https://vulnerability.circl.lu/sightings/feed 2026-09-13T12:34:50.313749+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ab62dc67-c01b-4989-a39d-720ffb8b0c58/export 2026-09-13T12:34:50.340173+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ab62dc67-c01b-4989-a39d-720ffb8b0c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/98395", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-74251\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 02:55:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated SQL Injection via Attribute Filter in Phoca Cart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-24T00:00:11.235647Z"} 2026-08-24T00:00:11.235647+00:00 https://vulnerability.circl.lu/sighting/e4f0e704-c249-45b0-9dc8-6862c3ffcf87/export 2026-09-13T12:34:50.342752+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e4f0e704-c249-45b0-9dc8-6862c3ffcf87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://t.me/GithubRedTeam/98395", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-74251\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 02:55:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated SQL Injection via Attribute Filter in Phoca Cart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-23T00:00:32.587930Z"} 2026-08-23T00:00:32.587930+00:00 https://vulnerability.circl.lu/sighting/7c29f297-47f1-4e5c-ae4e-a0b310d3954e/export 2026-09-13T12:34:50.342863+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7c29f297-47f1-4e5c-ae4e-a0b310d3954e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://t.me/GithubRedTeam/98395", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-74251\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a toanln-cov\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-17 02:55:07\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nUnauthenticated SQL Injection via Attribute Filter in Phoca Cart\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-22T19:00:07.945628Z"} 2026-08-22T19:00:07.945628+00:00 https://vulnerability.circl.lu/sighting/0910521b-deb3-41fa-8130-8ed077eb5ffb/export 2026-09-13T12:34:50.342944+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0910521b-deb3-41fa-8130-8ed077eb5ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-18T00:00:12.486816Z"} 2026-08-18T00:00:12.486816+00:00 https://vulnerability.circl.lu/sighting/72b0bd07-69ea-4778-8c24-53f93755a1a7/export 2026-09-13T12:34:50.343020+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "72b0bd07-69ea-4778-8c24-53f93755a1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-18T00:00:12.288159Z"} 2026-08-18T00:00:12.288159+00:00 https://vulnerability.circl.lu/sighting/87188b22-2a54-4bfe-990a-5d4c08e84627/export 2026-09-13T12:34:50.343101+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "87188b22-2a54-4bfe-990a-5d4c08e84627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-17T18:00:04.557898Z"} 2026-08-17T18:00:04.557898+00:00 https://vulnerability.circl.lu/sighting/dbe4bca0-0a34-469e-b0fd-39b8b69d271a/export 2026-09-13T12:34:50.343174+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dbe4bca0-0a34-469e-b0fd-39b8b69d271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-17T18:00:04.239741Z"} 2026-08-17T18:00:04.239741+00:00 https://vulnerability.circl.lu/sighting/3b5ef626-b104-43fb-b27c-6e32755448ef/export 2026-09-13T12:34:50.343247+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3b5ef626-b104-43fb-b27c-6e32755448ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mtbmk2g6m72a", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-74251\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specific...", "creation_timestamp": "2026-08-17T11:39:38.593651Z"} 2026-08-17T11:39:38.593651+00:00 https://vulnerability.circl.lu/sighting/560388f1-a436-4a2a-ae0c-a5641b9c302b/export 2026-09-13T12:34:50.343330+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "560388f1-a436-4a2a-ae0c-a5641b9c302b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtapjrrsns2w", "content": "Phoca Cart for Joomla (v5.0.0 \u2013 6.1.16) hit by CRITICAL unauthenticated SQL injection \u2014 full DB at risk. Patch status unknown; check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #Off...", "creation_timestamp": "2026-08-17T03:00:32.031316Z"} 2026-08-17T03:00:32.031316+00:00 https://vulnerability.circl.lu/sighting/57698fa7-866c-49d1-baf4-2a5ab1007b46/export 2026-09-13T12:34:50.343433+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "57698fa7-866c-49d1-baf4-2a5ab1007b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117108613380665635", "content": "CVE-2026-74251: Phoca Cart (Joomla ext. v5.0.0 \u2013 6.1.16) suffers CRITICAL SQL injection via unauthenticated a[]/s[] params. Full DB extraction possible. Patch status unclear \u2014 check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #OffSeq #SQLInjection #Joomla #Infosec", "creation_timestamp": "2026-08-17T03:00:29.644472Z"} 2026-08-17T03:00:29.644472+00:00