https://vulnerability.circl.lu/sightings/feed 2026-09-18T02:54:12.528526+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/548e233f-0334-4ddf-9f85-db6e1b905645/export 2026-09-18T02:54:12.552439+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "548e233f-0334-4ddf-9f85-db6e1b905645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11437", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mnqlubxao22d", "content": "CVE-2026-11437 - Server-Side Request Forgery in Perfree go-fastdfs-web <=1.3.7. Remote exploitation via /install/checkServer. CVSS 7.3. No patch available from vendor. Mitigate immediately. #CVE #infosec #Perfree\n\nhttps://www.valtersit.com/cve/CVE-2026-11437/", "creation_timestamp": "2026-06-08T02:06:23.980939Z"} 2026-06-08T02:06:23.980939+00:00 https://vulnerability.circl.lu/sighting/57cdb079-b66f-49a0-a73b-0213fbf60f52/export 2026-09-18T02:54:12.554299+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "57cdb079-b66f-49a0-a73b-0213fbf60f52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11438", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnnk2cufpv2l", "content": "CVE-2026-11438 - theonedev projects improper authorization\nCVE ID : CVE-2026-11438\n \n Published : June 6, 2026, 5:16 p.m. | 3\u00a0hours, 16\u00a0minutes ago\n \n Description : A vulnerability has been found in theonedev onedev up to 15.0.5. Affected by this vulnerability is an unknown fu...", "creation_timestamp": "2026-06-06T20:55:50.448929Z"} 2026-06-06T20:55:50.448929+00:00 https://vulnerability.circl.lu/sighting/61311a28-3d03-452e-af3c-8bc6bd2ee574/export 2026-09-18T02:54:12.554438+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "61311a28-3d03-452e-af3c-8bc6bd2ee574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11439", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnnjregbbn2m", "content": "CVE-2026-11439 - theonedev Parent Project projects improper authorization\nCVE ID : CVE-2026-11439\n \n Published : June 6, 2026, 6:16 p.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A vulnerability was found in theonedev onedev up to 15.0.5. Affected by this issue is some unknow...", "creation_timestamp": "2026-06-06T20:50:49.988503Z"} 2026-06-06T20:50:49.988503+00:00 https://vulnerability.circl.lu/sighting/9aea6a0c-f52f-427f-96b4-70b9604d327c/export 2026-09-18T02:54:12.554545+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9aea6a0c-f52f-427f-96b4-70b9604d327c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11437", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnnj5nyxej2f", "content": "CVE-2026-11437 - perfree go-fastdfs-web Installation Endpoint checkServer server-side request forgery\nCVE ID : CVE-2026-11437\n \n Published : June 6, 2026, 5:16 p.m. | 3\u00a0hours, 16\u00a0minutes ago\n \n Description : A flaw has been found in perfree go-fastdfs-web up to 1.3.7. Affected...", "creation_timestamp": "2026-06-06T20:39:49.058287Z"} 2026-06-06T20:39:49.058287+00:00 https://vulnerability.circl.lu/sighting/a81aa5f1-30b9-4eae-959b-794dbbc56dbd/export 2026-09-18T02:54:12.554646+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a81aa5f1-30b9-4eae-959b-794dbbc56dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11437", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnne64vkxu2d", "content": "go-fastdfs-web 1.3.7\u4ee5\u524d\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u3067\u3001checkServer\u95a2\u6570\u306bSSRF\u306e\u8106\u5f31\u6027\u304c\u3042\u308a\u3001\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u60aa\u7528\u304c\u53ef\u80fd\u3067\u3059\u3002\nCVE-2026-11437 CVSS 7.3 | HIGH", "creation_timestamp": "2026-06-06T19:10:35.808026Z"} 2026-06-06T19:10:35.808026+00:00 https://vulnerability.circl.lu/sighting/b669bce1-aa8b-409f-8fce-9fad61f55a42/export 2026-09-18T02:54:12.554743+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b669bce1-aa8b-409f-8fce-9fad61f55a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11435", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mnne452ozx23", "content": "Jinher OA 1.0\u306enextselectplan.aspx\u306bSQL\u30a4\u30f3\u30b8\u30a7\u30af\u30b7\u30e7\u30f3\u8106\u5f31\u6027\u3002httpOID\u5f15\u6570\u64cd\u4f5c\u3067\u30ea\u30e2\u30fc\u30c8\u653b\u6483\u53ef\u80fd\u3002\nCVE-2026-11435 CVSS 7.3 | HIGH", "creation_timestamp": "2026-06-06T19:09:29.079877Z"} 2026-06-06T19:09:29.079877+00:00 https://vulnerability.circl.lu/sighting/fc0b2b03-2b1a-4200-bd3d-be71587417cb/export 2026-09-18T02:54:12.554840+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc0b2b03-2b1a-4200-bd3d-be71587417cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11435", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnn4dqqiou23", "content": "CVE-2026-11435 - Jinher OA nextselectplan.aspx sql injection\nCVE ID : CVE-2026-11435\n \n Published : June 6, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : A security vulnerability has been detected in Jinher OA 1.0. This affects an unknown function of the file nextselectpla...", "creation_timestamp": "2026-06-06T16:50:34.388147Z"} 2026-06-06T16:50:34.388147+00:00 https://vulnerability.circl.lu/sighting/547f5a24-5812-442a-9077-f8e6538ff2bd/export 2026-09-18T02:54:12.554937+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "547f5a24-5812-442a-9077-f8e6538ff2bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11436", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnn42sa3ui2b", "content": "CVE-2026-11436 - Mage AI Sign-in Flow index.tsx useMutation cross site scripting\nCVE ID : CVE-2026-11436\n \n Published : June 6, 2026, 4:16 p.m. | 16\u00a0minutes ago\n \n Description : A vulnerability was detected in Mage AI up to 0.9.79. This impacts the function useMutation of the ...", "creation_timestamp": "2026-06-06T16:45:33.875145Z"} 2026-06-06T16:45:33.875145+00:00 https://vulnerability.circl.lu/sighting/548e5de4-eaf7-4a71-af22-7f98783f4920/export 2026-09-18T02:54:12.555033+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "548e5de4-eaf7-4a71-af22-7f98783f4920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11434", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnn3rts64p2a", "content": "CVE-2026-11434 - FluentCMS Blocks Plugin blocks cross site scripting\nCVE ID : CVE-2026-11434\n \n Published : June 6, 2026, 3:16 p.m. | 1\u00a0hour, 16\u00a0minutes ago\n \n Description : A weakness has been identified in FluentCMS 0.0.5. The impacted element is an unknown function of the f...", "creation_timestamp": "2026-06-06T16:40:33.654494Z"} 2026-06-06T16:40:33.654494+00:00 https://vulnerability.circl.lu/sighting/f5167130-0bba-48de-9981-a32c481d7b17/export 2026-09-18T02:54:12.555135+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f5167130-0bba-48de-9981-a32c481d7b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-11431", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnlcsdqg4p2s", "content": "CVE-2026-11431 - Path Traversal in Altium Projects Service Allows Arbitrary File Read\nCVE ID : CVE-2026-11431\n \n Published : June 5, 2026, 10:16 p.m. | 57\u00a0minutes ago\n \n Description : A path traversal vulnerability exists in the Projects Service download endpoint shared by Alt...", "creation_timestamp": "2026-06-05T23:40:47.442156Z"} 2026-06-05T23:40:47.442156+00:00