https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 04:48:17 +0000 https://vulnerability.circl.lu/sighting/468b1788-2200-465a-a4f5-7679c299b881/export {"uuid": "468b1788-2200-465a-a4f5-7679c299b881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84434\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms \u22643.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T00:00:06.868607Z"} {"uuid": "468b1788-2200-465a-a4f5-7679c299b881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84434\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms \u22643.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-20T00:00:06.868607Z"} https://vulnerability.circl.lu/sighting/468b1788-2200-465a-a4f5-7679c299b881/export Sun, 20 Sep 2026 00:00:06 +0000 https://vulnerability.circl.lu/sighting/163f1cec-a9ab-453a-8ca2-2e1ca4197e9c/export {"uuid": "163f1cec-a9ab-453a-8ca2-2e1ca4197e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84434\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms \u22643.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T22:00:04.604142Z"} {"uuid": "163f1cec-a9ab-453a-8ca2-2e1ca4197e9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102803", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-84434\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-19 20:28:34\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-84434: unauthenticated arbitrary file upload in Gravity Forms \u22643.1.0.4 via hidden File Upload fields. Python check/exploit/mass scan.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-19T22:00:04.604142Z"} https://vulnerability.circl.lu/sighting/163f1cec-a9ab-453a-8ca2-2e1ca4197e9c/export Sat, 19 Sep 2026 22:00:04 +0000 https://vulnerability.circl.lu/sighting/55fdf1db-6b22-43d5-8b72-0c136fb9e0da/export {"uuid": "55fdf1db-6b22-43d5-8b72-0c136fb9e0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.227980Z"} {"uuid": "55fdf1db-6b22-43d5-8b72-0c136fb9e0da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://gist.github.com/ichintu/3891ce0c6380cb100014a71d3f634404", "content": "This daily threat intelligence briefing highlights three critical security developments:\n\n- **Supply Chain Breach & Credential Theft:** CrowdSec reported that a May supply chain attack on TanStack npm packages compromised employee credentials. An unrevoked GitHub account belonging to a departed employee was exploited to copy ~170 private repositories.\n- **CISA KEV Catalog Updates:** CISA added three actively exploited Linux kernel vulnerabilities, plus flaws in Acronis Backup and Google Pixel, to its Known Exploited Vulnerabilities catalog.\n- **Critical Public Vulnerabilities:**\n \u2022 **Totolink Routers:** CVE-2026-93741 (CVSS 10.0) is a publicly exploitable remote buffer overflow in A3002MU firmware.\n \u2022 **Docker Desktop:** CVE-2026-77179 details a hypervisor escape vulnerability affecting macOS environments.\n \u2022 **WordPress Gravity Forms:** CVE-2026-84434 (CVSS 9.8) allows unauthenticated attackers to bypass file validation and achieve remote code execution.\n\n**Recommendation:** Organizations should immediately patch affected software, revoke unused or departed-employee credentials, and monitor CISA alerts for active exploitation indicators.", "creation_timestamp": "2026-09-19T08:02:12.227980Z"} https://vulnerability.circl.lu/sighting/55fdf1db-6b22-43d5-8b72-0c136fb9e0da/export Sat, 19 Sep 2026 08:02:12 +0000 https://vulnerability.circl.lu/sighting/ee3960dc-d25c-435d-b60f-d76ac60859d0/export {"uuid": "ee3960dc-d25c-435d-b60f-d76ac60859d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4ky3oiv2p", "content": "\ud83d\udd34 CVE-2026-84434 - Critical (9.8)\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:49.888889Z"} {"uuid": "ee3960dc-d25c-435d-b60f-d76ac60859d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvu4ky3oiv2p", "content": "\ud83d\udd34 CVE-2026-84434 - Critical (9.8)\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up ...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-84434/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-19T07:04:49.888889Z"} https://vulnerability.circl.lu/sighting/ee3960dc-d25c-435d-b60f-d76ac60859d0/export Sat, 19 Sep 2026 07:04:49 +0000 https://vulnerability.circl.lu/sighting/ed2914ad-c797-496f-86a9-2d04c5f39aea/export {"uuid": "ed2914ad-c797-496f-86a9-2d04c5f39aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvttwcl4zk2b", "content": "CVE-2026-84434\nAll versions of the Gravity Forms plug\u2011in for WordPress up to 3.1.0.4 allow anyone on the internet to place a hidden file\u2011upload field on a public form and bypass the checks that normally block dangerous files.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T04:30:04.840522Z"} {"uuid": "ed2914ad-c797-496f-86a9-2d04c5f39aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvttwcl4zk2b", "content": "CVE-2026-84434\nAll versions of the Gravity Forms plug\u2011in for WordPress up to 3.1.0.4 allow anyone on the internet to place a hidden file\u2011upload field on a public form and bypass the checks that normally block dangerous files.\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-19T04:30:04.840522Z"} https://vulnerability.circl.lu/sighting/ed2914ad-c797-496f-86a9-2d04c5f39aea/export Sat, 19 Sep 2026 04:30:04 +0000 https://vulnerability.circl.lu/sighting/46a590b9-7bc0-4f5f-81b5-e50d020a3bd5/export {"uuid": "46a590b9-7bc0-4f5f-81b5-e50d020a3bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtsnjwiun2j", "content": "\ud83d\udea8 CVE-2026-84434 \u2014 CVSS 9.8 CRITICAL\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84434\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:16.551427Z"} {"uuid": "46a590b9-7bc0-4f5f-81b5-e50d020a3bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-84434", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvtsnjwiun2j", "content": "\ud83d\udea8 CVE-2026-84434 \u2014 CVSS 9.8 CRITICAL\n\nThe Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and in...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-84434\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-19T04:07:16.551427Z"} https://vulnerability.circl.lu/sighting/46a590b9-7bc0-4f5f-81b5-e50d020a3bd5/export Sat, 19 Sep 2026 04:07:16 +0000