<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-17T18:33:29.851884+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b758f6cf-698c-495f-96c7-9797d7049ee2/export</id>
    <title>b758f6cf-698c-495f-96c7-9797d7049ee2</title>
    <updated>2026-08-17T18:33:29.873669+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b758f6cf-698c-495f-96c7-9797d7049ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16221", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mqz5seeo3a2p", "content": "fast-uri\u306e2.3.1\uff5e4.1.0\u3067\u3001\u30d0\u30c3\u30af\u30b9\u30e9\u30c3\u30b7\u30e5\u304c\u30db\u30b9\u30c8\u533a\u5207\u308a\u6587\u5b57\u3068\u3057\u3066\u6271\u308f\u308c\u305a\u3001Node.js\u306eURL\u30d1\u30fc\u30b5\u30fc\u3068\u7570\u306a\u308b\u30db\u30b9\u30c8\u3092\u62bd\u51fa\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u610f\u56f3\u3057\u306a\u3044\u5b9b\u5148\u306b\u8a98\u5c0e\u3055\u308c\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2026-16221 CVSS 7.5 | HIGH", "creation_timestamp": "2026-07-19T16:04:10.448112Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b758f6cf-698c-495f-96c7-9797d7049ee2/export"/>
    <published>2026-07-19T16:04:10.448112+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ccc96c76-977c-4f6d-8c5c-a4058abcd7ac/export</id>
    <title>ccc96c76-977c-4f6d-8c5c-a4058abcd7ac</title>
    <updated>2026-08-17T18:33:29.877654+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ccc96c76-977c-4f6d-8c5c-a4058abcd7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16221", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqz5lio7ut2d", "content": "\ud83d\udfe0 CVE-2026-16221 - High (7.5)\n\nImpact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-16221/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T16:00:20.524179Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ccc96c76-977c-4f6d-8c5c-a4058abcd7ac/export"/>
    <published>2026-07-19T16:00:20.524179+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1b3e8205-11cc-41c4-933a-a2cfd16d104d/export</id>
    <title>1b3e8205-11cc-41c4-933a-a2cfd16d104d</title>
    <updated>2026-08-17T18:33:29.877762+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1b3e8205-11cc-41c4-933a-a2cfd16d104d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16221", "type": "seen", "source": "https://bsky.app/profile/ulisesgascon.com/post/3mqyy3s7vts2h", "content": "\ud83d\udea8 High-severity security fix in fast-uri@4.1.1 (also 3.1.4 and 2.4.3 backports) just released!\n\nPatches CVE-2026-16221, host confusion via literal backslash authority delimiter.\n\ngithub.com/fastify/fast...", "creation_timestamp": "2026-07-19T14:22:06.453894Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1b3e8205-11cc-41c4-933a-a2cfd16d104d/export"/>
    <published>2026-07-19T14:22:06.453894+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b9914378-4126-45d8-a41b-370ff84cc023/export</id>
    <title>b9914378-4126-45d8-a41b-370ff84cc023</title>
    <updated>2026-08-17T18:33:29.877836+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b9914378-4126-45d8-a41b-370ff84cc023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16227", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mqyv7k2qzj2r", "content": "SQL injection in SourceCodester Class and Exam Timetabling System v1.0 (CVE-2026-16227). MEDIUM severity \u2014 no patch yet. Apply input validation and parameterized queries to reduce risk. https://radar.offseq.com/threat/cve-2026-16227-sql-injection-in-sourcecodester-class-and-exam-timetabling-syste...", "creation_timestamp": "2026-07-19T13:30:29.281122Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b9914378-4126-45d8-a41b-370ff84cc023/export"/>
    <published>2026-07-19T13:30:29.281122+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/855ee2df-d41a-4c76-9569-008ed2592bf7/export</id>
    <title>855ee2df-d41a-4c76-9569-008ed2592bf7</title>
    <updated>2026-08-17T18:33:29.877901+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "855ee2df-d41a-4c76-9569-008ed2592bf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-16227", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116946883494385034", "content": "CVE-2026-16227: SQL injection in SourceCodester Class and Exam Timetabling System v1.0 (/edit_subject.php, ID param). MEDIUM severity (CVSS 6.9). No patch yet \u2014 use input validation &amp;amp; parameterized queries. https://radar.offseq.com/threat/cve-2026-16227-sql-injection-in-sourcecodester-class-and-exam-timetabling-system-bf78ed5f513695ba #OffSeq #SQLInjection #AppSec #Vuln", "creation_timestamp": "2026-07-19T13:30:28.058509Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/855ee2df-d41a-4c76-9569-008ed2592bf7/export"/>
    <published>2026-07-19T13:30:28.058509+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e97a5bf1-55c2-4ec5-bac3-b40a6b137278/export</id>
    <title>e97a5bf1-55c2-4ec5-bac3-b40a6b137278</title>
    <updated>2026-08-17T18:33:29.877970+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e97a5bf1-55c2-4ec5-bac3-b40a6b137278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16227", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyso7g4eb2a", "content": "CVE-2026-16227 - SourceCodester Class and Exam Timetabling System edit_subject.php sql injection\nCVE ID : CVE-2026-16227\n \n Published : July 19, 2026, 10:16 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : A security vulnerability has been detected in SourceCodester Class and Ex...", "creation_timestamp": "2026-07-19T12:44:59.805195Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e97a5bf1-55c2-4ec5-bac3-b40a6b137278/export"/>
    <published>2026-07-19T12:44:59.805195+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8cf7544a-f871-491f-91ff-e13be34ec409/export</id>
    <title>8cf7544a-f871-491f-91ff-e13be34ec409</title>
    <updated>2026-08-17T18:33:29.878032+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8cf7544a-f871-491f-91ff-e13be34ec409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16228", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqysfay3y52j", "content": "CVE-2026-16228 - SourceCodester Class and Exam Timetabling System edit_schoolyr.php sql injection\nCVE ID : CVE-2026-16228\n \n Published : July 19, 2026, 10:16 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : A vulnerability was detected in SourceCodester Class and Exam Timetablin...", "creation_timestamp": "2026-07-19T12:39:59.461294Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8cf7544a-f871-491f-91ff-e13be34ec409/export"/>
    <published>2026-07-19T12:39:59.461294+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/71892714-72ec-4775-a2b0-e2af622da3ff/export</id>
    <title>71892714-72ec-4775-a2b0-e2af622da3ff</title>
    <updated>2026-08-17T18:33:29.878098+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "71892714-72ec-4775-a2b0-e2af622da3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16225", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqys4cjrqo2b", "content": "CVE-2026-16225 - davenardella snap7 s7_peer.cpp NegotiatePDULength out-of-bounds write\nCVE ID : CVE-2026-16225\n \n Published : July 19, 2026, 9:17 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A security flaw has been discovered in davenardella snap7 up to 1.4.3. The impacted...", "creation_timestamp": "2026-07-19T12:34:59.111055Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/71892714-72ec-4775-a2b0-e2af622da3ff/export"/>
    <published>2026-07-19T12:34:59.111055+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7183a937-be19-4679-b339-fbff30754290/export</id>
    <title>7183a937-be19-4679-b339-fbff30754290</title>
    <updated>2026-08-17T18:33:29.878159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7183a937-be19-4679-b339-fbff30754290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16224", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyrte35pl2b", "content": "CVE-2026-16224 - jxxghp MoviePilot Application API improper authorization\nCVE ID : CVE-2026-16224\n \n Published : July 19, 2026, 9:17 a.m. | 2\u00a0hours, 23\u00a0minutes ago\n \n Description : A vulnerability was identified in jxxghp MoviePilot up to 2.13.5. The affected element is an unk...", "creation_timestamp": "2026-07-19T12:29:58.695049Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7183a937-be19-4679-b339-fbff30754290/export"/>
    <published>2026-07-19T12:29:58.695049+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/839204ee-149b-4079-9cf5-ec37e21b1201/export</id>
    <title>839204ee-149b-4079-9cf5-ec37e21b1201</title>
    <updated>2026-08-17T18:33:29.878221+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "839204ee-149b-4079-9cf5-ec37e21b1201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-16229", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqyrkfjeyx2i", "content": "CVE-2026-16229 - itsourcecode Courier Management System index.php cross site scripting\nCVE ID : CVE-2026-16229\n \n Published : July 19, 2026, 10:16 a.m. | 1\u00a0hour, 24\u00a0minutes ago\n \n Description : A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected...", "creation_timestamp": "2026-07-19T12:24:58.427145Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/839204ee-149b-4079-9cf5-ec37e21b1201/export"/>
    <published>2026-07-19T12:24:58.427145+00:00</published>
  </entry>
</feed>
