https://vulnerability.circl.lu/sightings/feed 2026-09-15T07:39:50.840491+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e2047b67-7dd7-4aa4-9627-28e92c72c4c9/export 2026-09-15T07:39:50.872718+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e2047b67-7dd7-4aa4-9627-28e92c72c4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47938", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:42.031831Z"} 2026-09-13T00:00:42.031831+00:00 https://vulnerability.circl.lu/sighting/d82f297d-92d5-4ad6-9b0b-67be792c6983/export 2026-09-15T07:39:50.875089+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d82f297d-92d5-4ad6-9b0b-67be792c6983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-47938", "type": "seen", "source": "https://t.me/shimiscyberworld/1340", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-10\n\n\ud83d\udcca 15 vulnerabilities detected today \u2014 5 \ud83d\udd34 Critical, 10 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2021-47923 (9.8) \u2014 OpenCart 3.0.3.8 Session Fixation Vulnerability\u2026\n \u2022 CVE-2021-47932 (9.8) \u2014 WordPress TheCartPress Unauthenticated Admin Creation\u2026\n \u2022 CVE-2021-47933 (9.8) \u2014 WordPress MStore API Critical RCE: Unauthenticated File\u2026\n \u2022 CVE-2021-47936 (9.8) \u2014 OpenCATS 0.9.4 Critical RCE via Malicious Resume Uploads\n \u2022 CVE-2021-47940 (9.8) \u2014 WordPress Plugin Download From Files: Critical\u2026\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2021-47935 (8.8) \u2014 Sentry 8.2.0 RCE: Authenticated Superusers Can Execute\u2026\n \u2022 CVE-2021-47937 (8.8) \u2014 e107 CMS RCE (CVE-2021-47937) Allows Authenticated Theme\u2026\n \u2022 CVE-2021-47938 (8.8) \u2014 ImpressCMS 1.4.2 RCE: Authenticated Attackers Can Execute\u2026\n \u2022 CVE-2021-47939 (8.8) \u2014 Evolution CMS RCE (CVE-2021-47939) Allows Authenticated\u2026\n \u2022 CVE-2021-47943 (8.8) \u2014 TextPattern CMS RCE (CVE-2021-47943) Allows Authenticated\u2026\n \u2022 CVE-2021-47949 (8.8) \u2014 CyberPanel 2.1 RCE via Symlink Attack (CVE-2021-47949)\n \u2022 CVE-2022-50944 (8.8) \u2014 Aero CMS 0.0.1 Vulnerability Allows Authenticated PHP Code\u2026\n \u2022 CVE-2021-47928 (8.2) \u2014 Opencart TMD Vendor System Blind SQLi Exposes User Data\n \u2022 CVE-2021-47930 (8.2) \u2014 CVE-2021-47930: Unauthenticated SQLi in Balbooa Joomla\u2026\n \u2022 CVE-2021-47941 (8.2) \u2014 WordPress Plugin Survey & Poll SQLi Puts Data at Risk\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-12T10:00:08.271489Z"} 2026-09-12T10:00:08.271489+00:00