https://vulnerability.circl.lu/sightings/feed 2026-08-19T07:34:03.875961+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0910521b-deb3-41fa-8130-8ed077eb5ffb/export 2026-08-19T07:34:03.900752+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0910521b-deb3-41fa-8130-8ed077eb5ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-18T00:00:12.486816Z"} 2026-08-18T00:00:12.486816+00:00 https://vulnerability.circl.lu/sighting/72b0bd07-69ea-4778-8c24-53f93755a1a7/export 2026-08-19T07:34:03.902445+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "72b0bd07-69ea-4778-8c24-53f93755a1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-18T00:00:12.288159Z"} 2026-08-18T00:00:12.288159+00:00 https://vulnerability.circl.lu/sighting/87188b22-2a54-4bfe-990a-5d4c08e84627/export 2026-08-19T07:34:03.902591+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "87188b22-2a54-4bfe-990a-5d4c08e84627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-17T18:00:04.557898Z"} 2026-08-17T18:00:04.557898+00:00 https://vulnerability.circl.lu/sighting/dbe4bca0-0a34-469e-b0fd-39b8b69d271a/export 2026-08-19T07:34:03.902697+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dbe4bca0-0a34-469e-b0fd-39b8b69d271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-17T18:00:04.239741Z"} 2026-08-17T18:00:04.239741+00:00 https://vulnerability.circl.lu/sighting/3b5ef626-b104-43fb-b27c-6e32755448ef/export 2026-08-19T07:34:03.902792+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3b5ef626-b104-43fb-b27c-6e32755448ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mtbmk2g6m72a", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-74251\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specific...", "creation_timestamp": "2026-08-17T11:39:38.593651Z"} 2026-08-17T11:39:38.593651+00:00 https://vulnerability.circl.lu/sighting/560388f1-a436-4a2a-ae0c-a5641b9c302b/export 2026-08-19T07:34:03.902894+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "560388f1-a436-4a2a-ae0c-a5641b9c302b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtapjrrsns2w", "content": "Phoca Cart for Joomla (v5.0.0 \u2013 6.1.16) hit by CRITICAL unauthenticated SQL injection \u2014 full DB at risk. Patch status unknown; check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #Off...", "creation_timestamp": "2026-08-17T03:00:32.031316Z"} 2026-08-17T03:00:32.031316+00:00 https://vulnerability.circl.lu/sighting/57698fa7-866c-49d1-baf4-2a5ab1007b46/export 2026-08-19T07:34:03.902991+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "57698fa7-866c-49d1-baf4-2a5ab1007b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117108613380665635", "content": "CVE-2026-74251: Phoca Cart (Joomla ext. v5.0.0 \u2013 6.1.16) suffers CRITICAL SQL injection via unauthenticated a[]/s[] params. Full DB extraction possible. Patch status unclear \u2014 check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #OffSeq #SQLInjection #Joomla #Infosec", "creation_timestamp": "2026-08-17T03:00:29.644472Z"} 2026-08-17T03:00:29.644472+00:00 https://vulnerability.circl.lu/sighting/a7026b92-4f83-4c25-9cfe-06eb8d250d30/export 2026-08-19T07:34:03.903088+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a7026b92-4f83-4c25-9cfe-06eb8d250d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/47e5nnaikipyw", "content": "CVE-2026-74251 - Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.16\nCVE ID : CVE-2026-74251\n \n Published : Aug. 16, 2026, 1:16 p.m. | 56\u00a0minutes ago\n \n Description : Joomla Extension - phoca.cz - Unauthenticated SQL inje...", "creation_timestamp": "2026-08-16T15:00:38.308066Z"} 2026-08-16T15:00:38.308066+00:00 https://vulnerability.circl.lu/sighting/4c4260cc-c65c-4d8f-a725-bdbbccc61b07/export 2026-08-19T07:34:03.903184+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4c4260cc-c65c-4d8f-a725-bdbbccc61b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt7ftqjdzx25", "content": "Phoca Cart, a Joomla store extension, has a critical flaw (CVE-2026-74251) that lets anyone read the shop's whole database, no login needed.\n\nCustomer records and password hashes are exposed on the public shop page.\n\nAffects 5.0.0 to 6.1.6. Fixed in 6.1.7. Update now.", "creation_timestamp": "2026-08-16T14:34:28.744209Z"} 2026-08-16T14:34:28.744209+00:00 https://vulnerability.circl.lu/sighting/930a5e6a-9e14-4157-94aa-6cb8a4c3c58e/export 2026-08-19T07:34:03.903279+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "930a5e6a-9e14-4157-94aa-6cb8a4c3c58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7ecw4x6623", "content": "\ud83d\udea8 CVE-2026-74251 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.16...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74251\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T14:07:10.073868Z"} 2026-08-16T14:07:10.073868+00:00