https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 18:21:49 +0000 https://vulnerability.circl.lu/sighting/5867ade9-7b5e-450e-b6a2-6b10f5f2d02a/export {"uuid": "5867ade9-7b5e-450e-b6a2-6b10f5f2d02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8518", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vvveb_auth_rce_cve_2025_8518.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Maksim Rogov\", \"Hamed Kohi\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Vvveb CMS is vulnerable to code injection via the Code Editor functionality.\\n\\n Unsanitized editing functionality allows attacker-controlled changes to existing files on the web-accessible filesystem,\\n allowing remote authenticated attackers with access to the Code Editor to achieve code execution\\n when those modified files are executed or served by the application or web server.\\n\\n This vulnerability affects Vvveb CMS versions up to and including 1.0.5.\\n Successful exploitation may result in the remote code execution under the privileges\\n of the web server, potentially exposing sensitive data or disrupting survey operations.\\n\\n An attacker can execute arbitrary system commands in the context of the user running the web server.\", \"disclosure_date\": \"2025-01-10\", \"fullname\": \"exploit/multi/http/vvveb_auth_rce_cve_2025_8518\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Remote Code Execution Vulnerability in Vvveb\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/vvveb_auth_rce_cve_2025_8518.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/vvveb_auth_rce_cve_2025_8518\", \"references\": [\"CVE-2025-8518\", \"URL-https://hkohi.ca/vulnerability/8\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:19.378637Z"} {"uuid": "5867ade9-7b5e-450e-b6a2-6b10f5f2d02a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8518", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vvveb_auth_rce_cve_2025_8518.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Maksim Rogov\", \"Hamed Kohi\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Vvveb CMS is vulnerable to code injection via the Code Editor functionality.\\n\\n Unsanitized editing functionality allows attacker-controlled changes to existing files on the web-accessible filesystem,\\n allowing remote authenticated attackers with access to the Code Editor to achieve code execution\\n when those modified files are executed or served by the application or web server.\\n\\n This vulnerability affects Vvveb CMS versions up to and including 1.0.5.\\n Successful exploitation may result in the remote code execution under the privileges\\n of the web server, potentially exposing sensitive data or disrupting survey operations.\\n\\n An attacker can execute arbitrary system commands in the context of the user running the web server.\", \"disclosure_date\": \"2025-01-10\", \"fullname\": \"exploit/multi/http/vvveb_auth_rce_cve_2025_8518\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 16:12:31 +0000\", \"name\": \"Remote Code Execution Vulnerability in Vvveb\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/vvveb_auth_rce_cve_2025_8518.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"multi/http/vvveb_auth_rce_cve_2025_8518\", \"references\": [\"CVE-2025-8518\", \"URL-https://hkohi.ca/vulnerability/8\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:19.378637Z"} https://vulnerability.circl.lu/sighting/5867ade9-7b5e-450e-b6a2-6b10f5f2d02a/export Tue, 08 Sep 2026 06:50:19 +0000 https://vulnerability.circl.lu/sighting/e87dad5e-9141-41c2-bd4b-e412a9da11a1/export {"uuid": "e87dad5e-9141-41c2-bd4b-e412a9da11a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-08-03T00:05:47.274537Z"} {"uuid": "e87dad5e-9141-41c2-bd4b-e412a9da11a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-08-03T00:05:47.274537Z"} https://vulnerability.circl.lu/sighting/e87dad5e-9141-41c2-bd4b-e412a9da11a1/export Mon, 03 Aug 2026 00:05:47 +0000 https://vulnerability.circl.lu/sighting/f276e307-a44c-4a13-b30f-72eeb878adec/export {"uuid": "f276e307-a44c-4a13-b30f-72eeb878adec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-08-02T00:00:09.513082Z"} {"uuid": "f276e307-a44c-4a13-b30f-72eeb878adec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-08-02T00:00:09.513082Z"} https://vulnerability.circl.lu/sighting/f276e307-a44c-4a13-b30f-72eeb878adec/export Sun, 02 Aug 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/57ed2bb0-55fd-4418-a302-03a84236285b/export {"uuid": "57ed2bb0-55fd-4418-a302-03a84236285b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-08-01T23:00:04.697772Z"} {"uuid": "57ed2bb0-55fd-4418-a302-03a84236285b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-08-01T23:00:04.697772Z"} https://vulnerability.circl.lu/sighting/57ed2bb0-55fd-4418-a302-03a84236285b/export Sat, 01 Aug 2026 23:00:04 +0000 https://vulnerability.circl.lu/sighting/bb9e671a-dffb-41f5-8900-fb9e8fc0e780/export {"uuid": "bb9e671a-dffb-41f5-8900-fb9e8fc0e780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "seen", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-07-30T00:02:11.720342Z"} {"uuid": "bb9e671a-dffb-41f5-8900-fb9e8fc0e780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "seen", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-07-30T00:02:11.720342Z"} https://vulnerability.circl.lu/sighting/bb9e671a-dffb-41f5-8900-fb9e8fc0e780/export Thu, 30 Jul 2026 00:02:11 +0000 https://vulnerability.circl.lu/sighting/c111953a-11c3-4687-80ce-1117edd8c9cd/export {"uuid": "c111953a-11c3-4687-80ce-1117edd8c9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "seen", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-07-29T12:02:01.129529Z"} {"uuid": "c111953a-11c3-4687-80ce-1117edd8c9cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8556", "type": "seen", "source": "https://t.me/reverseame/5469", "content": "CVE-2025-8556 - Cryptographic Issues in Cloudflare\u2019s CIRCL FourQ Implementation #CVE20258556 #CloudflareCIRCL #FourQ #InvalidPointAttack #EllipticCurveCrypto https://www.botanica.software/blog/cryptographic-issues-in-cloudflares-circl-fourq-implementation", "creation_timestamp": "2026-07-29T12:02:01.129529Z"} https://vulnerability.circl.lu/sighting/c111953a-11c3-4687-80ce-1117edd8c9cd/export Wed, 29 Jul 2026 12:02:01 +0000 https://vulnerability.circl.lu/sighting/6a7c877a-0821-429e-8b8d-b72558b49380/export {"uuid": "6a7c877a-0821-429e-8b8d-b72558b49380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-23T00:00:24.841867Z"} {"uuid": "6a7c877a-0821-429e-8b8d-b72558b49380", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-23T00:00:24.841867Z"} https://vulnerability.circl.lu/sighting/6a7c877a-0821-429e-8b8d-b72558b49380/export Thu, 23 Jul 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/f7e37356-5a93-4e0e-9aa3-95f0967d2904/export {"uuid": "f7e37356-5a93-4e0e-9aa3-95f0967d2904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-22T05:00:05.230240Z"} {"uuid": "f7e37356-5a93-4e0e-9aa3-95f0967d2904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "https://t.me/pphm_HackerNews/845", "content": "\ud83d\udea8 Inspiro Theme CSRF Flaw (CVE-2025-8592) Puts 70,000 WordPress Sites at Risk\n\nA high-severity CSRF vulnerability (CVE-2025-8592) has been found in the Inspiro WordPress theme (versions \u2264 2.1.2), exposing more than 70,000 sites to plugin hijacking attacks. The flaw stems from missing nonce validation in the inspiro_install_plugin() function, allowing attackers to trick admins into installing malicious plugins via crafted links. With a CVSS score of 8.1, the bug requires no authentication and can be exploited remotely. Site owners are urged to update to Inspiro v2.1.3, which fixes the issue by adding proper nonce validation.", "creation_timestamp": "2026-07-22T05:00:05.230240Z"} https://vulnerability.circl.lu/sighting/f7e37356-5a93-4e0e-9aa3-95f0967d2904/export Wed, 22 Jul 2026 05:00:05 +0000 https://vulnerability.circl.lu/sighting/c985eadf-8800-4fdc-afaf-ec84547aac1f/export {"uuid": "c985eadf-8800-4fdc-afaf-ec84547aac1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-21T00:00:20.082700Z"} {"uuid": "c985eadf-8800-4fdc-afaf-ec84547aac1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-21T00:00:20.082700Z"} https://vulnerability.circl.lu/sighting/c985eadf-8800-4fdc-afaf-ec84547aac1f/export Tue, 21 Jul 2026 00:00:20 +0000 https://vulnerability.circl.lu/sighting/6d55842c-e66c-4c16-a45b-2cd503e47601/export {"uuid": "6d55842c-e66c-4c16-a45b-2cd503e47601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-20T19:00:04.050307Z"} {"uuid": "6d55842c-e66c-4c16-a45b-2cd503e47601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8592", "type": "seen", "source": "Telegram/ZfPTk74vZzmZIe5sCn6LZYqmo9lWbfWIXqrCcyF6LM4oOA0", "content": "", "creation_timestamp": "2026-07-20T19:00:04.050307Z"} https://vulnerability.circl.lu/sighting/6d55842c-e66c-4c16-a45b-2cd503e47601/export Mon, 20 Jul 2026 19:00:04 +0000