https://vulnerability.circl.lu/sightings/feed 2026-08-10T19:59:54.418152+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bf19cbf6-a647-4324-a75a-fbb5f835dd56/export 2026-08-10T19:59:54.440324+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bf19cbf6-a647-4324-a75a-fbb5f835dd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr7zqbi3kk2i", "content": "CVE-2026-63090 - proftpd-dfsg\nDebian's OpenSSL package has a flaw that can cause it to generate weak keys, potentially allowing attackers to compromise secure connections. This affects systems\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#proftpddfsg #debian #Debian11 #CVE #infosec", "creation_timestamp": "2026-07-22T09:40:03.562761Z"} 2026-07-22T09:40:03.562761+00:00 https://vulnerability.circl.lu/sighting/cb088570-1806-4d17-95b0-54d29ef3d87f/export 2026-08-10T19:59:54.442872+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cb088570-1806-4d17-95b0-54d29ef3d87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3mr55nrpmia2o", "content": "ProFTPD Turns One Weak Login Into a Full-Scale Server Autopsy\nPANIC 72% | Lag 0.0h | CVE-2026-63090 lets authenticated attackers execute code on ProFTPD servers through the mod_sftp mod\n#AfterShockIndex\nREAD MORE", "creation_timestamp": "2026-07-21T06:12:15.950077Z"} 2026-07-21T06:12:15.950077+00:00 https://vulnerability.circl.lu/sighting/7dd1aafa-dbb7-430e-9d4a-84bcb3926399/export 2026-08-10T19:59:54.442980+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7dd1aafa-dbb7-430e-9d4a-84bcb3926399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr4wm5kcto2j", "content": "CVE-2026-63090\nAuthenticated attackers can exploit this flaw to execute malicious code on ProFTPD servers. This is particularly concerning because the attack only requires low-privilege access. To mitigate this risk, update\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-21T04:06:04.802272Z"} 2026-07-21T04:06:04.802272+00:00 https://vulnerability.circl.lu/sighting/a80e04c5-4009-483e-b5ec-fe1e82f5d8d4/export 2026-08-10T19:59:54.443055+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a80e04c5-4009-483e-b5ec-fe1e82f5d8d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3vujr4dm2a", "content": "CVE-2026-63090 - ProFTPD mod_sftp Heap Buffer Overflow via SFTP Packet Reassembly\nCVE ID : CVE-2026-63090\n \n Published : July 20, 2026, 3:16 p.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : ProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability i...", "creation_timestamp": "2026-07-20T18:20:12.348341Z"} 2026-07-20T18:20:12.348341+00:00 https://vulnerability.circl.lu/sighting/a88bbe5d-45fc-4331-8ed5-df730b029808/export 2026-08-10T19:59:54.443125+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "a88bbe5d-45fc-4331-8ed5-df730b029808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63090", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mr3o2rowxc2u", "content": "\ud83d\udfe0 CVE-2026-63090 - High (8.8)\n\nProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mo...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63090/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-20T16:00:32.455933Z"} 2026-07-20T16:00:32.455933+00:00 https://vulnerability.circl.lu/sighting/0a1b972d-7c1a-4c20-8ed9-1c6956d537d0/export 2026-08-10T19:59:54.443194+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0a1b972d-7c1a-4c20-8ed9-1c6956d537d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63094", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyjjfhw2h2a", "content": "\ud83d\udfe0 CVE-2026-63094 - High (8.1)\n\nSigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow tha...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63094/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T10:01:15.664912Z"} 2026-07-19T10:01:15.664912+00:00 https://vulnerability.circl.lu/sighting/7d231a08-5409-4294-aaee-261470b969bd/export 2026-08-10T19:59:54.443262+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7d231a08-5409-4294-aaee-261470b969bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63093", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mqyjj6cfxm2w", "content": "\ud83d\udfe0 CVE-2026-63093 - High (8.8)\n\nCursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote att...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-63093/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-07-19T10:01:08.342080Z"} 2026-07-19T10:01:08.342080+00:00 https://vulnerability.circl.lu/sighting/642f91d7-0884-46e2-84b8-08501beae337/export 2026-08-10T19:59:54.443336+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "642f91d7-0884-46e2-84b8-08501beae337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63094", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mquftzdovb2a", "content": "CVE-2026-63094 - SigNoz 0.133.0 SSO OAuth State Manipulation Session Token Theft\nCVE ID : CVE-2026-63094\n \n Published : July 17, 2026, 3:16 p.m. | 21\u00a0minutes ago\n \n Description : SigNoz through 0.133.0 contains an open redirect vulnerability in the SSO authentication flow that...", "creation_timestamp": "2026-07-17T18:44:57.107291Z"} 2026-07-17T18:44:57.107291+00:00 https://vulnerability.circl.lu/sighting/229e92a2-8c3f-4832-af38-b4f92b1741f4/export 2026-08-10T19:59:54.443403+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "229e92a2-8c3f-4832-af38-b4f92b1741f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63093", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqufkqdbbk2x", "content": "CVE-2026-63093 - Cursor for Windows 3.2.16 RCE via Malicious git.exe in Workspace\nCVE ID : CVE-2026-63093\n \n Published : July 17, 2026, 3:16 p.m. | 21\u00a0minutes ago\n \n Description : Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote att...", "creation_timestamp": "2026-07-17T18:39:45.762249Z"} 2026-07-17T18:39:45.762249+00:00 https://vulnerability.circl.lu/sighting/78e575d3-0210-4b28-b88e-5094569c59dd/export 2026-08-10T19:59:54.443471+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78e575d3-0210-4b28-b88e-5094569c59dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63093", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mqu272jdvo24", "content": "A malicious code project can run an attacker's program on your Windows PC the moment you open it in Cursor, the AI code editor. No clicks.\n\nIt hides a fake copy of Git that Cursor runs automatically. Unpatched (CVE-2026-63093).\n\nOpen unknown repos only in a sandbox.", "creation_timestamp": "2026-07-17T15:16:22.875325Z"} 2026-07-17T15:16:22.875325+00:00