<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 03:16:11 +0000</lastBuildDate>
    <item>
      <title>98f23c43-64f1-4d58-9d2c-f39cd3b49a80</title>
      <link>https://vulnerability.circl.lu/sighting/98f23c43-64f1-4d58-9d2c-f39cd3b49a80/export</link>
      <description>{"uuid": "98f23c43-64f1-4d58-9d2c-f39cd3b49a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcan5husu2n", "content": "CVE-2026-105295 - gitahead\nGitAhead versions 2.5.0 through 2.7.1 install updates without checking they are genuine and stop warning about certificate problems after the first warning. This lets an attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitahead #CVE #infosec", "creation_timestamp": "2026-10-07T15:20:04.000801Z"}</description>
      <content:encoded>{"uuid": "98f23c43-64f1-4d58-9d2c-f39cd3b49a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxcan5husu2n", "content": "CVE-2026-105295 - gitahead\nGitAhead versions 2.5.0 through 2.7.1 install updates without checking they are genuine and stop warning about certificate problems after the first warning. This lets an attacker who can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#gitahead #CVE #infosec", "creation_timestamp": "2026-10-07T15:20:04.000801Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/98f23c43-64f1-4d58-9d2c-f39cd3b49a80/export</guid>
      <pubDate>Wed, 07 Oct 2026 15:20:04 +0000</pubDate>
    </item>
    <item>
      <title>67c31026-936b-497b-868f-a513edbb27c2</title>
      <link>https://vulnerability.circl.lu/sighting/67c31026-936b-497b-868f-a513edbb27c2/export</link>
      <description>{"uuid": "67c31026-936b-497b-868f-a513edbb27c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3comjh2w", "content": "CVE-2026-105293 - legcord\nVersions 1.1.0 through 1.3.0 of Legcord let code injected into a Discord page break out of the theme folder. This means an attacker could make the program launch other applications, delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#legcord #CVE #infosec", "creation_timestamp": "2026-10-07T15:10:05.233626Z"}</description>
      <content:encoded>{"uuid": "67c31026-936b-497b-868f-a513edbb27c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxca3comjh2w", "content": "CVE-2026-105293 - legcord\nVersions 1.1.0 through 1.3.0 of Legcord let code injected into a Discord page break out of the theme folder. This means an attacker could make the program launch other applications, delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#legcord #CVE #infosec", "creation_timestamp": "2026-10-07T15:10:05.233626Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/67c31026-936b-497b-868f-a513edbb27c2/export</guid>
      <pubDate>Wed, 07 Oct 2026 15:10:05 +0000</pubDate>
    </item>
    <item>
      <title>ea4a1edd-68f8-4183-9665-f772dccbb378</title>
      <link>https://vulnerability.circl.lu/sighting/ea4a1edd-68f8-4183-9665-f772dccbb378/export</link>
      <description>{"uuid": "ea4a1edd-68f8-4183-9665-f772dccbb378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jrcngwpezobde", "content": "CVE-2026-105291 - feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting\nCVE ID : CVE-2026-105291\n \n Published : Oct. 5, 2026, 10:45 a.m. | 25\u00a0minutes ago\n \n Description : A vulnerability was identified in feelec-yishu feelcrm-o...", "creation_timestamp": "2026-10-05T11:59:14.685386Z"}</description>
      <content:encoded>{"uuid": "ea4a1edd-68f8-4183-9665-f772dccbb378", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105291", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/jrcngwpezobde", "content": "CVE-2026-105291 - feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting\nCVE ID : CVE-2026-105291\n \n Published : Oct. 5, 2026, 10:45 a.m. | 25\u00a0minutes ago\n \n Description : A vulnerability was identified in feelec-yishu feelcrm-o...", "creation_timestamp": "2026-10-05T11:59:14.685386Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ea4a1edd-68f8-4183-9665-f772dccbb378/export</guid>
      <pubDate>Mon, 05 Oct 2026 11:59:14 +0000</pubDate>
    </item>
    <item>
      <title>031c8dd5-7ef1-4fe2-905a-16e7b7277497</title>
      <link>https://vulnerability.circl.lu/sighting/031c8dd5-7ef1-4fe2-905a-16e7b7277497/export</link>
      <description>{"uuid": "031c8dd5-7ef1-4fe2-905a-16e7b7277497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5sg6i4srenjj2", "content": "CVE-2026-105290 - feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery\nCVE ID : CVE-2026-105290\n \n Published : Oct. 5, 2026, 10:30 a.m. | 40\u00a0minutes ago\n \n Description : A vulnerability was determined in feelec-yishu feelcrm-os 1....", "creation_timestamp": "2026-10-05T11:47:13.698447Z"}</description>
      <content:encoded>{"uuid": "031c8dd5-7ef1-4fe2-905a-16e7b7277497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105290", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/5sg6i4srenjj2", "content": "CVE-2026-105290 - feelec-yishu feelcrm-os getCurlData Endpoint GoogleController.class.php server-side request forgery\nCVE ID : CVE-2026-105290\n \n Published : Oct. 5, 2026, 10:30 a.m. | 40\u00a0minutes ago\n \n Description : A vulnerability was determined in feelec-yishu feelcrm-os 1....", "creation_timestamp": "2026-10-05T11:47:13.698447Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/031c8dd5-7ef1-4fe2-905a-16e7b7277497/export</guid>
      <pubDate>Mon, 05 Oct 2026 11:47:13 +0000</pubDate>
    </item>
    <item>
      <title>caa47028-eddd-4a04-8673-83f5808663da</title>
      <link>https://vulnerability.circl.lu/sighting/caa47028-eddd-4a04-8673-83f5808663da/export</link>
      <description>{"uuid": "caa47028-eddd-4a04-8673-83f5808663da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fydehkgs3uajf", "content": "CVE-2026-105293 - Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers\nCVE ID : CVE-2026-105293\n \n Published : Oct. 5, 2026, 12:44 a.m. | 43\u00a0minutes ago\n \n Description : Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that...", "creation_timestamp": "2026-10-05T02:42:50.167098Z"}</description>
      <content:encoded>{"uuid": "caa47028-eddd-4a04-8673-83f5808663da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/fydehkgs3uajf", "content": "CVE-2026-105293 - Legcord 1.1.0 through 1.3.0 Path Traversal via Theme IPC Handlers\nCVE ID : CVE-2026-105293\n \n Published : Oct. 5, 2026, 12:44 a.m. | 43\u00a0minutes ago\n \n Description : Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that...", "creation_timestamp": "2026-10-05T02:42:50.167098Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/caa47028-eddd-4a04-8673-83f5808663da/export</guid>
      <pubDate>Mon, 05 Oct 2026 02:42:50 +0000</pubDate>
    </item>
    <item>
      <title>1bb0855a-cfc2-4e09-a500-15a77b7672cf</title>
      <link>https://vulnerability.circl.lu/sighting/1bb0855a-cfc2-4e09-a500-15a77b7672cf/export</link>
      <description>{"uuid": "1bb0855a-cfc2-4e09-a500-15a77b7672cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105294", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tg3pwmt2w", "content": "\ud83d\udea8 CVE-2026-105294 \u2014 CVSS 9.1 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Disc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105294\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:29.970205Z"}</description>
      <content:encoded>{"uuid": "1bb0855a-cfc2-4e09-a500-15a77b7672cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105294", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tg3pwmt2w", "content": "\ud83d\udea8 CVE-2026-105294 \u2014 CVSS 9.1 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a configuration injection vulnerability that allows script in the Disc...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105294\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:29.970205Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1bb0855a-cfc2-4e09-a500-15a77b7672cf/export</guid>
      <pubDate>Mon, 05 Oct 2026 02:07:29 +0000</pubDate>
    </item>
    <item>
      <title>3a2e1e1b-3230-405a-b663-17d1bb6a0e70</title>
      <link>https://vulnerability.circl.lu/sighting/3a2e1e1b-3230-405a-b663-17d1bb6a0e70/export</link>
      <description>{"uuid": "3a2e1e1b-3230-405a-b663-17d1bb6a0e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfu5g5d27", "content": "\ud83d\udea8 CVE-2026-105293 \u2014 CVSS 9.2 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows scrip...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105293\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:22.003631Z"}</description>
      <content:encoded>{"uuid": "3a2e1e1b-3230-405a-b663-17d1bb6a0e70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mx3tfu5g5d27", "content": "\ud83d\udea8 CVE-2026-105293 \u2014 CVSS 9.2 CRITICAL\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows scrip...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-105293\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-05T02:07:22.003631Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3a2e1e1b-3230-405a-b663-17d1bb6a0e70/export</guid>
      <pubDate>Mon, 05 Oct 2026 02:07:22 +0000</pubDate>
    </item>
    <item>
      <title>48cb8843-7830-47f7-bbc9-34f911cf0a56</title>
      <link>https://vulnerability.circl.lu/sighting/48cb8843-7830-47f7-bbc9-34f911cf0a56/export</link>
      <description>{"uuid": "48cb8843-7830-47f7-bbc9-34f911cf0a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rga3yy52s", "content": "\ud83d\udfe0 CVE-2026-105293 - High (8.1)\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105293/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:47.988465Z"}</description>
      <content:encoded>{"uuid": "48cb8843-7830-47f7-bbc9-34f911cf0a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105293", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rga3yy52s", "content": "\ud83d\udfe0 CVE-2026-105293 - High (8.1)\n\nLegcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that al...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105293/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:47.988465Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/48cb8843-7830-47f7-bbc9-34f911cf0a56/export</guid>
      <pubDate>Mon, 05 Oct 2026 01:31:47 +0000</pubDate>
    </item>
    <item>
      <title>f6342811-dd31-47d3-ac20-32cdfc78f088</title>
      <link>https://vulnerability.circl.lu/sighting/f6342811-dd31-47d3-ac20-32cdfc78f088/export</link>
      <description>{"uuid": "f6342811-dd31-47d3-ac20-32cdfc78f088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rfywmyi2n", "content": "\ud83d\udfe0 CVE-2026-105295 - High (7.5)\n\nGitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105295/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:40.859960Z"}</description>
      <content:encoded>{"uuid": "f6342811-dd31-47d3-ac20-32cdfc78f088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-105295", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mx3rfywmyi2n", "content": "\ud83d\udfe0 CVE-2026-105295 - High (7.5)\n\nGitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updat...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-105295/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-05T01:31:40.859960Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f6342811-dd31-47d3-ac20-32cdfc78f088/export</guid>
      <pubDate>Mon, 05 Oct 2026 01:31:40 +0000</pubDate>
    </item>
    <item>
      <title>443b6e74-25ad-4779-96a5-1b1bd4cc3f2e</title>
      <link>https://vulnerability.circl.lu/sighting/443b6e74-25ad-4779-96a5-1b1bd4cc3f2e/export</link>
      <description>{"uuid": "443b6e74-25ad-4779-96a5-1b1bd4cc3f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbu5ppuib2c", "content": "CVE-2026-10529 - westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting\nCVE ID : CVE-2026-10529\n \n Published : June 2, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A weakness has been identified in westboy CicadasCMS up to 2...", "creation_timestamp": "2026-06-02T05:24:45.071595Z"}</description>
      <content:encoded>{"uuid": "443b6e74-25ad-4779-96a5-1b1bd4cc3f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mnbu5ppuib2c", "content": "CVE-2026-10529 - westboy CicadasCMS Task Scheduling Management ScheduleJobController.java cross site scripting\nCVE ID : CVE-2026-10529\n \n Published : June 2, 2026, 2:16 a.m. | 2\u00a0hours, 16\u00a0minutes ago\n \n Description : A weakness has been identified in westboy CicadasCMS up to 2...", "creation_timestamp": "2026-06-02T05:24:45.071595Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/443b6e74-25ad-4779-96a5-1b1bd4cc3f2e/export</guid>
      <pubDate>Tue, 02 Jun 2026 05:24:45 +0000</pubDate>
    </item>
  </channel>
</rss>
