<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T13:08:10.833240+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/74449144-b3f6-4553-a52a-70fba9a607ba/export</id>
    <title>74449144-b3f6-4553-a52a-70fba9a607ba</title>
    <updated>2026-09-17T13:08:10.841199+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "74449144-b3f6-4553-a52a-70fba9a607ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:05.337471Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/74449144-b3f6-4553-a52a-70fba9a607ba/export"/>
    <published>2026-09-17T00:00:05.337471+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/49500abf-2ca7-421b-8ab3-ec4b88d86530/export</id>
    <title>49500abf-2ca7-421b-8ab3-ec4b88d86530</title>
    <updated>2026-09-17T13:08:10.843539+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "49500abf-2ca7-421b-8ab3-ec4b88d86530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:05.348809Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/49500abf-2ca7-421b-8ab3-ec4b88d86530/export"/>
    <published>2026-09-16T00:00:05.348809+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bdd98d6f-037e-42d2-986e-8aadad363631/export</id>
    <title>bdd98d6f-037e-42d2-986e-8aadad363631</title>
    <updated>2026-09-17T13:08:10.843707+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bdd98d6f-037e-42d2-986e-8aadad363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:06.996010Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bdd98d6f-037e-42d2-986e-8aadad363631/export"/>
    <published>2026-09-15T09:00:06.996010+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/30a4a4af-1dcb-47ae-bd48-caa42ad123ec/export</id>
    <title>30a4a4af-1dcb-47ae-bd48-caa42ad123ec</title>
    <updated>2026-09-17T13:08:10.843826+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "30a4a4af-1dcb-47ae-bd48-caa42ad123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.195596Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/30a4a4af-1dcb-47ae-bd48-caa42ad123ec/export"/>
    <published>2026-09-12T10:00:16.195596+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d7584e4d-e42d-40d4-9eea-b21423d955ea/export</id>
    <title>d7584e4d-e42d-40d4-9eea-b21423d955ea</title>
    <updated>2026-09-17T13:08:10.843923+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d7584e4d-e42d-40d4-9eea-b21423d955ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:11.973972Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d7584e4d-e42d-40d4-9eea-b21423d955ea/export"/>
    <published>2026-09-11T10:00:11.973972+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aa77ffbf-3b51-4a53-9414-653dbf1479a5/export</id>
    <title>aa77ffbf-3b51-4a53-9414-653dbf1479a5</title>
    <updated>2026-09-17T13:08:10.844016+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aa77ffbf-3b51-4a53-9414-653dbf1479a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theledgr.bsky.social/post/3muzzj2lbvn2t", "content": "CVE-2026-0768: pre-auth RCE in Langflow steals AI API keys. No login needed. Attack hits `/api/v1/run` with zero auth enforcement. Your competitors\u2019 senior engineers read this before standup. Come join them at TheLEDGR.io.\n\ntheledgr.io/join", "creation_timestamp": "2026-09-08T22:00:49.699609Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aa77ffbf-3b51-4a53-9414-653dbf1479a5/export"/>
    <published>2026-09-08T22:00:49.699609+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/051a0e9c-4d88-4936-9b08-cf303ff8e969/export</id>
    <title>051a0e9c-4d88-4936-9b08-cf303ff8e969</title>
    <updated>2026-09-17T13:08:10.844114+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "051a0e9c-4d88-4936-9b08-cf303ff8e969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0768", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/goodtech_telnet.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in GoodTech Systems Telnet Server\\n          versions prior to 5.0.7. By sending an overly long string, an attacker can\\n          overwrite the buffer and control program execution.\", \"disclosure_date\": \"2005-03-15\", \"fullname\": \"exploit/windows/telnet/goodtech_telnet\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"GoodTech Telnet Server Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/telnet/goodtech_telnet.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/telnet/goodtech_telnet\", \"references\": [\"CVE-2005-0768\", \"OSVDB-14806\", \"BID-12815\"], \"rport\": 2380, \"session_types\": false, \"targets\": [\"Windows 2000 Pro English All\", \"Windows XP Pro SP0/SP1 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.857623Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/051a0e9c-4d88-4936-9b08-cf303ff8e969/export"/>
    <published>2026-09-08T06:52:35.857623+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0c229d9c-db8a-442a-afda-044ec9ee9222/export</id>
    <title>0c229d9c-db8a-442a-afda-044ec9ee9222</title>
    <updated>2026-09-17T13:08:10.844241+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0c229d9c-db8a-442a-afda-044ec9ee9222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0762", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ftp/vsftpd_232.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Nick Cottrell (Rad10Logic) \", \"Anna Graterol \", \"Mana Mostaani \", \"Maksymilian Arciemowicz\", \"g0tmi1k\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module triggers a Denial of Service condition in the VSFTPD server in\\n          versions before 2.3.3 (tested on 2.3.0, 2.3.1, and 2.3.2).\\n          Version 2.3.3 and higher should not be vulnerable.\", \"disclosure_date\": \"2011-02-03\", \"fullname\": \"auxiliary/dos/ftp/vsftpd_232\", \"is_install_path\": true, \"mod_time\": \"2026-05-19 14:22:39 +0000\", \"name\": \"VSFTPD 2.3.2 and Earlier STAT Denial of Service\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/ftp/vsftpd_232.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/ftp/vsftpd_232\", \"references\": [\"BID-46617\", \"CVE-2011-0762\", \"EDB-16270\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:58.307009Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0c229d9c-db8a-442a-afda-044ec9ee9222/export"/>
    <published>2026-09-08T06:46:58.307009+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a230fab9-519c-4f0c-ad14-617f52f1f072/export</id>
    <title>a230fab9-519c-4f0c-ad14-617f52f1f072</title>
    <updated>2026-09-17T13:08:10.844347+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a230fab9-519c-4f0c-ad14-617f52f1f072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0763", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability found in Advantech WebAccess 7.1. The\\n          vulnerability exists in the DBVisitor.dll component, and can be abused through malicious\\n          requests to the ChartThemeConfig web service. This module can be used to extract the site\\n          and project usernames and hashes.\", \"disclosure_date\": \"2014-04-08\", \"fullname\": \"auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/scada/advantech_webaccess_dbvisitor_sqli\", \"references\": [\"CVE-2014-0763\", \"ZDI-14-077\", \"OSVDB-105572\", \"BID-66740\", \"URL-https://ics-cert.us-cert.gov/advisories/ICSA-14-079-03\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:55.278218Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a230fab9-519c-4f0c-ad14-617f52f1f072/export"/>
    <published>2026-09-08T06:46:55.278218+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/57a542c8-9bf7-4c35-a25f-8df9491b5880/export</id>
    <title>57a542c8-9bf7-4c35-a25f-8df9491b5880</title>
    <updated>2026-09-17T13:08:10.844460+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "57a542c8-9bf7-4c35-a25f-8df9491b5880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muyc43xvd524", "content": "The latest update for #Indusface includes \"Indusface WAS #AI-Assisted Pentest: Comprehensive Vulnerability Assessment Across Web, API and AI Apps\" and \"CVE-2026-0768: Critical RCE in Langflow AI Agent Builder\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-09-08T05:29:19.274351Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/57a542c8-9bf7-4c35-a25f-8df9491b5880/export"/>
    <published>2026-09-08T05:29:19.274351+00:00</published>
  </entry>
</feed>
