https://vulnerability.circl.lu/sightings/feed 2026-09-05T01:07:04.572989+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/75ea32c1-b59e-43bb-ab25-cf239df1b240/export 2026-09-05T01:07:04.595155+00:00 Cédric Bonhomme https://cve.circl.lu/user/cedric {"uuid": "75ea32c1-b59e-43bb-ab25-cf239df1b240", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-32790", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b71d29b1-f9dd-434b-a531-37d69701d07c", "content": "", "creation_timestamp": "2026-06-30T10:22:03.114937Z"} 2026-06-30T10:22:03.114937+00:00 https://vulnerability.circl.lu/sighting/041e4caa-14d9-48ac-bd4b-aed8864578ae/export 2026-09-05T01:07:04.597888+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "041e4caa-14d9-48ac-bd4b-aed8864578ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32790", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a28ba911-9645-4b76-9333-57ea97aac019", "content": "", "creation_timestamp": "2026-06-23T14:06:18.289914Z"} 2026-06-23T14:06:18.289914+00:00 https://vulnerability.circl.lu/sighting/029d69b8-9bd8-429b-93d0-db2f7a5546d8/export 2026-09-05T01:07:04.599874+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "029d69b8-9bd8-429b-93d0-db2f7a5546d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32792", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"} 2024-10-15T10:14:15+00:00 https://vulnerability.circl.lu/sighting/d4f821fc-5b7d-487b-b631-e0407a17aae5/export 2026-09-05T01:07:04.600018+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d4f821fc-5b7d-487b-b631-e0407a17aae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32791", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"} 2024-10-15T10:14:15+00:00 https://vulnerability.circl.lu/sighting/a75b0314-82a3-45a7-86a5-67fc2904a4c2/export 2026-09-05T01:07:04.600120+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a75b0314-82a3-45a7-86a5-67fc2904a4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32790", "type": "published-proof-of-concept", "source": "https://t.me/hack_room_channel/134", "content": "Proof of Concept for the WooCommerce 3.3-5.5 Blind Time based SQL Injection\n\nPreuve de concept pour l'injection SQL bas\u00e9e sur le temps aveugle WooCommerce 3.3-5.5\n\nhttps://github.com/LazyTitan33/CVE-2021-32790-PoC/tree/main\n\n#0-day #Exploit", "creation_timestamp": "2022-01-21T08:03:01.000000Z"} 2022-01-21T08:03:01+00:00 https://vulnerability.circl.lu/sighting/29f9e939-49b9-490b-a08e-5b1ebe078ed6/export 2026-09-05T01:07:04.600222+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "29f9e939-49b9-490b-a08e-5b1ebe078ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-32797", "type": "published-proof-of-concept", "source": "https://github.com/google/security-research/security/advisories/GHSA-c469-p3jp-2vhx", "content": "", "creation_timestamp": "2021-10-20T16:18:20.000000Z"} 2021-10-20T16:18:20+00:00 https://vulnerability.circl.lu/sighting/798f6264-e3a6-4b53-b521-189dba4aa6de/export 2026-09-05T01:07:04.601313+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "798f6264-e3a6-4b53-b521-189dba4aa6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32797", "type": "seen", "source": "https://t.me/cibsecurity/27038", "content": "\u203c CVE-2021-32797 \u203c\n\nJupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn\u00e2\u20ac\u2122t sanitize the action attribute of html ``. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T00:36:47.000000Z"} 2021-08-10T00:36:47+00:00 https://vulnerability.circl.lu/sighting/81d422df-d69e-456a-84e0-8927f3be61ea/export 2026-09-05T01:07:04.601431+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "81d422df-d69e-456a-84e0-8927f3be61ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32798", "type": "seen", "source": "https://t.me/cibsecurity/27028", "content": "\u203c CVE-2021-32798 \u203c\n\nThe Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T00:36:32.000000Z"} 2021-08-10T00:36:32+00:00 https://vulnerability.circl.lu/sighting/d0840b14-464f-4686-8374-5b92e122f429/export 2026-09-05T01:07:04.601532+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d0840b14-464f-4686-8374-5b92e122f429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32793", "type": "seen", "source": "https://t.me/cibsecurity/26854", "content": "\u203c CVE-2021-32793 \u203c\n\nPi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability. User input added as a wildcard domain to a blocklist or allowlist is unfiltered in the web interface. Since the payload is stored permanently as a wildcard domain, this is a persistent XSS vulnerability. A remote attacker can therefore attack administrative user accounts through client-side attacks. Pi-hole Web Interface version 5.5.1 contains a patch for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-04T23:23:50.000000Z"} 2021-08-04T23:23:50+00:00 https://vulnerability.circl.lu/sighting/c981185f-7a08-4556-b445-58ba3b5ae4d1/export 2026-09-05T01:07:04.601638+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c981185f-7a08-4556-b445-58ba3b5ae4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32796", "type": "seen", "source": "https://t.me/cibsecurity/26549", "content": "\u203c CVE-2021-32796 \u203c\n\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This issue has been resolved in version 0.7.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-28T02:12:45.000000Z"} 2021-07-28T02:12:45+00:00