https://vulnerability.circl.lu/sightings/feed 2026-09-17T15:04:36.172268+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0256703c-be9d-4cd9-b707-79ab761c7586/export 2026-09-17T15:04:36.184451+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0256703c-be9d-4cd9-b707-79ab761c7586", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101812", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-44625-Gogs-RCE-0.13.0\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a batj44\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 11:28:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNo issue for run this exploit. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-10T00:00:38.974688Z"} 2026-09-10T00:00:38.974688+00:00 https://vulnerability.circl.lu/sighting/9d5e2f6c-8dc9-428e-a4f5-bcda6c3931b4/export 2026-09-17T15:04:36.186736+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9d5e2f6c-8dc9-428e-a4f5-bcda6c3931b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "Telegram/2B9_v_2pPAWOaIEdbs03TiOUAV4_o2Ur3L3sHegl_ON7Vwc", "content": "", "creation_timestamp": "2026-09-10T00:00:08.768623Z"} 2026-09-10T00:00:08.768623+00:00 https://vulnerability.circl.lu/sighting/aa708a83-6feb-4fb0-bb98-36d6823948e0/export 2026-09-17T15:04:36.186995+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aa708a83-6feb-4fb0-bb98-36d6823948e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "Telegram/2B9_v_2pPAWOaIEdbs03TiOUAV4_o2Ur3L3sHegl_ON7Vwc", "content": "", "creation_timestamp": "2026-09-09T23:00:04.888163Z"} 2026-09-09T23:00:04.888163+00:00 https://vulnerability.circl.lu/sighting/9e8559df-6e16-4d66-ad3e-f1ba6de9a3da/export 2026-09-17T15:04:36.187198+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9e8559df-6e16-4d66-ad3e-f1ba6de9a3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://t.me/GithubRedTeam/101812", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2024-44625-Gogs-RCE-0.13.0\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a batj44\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 11:28:01\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nNo issue for run this exploit. \n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-09T13:00:04.138392Z"} 2026-09-09T13:00:04.138392+00:00 https://vulnerability.circl.lu/sighting/fbf99253-3c4a-49d1-aeb8-3935aa5bf850/export 2026-09-17T15:04:36.187407+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fbf99253-3c4a-49d1-aeb8-3935aa5bf850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44258", "type": "published-proof-of-concept", "source": "Telegram/cIHcu7G3jT84CI_VDAcSv22w5VoeESB-v4S64bVakq00Oic", "content": "", "creation_timestamp": "2026-09-09T00:00:34.877436Z"} 2026-09-09T00:00:34.877436+00:00 https://vulnerability.circl.lu/sighting/95175d42-2eff-4b48-bd02-53633b299b08/export 2026-09-17T15:04:36.187554+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "95175d42-2eff-4b48-bd02-53633b299b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44258", "type": "seen", "source": "Telegram/cIHcu7G3jT84CI_VDAcSv22w5VoeESB-v4S64bVakq00Oic", "content": "", "creation_timestamp": "2026-09-08T08:00:04.681720Z"} 2026-09-08T08:00:04.681720+00:00 https://vulnerability.circl.lu/sighting/3af2ddc9-ac0d-4832-9b95-b6da88f6da17/export 2026-09-17T15:04:36.187710+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3af2ddc9-ac0d-4832-9b95-b6da88f6da17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44000", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_litespeed_cookie_theft.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Rafie Muhammad\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated account takeover vulnerability in LiteSpeed Cache, a Wordpress plugin\\n that currently has around 6 million active installations. In LiteSpeed Cache versions prior to 6.5.0.1, when\\n the Debug Logging feature is enabled, the plugin will log admin cookies to the /wp-content/debug.log endpoint\\n which is accessible without authentication. The Debug Logging feature in the plugin is not enabled by default.\\n The admin cookies found in the debug.log can be used to upload and execute a malicious plugin containing a payload.\", \"disclosure_date\": \"2024-09-04\", \"fullname\": \"exploit/multi/http/wp_litespeed_cookie_theft\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Wordpress LiteSpeed Cache plugin cookie theft\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_litespeed_cookie_theft.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_litespeed_cookie_theft\", \"references\": [\"URL-https://patchstack.com/articles/critical-account-takeover-vulnerability-patched-in-litespeed-cache-plugin/\", \"CVE-2024-44000\", \"EDB-52099\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix In-Memory\", \"Windows In-Memory\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.834786Z"} 2026-09-08T06:50:21.834786+00:00 https://vulnerability.circl.lu/sighting/ad00b605-57ae-4378-bca6-387d78eae2a7/export 2026-09-17T15:04:36.187841+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ad00b605-57ae-4378-bca6-387d78eae2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44000", "type": "seen", "source": "https://t.me/hacking_Attack/145136", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking\n\nCVE-2024\u201344000 OverviewContinue reading on InfoSec Write-ups \u00bb\nRead more...", "creation_timestamp": "2026-09-04T00:00:44.815498Z"} 2026-09-04T00:00:44.815498+00:00 https://vulnerability.circl.lu/sighting/b5904285-8638-4694-93e2-b04a0305f9be/export 2026-09-17T15:04:36.187951+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b5904285-8638-4694-93e2-b04a0305f9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44000", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/144187", "content": "CVE-2024-44000 - WordPress Debug Log Exposure Leading to Session Cookie Hijacking\nhttps://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:43.898984Z"} 2026-09-04T00:00:43.898984+00:00 https://vulnerability.circl.lu/sighting/f5d4bf26-20a7-4c98-bde8-f56cea1e5dd4/export 2026-09-17T15:04:36.188061+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f5d4bf26-20a7-4c98-bde8-f56cea1e5dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44000", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/144189", "content": "CVE-2024\u201344000 OverviewContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/cve-2024-44000-wordpress-debug-log-exposure-leading-to-session-cookie-hijacking-afcfada02c44?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:43.843837Z"} 2026-09-04T00:00:43.843837+00:00