https://vulnerability.circl.lu/sightings/feed 2026-10-08T03:16:11.303256+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/98f23c43-64f1-4d58-9d2c-f39cd3b49a80/export 2026-10-08T03:16:11.376573+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "98f23c43-64f1-4d58-9d2c-f39cd3b49a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcan5husu2n", "content": "CVE-2026-105295 - gitahead\nGitAhead versions 2.5.0 through 2.7.1 install updates without checking they are genuine and stop warning about certificate problems after the first warning. This lets an attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitahead #CVE #infosec", "creation_timestamp": "2026-10-07T15:20:04.000801Z"} 2026-10-07T15:20:04.000801+00:00 https://vulnerability.circl.lu/sighting/67c31026-936b-497b-868f-a513edbb27c2/export 2026-10-08T03:16:11.384437+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "67c31026-936b-497b-868f-a513edbb27c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3comjh2w", "content": "CVE-2026-105293 - legcord\nVersions 1.1.0 through 1.3.0 of Legcord let code injected into a Discord page break out of the theme folder. This means an attacker could make the program launch other applications, delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#legcord #CVE #infosec", "creation_timestamp": "2026-10-07T15:10:05.233626Z"} 2026-10-07T15:10:05.233626+00:00 https://vulnerability.circl.lu/sighting/ea4a1edd-68f8-4183-9665-f772dccbb378/export 2026-10-08T03:16:11.384563+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ea4a1edd-68f8-4183-9665-f772dccbb378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jrcngwpezobde", "content": "CVE-2026-105291 - feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting\nCVE ID : CVE-2026-105291\n \n Published : Oct. 5, 2026, 10:45 a.m. | 25\u00a0minutes ago\n \n Description : A vulnerability was identified in feelec-yishu feelcrm-o...", "creation_timestamp": "2026-10-05T11:59:14.685386Z"} 2026-10-05T11:59:14.685386+00:00 https://vulnerability.circl.lu/sighting/031c8dd5-7ef1-4fe2-905a-16e7b7277497/export 2026-10-08T03:16:11.384652+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "031c8dd5-7ef1-4fe2-905a-16e7b7277497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5sg6i4srenjj2", "content": "CVE-2026-105290 - feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery\nCVE ID : CVE-2026-105290\n \n Published : Oct. 5, 2026, 10:30 a.m. | 40\u00a0minutes ago\n \n Description : A vulnerability was determined in feelec-yishu feelcrm-os 1....", "creation_timestamp": "2026-10-05T11:47:13.698447Z"} 2026-10-05T11:47:13.698447+00:00 https://vulnerability.circl.lu/sighting/caa47028-eddd-4a04-8673-83f5808663da/export 2026-10-08T03:16:11.384736+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "caa47028-eddd-4a04-8673-83f5808663da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fydehkgs3uajf", "content": "CVE-2026-105293 - Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers\nCVE ID : CVE-2026-105293\n \n Published : Oct. 5, 2026, 12:44 a.m. | 43\u00a0minutes ago\n \n Description : Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that...", "creation_timestamp": "2026-10-05T02:42:50.167098Z"} 2026-10-05T02:42:50.167098+00:00 https://vulnerability.circl.lu/sighting/1bb0855a-cfc2-4e09-a500-15a77b7672cf/export 2026-10-08T03:16:11.384814+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1bb0855a-cfc2-4e09-a500-15a77b7672cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105294", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tg3pwmt2w", "content": "\ud83d\udea8 CVE-2026-105294 \u2014 CVSS 9.1 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Disc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105294\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:29.970205Z"} 2026-10-05T02:07:29.970205+00:00 https://vulnerability.circl.lu/sighting/3a2e1e1b-3230-405a-b663-17d1bb6a0e70/export 2026-10-08T03:16:11.384887+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3a2e1e1b-3230-405a-b663-17d1bb6a0e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfu5g5d27", "content": "\ud83d\udea8 CVE-2026-105293 \u2014 CVSS 9.2 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows scrip...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105293\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:22.003631Z"} 2026-10-05T02:07:22.003631+00:00 https://vulnerability.circl.lu/sighting/48cb8843-7830-47f7-bbc9-34f911cf0a56/export 2026-10-08T03:16:11.384958+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "48cb8843-7830-47f7-bbc9-34f911cf0a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rga3yy52s", "content": "\ud83d\udfe0 CVE-2026-105293 - High (8.1)\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105293/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:47.988465Z"} 2026-10-05T01:31:47.988465+00:00 https://vulnerability.circl.lu/sighting/f6342811-dd31-47d3-ac20-32cdfc78f088/export 2026-10-08T03:16:11.385030+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f6342811-dd31-47d3-ac20-32cdfc78f088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rfywmyi2n", "content": "\ud83d\udfe0 CVE-2026-105295 - High (7.5)\n\nGitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105295/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:40.859960Z"} 2026-10-05T01:31:40.859960+00:00 https://vulnerability.circl.lu/sighting/443b6e74-25ad-4779-96a5-1b1bd4cc3f2e/export 2026-10-08T03:16:11.385104+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "443b6e74-25ad-4779-96a5-1b1bd4cc3f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbu5ppuib2c", "content": "CVE-2026-10529 - westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting\nCVE ID : CVE-2026-10529\n \n Published : June 2, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A weakness has been identified in westboy CicadasCMS up to 2...", "creation_timestamp": "2026-06-02T05:24:45.071595Z"} 2026-06-02T05:24:45.071595+00:00