerability.circl.lu/sighting/5b564ec9-bf42-4e00-9011-6be246ec2285/export Tue, 21 Jul 2026 00:00:18 +0000 https://vulnerability.circl.lu/sighting/c48e923f-895e-425e-98ee-3312d44d6ae9/export {"uuid": "c48e923f-895e-425e-98ee-3312d44d6ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fk6afcg2l", "content": "\ud83d\udd34 CVE-2026-64625 - Critical (9.8)\n\nAVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escap...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-64625/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T23:00:44.944669Z"} {"uuid": "c48e923f-895e-425e-98ee-3312d44d6ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr4fk6afcg2l", "content": "\ud83d\udd34 CVE-2026-64625 - Critical (9.8)\n\nAVideo before 29.0 contains an incomplete fix for CVE-2026-45578 where execAsync() re-wraps escap...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-64625/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T23:00:44.944669Z"} https://vulnerability.circl.lu/sighting/c48e923f-895e-425e-98ee-3312d44d6ae9/export Mon, 20 Jul 2026 23:00:44 +0000 https://vulnerability.circl.lu/sighting/920f4974-56c0-488d-9513-2e0842af9d73/export {"uuid": "920f4974-56c0-488d-9513-2e0842af9d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4epx577v2v", "content": "CVE-2026-64625 - avideo\nAVideo versions before 29.0 have a security flaw that allows hackers to execute malicious system commands. This could lead to unauthorized access or data theft. Update to version 29.0 or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-07-20T22:46:04.737277Z"} {"uuid": "920f4974-56c0-488d-9513-2e0842af9d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-64625", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4epx577v2v", "content": "CVE-2026-64625 - avideo\nAVideo versions before 29.0 have a security flaw that allows hackers to execute malicious system commands. This could lead to unauthorized access or data theft. Update to version 29.0 or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#avideo #wwbn #CVE #infosec", "creation_timestamp": "2026-07-20T22:46:04.737277Z"} https://vulnerability.circl.lu/sighting/920f4974-56c0-488d-9513-2e0842af9d73/export Mon, 20 Jul 2026 22:46:04 +0000