https://vulnerability.circl.lu/sightings/feed 2026-07-31T19:52:08.291389+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/b5883f00-5b65-415c-88cc-e614353f3b20/export 2026-07-31T19:52:08.314693+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b5883f00-5b65-415c-88cc-e614353f3b20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95796", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kimai-CVE-2026-49865-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyeezy08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 05:51:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) \u2014 Kimai time-tracking default APP_SECRET authentication bypass affecting versions \u2264 2.57.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-31T00:00:38.582363Z"} 2026-07-31T00:00:38.582363+00:00 https://vulnerability.circl.lu/sighting/3fde1198-a246-4434-9d4c-8e09ac2eb1a1/export 2026-07-31T19:52:08.317244+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3fde1198-a246-4434-9d4c-8e09ac2eb1a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "published-proof-of-concept", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-31T00:00:29.570854Z"} 2026-07-31T00:00:29.570854+00:00 https://vulnerability.circl.lu/sighting/7887d726-3197-452e-a861-c635789d122d/export 2026-07-31T19:52:08.317501+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7887d726-3197-452e-a861-c635789d122d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "Telegram/47AGWfAWFIwZKzQcl_sisfXazYjpo74QYaHVlY-riLjwoTE", "content": "", "creation_timestamp": "2026-07-30T14:00:04.763878Z"} 2026-07-30T14:00:04.763878+00:00 https://vulnerability.circl.lu/sighting/f5d3f8e0-b2ad-4c31-967a-1f8efed3f278/export 2026-07-31T19:52:08.317720+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f5d3f8e0-b2ad-4c31-967a-1f8efed3f278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://t.me/GithubRedTeam/95796", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Kimai-CVE-2026-49865-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyeezy08\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-30 05:51:02\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploits for CVE-2026-52824 (GHSA-jr9p-4h4j-6c58) \u2014 Kimai time-tracking default APP_SECRET authentication bypass affecting versions \u2264 2.57.0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T07:00:03.930339Z"} 2026-07-30T07:00:03.930339+00:00 https://vulnerability.circl.lu/sighting/a6782479-7e1e-4995-9d7a-69c7baaafa39/export 2026-07-31T19:52:08.317864+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a6782479-7e1e-4995-9d7a-69c7baaafa39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-24T00:00:08.906257Z"} 2026-07-24T00:00:08.906257+00:00 https://vulnerability.circl.lu/sighting/af43105a-5e03-43bb-8bd6-998ca3f0bf7c/export 2026-07-31T19:52:08.317979+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "af43105a-5e03-43bb-8bd6-998ca3f0bf7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-23T00:00:03.854592Z"} 2026-07-23T00:00:03.854592+00:00 https://vulnerability.circl.lu/sighting/c98248dc-9e3a-431e-ae21-fbf84b916260/export 2026-07-31T19:52:08.318044+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c98248dc-9e3a-431e-ae21-fbf84b916260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-22T00:00:02.856111Z"} 2026-07-22T00:00:02.856111+00:00 https://vulnerability.circl.lu/sighting/20736784-90a9-4d17-8758-3f4477cc2aea/export 2026-07-31T19:52:08.318105+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "20736784-90a9-4d17-8758-3f4477cc2aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-52824.yaml", "content": "", "creation_timestamp": "2026-07-21T06:00:05.732731Z"} 2026-07-21T06:00:05.732731+00:00 https://vulnerability.circl.lu/sighting/b16a6608-c874-47d2-b20e-e68989a8fdac/export 2026-07-31T19:52:08.318173+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "b16a6608-c874-47d2-b20e-e68989a8fdac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mr2mnokguv2j", "content": "Kimai\u306eDocker\u306b\u8106\u5f31\u6027\u3001\u30c7\u30d5\u30a9\u30eb\u30c8\u306eAPP_SECRET\u304c\u9732\u898b\u3057\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u304c\u53ef\u80fd\u306b\n\n\u516c\u5f0f\u306eDocker\u30a4\u30e1\u30fc\u30b8\u3067Kimai\u3092\u904b\u7528\u3057\u3066\u3044\u308b\u30e6\u30fc\u30b6\u30fc\u306f\u3001\u91cd\u5927\u306a\u8106\u5f31\u6027\uff08CVE-2026-52824\u3001GHSA-jr9p-4h4j-6c58\u3068\u3057\u3066\u8ffd\u8de1\uff09\u304c\u767a\u898b\u3055\u308c\u305f\u3053\u3068\u3092\u53d7\u3051\u3001\u65e9\u6025\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u66f4\u65b0\u3059\u308b\u3088\u3046\u5f37\u304f\u6c42\u3081\u3089\u308c\u3066\u3044\u307e\u3059\u3002 \u3053\u306e\u8106\u5f31\u6027\u306f\u3001\u516c\u958b\u3055\u308c\u3066\u8ab0\u3067\u3082\u77e5\u308a\u5f97\u308b\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u30b7\u30fc\u30af\u30ec\u30c3\u30c8\u304c\u4f7f\u308f\u308c\u3066\u3044\u308b...", "creation_timestamp": "2026-07-20T06:02:39.137140Z"} 2026-07-20T06:02:39.137140+00:00 https://vulnerability.circl.lu/sighting/fc56baba-7144-4595-9430-f4e6df33e663/export 2026-07-31T19:52:08.318239+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fc56baba-7144-4595-9430-f4e6df33e663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-52824", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mr23usnfrn2g", "content": "Kimai vulnerability CVE-2026-52824 (CVSS 9.1) lets attackers forge cookies for account takeover via a default Docker APP_SECRET. Update to 2.58.0 now.\n\n#Kimai #AccountTakeover #Docker #CVE202652824 #OpenSource", "creation_timestamp": "2026-07-20T01:02:25.099377Z"} 2026-07-20T01:02:25.099377+00:00