<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T12:15:48.493871+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/39e056f8-632a-4250-a5db-ad531342d126/export</id>
    <title>39e056f8-632a-4250-a5db-ad531342d126</title>
    <updated>2026-10-10T12:15:48.519534+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "39e056f8-632a-4250-a5db-ad531342d126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108474", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/117415454450032734", "content": "\ud83d\udea8 Attention, elevated activities detected targeting JetBrains Exposed (CVE-2026-108474) https://vuldb.com/vuln/416028/cti", "creation_timestamp": "2026-10-10T07:34:12.508307Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/39e056f8-632a-4250-a5db-ad531342d126/export"/>
    <published>2026-10-10T07:34:12.508307+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/69ec2c09-4d59-4b4b-97dd-93554e5f303f/export</id>
    <title>69ec2c09-4d59-4b4b-97dd-93554e5f303f</title>
    <updated>2026-10-10T12:15:48.521525+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "69ec2c09-4d59-4b4b-97dd-93554e5f303f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108474", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mxifqzmsl522", "content": "\ud83d\udea8 CVE-2026-108474 \u2014 CVSS 9.8 CRITICAL\n\nIn JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-108474\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-10-10T02:07:41.222154Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/69ec2c09-4d59-4b4b-97dd-93554e5f303f/export"/>
    <published>2026-10-10T02:07:41.222154+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/01f77c60-485c-4863-9f89-b64b8735bbd3/export</id>
    <title>01f77c60-485c-4863-9f89-b64b8735bbd3</title>
    <updated>2026-10-10T12:15:48.521780+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "01f77c60-485c-4863-9f89-b64b8735bbd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108474", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxidnrfxl62l", "content": "CVE-2026-108474 - exposed\nThe Exposed library for Kotlin may treat certain text inputs as code, allowing a cyber attacker to insert their own database commands. This could let them read, change, or delete\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#exposed #jetbrains #CVE #infosec", "creation_timestamp": "2026-10-10T01:30:04.603479Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/01f77c60-485c-4863-9f89-b64b8735bbd3/export"/>
    <published>2026-10-10T01:30:04.603479+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a842d884-edf0-4074-9878-1d1dfae3b8af/export</id>
    <title>a842d884-edf0-4074-9878-1d1dfae3b8af</title>
    <updated>2026-10-10T12:15:48.521965+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a842d884-edf0-4074-9878-1d1dfae3b8af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108474", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/h247hrubpfmky", "content": "CVE-2026-108474 - JetBrains Exposed SQL Injection\nCVE ID : CVE-2026-108474\n \n Published : Oct. 9, 2026, 11:13 p.m. | 57\u00a0minutes ago\n \n Description : In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions\n \n Severity...", "creation_timestamp": "2026-10-10T00:34:20.428580Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a842d884-edf0-4074-9878-1d1dfae3b8af/export"/>
    <published>2026-10-10T00:34:20.428580+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7da5574c-90e9-4e9a-b5f8-0e1e210786ab/export</id>
    <title>7da5574c-90e9-4e9a-b5f8-0e1e210786ab</title>
    <updated>2026-10-10T12:15:48.522149+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7da5574c-90e9-4e9a-b5f8-0e1e210786ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108474", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mxi6ntuqpu2l", "content": "JetBrains Exposed &amp;lt;1.5.1 hit by CRITICAL SQL injection (CVSS 9.8). Attackers can run arbitrary SQL \u2014 upgrade to 1.5.1+ ASAP to protect your database. https://radar.offseq.com/threat/cve-2026-108474-cwe-89-in-jetbrains-exposed-73385fdc0142aed6 #OffSeq #JetBrains #Vuln", "creation_timestamp": "2026-10-10T00:00:39.068847Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7da5574c-90e9-4e9a-b5f8-0e1e210786ab/export"/>
    <published>2026-10-10T00:00:39.068847+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ad9b5b6-a843-4068-89b4-4e8b01e1a214/export</id>
    <title>3ad9b5b6-a843-4068-89b4-4e8b01e1a214</title>
    <updated>2026-10-10T12:15:48.522328+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ad9b5b6-a843-4068-89b4-4e8b01e1a214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-108474", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117413670820130555", "content": "CVE-2026-108474: JetBrains Exposed (&amp;lt;1.5.1) faces CRITICAL SQL injection (CWE-89). Exploitation can fully compromise DBs \u2014 upgrade to 1.5.1+ now! CVSS 9.8. https://radar.offseq.com/threat/cve-2026-108474-cwe-89-in-jetbrains-exposed-73385fdc0142aed6 #OffSeq #SQLi #JetBrains #AppSec", "creation_timestamp": "2026-10-10T00:00:36.947346Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ad9b5b6-a843-4068-89b4-4e8b01e1a214/export"/>
    <published>2026-10-10T00:00:36.947346+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/306257a9-01ae-4efe-b1d6-4d73beddb448/export</id>
    <title>306257a9-01ae-4efe-b1d6-4d73beddb448</title>
    <updated>2026-10-10T12:15:48.522504+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "306257a9-01ae-4efe-b1d6-4d73beddb448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108474", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117413507506679567", "content": "CVE-2026-108474  In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string arguments of several SQL functions\nhttps://www.cve.org/CVERecord?id=CVE-2026-108474https://www.jetbrains.com/privacy-security/issues-fixed/#jetbrains #JetBrains #Exposed#CVE_2026_108474#bot", "creation_timestamp": "2026-10-09T23:19:04.591445Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/306257a9-01ae-4efe-b1d6-4d73beddb448/export"/>
    <published>2026-10-09T23:19:04.591445+00:00</published>
  </entry>
</feed>
