https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 19 Sep 2026 06:42:11 +0000 https://vulnerability.circl.lu/sighting/8bdbb12d-8f99-40fe-9a50-833da8e006d2/export {"uuid": "8bdbb12d-8f99-40fe-9a50-833da8e006d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvck5r2qsc2o", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:20:02.264259Z"} {"uuid": "8bdbb12d-8f99-40fe-9a50-833da8e006d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mvck5r2qsc2o", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:20:02.264259Z"} https://vulnerability.circl.lu/sighting/8bdbb12d-8f99-40fe-9a50-833da8e006d2/export Sat, 12 Sep 2026 07:20:02 +0000 https://vulnerability.circl.lu/sighting/3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9/export {"uuid": "3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117256814743157528", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:10:10.711757Z"} {"uuid": "3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75170", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/117256814743157528", "content": "CVE-2026-75170: Unauthenticated XSS in HubCore 14.1.1 via /loginController/doLogin language param. CVSS N/A, no patch yet. Attackers can inject arbitrary JS. Audit exposure and restrict access now. Details: https://www.valtersit.com/cve/CVE-2026-75170/ #CVE #infosec #XSS", "creation_timestamp": "2026-09-12T07:10:10.711757Z"} https://vulnerability.circl.lu/sighting/3cc06dfb-a5ab-49b0-ad9c-6e4a6b4acce9/export Sat, 12 Sep 2026 07:10:10 +0000