https://vulnerability.circl.lu/sightings/feed 2026-08-06T15:13:53.102536+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/286f31e3-b0fe-4d17-b9bb-f6bab33dbac2/export 2026-08-06T15:13:53.124866+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "286f31e3-b0fe-4d17-b9bb-f6bab33dbac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T05:00:05.672564Z"} 2026-08-06T05:00:05.672564+00:00 https://vulnerability.circl.lu/sighting/1a9a6a02-91da-4b61-9242-ef47fa526e33/export 2026-08-06T15:13:53.126662+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1a9a6a02-91da-4b61-9242-ef47fa526e33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:43.024608Z"} 2026-07-26T00:00:43.024608+00:00 https://vulnerability.circl.lu/sighting/b6a85a2d-5296-4305-a2a7-c7c104a340ee/export 2026-08-06T15:13:53.126810+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b6a85a2d-5296-4305-a2a7-c7c104a340ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/ZerodayAlert/410", "content": "\u0427\u0435\u0442\u044b\u0440\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0433\u0440\u043e\u0436\u0430\u044e\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\n\n\ud83d\udcbb \u0412 Windows \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430\u0445 ksthunk.sys \u0438 CLFS.sys. \u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83c\udf10 \u041f\u043b\u0430\u0433\u0438\u043d Hunk Companion \u0434\u043b\u044f WordPress \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-11972 \u0441 \u0440\u0435\u0439\u0442\u0438\u043d\u0433\u043e\u043c CVSS 9.8, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u0431\u043e\u043b\u0435\u0435 6800 \u0441\u0430\u0439\u0442\u043e\u0432. \u0411\u0440\u0435\u0448\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u043f\u043b\u0430\u0433\u0438\u043d\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\u26a0\ufe0f \u0412\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Apache Struts \u043d\u0430\u0439\u0434\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-53677 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.5, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0431\u043e\u043b\u0435\u0435 40 000 \u0440\u0430\u0437. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #Windows #WordPress #Apache\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:18.716745Z"} 2026-07-25T15:00:18.716745+00:00 https://vulnerability.circl.lu/sighting/872b9688-24aa-4444-87cf-af55ef278729/export 2026-08-06T15:13:53.126927+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "872b9688-24aa-4444-87cf-af55ef278729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-23T00:00:25.230886Z"} 2026-07-23T00:00:25.230886+00:00 https://vulnerability.circl.lu/sighting/c06c3bc9-aa2f-44e4-9c69-f35cabc65776/export 2026-08-06T15:13:53.127031+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c06c3bc9-aa2f-44e4-9c69-f35cabc65776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://t.me/pphm_HackerNews/1076", "content": "Massive Botnet Exploit Hits Hundreds of Thousands of Websites via Obsolete Plugins\n\nA sweeping campaign has targeted WordPress websites using the outdated plugins GutenKit and Hunk Companion, exploiting three critical vulnerabilities (CVE-2024-9234, CVE-2024-9707, CVE-2024-11972). Despite patches being available since late 2024, thousands of sites remain exposed.Security vendor Wordfence blocked 8.7 million attack attempts over a two-day window (Oct 8\u20139). In instances where attackers gained access, they installed additional weak plugins (e.g., wp-query-console) to achieve full site takeover.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-22T05:00:04.874527Z"} 2026-07-22T05:00:04.874527+00:00 https://vulnerability.circl.lu/sighting/7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4/export 2026-08-06T15:13:53.127132+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7b3ee1e2-0fdc-48c4-bac5-09f5e4a3cea4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/928323ee-2e2f-4328-ade3-1e3bafc2a1db", "content": "", "creation_timestamp": "2026-06-19T12:45:50.210987Z"} 2026-06-19T12:45:50.210987+00:00 https://vulnerability.circl.lu/sighting/5714f488-eb38-4283-8502-b5355ef66698/export 2026-08-06T15:13:53.127226+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5714f488-eb38-4283-8502-b5355ef66698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11976", "type": "seen", "source": "https://gist.github.com/Darkcrai86/937853a754acb94821530e1119327db3", "content": "", "creation_timestamp": "2026-01-23T08:46:15.000000Z"} 2026-01-23T08:46:15+00:00 https://vulnerability.circl.lu/sighting/be372c3d-be45-4e0d-ae39-96a443647a42/export 2026-08-06T15:13:53.127318+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be372c3d-be45-4e0d-ae39-96a443647a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11976", "type": "seen", "source": "https://gist.github.com/Darkcrai86/f70c78d37356986e9bbe7eac93b9d71e", "content": "", "creation_timestamp": "2026-01-23T07:43:54.000000Z"} 2026-01-23T07:43:54+00:00 https://vulnerability.circl.lu/sighting/a8ab1702-3e19-4088-b279-a5e1102373c9/export 2026-08-06T15:13:53.127408+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a8ab1702-3e19-4088-b279-a5e1102373c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-91df1732-73af074958dee773", "content": "", "creation_timestamp": "2025-10-29T07:57:31.889384Z"} 2025-10-29T07:57:31.889384+00:00 https://vulnerability.circl.lu/sighting/3b468ad9-1029-4e66-a2bf-8107b1d0fd49/export 2026-08-06T15:13:53.127500+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3b468ad9-1029-4e66-a2bf-8107b1d0fd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-11972", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m4aq7tb2mr2j", "content": "", "creation_timestamp": "2025-10-28T10:33:24.987715Z"} 2025-10-28T10:33:24.987715+00:00