https://vulnerability.circl.lu/sightings/feed 2026-09-17T18:01:53.557875+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e79c5d06-9cda-472f-b409-2950835bac7d/export 2026-09-17T18:01:53.571969+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e79c5d06-9cda-472f-b409-2950835bac7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1939", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mspisrcy632r", "content": "CVE-2024-1939 is trending. Hype score 2, currently #9 on cvemon.\n\nType Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)\n\nhttps://cvemon.intruder.io/cves/CVE-2024-1939", "creation_timestamp": "2026-08-10T06:45:00.773195Z"} 2026-08-10T06:45:00.773195+00:00 https://vulnerability.circl.lu/sighting/59c127e6-558a-45f1-8b70-33d77dcb5670/export 2026-09-17T18:01:53.574107+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "59c127e6-558a-45f1-8b70-33d77dcb5670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-1975", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"} 2026-03-19T00:00:00+00:00 https://vulnerability.circl.lu/sighting/1f0484ae-9670-4654-b0aa-945852ab48a4/export 2026-09-17T18:01:53.575142+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1f0484ae-9670-4654-b0aa-945852ab48a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1986", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12076", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1986\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Booster Elite for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wc_add_new_product() function in all versions up to, and including, 7.1.7. This makes it possible for customer-level attackers, and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. This is only exploitable when the user product upload functionality is enabled.\n\ud83d\udccf Published: 2024-03-07T20:33:26.566Z\n\ud83d\udccf Modified: 2025-04-16T15:51:53.554Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c9c2fb7f-a05b-4852-97eb-7befe880d703?source=cve\n2. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L322\n3. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L333\n4. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L132\n5. https://plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-add-form-shortcodes.php#L138\n6. https://booster.io/\n7. https://wordpress.org/plugins/woocommerce-jetpack/", "creation_timestamp": "2025-04-16T15:55:57.000000Z"} 2025-04-16T15:55:57+00:00 https://vulnerability.circl.lu/sighting/b6d5e5f3-7177-41cf-b9e1-5cd6acf9251a/export 2026-09-17T18:01:53.575256+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b6d5e5f3-7177-41cf-b9e1-5cd6acf9251a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1905", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8987", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1905\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\ud83d\udccf Published: 2024-04-29T06:00:01.340Z\n\ud83d\udccf Modified: 2025-03-26T20:55:41.470Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b9a448d2-4bc2-4933-8743-58c8768a619f/", "creation_timestamp": "2025-03-26T21:25:54.000000Z"} 2025-03-26T21:25:54+00:00 https://vulnerability.circl.lu/sighting/c79178b2-d3e1-48ae-b7d2-db1843c43bfd/export 2026-09-17T18:01:53.575340+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c79178b2-d3e1-48ae-b7d2-db1843c43bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1964", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrzofie2c", "content": "", "creation_timestamp": "2025-02-11T02:18:15.871178Z"} 2025-02-11T02:18:15.871178+00:00 https://vulnerability.circl.lu/sighting/9557a881-0d81-45ea-be8f-999fdc08b323/export 2026-09-17T18:01:53.575410+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9557a881-0d81-45ea-be8f-999fdc08b323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1944", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulrxacwn23", "content": "", "creation_timestamp": "2025-02-11T02:18:13.368744Z"} 2025-02-11T02:18:13.368744+00:00 https://vulnerability.circl.lu/sighting/64e84e8d-efa9-4c6a-8dbf-7134ee9c4b19/export 2026-09-17T18:01:53.575476+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "64e84e8d-efa9-4c6a-8dbf-7134ee9c4b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1985", "type": "seen", "source": "Telegram/BK7vU0I6yfagEhXMrVTZB4ZUCw3752Z1EN6agKCE0RvRxSvG", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"} 2025-02-06T02:44:19+00:00 https://vulnerability.circl.lu/sighting/a7060499-2a02-487a-a229-e48ee556911b/export 2026-09-17T18:01:53.575543+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a7060499-2a02-487a-a229-e48ee556911b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1991", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-1991\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The RegistrationMagic \u2013 Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the update_users_role() function in all versions up to, and including, 5.3.0.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to escalate their privileges to that of an administrator\n\ud83d\udccf Published: 2024-04-09T21:31:59Z\n\ud83d\udccf Modified: 2025-01-31T03:32:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-1991\n2. https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk//services/class_rm_user_services.php#L1205\n3. https://plugins.trac.wordpress.org/changeset/3049490/custom-registration-form-builder-with-submission-manager#file24\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/766e3966-157a-4db3-9179-813032343f76?source=cve", "creation_timestamp": "2025-01-31T04:13:06.000000Z"} 2025-01-31T04:13:06+00:00 https://vulnerability.circl.lu/sighting/a958b283-f4fa-4c19-9c37-b0ca824c6605/export 2026-09-17T18:01:53.575630+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a958b283-f4fa-4c19-9c37-b0ca824c6605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1947", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113549980676758562", "content": "", "creation_timestamp": "2024-11-26T15:33:23.922653Z"} 2024-11-26T15:33:23.922653+00:00 https://vulnerability.circl.lu/sighting/0130455c-bd81-4ca3-bc3a-0341afe191ef/export 2026-09-17T18:01:53.575700+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0130455c-bd81-4ca3-bc3a-0341afe191ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-1931", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8256", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCVE-2024-1931-reproduction\nURL\uff1ahttps://github.com/passer12/CVE-2024-1931-reproduction\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-13T14:11:37.000000Z"} 2024-08-13T14:11:37+00:00