https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 13 Jul 2026 19:31:48 +0000 https://vulnerability.circl.lu/sighting/d4dbb256-856a-47ab-9ce7-e4b20f578464/export {"uuid": "d4dbb256-856a-47ab-9ce7-e4b20f578464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-12T00:00:41.862997Z"} {"uuid": "d4dbb256-856a-47ab-9ce7-e4b20f578464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-12T00:00:41.862997Z"} https://vulnerability.circl.lu/sighting/d4dbb256-856a-47ab-9ce7-e4b20f578464/export Sun, 12 Jul 2026 00:00:41 +0000 https://vulnerability.circl.lu/sighting/55a62d36-bb79-4791-8358-767676d25a74/export {"uuid": "55a62d36-bb79-4791-8358-767676d25a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-11T18:00:04.584093Z"} {"uuid": "55a62d36-bb79-4791-8358-767676d25a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "published-proof-of-concept", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-11T18:00:04.584093Z"} https://vulnerability.circl.lu/sighting/55a62d36-bb79-4791-8358-767676d25a74/export Sat, 11 Jul 2026 18:00:04 +0000 https://vulnerability.circl.lu/sighting/1a8639aa-249e-44e8-b864-8d30b9be2995/export {"uuid": "1a8639aa-249e-44e8-b864-8d30b9be2995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-10T00:00:37.245418Z"} {"uuid": "1a8639aa-249e-44e8-b864-8d30b9be2995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-10T00:00:37.245418Z"} https://vulnerability.circl.lu/sighting/1a8639aa-249e-44e8-b864-8d30b9be2995/export Fri, 10 Jul 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/6f6feaf9-e6aa-407b-9617-367b50c256c8/export {"uuid": "6f6feaf9-e6aa-407b-9617-367b50c256c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-09T03:00:13.377673Z"} {"uuid": "6f6feaf9-e6aa-407b-9617-367b50c256c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "https://t.me/brutsecurity/596", "content": "\ud83d\udd25Unauthenticated Magento XXE to Privilege Escalation\ud83d\udd25 \n \n\u26a0\ufe0fCosmicSting enables attackers to gain unauthorized access to sensitive files, including those containing passwords. \nWhen combined with a recent Linux bug (CVE-2024-2961),the vulnerability can be escalated to remote code execution. \n \n\u25b6\ufe0fVideo POC: https://youtu.be/j9KiNmGbT9Q \n \n\ud83d\udd34POC: https://github.com/th3gokul/CVE-2024-34102 \n\ud83d\udca5Payload: https://gist.github.com/wtf-yodhha/b4b12a09a4c2d3af0e04b74968daed5d", "creation_timestamp": "2026-07-09T03:00:13.377673Z"} https://vulnerability.circl.lu/sighting/6f6feaf9-e6aa-407b-9617-367b50c256c8/export Thu, 09 Jul 2026 03:00:13 +0000 https://vulnerability.circl.lu/sighting/fccc6b54-b047-4fef-98f3-a6328b0912b6/export {"uuid": "fccc6b54-b047-4fef-98f3-a6328b0912b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "Telegram/IiZ67zcGoo6QZpKiZ8plCh_8QtxQmsZpB3uf27cpFh2eFp4", "content": "", "creation_timestamp": "2026-05-29T09:00:04.000000Z"} {"uuid": "fccc6b54-b047-4fef-98f3-a6328b0912b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "Telegram/IiZ67zcGoo6QZpKiZ8plCh_8QtxQmsZpB3uf27cpFh2eFp4", "content": "", "creation_timestamp": "2026-05-29T09:00:04.000000Z"} https://vulnerability.circl.lu/sighting/fccc6b54-b047-4fef-98f3-a6328b0912b6/export Fri, 29 May 2026 09:00:04 +0000 https://vulnerability.circl.lu/sighting/5a44c138-02d6-4db9-b5f4-dfc8ce7156fe/export {"uuid": "5a44c138-02d6-4db9-b5f4-dfc8ce7156fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "Telegram/4V1L8rm_ci8R4NTF3AvtHqkyJLl9nOzw6nvw-H3zHaDaYho", "content": "", "creation_timestamp": "2026-05-13T03:00:06.000000Z"} {"uuid": "5a44c138-02d6-4db9-b5f4-dfc8ce7156fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "Telegram/4V1L8rm_ci8R4NTF3AvtHqkyJLl9nOzw6nvw-H3zHaDaYho", "content": "", "creation_timestamp": "2026-05-13T03:00:06.000000Z"} https://vulnerability.circl.lu/sighting/5a44c138-02d6-4db9-b5f4-dfc8ce7156fe/export Wed, 13 May 2026 03:00:06 +0000 https://vulnerability.circl.lu/sighting/c6825363-d4d2-4116-a2f3-2f1c574e2d38/export {"uuid": "c6825363-d4d2-4116-a2f3-2f1c574e2d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"} {"uuid": "c6825363-d4d2-4116-a2f3-2f1c574e2d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:02.000000Z"} https://vulnerability.circl.lu/sighting/c6825363-d4d2-4116-a2f3-2f1c574e2d38/export Thu, 23 Oct 2025 21:13:02 +0000 https://vulnerability.circl.lu/sighting/7f522050-9d62-4603-9715-ecd74db54a72/export {"uuid": "7f522050-9d62-4603-9715-ecd74db54a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:31.000000Z"} {"uuid": "7f522050-9d62-4603-9715-ecd74db54a72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-08T21:59:31.000000Z"} https://vulnerability.circl.lu/sighting/7f522050-9d62-4603-9715-ecd74db54a72/export Wed, 08 Oct 2025 21:59:31 +0000 https://vulnerability.circl.lu/sighting/0cabce34-b859-4d75-a491-4cced6d4a0f9/export {"uuid": "0cabce34-b859-4d75-a491-4cced6d4a0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"} {"uuid": "0cabce34-b859-4d75-a491-4cced6d4a0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "seen", "source": "MISP/af790da0-9e28-4cb7-bd4e-46ad005115c6", "content": "", "creation_timestamp": "2025-10-01T18:11:57.000000Z"} https://vulnerability.circl.lu/sighting/0cabce34-b859-4d75-a491-4cced6d4a0f9/export Wed, 01 Oct 2025 18:11:57 +0000 https://vulnerability.circl.lu/sighting/d9f412d7-652f-4645-8247-c88dc0fc8256/export {"uuid": "d9f412d7-652f-4645-8247-c88dc0fc8256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "published-proof-of-concept", "source": "Telegram/6lKByArH9FS3kGV0eBc5AxMt53ZNy3FxF1pgZuVY2NXgTHI", "content": "", "creation_timestamp": "2025-08-21T15:00:06.000000Z"} {"uuid": "d9f412d7-652f-4645-8247-c88dc0fc8256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2961", "type": "published-proof-of-concept", "source": "Telegram/6lKByArH9FS3kGV0eBc5AxMt53ZNy3FxF1pgZuVY2NXgTHI", "content": "", "creation_timestamp": "2025-08-21T15:00:06.000000Z"} https://vulnerability.circl.lu/sighting/d9f412d7-652f-4645-8247-c88dc0fc8256/export Thu, 21 Aug 2025 15:00:06 +0000