https://vulnerability.circl.lu/sightings/feed 2026-08-19T22:15:03.517059+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/bd066b46-9ea5-41b0-a2c4-f7ba2b8af03b/export 2026-08-19T22:15:03.540727+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bd066b46-9ea5-41b0-a2c4-f7ba2b8af03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:36.281296Z"} 2026-08-16T00:00:36.281296+00:00 https://vulnerability.circl.lu/sighting/adcbd77f-e946-40c1-a772-8a11d48db3a2/export 2026-08-19T22:15:03.544217+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "adcbd77f-e946-40c1-a772-8a11d48db3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.017151Z"} 2026-08-15T11:00:03.017151+00:00 https://vulnerability.circl.lu/sighting/c20fa64f-b0e0-4f06-904f-43e4a01b246c/export 2026-08-19T22:15:03.544327+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c20fa64f-b0e0-4f06-904f-43e4a01b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgzsaaxqz24", "content": "", "creation_timestamp": "2026-03-19T22:17:51.038217Z"} 2026-03-19T22:17:51.038217+00:00