<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-01T09:03:48.344097+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7e6ff4a1-c9e1-4245-a1a1-e51ff5bd4220/export</id>
    <title>7e6ff4a1-c9e1-4245-a1a1-e51ff5bd4220</title>
    <updated>2026-06-01T09:03:48.661008+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7e6ff4a1-c9e1-4245-a1a1-e51ff5bd4220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "published-proof-of-concept", "source": "https://t.me/hackingtoolsprvi8/2727", "content": "\ud83d\udd25 Best HQ Wordpress Exploit AiO Package \u2764\ufe0f\n\n\u2757\ufe0f NOTED : Not for Sale !!! \n\nMaybe you hard find exploit wordpress and this our channel want gift something special to everyone\nfor support our channel exploit must working with python I recommend python3 and python2 \ninstalled both in machine because tools some different coder and exploit will be needed different version 2.7 and 3\n\n\n\u26a0\ufe0f I am Not Responsible for Any Damage \u26a0\ufe0f\n\nCVE-2014-7969\nCVE-2014-9473\nCVE-2015-6522\nCVE-2016-10033\nCVE-2018-6389\nCVE-2019-20361-EXPLOIT\nCVE-2019-8942-RCE\nCVE-2020-11738\nCVE-2020-12800\nCVE-2020-24186-WordPress-wpDiscuz-7.0.4-RCE\nCVE-2021-24762\nCVE-2021-25094-tatsu-preauth-rce\nWordpress-Plugin-Spritz-RFI\nWORDPRESS-Revslider-Exploit-0DAY\nWordpress-scanner\nWordPress_4.9.8_RCE_POC\nWP-augmented-reality-RCE\nWP-Content-Injection-Exploit\nwp-file-manager-CVE-2020-25213\nwp-gravity-form-exploit\nwp-plugin-amministrazione-aperta-LFI\nWP-SMTP-0DAY\n\nDownload Here : https://t.me/hackingtoolsprvi8/2377", "creation_timestamp": "2022-08-25T16:41:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7e6ff4a1-c9e1-4245-a1a1-e51ff5bd4220/export"/>
    <published>2022-08-25T16:41:15+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/532896dd-baa1-4f76-9d5d-a0d829387c9e/export</id>
    <title>532896dd-baa1-4f76-9d5d-a0d829387c9e</title>
    <updated>2026-06-01T09:03:48.660922+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "532896dd-baa1-4f76-9d5d-a0d829387c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "seen", "source": "https://t.me/ctinow/95558", "content": "U.S. Dept Of Defense: DoS at \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588 (CVE-2018-6389)\n\nhttps://ift.tt/P6flUKv", "creation_timestamp": "2023-02-24T22:06:49.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/532896dd-baa1-4f76-9d5d-a0d829387c9e/export"/>
    <published>2023-02-24T22:06:49+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/237ca0ee-d0c6-4c5a-ba9a-30f9d183beee/export</id>
    <title>237ca0ee-d0c6-4c5a-ba9a-30f9d183beee</title>
    <updated>2026-06-01T09:03:48.660848+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "237ca0ee-d0c6-4c5a-ba9a-30f9d183beee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "seen", "source": "https://t.me/ctinow/101392", "content": "U.S. Dept Of Defense: DoS at \u2588\u2588\u2588\u2588\u2588(CVE-2018-6389)\n\nhttps://ift.tt/w12JF0G", "creation_timestamp": "2023-03-24T20:36:45.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/237ca0ee-d0c6-4c5a-ba9a-30f9d183beee/export"/>
    <published>2023-03-24T20:36:45+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/96b66edc-9149-4000-85d6-cc5c619057a6/export</id>
    <title>96b66edc-9149-4000-85d6-cc5c619057a6</title>
    <updated>2026-06-01T09:03:48.660751+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "96b66edc-9149-4000-85d6-cc5c619057a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/107174", "content": "Fastly VDP: CVE-2018-6389 exploitation - using scripts loader\n\nhttps://ift.tt/IAGEomv", "creation_timestamp": "2023-04-20T22:06:39.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/96b66edc-9149-4000-85d6-cc5c619057a6/export"/>
    <published>2023-04-20T22:06:39+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/82bc97a0-39a2-4e9e-8d26-2ae9f638f7e2/export</id>
    <title>82bc97a0-39a2-4e9e-8d26-2ae9f638f7e2</title>
    <updated>2026-06-01T09:03:48.660639+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "82bc97a0-39a2-4e9e-8d26-2ae9f638f7e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "seen", "source": "https://t.me/arpsyndicate/1873", "content": "#ExploitObserverAlert\n\nCVE-2018-6389\n\nDESCRIPTION: Exploit Observer has 111 entries related to CVE-2018-6389. In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registered .js files (from wp-includes/script-loader.php) to construct a series of requests to load every file many times.\n\nFIRST-EPSS: 0.408310000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-18T00:42:09.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/82bc97a0-39a2-4e9e-8d26-2ae9f638f7e2/export"/>
    <published>2023-12-18T00:42:09+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/797cea27-e452-4548-9896-389a8953ba71/export</id>
    <title>797cea27-e452-4548-9896-389a8953ba71</title>
    <updated>2026-06-01T09:03:48.660429+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "797cea27-e452-4548-9896-389a8953ba71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "seen", "source": "https://t.me/ctinow/184474", "content": "https://ift.tt/aKxsNc9\nPublitas: CVE-2018-6389 exploitation - using scripts loader", "creation_timestamp": "2024-02-14T08:51:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/797cea27-e452-4548-9896-389a8953ba71/export"/>
    <published>2024-02-14T08:51:19+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ee849ad-c0ef-45f8-93ae-c4c8edc05ae9/export</id>
    <title>3ee849ad-c0ef-45f8-93ae-c4c8edc05ae9</title>
    <updated>2026-06-01T09:03:48.660209+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ee849ad-c0ef-45f8-93ae-c4c8edc05ae9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/151", "content": "CVE ID : CVE-2018-6389\nSystem : WordPress 4.9.2\nType : DOS\n\nExploit \n\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0628\u0641\u062f\u064a\u0648 :\nVideo", "creation_timestamp": "2024-06-02T07:46:18.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ee849ad-c0ef-45f8-93ae-c4c8edc05ae9/export"/>
    <published>2024-06-02T07:46:18+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7a203446-e5c2-4b09-b6ed-dac11384c89a/export</id>
    <title>7a203446-e5c2-4b09-b6ed-dac11384c89a</title>
    <updated>2026-06-01T09:03:48.659958+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7a203446-e5c2-4b09-b6ed-dac11384c89a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/55", "content": "#exploit\n1. CVE-2018-5758:\nXXE in Jive-n 0-day\nhttps://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-5758\n\n2. CVE-2018-1335:\nCommand Injection in Apache Tika-server\nhttps://github.com/RhinoSecurityLabs/CVEs/tree/master/CVE-2018-1335\n\n3. CVE-2018-6389:\nApache RewriteRule to mitigate potential DoS attack via Wordpress wp-admin/load-scripts.php file\nhttps://github.com/yolabingo/wordpress-fix-cve-2018-6389\n\n4. CVE-2018-12613:\nWordpress plugin Site-Editor v1.1.1 - LFI\nhttps://github.com/0x00-0x00/CVE-2018-7422", "creation_timestamp": "2024-06-22T09:28:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7a203446-e5c2-4b09-b6ed-dac11384c89a/export"/>
    <published>2024-06-22T09:28:36+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6f78fee3-b951-4f4d-a98e-064406cc95ee/export</id>
    <title>6f78fee3-b951-4f4d-a98e-064406cc95ee</title>
    <updated>2026-06-01T09:03:48.659653+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6f78fee3-b951-4f4d-a98e-064406cc95ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "seen", "source": "MISP/86d5e729-7eed-4d44-8dd6-a0944e5371e5", "content": "", "creation_timestamp": "2024-11-14T06:08:22.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6f78fee3-b951-4f4d-a98e-064406cc95ee/export"/>
    <published>2024-11-14T06:08:22+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6e47d1bf-112c-4d60-b5bc-9766807a637e/export</id>
    <title>6e47d1bf-112c-4d60-b5bc-9766807a637e</title>
    <updated>2026-06-01T09:03:48.656709+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6e47d1bf-112c-4d60-b5bc-9766807a637e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-6389", "type": "published-proof-of-concept", "source": "Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI", "content": "", "creation_timestamp": "2025-11-13T15:00:08.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6e47d1bf-112c-4d60-b5bc-9766807a637e/export"/>
    <published>2025-11-13T15:00:08+00:00</published>
  </entry>
</feed>
