https://vulnerability.circl.lu/sightings/feed 2026-10-10T02:08:00.200673+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/80485ec9-9b80-4064-8cb4-f6cfe93b30ae/export 2026-10-10T02:08:00.214584+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "80485ec9-9b80-4064-8cb4-f6cfe93b30ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33788", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17105", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, carefully filtered to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-35102\n\ud83c\udfaf TYPO3 CMS \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/secf00tprint/CVE-2026-35102\n\n\ud83e\udde0 Overview\nA vulnerability in TYPO3 CMS allows attackers to execute arbitrary code due to improper input validation in backend modules.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CMS compromise\n\u2022 Privileged access escalation\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-34419\n\ud83c\udfaf Atlassian Confluence \u2013 OGNL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4tyam/CVE-2026-34419\n\n\ud83e\udde0 Overview\nAn OGNL injection vulnerability allows attackers to execute arbitrary expressions, potentially leading to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Enterprise system compromise\n\u2022 Sensitive data exposure\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-33788\n\ud83c\udfaf WordPress Plugin \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0x3f97/CVE-2026-33788\n\n\ud83e\udde0 Overview\nA vulnerable WordPress plugin allows attackers to upload malicious files without proper validation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full website compromise\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-32677\n\ud83c\udfaf Docker Environment \u2013 Privilege Escalation\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitdev/CVE-2026-32677\n\n\ud83e\udde0 Overview\nA misconfiguration or vulnerability in Docker environments allows attackers to escalate privileges and escape container isolation.\n\n\u2699\ufe0f Impact\n\u2022 Container escape\n\u2022 Privilege escalation\n\u2022 Host compromise\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-31854\n\ud83c\udfaf PHP Application \u2013 Remote File Inclusion (RFI)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hax0rz/CVE-2026-31854\n\n\ud83e\udde0 Overview\nA remote file inclusion vulnerability allows attackers to load external malicious scripts into the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Data exfiltration\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch diff analysis\n\u2022 Web / system vulnerability research\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:10.195539Z"} 2026-08-28T00:00:10.195539+00:00 https://vulnerability.circl.lu/sighting/c786fd33-43a3-4a11-a5de-5703daf7a591/export 2026-10-10T02:08:00.217337+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c786fd33-43a3-4a11-a5de-5703daf7a591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33788", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17105", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, carefully filtered to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-35102\n\ud83c\udfaf TYPO3 CMS \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/secf00tprint/CVE-2026-35102\n\n\ud83e\udde0 Overview\nA vulnerability in TYPO3 CMS allows attackers to execute arbitrary code due to improper input validation in backend modules.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CMS compromise\n\u2022 Privileged access escalation\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-34419\n\ud83c\udfaf Atlassian Confluence \u2013 OGNL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4tyam/CVE-2026-34419\n\n\ud83e\udde0 Overview\nAn OGNL injection vulnerability allows attackers to execute arbitrary expressions, potentially leading to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Enterprise system compromise\n\u2022 Sensitive data exposure\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-33788\n\ud83c\udfaf WordPress Plugin \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0x3f97/CVE-2026-33788\n\n\ud83e\udde0 Overview\nA vulnerable WordPress plugin allows attackers to upload malicious files without proper validation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full website compromise\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-32677\n\ud83c\udfaf Docker Environment \u2013 Privilege Escalation\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitdev/CVE-2026-32677\n\n\ud83e\udde0 Overview\nA misconfiguration or vulnerability in Docker environments allows attackers to escalate privileges and escape container isolation.\n\n\u2699\ufe0f Impact\n\u2022 Container escape\n\u2022 Privilege escalation\n\u2022 Host compromise\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-31854\n\ud83c\udfaf PHP Application \u2013 Remote File Inclusion (RFI)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hax0rz/CVE-2026-31854\n\n\ud83e\udde0 Overview\nA remote file inclusion vulnerability allows attackers to load external malicious scripts into the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Data exfiltration\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch diff analysis\n\u2022 Web / system vulnerability research\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:06.143255Z"} 2026-08-27T20:00:06.143255+00:00 https://vulnerability.circl.lu/sighting/5c8ed78c-3c2d-4a0a-a1da-2883014fc3c1/export 2026-10-10T02:08:00.217520+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5c8ed78c-3c2d-4a0a-a1da-2883014fc3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33788", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30461", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, carefully filtered to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-35102\n\ud83c\udfaf TYPO3 CMS \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/secf00tprint/CVE-2026-35102\n\n\ud83e\udde0 Overview\nA vulnerability in TYPO3 CMS allows attackers to execute arbitrary code due to improper input validation in backend modules.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 CMS compromise\n\u2022 Privileged access escalation\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-34419\n\ud83c\udfaf Atlassian Confluence \u2013 OGNL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/s4tyam/CVE-2026-34419\n\n\ud83e\udde0 Overview\nAn OGNL injection vulnerability allows attackers to execute arbitrary expressions, potentially leading to remote code execution.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Enterprise system compromise\n\u2022 Sensitive data exposure\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-33788\n\ud83c\udfaf WordPress Plugin \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0x3f97/CVE-2026-33788\n\n\ud83e\udde0 Overview\nA vulnerable WordPress plugin allows attackers to upload malicious files without proper validation.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full website compromise\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-32677\n\ud83c\udfaf Docker Environment \u2013 Privilege Escalation\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/exploitdev/CVE-2026-32677\n\n\ud83e\udde0 Overview\nA misconfiguration or vulnerability in Docker environments allows attackers to escalate privileges and escape container isolation.\n\n\u2699\ufe0f Impact\n\u2022 Container escape\n\u2022 Privilege escalation\n\u2022 Host compromise\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-31854\n\ud83c\udfaf PHP Application \u2013 Remote File Inclusion (RFI)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hax0rz/CVE-2026-31854\n\n\ud83e\udde0 Overview\nA remote file inclusion vulnerability allows attackers to load external malicious scripts into the application.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 Data exfiltration\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Exploit development\n\u2022 Patch diff analysis\n\u2022 Web / system vulnerability research\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.313649Z"} 2026-08-15T11:00:03.313649+00:00 https://vulnerability.circl.lu/sighting/fe30fcff-e14f-4fa0-8679-9cd07fcab2d0/export 2026-10-10T02:08:00.217679+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fe30fcff-e14f-4fa0-8679-9cd07fcab2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33785", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mjpmnvxg5q2n", "content": "", "creation_timestamp": "2026-04-17T19:07:08.567784Z"} 2026-04-17T19:07:08.567784+00:00 https://vulnerability.circl.lu/sighting/46c5d471-9904-4427-b5b8-8f867787588c/export 2026-10-10T02:08:00.217789+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "46c5d471-9904-4427-b5b8-8f867787588c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33782", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-vulnerabilities-juniper-junos-os-allow-denial-service-cve-2026-33782-cve-2026", "content": "", "creation_timestamp": "2026-04-14T11:00:28.000000Z"} 2026-04-14T11:00:28+00:00 https://vulnerability.circl.lu/sighting/1ab03d6c-2f7c-4fb8-999e-4b020d9cfd15/export 2026-10-10T02:08:00.218502+00:00 Joseph Lee https://cvepremium.circl.lu/user/syspect {"uuid": "1ab03d6c-2f7c-4fb8-999e-4b020d9cfd15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-33783", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-vulnerabilities-juniper-junos-os-allow-denial-service-cve-2026-33782-cve-2026", "content": "", "creation_timestamp": "2026-04-14T11:00:28.000000Z"} 2026-04-14T11:00:28+00:00 https://vulnerability.circl.lu/sighting/f8fc00fb-d6cc-4257-9d3e-497e11c0bbdf/export 2026-10-10T02:08:00.218576+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f8fc00fb-d6cc-4257-9d3e-497e11c0bbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33784", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj5psb2rof2u", "content": "", "creation_timestamp": "2026-04-10T16:15:20.642220Z"} 2026-04-10T16:15:20.642220+00:00 https://vulnerability.circl.lu/sighting/cf928342-4688-46d8-bde8-c5ca6ef56c96/export 2026-10-10T02:08:00.218639+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cf928342-4688-46d8-bde8-c5ca6ef56c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33784", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/116380721772972910", "content": "", "creation_timestamp": "2026-04-10T13:48:05.210214Z"} 2026-04-10T13:48:05.210214+00:00 https://vulnerability.circl.lu/sighting/b3d512d7-b751-4cca-af35-b68c2a36be43/export 2026-10-10T02:08:00.218700+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b3d512d7-b751-4cca-af35-b68c2a36be43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33785", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rxpvv6n2r", "content": "", "creation_timestamp": "2026-04-10T07:21:31.554578Z"} 2026-04-10T07:21:31.554578+00:00 https://vulnerability.circl.lu/sighting/c80bd6b9-65cb-48d0-b190-e14581503418/export 2026-10-10T02:08:00.218758+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c80bd6b9-65cb-48d0-b190-e14581503418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33784", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mj4rxj6zoo2m", "content": "", "creation_timestamp": "2026-04-10T07:21:24.350361Z"} 2026-04-10T07:21:24.350361+00:00