https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 13:14:48 +0000 https://vulnerability.circl.lu/sighting/1fce689f-1aca-4d18-9b47-0d02112dbb15/export {"uuid": "1fce689f-1aca-4d18-9b47-0d02112dbb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12240", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013 The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-11T00:00:52.984485Z"} {"uuid": "1fce689f-1aca-4d18-9b47-0d02112dbb15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12240", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013 The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-11T00:00:52.984485Z"} https://vulnerability.circl.lu/sighting/1fce689f-1aca-4d18-9b47-0d02112dbb15/export Fri, 11 Sep 2026 00:00:52 +0000 https://vulnerability.circl.lu/sighting/ac529790-0610-42f4-bee0-fc433abcc8ef/export {"uuid": "ac529790-0610-42f4-bee0-fc433abcc8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12240", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013 The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-10T04:00:04.860308Z"} {"uuid": "ac529790-0610-42f4-bee0-fc433abcc8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12240", "type": "seen", "source": "https://t.me/cissp/6494", "content": "Below are the critical vulnerabilities being exploited in attacks in the wild:\n\nCVE-2017-12240 (CVSS score of 9.8) \u2013 The vulnerability affects the DHCP relay subsystem in IOS and IOS XE software. The vulnerability could be exploited by a remote and unauthenticated attacker that can execute arbitrary code and gain full control of the targeted system. The flaw could be also exploited to cause a denial-of-service (DoS) condition by triggering a buffer overflow via specially crafted DHCPv4 packets.\n\nCVE-2018-0125 (CVSS score of 9.8) \u2013 A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. \n\nCVE-2018-0147 (CVSS score of 9.8) \u2013 The vulnerability is a Java deserialization issue that affects Cisco Access Control System (ACS) that can be exploited by an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected device.\n\nCVE-2018-0171 (CVSS score of 9.8) \u2013 The vulnerability affects the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software, it could be exploited by an unauthenticated, remote attacker to cause a reload of a vulnerable device or to execute arbitrary code on an affected device.\n\nCVE-2021-1497 (CVSS score of 9.8) \u2013 The vulnerability is a Command Injection issue that resides in the web-based management interface of Cisco HyperFlex HX.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-10T04:00:04.860308Z"} https://vulnerability.circl.lu/sighting/ac529790-0610-42f4-bee0-fc433abcc8ef/export Thu, 10 Sep 2026 04:00:04 +0000 https://vulnerability.circl.lu/sighting/eb2c38c1-fa80-44e9-8502-2acc208f0073/export {"uuid": "eb2c38c1-fa80-44e9-8502-2acc208f0073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12557", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_imc_java_deserialize.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Steven Seeley (mr_me) of Offensive Security\", \"Carsten \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of\\n Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit\\n this vulnerability.\\n\\n The specific flaw exists within the WebDMDebugServlet, which listens on TCP ports 8080 and 8443 by\\n default. The issue results from the lack of proper validation of user-supplied data, which can result\\n in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary\\n code in the context of SYSTEM.\", \"disclosure_date\": \"2017-10-03\", \"fullname\": \"exploit/windows/http/hp_imc_java_deserialize\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"HP Intelligent Management Java Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/hp_imc_java_deserialize.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/hp_imc_java_deserialize\", \"references\": [\"CVE-2017-12557\", \"URL-https://github.com/pimps/ysoserial-modified/blob/master/src/main/java/ysoserial/payloads/JSON1.java\", \"URL-https://www.zerodayinitiative.com/advisories/ZDI-17-832/\"], \"rport\": \"8080\", \"session_types\": false, \"targets\": [\"HPE IMC 7.3 E0504P2 and earlier / Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:49.020591Z"} {"uuid": "eb2c38c1-fa80-44e9-8502-2acc208f0073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12557", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/hp_imc_java_deserialize.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Steven Seeley (mr_me) of Offensive Security\", \"Carsten \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of\\n Hewlett Packard Enterprise Intelligent Management Center. Authentication is not required to exploit\\n this vulnerability.\\n\\n The specific flaw exists within the WebDMDebugServlet, which listens on TCP ports 8080 and 8443 by\\n default. The issue results from the lack of proper validation of user-supplied data, which can result\\n in deserialization of untrusted data. An attacker can leverage this vulnerability to execute arbitrary\\n code in the context of SYSTEM.\", \"disclosure_date\": \"2017-10-03\", \"fullname\": \"exploit/windows/http/hp_imc_java_deserialize\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"HP Intelligent Management Java Deserialization RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/hp_imc_java_deserialize.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/hp_imc_java_deserialize\", \"references\": [\"CVE-2017-12557\", \"URL-https://github.com/pimps/ysoserial-modified/blob/master/src/main/java/ysoserial/payloads/JSON1.java\", \"URL-https://www.zerodayinitiative.com/advisories/ZDI-17-832/\"], \"rport\": \"8080\", \"session_types\": false, \"targets\": [\"HPE IMC 7.3 E0504P2 and earlier / Windows\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:49.020591Z"} https://vulnerability.circl.lu/sighting/eb2c38c1-fa80-44e9-8502-2acc208f0073/export Tue, 08 Sep 2026 06:51:49 +0000 https://vulnerability.circl.lu/sighting/20e744f4-b348-4405-9938-f3c66b2776a1/export {"uuid": "20e744f4-b348-4405-9938-f3c66b2776a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"peewpw\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module uses a PUT request bypass to upload a jsp shell to a vulnerable Apache Tomcat configuration.\", \"disclosure_date\": \"2017-10-03\", \"fullname\": \"exploit/multi/http/tomcat_jsp_upload_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Tomcat RCE via JSP Upload Bypass\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/tomcat_jsp_upload_bypass\", \"references\": [\"CVE-2017-12617\", \"URL-https://bz.apache.org/bugzilla/show_bug.cgi?id=61542\", \"EDB-42966\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic\", \"Java Windows\", \"Java Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:16.228087Z"} {"uuid": "20e744f4-b348-4405-9938-f3c66b2776a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12617", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb", "content": "{\"aliases\": [], \"arch\": \"java\", \"author\": [\"peewpw\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module uses a PUT request bypass to upload a jsp shell to a vulnerable Apache Tomcat configuration.\", \"disclosure_date\": \"2017-10-03\", \"fullname\": \"exploit/multi/http/tomcat_jsp_upload_bypass\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"Tomcat RCE via JSP Upload Bypass\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/tomcat_jsp_upload_bypass.rb\", \"platform\": \"Linux,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/tomcat_jsp_upload_bypass\", \"references\": [\"CVE-2017-12617\", \"URL-https://bz.apache.org/bugzilla/show_bug.cgi?id=61542\", \"EDB-42966\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic\", \"Java Windows\", \"Java Linux\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:16.228087Z"} https://vulnerability.circl.lu/sighting/20e744f4-b348-4405-9938-f3c66b2776a1/export Tue, 08 Sep 2026 06:50:16 +0000 https://vulnerability.circl.lu/sighting/2bb0c781-26b1-495d-8471-b7a901598dd2/export {"uuid": "2bb0c781-26b1-495d-8471-b7a901598dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12477", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/ueb9_bpserverd.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Jared Arave\", \"Cale Smith\", \"Benny Husted\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"It was discovered that the Unitrends bpserverd proprietary protocol, as exposed via xinetd,\\n has an issue in which its authentication can be bypassed. A remote attacker could use this\\n issue to execute arbitrary commands with root privilege on the target system.\", \"disclosure_date\": \"2017-08-08\", \"fullname\": \"exploit/linux/misc/ueb9_bpserverd\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Unitrends UEB bpserverd authentication bypass RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/misc/ueb9_bpserverd.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/misc/ueb9_bpserverd\", \"references\": [\"URL-https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcZeAAK/000005755\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2017-12477\", \"CVE-2017-12477\"], \"rport\": 1743, \"session_types\": false, \"targets\": [\"UEB 9.*\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:19.968445Z"} {"uuid": "2bb0c781-26b1-495d-8471-b7a901598dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12477", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/ueb9_bpserverd.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Jared Arave\", \"Cale Smith\", \"Benny Husted\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"It was discovered that the Unitrends bpserverd proprietary protocol, as exposed via xinetd,\\n has an issue in which its authentication can be bypassed. A remote attacker could use this\\n issue to execute arbitrary commands with root privilege on the target system.\", \"disclosure_date\": \"2017-08-08\", \"fullname\": \"exploit/linux/misc/ueb9_bpserverd\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Unitrends UEB bpserverd authentication bypass RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/misc/ueb9_bpserverd.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/misc/ueb9_bpserverd\", \"references\": [\"URL-https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000CcZeAAK/000005755\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2017-12477\", \"CVE-2017-12477\"], \"rport\": 1743, \"session_types\": false, \"targets\": [\"UEB 9.*\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:19.968445Z"} https://vulnerability.circl.lu/sighting/2bb0c781-26b1-495d-8471-b7a901598dd2/export Tue, 08 Sep 2026 06:49:19 +0000 https://vulnerability.circl.lu/sighting/8118d730-0319-44f2-9b36-713155061a58/export {"uuid": "8118d730-0319-44f2-9b36-713155061a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12478", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ueb_api_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Cale Smith\", \"Benny Husted\", \"Jared Arave\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"It was discovered that the api/storage web interface in Unitrends Backup (UB)\\n before 10.0.0 has an issue in which one of its input parameters was not validated.\\n A remote attacker could use this flaw to bypass authentication and execute arbitrary\\n commands with root privilege on the target system.\\n UEB v9 runs the api under root privileges and api/storage is vulnerable.\\n UEB v10 runs the api under limited privileges and api/hosts is vulnerable.\", \"disclosure_date\": \"2017-08-08\", \"fullname\": \"exploit/linux/http/ueb_api_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Unitrends UEB http api remote code execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/ueb_api_rce.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ueb_api_rce\", \"references\": [\"URL-https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000TO5PAAW/000005756\", \"URL-https://support.unitrends.com/UnitrendsBackup/s/article/000006002\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2017-12478\", \"URL-http://blog.redactedsec.net/exploits/2018/01/29/UEB9.html\", \"EDB-44297\", \"CVE-2017-12478\", \"CVE-2018-6328\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"UEB 9.*\", \"UEB < 10.1.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:00.366535Z"} {"uuid": "8118d730-0319-44f2-9b36-713155061a58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12478", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ueb_api_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Cale Smith\", \"Benny Husted\", \"Jared Arave\", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"It was discovered that the api/storage web interface in Unitrends Backup (UB)\\n before 10.0.0 has an issue in which one of its input parameters was not validated.\\n A remote attacker could use this flaw to bypass authentication and execute arbitrary\\n commands with root privilege on the target system.\\n UEB v9 runs the api under root privileges and api/storage is vulnerable.\\n UEB v10 runs the api under limited privileges and api/hosts is vulnerable.\", \"disclosure_date\": \"2017-08-08\", \"fullname\": \"exploit/linux/http/ueb_api_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Unitrends UEB http api remote code execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/ueb_api_rce.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ueb_api_rce\", \"references\": [\"URL-https://support.unitrends.com/UnitrendsBackup/s/article/ka640000000TO5PAAW/000005756\", \"URL-https://support.unitrends.com/UnitrendsBackup/s/article/000006002\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2017-12478\", \"URL-http://blog.redactedsec.net/exploits/2018/01/29/UEB9.html\", \"EDB-44297\", \"CVE-2017-12478\", \"CVE-2018-6328\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"UEB 9.*\", \"UEB < 10.1.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:00.366535Z"} https://vulnerability.circl.lu/sighting/8118d730-0319-44f2-9b36-713155061a58/export Tue, 08 Sep 2026 06:49:00 +0000 https://vulnerability.circl.lu/sighting/044eb088-ade7-4bac-88bd-6abbb74e4b90/export {"uuid": "044eb088-ade7-4bac-88bd-6abbb74e4b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12636", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Max Justicz\", \"Joan Touzet\", \"Green-m \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"CouchDB administrative users can configure the database server via HTTP(S).\\n Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB.\\n This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user,\\n including downloading and executing scripts from the public internet.\", \"disclosure_date\": \"2016-04-06\", \"fullname\": \"exploit/linux/http/apache_couchdb_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Apache CouchDB Arbitrary Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/apache_couchdb_cmd_exec\", \"references\": [\"CVE-2017-12636\", \"CVE-2017-12635\", \"URL-https://justi.cz/security/2017/11/14/couchdb-rce-npm.html\", \"URL-http://docs.couchdb.org/en/latest/cve/2017-12636.html\", \"URL-https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E\"], \"rport\": 5984, \"session_types\": false, \"targets\": [\"Automatic\", \"Apache CouchDB version 1.x\", \"Apache CouchDB version 2.x\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:21.376996Z"} {"uuid": "044eb088-ade7-4bac-88bd-6abbb74e4b90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12636", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Max Justicz\", \"Joan Touzet\", \"Green-m \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"CouchDB administrative users can configure the database server via HTTP(S).\\n Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB.\\n This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user,\\n including downloading and executing scripts from the public internet.\", \"disclosure_date\": \"2016-04-06\", \"fullname\": \"exploit/linux/http/apache_couchdb_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Apache CouchDB Arbitrary Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/apache_couchdb_cmd_exec\", \"references\": [\"CVE-2017-12636\", \"CVE-2017-12635\", \"URL-https://justi.cz/security/2017/11/14/couchdb-rce-npm.html\", \"URL-http://docs.couchdb.org/en/latest/cve/2017-12636.html\", \"URL-https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E\"], \"rport\": 5984, \"session_types\": false, \"targets\": [\"Automatic\", \"Apache CouchDB version 1.x\", \"Apache CouchDB version 2.x\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:21.376996Z"} https://vulnerability.circl.lu/sighting/044eb088-ade7-4bac-88bd-6abbb74e4b90/export Tue, 08 Sep 2026 06:48:21 +0000 https://vulnerability.circl.lu/sighting/57d36637-3a84-4f57-8372-39d28f72b3d8/export {"uuid": "57d36637-3a84-4f57-8372-39d28f72b3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12635", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Max Justicz\", \"Joan Touzet\", \"Green-m \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"CouchDB administrative users can configure the database server via HTTP(S).\\n Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB.\\n This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user,\\n including downloading and executing scripts from the public internet.\", \"disclosure_date\": \"2016-04-06\", \"fullname\": \"exploit/linux/http/apache_couchdb_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Apache CouchDB Arbitrary Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/apache_couchdb_cmd_exec\", \"references\": [\"CVE-2017-12636\", \"CVE-2017-12635\", \"URL-https://justi.cz/security/2017/11/14/couchdb-rce-npm.html\", \"URL-http://docs.couchdb.org/en/latest/cve/2017-12636.html\", \"URL-https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E\"], \"rport\": 5984, \"session_types\": false, \"targets\": [\"Automatic\", \"Apache CouchDB version 1.x\", \"Apache CouchDB version 2.x\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:21.281646Z"} {"uuid": "57d36637-3a84-4f57-8372-39d28f72b3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12635", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Max Justicz\", \"Joan Touzet\", \"Green-m \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"CouchDB administrative users can configure the database server via HTTP(S).\\n Some of the configuration options include paths for operating system-level binaries that are subsequently launched by CouchDB.\\n This allows an admin user in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to execute arbitrary shell commands as the CouchDB user,\\n including downloading and executing scripts from the public internet.\", \"disclosure_date\": \"2016-04-06\", \"fullname\": \"exploit/linux/http/apache_couchdb_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Apache CouchDB Arbitrary Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/apache_couchdb_cmd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/apache_couchdb_cmd_exec\", \"references\": [\"CVE-2017-12636\", \"CVE-2017-12635\", \"URL-https://justi.cz/security/2017/11/14/couchdb-rce-npm.html\", \"URL-http://docs.couchdb.org/en/latest/cve/2017-12636.html\", \"URL-https://lists.apache.org/thread.html/6c405bf3f8358e6314076be9f48c89a2e0ddf00539906291ebdf0c67@%3Cdev.couchdb.apache.org%3E\"], \"rport\": 5984, \"session_types\": false, \"targets\": [\"Automatic\", \"Apache CouchDB version 1.x\", \"Apache CouchDB version 2.x\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:21.281646Z"} https://vulnerability.circl.lu/sighting/57d36637-3a84-4f57-8372-39d28f72b3d8/export Tue, 08 Sep 2026 06:48:21 +0000 https://vulnerability.circl.lu/sighting/cbc1c34c-b9ff-4f19-99b4-ed622bf447ca/export {"uuid": "cbc1c34c-b9ff-4f19-99b4-ed622bf447ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12373", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Hanno B\\u00f6ck\", \"Juraj Somorovsky\", \"Craig Young\", \"Daniel Bleichenbacher\", \"Adam Cammack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Some TLS implementations handle errors processing RSA key exchanges and\\n encryption (PKCS #1 v1.5 messages) in a broken way that leads an\\n adaptive chosen-chiphertext attack. Attackers cannot recover a server's\\n private key, but they can decrypt and sign messages with it. A strong\\n oracle occurs when the TLS server does not strictly check message\\n formatting and needs less than a million requests on average to decode\\n a given ciphertext. A weak oracle server strictly checks message\\n formatting and often requires many more requests to perform the attack.\\n\\n This module requires Python 3 with the gmpy2 and cryptography packages\\n to be present.\", \"disclosure_date\": \"2009-06-17\", \"fullname\": \"auxiliary/scanner/ssl/bleichenbacher_oracle\", \"is_install_path\": true, \"mod_time\": \"2025-06-30 13:02:40 +0000\", \"name\": \"Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5\", \"needs_cleanup\": false, \"notes\": {\"AKA\": [\"ROBOT\", \"Adaptive chosen-ciphertext attack\"]}, \"path\": \"/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/ssl/bleichenbacher_oracle\", \"references\": [\"CVE-2017-6168\", \"CVE-2017-17382\", \"CVE-2017-17427\", \"CVE-2017-17428\", \"CVE-2017-12373\", \"CVE-2017-13098\", \"CVE-2017-1000385\", \"CVE-2017-13099\", \"CVE-2016-6883\", \"CVE-2012-5081\", \"URL-https://robotattack.org\", \"URL-https://eprint.iacr.org/2017/1189\", \"URL-https://github.com/robotattackorg/robot-detect\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:08.942250Z"} {"uuid": "cbc1c34c-b9ff-4f19-99b4-ed622bf447ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12373", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Hanno B\\u00f6ck\", \"Juraj Somorovsky\", \"Craig Young\", \"Daniel Bleichenbacher\", \"Adam Cammack \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"Some TLS implementations handle errors processing RSA key exchanges and\\n encryption (PKCS #1 v1.5 messages) in a broken way that leads an\\n adaptive chosen-chiphertext attack. Attackers cannot recover a server's\\n private key, but they can decrypt and sign messages with it. A strong\\n oracle occurs when the TLS server does not strictly check message\\n formatting and needs less than a million requests on average to decode\\n a given ciphertext. A weak oracle server strictly checks message\\n formatting and often requires many more requests to perform the attack.\\n\\n This module requires Python 3 with the gmpy2 and cryptography packages\\n to be present.\", \"disclosure_date\": \"2009-06-17\", \"fullname\": \"auxiliary/scanner/ssl/bleichenbacher_oracle\", \"is_install_path\": true, \"mod_time\": \"2025-06-30 13:02:40 +0000\", \"name\": \"Scanner for Bleichenbacher Oracle in RSA PKCS #1 v1.5\", \"needs_cleanup\": false, \"notes\": {\"AKA\": [\"ROBOT\", \"Adaptive chosen-ciphertext attack\"]}, \"path\": \"/modules/auxiliary/scanner/ssl/bleichenbacher_oracle.py\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/ssl/bleichenbacher_oracle\", \"references\": [\"CVE-2017-6168\", \"CVE-2017-17382\", \"CVE-2017-17427\", \"CVE-2017-17428\", \"CVE-2017-12373\", \"CVE-2017-13098\", \"CVE-2017-1000385\", \"CVE-2017-13099\", \"CVE-2016-6883\", \"CVE-2012-5081\", \"URL-https://robotattack.org\", \"URL-https://eprint.iacr.org/2017/1189\", \"URL-https://github.com/robotattackorg/robot-detect\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:08.942250Z"} https://vulnerability.circl.lu/sighting/cbc1c34c-b9ff-4f19-99b4-ed622bf447ca/export Tue, 08 Sep 2026 06:48:08 +0000 https://vulnerability.circl.lu/sighting/1c9e1635-306c-432b-b2ce-79b8e54e8763/export {"uuid": "1c9e1635-306c-432b-b2ce-79b8e54e8763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Tyler Krpata\", \"Zach Grace <@ztgrace>\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module scans a JBoss instance for a few vulnerabilities.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/jboss_vulnscan\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"JBoss Vulnerability Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/jboss_vulnscan.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/jboss_vulnscan\", \"references\": [\"CVE-2008-3273\", \"CVE-2010-1429\", \"CVE-2010-0738\", \"CVE-2010-1428\", \"CVE-2017-12149\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:35.246720Z"} {"uuid": "1c9e1635-306c-432b-b2ce-79b8e54e8763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12149", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jboss_vulnscan.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Tyler Krpata\", \"Zach Grace <@ztgrace>\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module scans a JBoss instance for a few vulnerabilities.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/jboss_vulnscan\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"JBoss Vulnerability Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/jboss_vulnscan.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/jboss_vulnscan\", \"references\": [\"CVE-2008-3273\", \"CVE-2010-1429\", \"CVE-2010-0738\", \"CVE-2010-1428\", \"CVE-2017-12149\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:35.246720Z"} https://vulnerability.circl.lu/sighting/1c9e1635-306c-432b-b2ce-79b8e54e8763/export Tue, 08 Sep 2026 06:47:35 +0000