https://vulnerability.circl.lu/sightings/feed 2026-09-17T13:08:02.646630+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/58b171a5-8cba-4448-a1f0-417af678d168/export 2026-09-17T13:08:02.652588+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "58b171a5-8cba-4448-a1f0-417af678d168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.107622Z"} 2026-09-15T00:00:23.107622+00:00 https://vulnerability.circl.lu/sighting/46d3fcb5-1bf4-4532-a910-676cac7e4060/export 2026-09-17T13:08:02.654452+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "46d3fcb5-1bf4-4532-a910-676cac7e4060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-14T03:00:13.239779Z"} 2026-09-14T03:00:13.239779+00:00 https://vulnerability.circl.lu/sighting/4feae80b-7323-44cb-ac71-a053007371a2/export 2026-09-17T13:08:02.654597+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4feae80b-7323-44cb-ac71-a053007371a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Nicolas Joly\", \"Matthias Kaiser\", \"Sanjay Gondaliya\", \"Pratik Shah \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a local privilege escalation bug which exists\\n in Microsoft COM for Windows when it fails to properly handle serialized objects.\", \"disclosure_date\": \"2018-08-05\", \"fullname\": \"post/windows/escalate/unmarshal_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-09 10:51:17 +0000\", \"name\": \"Windows unmarshal post exploitation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/escalate/unmarshal_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/escalate/unmarshal_cmd_exec\", \"references\": [\"CVE-2018-0824\", \"URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824\", \"URL-https://github.com/x73x61x6ex6ax61x79/UnmarshalPwn\", \"EDB-44906\"], \"rport\": null, \"session_types\": [], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.779628Z"} 2026-09-08T06:52:41.779628+00:00 https://vulnerability.circl.lu/sighting/15435b17-8346-4ece-bdc8-9361e8c6d416/export 2026-09-17T13:08:02.654736+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "15435b17-8346-4ece-bdc8-9361e8c6d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This is an exploit for the chunked encoding buffer overflow\\n described in MS03-051 and originally reported by Brett\\n Moore. This particular modules works against versions of\\n Windows 2000 between SP0 and SP3. Service Pack 4 fixes the\\n issue.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/isapi/ms03_051_fp30reg_chunked\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/isapi/ms03_051_fp30reg_chunked\", \"references\": [\"CVE-2003-0822\", \"OSVDB-2952\", \"BID-9007\", \"MSB-MS03-051\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows 2000 SP0-SP3\", \"Windows 2000 07/22/02\", \"Windows 2000 10/06/99\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:05.939045Z"} 2026-09-08T06:52:05.939045+00:00 https://vulnerability.circl.lu/sighting/178eef96-63e4-463b-bc47-2e4c7cb7a37e/export 2026-09-17T13:08:02.654855+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "178eef96-63e4-463b-bc47-2e4c7cb7a37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Nicolas Joly\", \"Shahin Ramezany \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP.\\n By supplying a .xls file with a malformed OBJ (recType 0x5D) record an attacker\\n can get the control of the execution flow. This results in arbitrary code execution under\\n the context of the user.\", \"disclosure_date\": \"2010-06-08\", \"fullname\": \"exploit/windows/fileformat/ms10_038_excel_obj_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/ms10_038_excel_obj_bof\", \"references\": [\"CVE-2010-0822\", \"OSVDB-65236\", \"BID-40520\", \"MSB-MS10-038\", \"URL-https://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Microsoft Office Excel 2002 10.2614.2625 Service Pack 0(Office XP) on Windows XP SP3\", \"Microsoft Office Excel 2002 10.6501.6626 Service Pack 3 (Office XP SP3) on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:27.934617Z"} 2026-09-08T06:51:27.934617+00:00 https://vulnerability.circl.lu/sighting/22dd9987-5761-4f6f-a05c-dbcbe6ef6a06/export 2026-09-17T13:08:02.654982+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"} 2026-09-08T06:49:18.714885+00:00 https://vulnerability.circl.lu/sighting/cc1df2f6-24c0-4bb6-81de-265827e1067e/export 2026-09-17T13:08:02.655093+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cc1df2f6-24c0-4bb6-81de-265827e1067e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"faisalfs10x\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"In Webmin version 1.984, any authenticated low privilege user without access rights to\\n the File Manager module could interact with file manager functionalities such as downloading files from remote URLs and\\n changing file permissions. It is possible to achieve Remote Code Execution via a crafted .cgi file by chaining those\\n functionalities in the file manager.\", \"disclosure_date\": \"2022-02-26\", \"fullname\": \"exploit/linux/http/webmin_file_manager_rce\", \"is_install_path\": true, \"mod_time\": \"2022-10-27 11:26:31 +0000\", \"name\": \"Webmin File Manager RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/webmin_file_manager_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/webmin_file_manager_rce\", \"references\": [\"URL-https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/\", \"URL-https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\", \"CVE-2022-0824\"], \"rport\": 10000, \"session_types\": false, \"targets\": [\"Automatic (Unix In-Memory)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.980944Z"} 2026-09-08T06:49:02.980944+00:00 https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export 2026-09-17T13:08:02.655203+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"} 2026-09-04T00:01:01.692297+00:00 https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export 2026-09-17T13:08:02.655296+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"} 2026-09-03T03:00:05.595157+00:00 https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export 2026-09-17T13:08:02.655395+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"} 2026-09-03T00:00:50.751689+00:00