https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 07 Aug 2026 09:13:18 +0000 https://vulnerability.circl.lu/sighting/1859518d-0fa0-4999-a9f1-a3a98029c120/export {"uuid": "1859518d-0fa0-4999-a9f1-a3a98029c120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrf5ib67b32h", "content": "SUNNET Corporate Training Mgmt System v10.3 has a CRITICAL flaw: admins can upload ZIPs with executable files, enabling command execution. No patch \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-...", "creation_timestamp": "2026-07-24T10:30:29.058622Z"} {"uuid": "1859518d-0fa0-4999-a9f1-a3a98029c120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mrf5ib67b32h", "content": "SUNNET Corporate Training Mgmt System v10.3 has a CRITICAL flaw: admins can upload ZIPs with executable files, enabling command execution. No patch \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-...", "creation_timestamp": "2026-07-24T10:30:29.058622Z"} https://vulnerability.circl.lu/sighting/1859518d-0fa0-4999-a9f1-a3a98029c120/export Fri, 24 Jul 2026 10:30:29 +0000 https://vulnerability.circl.lu/sighting/1b01df98-001d-43f2-8a85-d38ae0db64fe/export {"uuid": "1b01df98-001d-43f2-8a85-d38ae0db64fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974487217978733", "content": "CVE-2026-24727 (CRITICAL, CVSS 9.3): SUNNET Corporate Training Mgmt System v10.3 allows admins to upload ZIP files with executable code, enabling server command execution. No patch yet \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d #OffSeq #CVE202624727 #infosec \ud83d\udee1\ufe0f", "creation_timestamp": "2026-07-24T10:30:26.874854Z"} {"uuid": "1b01df98-001d-43f2-8a85-d38ae0db64fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-24727", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116974487217978733", "content": "CVE-2026-24727 (CRITICAL, CVSS 9.3): SUNNET Corporate Training Mgmt System v10.3 allows admins to upload ZIP files with executable code, enabling server command execution. No patch yet \u2014 restrict admin access & monitor uploads. https://radar.offseq.com/threat/cve-2026-24727-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-sunnet-technology-co-ltd-fe23deeb060f5b6d #OffSeq #CVE202624727 #infosec \ud83d\udee1\ufe0f", "creation_timestamp": "2026-07-24T10:30:26.874854Z"} https://vulnerability.circl.lu/sighting/1b01df98-001d-43f2-8a85-d38ae0db64fe/export Fri, 24 Jul 2026 10:30:26 +0000 https://vulnerability.circl.lu/sighting/136da823-6d4f-4831-96c1-bed0ec2f3bee/export {"uuid": "136da823-6d4f-4831-96c1-bed0ec2f3bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24727", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrezyphgeo24", "content": "CVE-2026-24727 - corporate training management system\nAn attacker with admin privileges can upload malicious files, potentially allowing them to execute arbitrary commands on the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sunnet #CVE #infosec", "creation_timestamp": "2026-07-24T09:28:05.006603Z"} {"uuid": "136da823-6d4f-4831-96c1-bed0ec2f3bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-24727", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrezyphgeo24", "content": "CVE-2026-24727 - corporate training management system\nAn attacker with admin privileges can upload malicious files, potentially allowing them to execute arbitrary commands on the system. This could lead to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#sunnet #CVE #infosec", "creation_timestamp": "2026-07-24T09:28:05.006603Z"} https://vulnerability.circl.lu/sighting/136da823-6d4f-4831-96c1-bed0ec2f3bee/export Fri, 24 Jul 2026 09:28:05 +0000 https://vulnerability.circl.lu/sighting/8bf1e175-f46d-4808-9a85-d614d51cc7c7/export {"uuid": "8bf1e175-f46d-4808-9a85-d614d51cc7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-22T00:00:27.743534Z"} {"uuid": "8bf1e175-f46d-4808-9a85-d614d51cc7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-22T00:00:27.743534Z"} https://vulnerability.circl.lu/sighting/8bf1e175-f46d-4808-9a85-d614d51cc7c7/export Wed, 22 Jul 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/1e0330e6-cdc2-40bc-a42c-b327f8217c8f/export {"uuid": "1e0330e6-cdc2-40bc-a42c-b327f8217c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-21T00:00:24.938479Z"} {"uuid": "1e0330e6-cdc2-40bc-a42c-b327f8217c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-21T00:00:24.938479Z"} https://vulnerability.circl.lu/sighting/1e0330e6-cdc2-40bc-a42c-b327f8217c8f/export Tue, 21 Jul 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/a4872c4c-32c2-48aa-8125-289df6cf1a34/export {"uuid": "a4872c4c-32c2-48aa-8125-289df6cf1a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-20T20:00:08.847134Z"} {"uuid": "a4872c4c-32c2-48aa-8125-289df6cf1a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-2472", "type": "seen", "source": "https://t.me/proxy_bar/3168", "content": "CVE-2026-2472 \n*\nUnauthenticated and Stored Cross-Site Scripting (XSS) in google-cloud-aiplatform _genai/_evals_visualization (Vertex AI Python SDK) affecting Jupyter/Colab. \n*\nTechnical PoC", "creation_timestamp": "2026-07-20T20:00:08.847134Z"} https://vulnerability.circl.lu/sighting/a4872c4c-32c2-48aa-8125-289df6cf1a34/export Mon, 20 Jul 2026 20:00:08 +0000 https://vulnerability.circl.lu/sighting/cdc569d0-92d6-4831-a84d-de0b1c6def42/export {"uuid": "cdc569d0-92d6-4831-a84d-de0b1c6def42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1934", "content": "", "creation_timestamp": "2026-06-23T21:00:00.000000Z"} {"uuid": "cdc569d0-92d6-4831-a84d-de0b1c6def42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1934", "content": "", "creation_timestamp": "2026-06-23T21:00:00.000000Z"} https://vulnerability.circl.lu/sighting/cdc569d0-92d6-4831-a84d-de0b1c6def42/export Tue, 23 Jun 2026 21:00:00 +0000 https://vulnerability.circl.lu/sighting/8f444fdb-64c7-4f17-b7bf-3f2abbfea6b5/export {"uuid": "8f444fdb-64c7-4f17-b7bf-3f2abbfea6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1934", "content": "", "creation_timestamp": "2026-06-23T21:00:00.000000Z"} {"uuid": "8f444fdb-64c7-4f17-b7bf-3f2abbfea6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1934", "content": "", "creation_timestamp": "2026-06-23T21:00:00.000000Z"} https://vulnerability.circl.lu/sighting/8f444fdb-64c7-4f17-b7bf-3f2abbfea6b5/export Tue, 23 Jun 2026 21:00:00 +0000 https://vulnerability.circl.lu/sighting/a006cfff-c7a1-45f5-8ed4-65e7a8e2742c/export {"uuid": "a006cfff-c7a1-45f5-8ed4-65e7a8e2742c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/qnap-nas-multiple-vulnerabilities_20260624", "content": "", "creation_timestamp": "2026-06-23T18:00:00.000000Z"} {"uuid": "a006cfff-c7a1-45f5-8ed4-65e7a8e2742c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24720", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/qnap-nas-multiple-vulnerabilities_20260624", "content": "", "creation_timestamp": "2026-06-23T18:00:00.000000Z"} https://vulnerability.circl.lu/sighting/a006cfff-c7a1-45f5-8ed4-65e7a8e2742c/export Tue, 23 Jun 2026 18:00:00 +0000 https://vulnerability.circl.lu/sighting/84c5e66e-954a-4d0f-8479-ed3bc2c6b3af/export {"uuid": "84c5e66e-954a-4d0f-8479-ed3bc2c6b3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/qnap-nas-multiple-vulnerabilities_20260624", "content": "", "creation_timestamp": "2026-06-23T18:00:00.000000Z"} {"uuid": "84c5e66e-954a-4d0f-8479-ed3bc2c6b3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-24724", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/qnap-nas-multiple-vulnerabilities_20260624", "content": "", "creation_timestamp": "2026-06-23T18:00:00.000000Z"} https://vulnerability.circl.lu/sighting/84c5e66e-954a-4d0f-8479-ed3bc2c6b3af/export Tue, 23 Jun 2026 18:00:00 +0000