https://vulnerability.circl.lu/sightings/feed 2026-09-17T13:14:40.717763+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/5f6c90ac-2e3e-47b0-9aec-697e333e738d/export 2026-09-17T13:14:40.723428+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5f6c90ac-2e3e-47b0-9aec-697e333e738d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/joomla_http_header_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Marc-Alexandre Montpas\", \"Christian Mehlmauer \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Joomla suffers from an unauthenticated remote code execution that affects all versions from 1.5.0 to 3.4.5.\\n By storing user supplied headers in the databases session table it's possible to truncate the input\\n by sending an UTF-8 character. The custom created payload is then executed once the session is read\\n from the database. You also need to have a PHP version before 5.4.45 (including 5.3.x), 5.5.29 or 5.6.13.\\n In later versions the deserialisation of invalid session data stops on the first error and the\\n exploit will not work. The PHP Patch was included in Ubuntu versions 5.5.9+dfsg-1ubuntu4.13 and\\n 5.3.10-1ubuntu3.20 and in Debian in version 5.4.45-0+deb7u1.\", \"disclosure_date\": \"2015-12-14\", \"fullname\": \"exploit/multi/http/joomla_http_header_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"Joomla HTTP Header Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/joomla_http_header_rce.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/joomla_http_header_rce\", \"references\": [\"CVE-2015-8562\", \"EDB-38977\", \"EDB-39033\", \"URL-http://web.archive.org/web/20250117165939/https://blog.sucuri.net/2015/12/joomla-remote-code-execution-the-details.html\", \"URL-http://web.archive.org/web/20250220041731/https://blog.sucuri.net/2015/12/remote-command-execution-vulnerability-in-joomla.html\", \"URL-https://developer.joomla.org/security-centre/630-20151214-core-remote-code-execution-vulnerability.html\", \"URL-https://blog.patrolserver.com/2015/12/17/in-depth-analyses-of-the-joomla-0-day-user-agent-exploit/\", \"URL-https://translate.google.com/translate?hl=en&sl=auto&tl=en&u=http%3A%2F%2Fdrops.wooyun.org%2Fpapers%2F11330\", \"URL-https://translate.google.com/translate?hl=en&sl=auto&tl=en&u=http%3A%2F%2Fwww.freebuf.com%2Fvuls%2F89754.html\", \"URL-https://bugs.php.net/bug.php?id=70219\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Joomla 1.5.0 - 3.4.5\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:00.061016Z"} 2026-09-08T06:50:00.061016+00:00 https://vulnerability.circl.lu/sighting/88957155-c62f-446a-be5a-82fd36478689/export 2026-09-17T13:14:40.724750+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "88957155-c62f-446a-be5a-82fd36478689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "published-proof-of-concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "content": "", "creation_timestamp": "2026-09-03T00:00:59.806806Z"} 2026-09-03T00:00:59.806806+00:00 https://vulnerability.circl.lu/sighting/d2e4d1fc-c952-4880-bb3b-50ce96177d5b/export 2026-09-17T13:14:40.724882+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d2e4d1fc-c952-4880-bb3b-50ce96177d5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "published-proof-of-concept", "source": "Telegram/gaBdUAEEWVgUcYnHku1FjILsSJN1BtvDBCiJZ9Y-qG01X4M", "content": "", "creation_timestamp": "2026-09-02T01:00:04.236223Z"} 2026-09-02T01:00:04.236223+00:00 https://vulnerability.circl.lu/sighting/31e81e26-5f30-4697-95c3-77e796cbe85c/export 2026-09-17T13:14:40.724990+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "31e81e26-5f30-4697-95c3-77e796cbe85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-08)", "content": "", "creation_timestamp": "2026-08-09T11:43:04.990316Z"} 2026-08-09T11:43:04.990316+00:00 https://vulnerability.circl.lu/sighting/3d4f9888-59aa-4fff-ab88-3fe5055cfd21/export 2026-09-17T13:14:40.725084+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3d4f9888-59aa-4fff-ab88-3fe5055cfd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-27)", "content": "", "creation_timestamp": "2026-07-28T10:15:24.042359Z"} 2026-07-28T10:15:24.042359+00:00 https://vulnerability.circl.lu/sighting/08ee5c98-f7d3-4d74-8ad7-5ed09dafe1ff/export 2026-09-17T13:14:40.725177+00:00 Cédric Bonhomme https://cvepremium.circl.lu/user/cedric {"uuid": "08ee5c98-f7d3-4d74-8ad7-5ed09dafe1ff", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2015-8562", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da9dfb3d-1712-4941-8114-ffd60a28f73c", "content": "", "creation_timestamp": "2026-06-30T12:40:26.737232Z"} 2026-06-30T12:40:26.737232+00:00 https://vulnerability.circl.lu/sighting/73972342-401e-4d73-9641-297b2db98c7a/export 2026-09-17T13:14:40.726142+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "73972342-401e-4d73-9641-297b2db98c7a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/da7b4e3b-1802-41d3-8dd8-2deeda750be4", "content": "", "creation_timestamp": "2026-06-23T14:04:06.768872Z"} 2026-06-23T14:04:06.768872+00:00 https://vulnerability.circl.lu/sighting/e2bb6347-abc0-4aa0-a4da-d66a21afb573/export 2026-09-17T13:14:40.726255+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e2bb6347-abc0-4aa0-a4da-d66a21afb573", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8562", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ef8abf2b-68d3-4fc7-ad1f-6ec995305355", "content": "", "creation_timestamp": "2026-06-19T16:45:34.698694Z"} 2026-06-19T16:45:34.698694+00:00 https://vulnerability.circl.lu/sighting/10703002-9aa0-47fb-91eb-d643e03297a1/export 2026-09-17T13:14:40.726351+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "10703002-9aa0-47fb-91eb-d643e03297a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-8522", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/80402", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #Remote\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2015-8522.RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a damariion\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-15 10:58:15\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTivoli FastBack Server (6.1.4) is vulnerable to a stack-based buffer overflow allowing threat-actors to gain Arbitrary Code Execution (ACE) via a remote TCP-connection. The PoC provided in this repository leverages this vulnerability to establish a reverse-shell.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-15T11:00:41.000000Z"} 2026-04-15T11:00:41+00:00 https://vulnerability.circl.lu/sighting/6b581a7f-eb0d-43c5-a2aa-a6bc0ecb1427/export 2026-09-17T13:14:40.726455+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "6b581a7f-eb0d-43c5-a2aa-a6bc0ecb1427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2015-8553", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} 2026-03-19T00:00:00+00:00