https://vulnerability.circl.lu/sightings/feed 2026-09-17T15:45:33.564348+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/4e2ac909-da60-474c-8fac-9182df751409/export 2026-09-17T15:45:33.613340+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4e2ac909-da60-474c-8fac-9182df751409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:00:06.310446Z"} 2026-09-17T10:00:06.310446+00:00 https://vulnerability.circl.lu/sighting/75e9157c-98c9-4a12-b01c-9d8ee150c3cd/export 2026-09-17T15:45:33.616323+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "75e9157c-98c9-4a12-b01c-9d8ee150c3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:08.233530Z"} 2026-09-15T10:00:08.233530+00:00 https://vulnerability.circl.lu/sighting/2ab396fc-ea55-40e2-895a-5a56c58b6eb6/export 2026-09-17T15:45:33.616465+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2ab396fc-ea55-40e2-895a-5a56c58b6eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.531071Z"} 2026-09-15T00:00:24.531071+00:00 https://vulnerability.circl.lu/sighting/6660802b-ff2b-46fe-bac0-cee7796eb86d/export 2026-09-17T15:45:33.616586+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6660802b-ff2b-46fe-bac0-cee7796eb86d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-4879", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:09.442738Z"} 2026-09-14T03:00:09.442738+00:00 https://vulnerability.circl.lu/sighting/77f66c51-7ecd-49c7-baaf-d1e0ebee1a88/export 2026-09-17T15:45:33.616684+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "77f66c51-7ecd-49c7-baaf-d1e0ebee1a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:07.234330Z"} 2026-09-13T10:00:07.234330+00:00 https://vulnerability.circl.lu/sighting/01222b15-9307-4ccb-91b4-9722ca571d43/export 2026-09-17T15:45:33.616784+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "01222b15-9307-4ccb-91b4-9722ca571d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:05.977005Z"} 2026-09-13T10:00:05.977005+00:00 https://vulnerability.circl.lu/sighting/4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41/export 2026-09-17T15:45:33.616882+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4efdfc1b-5142-40f4-83e4-b6ca9ebe2b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48307", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.956809Z"} 2026-09-12T10:00:16.956809+00:00 https://vulnerability.circl.lu/sighting/7b7a162a-4161-4b7f-a4cf-735036645acc/export 2026-09-17T15:45:33.616974+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7b7a162a-4161-4b7f-a4cf-735036645acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48766", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:14.659480Z"} 2026-09-12T10:00:14.659480+00:00 https://vulnerability.circl.lu/sighting/f99ab61c-3a04-4b6c-b7ca-55daa9891083/export 2026-09-17T15:45:33.617069+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f99ab61c-3a04-4b6c-b7ca-55daa9891083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48760", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gestioip_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"maxibelino\", \"odeez24\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command execution via file upload.\\n If GestioIP is configured to use no authentication for admin account,\\n no password is required to exploit the vulnerability. Otherwise, an authenticated\\n user with admin right on the web site is required to exploit.\", \"disclosure_date\": \"2025-01-14\", \"fullname\": \"exploit/multi/http/gestioip_rce\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 06:32:04 +0000\", \"name\": \"GestioIP 3.5.7 Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/gestioip_rce.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/gestioip_rce\", \"references\": [\"CVE-2024-48760\", \"EDB-52204\", \"URL-https://github.com/maxibelino/CVEs/tree/main/CVE-2024-48760\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux/unix Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:47.710564Z"} 2026-09-08T06:49:47.710564+00:00 https://vulnerability.circl.lu/sighting/6501b942-4730-4bc9-a1d2-961453a5fed2/export 2026-09-17T15:45:33.617189+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6501b942-4730-4bc9-a1d2-961453a5fed2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48990", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"h00die\", \"makuga01\", \"qualys\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"Local attackers can execute arbitrary code as root by\\n tricking needrestart into running the Python interpreter with an\\n attacker-controlled PYTHONPATH environment variable.\\n\\n Verified against Ubuntu 22.04 with needrestart 3.5-5ubuntu2.1\\n Attempted exploitation against Debian 12, expliotation failed\", \"disclosure_date\": \"2024-11-19\", \"fullname\": \"exploit/linux/local/ubuntu_needrestart_lpe\", \"is_install_path\": true, \"mod_time\": \"2025-01-09 16:23:09 +0000\", \"name\": \"Ubuntu needrestart Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/local/ubuntu_needrestart_lpe.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/local/ubuntu_needrestart_lpe\", \"references\": [\"URL-https://github.com/makuga01/CVE-2024-48990-PoC\", \"URL-https://www.qualys.com/2024/11/19/needrestart/needrestart.txt\", \"CVE-2024-48990\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:13.260348Z"} 2026-09-08T06:49:13.260348+00:00