https://vulnerability.circl.lu/sightings/feed 2026-09-26T17:00:09.632459+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/347d96c5-265a-48ad-a797-17d24665a4dd/export 2026-09-26T17:00:09.656339+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "347d96c5-265a-48ad-a797-17d24665a4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31802", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/324", "content": "CVE-2026-31802\n\nnode-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.\n\nGitHub Link:\nhttps://github.com/Recorded-texteditor120/CVE-2026-31802", "creation_timestamp": "2026-08-29T00:00:31.384611Z"} 2026-08-29T00:00:31.384611+00:00 https://vulnerability.circl.lu/sighting/33fb73f3-f1b0-4b94-bfb1-0506401730d3/export 2026-09-26T17:00:09.658796+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "33fb73f3-f1b0-4b94-bfb1-0506401730d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31802", "type": "seen", "source": "https://t.me/cve0day/324", "content": "CVE-2026-31802\n\nnode-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, which enables file overwrite outside cwd during normal tar.x() extraction. This vulnerability is fixed in 7.5.11.\n\nGitHub Link:\nhttps://github.com/Recorded-texteditor120/CVE-2026-31802", "creation_timestamp": "2026-08-27T15:00:11.293146Z"} 2026-08-27T15:00:11.293146+00:00 https://vulnerability.circl.lu/sighting/58d2fc20-669c-4e09-bea2-9cde45bf70d8/export 2026-09-26T17:00:09.658938+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "58d2fc20-669c-4e09-bea2-9cde45bf70d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-31803", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mtnbylpz2s2b", "content": "\ud83d\udfe0 CVE-2026-31803 - High (8)\n\nCombodo iTop is a web based IT service management tool. Prior to 3.2.3, 3.2.3, there is a Reflect...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-31803/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-08-22T03:02:53.146318Z"} 2026-08-22T03:02:53.146318+00:00 https://vulnerability.circl.lu/sighting/0a3d438d-96d6-4701-905e-54f255cd014e/export 2026-09-26T17:00:09.659053+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0a3d438d-96d6-4701-905e-54f255cd014e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "published-proof-of-concept", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-22T00:00:03.649802Z"} 2026-07-22T00:00:03.649802+00:00 https://vulnerability.circl.lu/sighting/e51387dd-d384-487a-bc11-a50edd863245/export 2026-09-26T17:00:09.659154+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e51387dd-d384-487a-bc11-a50edd863245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "published-proof-of-concept", "source": "Telegram/NW7V9u2EGhRgED-z9xdOzHZbsfjRyxRBUkGYF4xdEtg2Mh4", "content": "", "creation_timestamp": "2026-07-22T00:00:03.527289Z"} 2026-07-22T00:00:03.527289+00:00 https://vulnerability.circl.lu/sighting/50819a15-b8b5-46b8-a87a-9731806b4f6e/export 2026-09-26T17:00:09.659250+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "50819a15-b8b5-46b8-a87a-9731806b4f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "seen", "source": "Telegram/NW7V9u2EGhRgED-z9xdOzHZbsfjRyxRBUkGYF4xdEtg2Mh4", "content": "", "creation_timestamp": "2026-07-20T18:00:13.428296Z"} 2026-07-20T18:00:13.428296+00:00 https://vulnerability.circl.lu/sighting/ca16c178-bd83-4b57-b8c9-06bec630c03c/export 2026-09-26T17:00:09.659342+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ca16c178-bd83-4b57-b8c9-06bec630c03c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "seen", "source": "Telegram/AcOmRRro0Ie3tE3ej3Y7QKM1mXFx7TgmD9WXozzOdGilEl8", "content": "", "creation_timestamp": "2026-07-20T18:00:13.290172Z"} 2026-07-20T18:00:13.290172+00:00 https://vulnerability.circl.lu/sighting/0758691a-bedd-42f2-a90d-883734dbb079/export 2026-09-26T17:00:09.659434+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0758691a-bedd-42f2-a90d-883734dbb079", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93676", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP-Contest-Gallery-28.1.4-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CerberusMrXi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 10:27:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF bypass, reverse shell, SQLMap integration, Burp extension generation, and reporting for penetration testing and security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:52.235286Z"} 2026-07-17T00:00:52.235286+00:00 https://vulnerability.circl.lu/sighting/d6985164-9f30-4744-adfc-84c27912a570/export 2026-09-26T17:00:09.659540+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d6985164-9f30-4744-adfc-84c27912a570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "seen", "source": "https://t.me/GithubRedTeam/93676", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a WP-Contest-Gallery-28.1.4-Exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a CerberusMrXi\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-16 10:27:37\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nComplete exploitation toolkit for CVE-2026-3180 - WordPress Contest Gallery SQL Injection vulnerability. Features automated data extraction, WAF bypass, reverse shell, SQLMap integration, Burp extension generation, and reporting for penetration testing and security research.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T13:00:04.246332Z"} 2026-07-16T13:00:04.246332+00:00 https://vulnerability.circl.lu/sighting/0ee31f36-0440-4f39-8c6f-7740c7213e18/export 2026-09-26T17:00:09.659651+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0ee31f36-0440-4f39-8c6f-7740c7213e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3180", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/87948", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a cve-2026-3180-poc\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a carlosalbertotuma\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a PHP\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-08 23:33:13\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-12T11:00:03.379104Z"} 2026-07-12T11:00:03.379104+00:00