https://vulnerability.circl.lu/sightings/feed 2026-09-17T11:27:31.184082+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1e6bc937-3d41-44de-9bc4-8979f30d5d15/export 2026-09-17T11:27:31.211536+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "1e6bc937-3d41-44de-9bc4-8979f30d5d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-57849", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:13.515306Z"} 2026-09-08T20:45:13.515306+00:00 https://vulnerability.circl.lu/sighting/3d7ca589-36ac-4675-af12-55015bf265e4/export 2026-09-17T11:27:31.215162+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3d7ca589-36ac-4675-af12-55015bf265e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57487", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/carrental_fileupload_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Aaryan Golatkar\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an authenticated remote code execution vulnerability in the\\n Online Car Rental System 1.0 via the `changeimage1.php` endpoint. An authenticated\\n attacker can upload malicious PHP scripts without proper validation, enabling\\n arbitrary code execution on the server.\", \"disclosure_date\": \"2025-01-13\", \"fullname\": \"exploit/multi/http/carrental_fileupload_rce\", \"is_install_path\": true, \"mod_time\": \"2025-05-13 23:54:36 +0000\", \"name\": \"Car Rental System 1.0 File Upload RCE (Authenticated)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/carrental_fileupload_rce.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"multi/http/carrental_fileupload_rce\", \"references\": [\"CVE-2024-57487\", \"URL-https://nvd.nist.gov/vuln/detail/CVE-2024-57487\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:43.361409Z"} 2026-09-08T06:49:43.361409+00:00 https://vulnerability.circl.lu/sighting/01a339d3-a0f0-488b-ae25-d0359c760a36/export 2026-09-17T11:27:31.217751+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "01a339d3-a0f0-488b-ae25-d0359c760a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5721", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/logsign_exec.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"Mehmet Ince \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in Logsign.\\n By exploiting this vulnerability, unauthenticated users can execute\\n arbitrary code under the root user.\\n\\n Logsign has a publicly accessible endpoint. That endpoint takes a user\\n input and then use it during operating system command execution without\\n proper validation.\\n\\n This module was tested against 4.4.2 and 4.4.137 versions.\", \"disclosure_date\": \"2017-02-26\", \"fullname\": \"exploit/linux/http/logsign_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Logsign Remote Command Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/logsign_exec.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/logsign_exec\", \"references\": [\"CVE-2024-5721\", \"URL-https://pentest.blog/unexpected-journey-3-visiting-another-siem-and-uncovering-pre-auth-privileged-remote-code-execution/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:43.758831Z"} 2026-09-08T06:48:43.758831+00:00 https://vulnerability.circl.lu/sighting/6db70f76-30f1-4964-8645-b943666002f6/export 2026-09-17T11:27:31.217930+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6db70f76-30f1-4964-8645-b943666002f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57727", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"horizon3ai\", \"imjdl\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"There exists a path traversal vulnerability in the /toolbox-resource endpoint that enables unauthenticated\\n remote attackers to download arbitrary files from the SimpleHelp server via crafted HTTP requests\", \"disclosure_date\": \"2025-01-12\", \"fullname\": \"auxiliary/scanner/http/simplehelp_toolbox_path_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-02-24 10:26:01 +0000\", \"name\": \"SimpleHelp Path Traversal Vulnerability CVE-2024-57727\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/simplehelp_toolbox_path_traversal\", \"references\": [\"URL-https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/\", \"URL-https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier\", \"URL-https://rustlang.rs/posts/simple-help/\", \"URL-https://attackerkb.com/topics/G4CTOrbDx0/cve-2024-57727\", \"CVE-2024-57727\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:51.298079Z"} 2026-09-08T06:47:51.298079+00:00 https://vulnerability.circl.lu/sighting/1c2c18e8-62ea-434d-ab27-f4e26cfd5828/export 2026-09-17T11:27:31.218067+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1c2c18e8-62ea-434d-ab27-f4e26cfd5828", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57552", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.718800Z"} 2026-09-06T00:01:03.718800+00:00 https://vulnerability.circl.lu/sighting/47f27962-34ce-4b13-83fe-18d57ac90f50/export 2026-09-17T11:27:31.218177+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "47f27962-34ce-4b13-83fe-18d57ac90f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57551", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.481875Z"} 2026-09-06T00:01:03.481875+00:00 https://vulnerability.circl.lu/sighting/c754e0cf-b9f7-4f4f-92b1-66bce46ffe74/export 2026-09-17T11:27:31.218280+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c754e0cf-b9f7-4f4f-92b1-66bce46ffe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57553", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-06T00:01:03.380542Z"} 2026-09-06T00:01:03.380542+00:00 https://vulnerability.circl.lu/sighting/013e0a53-808c-4627-8bb6-8bf45e4660c1/export 2026-09-17T11:27:31.218405+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "013e0a53-808c-4627-8bb6-8bf45e4660c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57428", "type": "published-proof-of-concept", "source": "Telegram/DGzHuk8RVb1b8Xt8T_i7JrWo03tk4z5tw950ouDC7Dv-DN4", "content": "", "creation_timestamp": "2026-09-05T01:00:20.480880Z"} 2026-09-05T01:00:20.480880+00:00 https://vulnerability.circl.lu/sighting/0e26916e-846a-4189-b847-42ad8591c09e/export 2026-09-17T11:27:31.218509+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0e26916e-846a-4189-b847-42ad8591c09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57552", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.556706Z"} 2026-09-05T01:00:04.556706+00:00 https://vulnerability.circl.lu/sighting/093fa16c-48df-403e-b1e5-90c575b987d4/export 2026-09-17T11:27:31.218617+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "093fa16c-48df-403e-b1e5-90c575b987d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-57551", "type": "seen", "source": "Telegram/saF7t803_3F3Ra_Gsh2itlwbpKCr-JJsYdlNdWBMzEsIfS4", "content": "", "creation_timestamp": "2026-09-05T01:00:04.427627Z"} 2026-09-05T01:00:04.427627+00:00