https://vulnerability.circl.lu/sightings/feed 2026-07-28T11:44:28.781545+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a970ad15-4bcc-4ecb-95a3-466ef7773fd4/export 2026-07-28T11:44:28.800657+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a970ad15-4bcc-4ecb-95a3-466ef7773fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15689", "type": "published-proof-of-concept", "source": "Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8", "content": "", "creation_timestamp": "2025-09-17T21:00:04.000000Z"} 2025-09-17T21:00:04+00:00 https://vulnerability.circl.lu/sighting/0a441289-98bc-4283-9de7-9e56fcd66736/export 2026-07-28T11:44:28.802722+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "0a441289-98bc-4283-9de7-9e56fcd66736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/17444", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:08.000000Z"} 2020-12-09T07:32:08+00:00 https://vulnerability.circl.lu/sighting/8c8d7555-7db7-41ab-ac75-cf46ef573363/export 2026-07-28T11:44:28.802925+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8c8d7555-7db7-41ab-ac75-cf46ef573363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/17443", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:07.000000Z"} 2020-12-09T07:32:07+00:00 https://vulnerability.circl.lu/sighting/9ff3cf49-4419-40a1-bd32-bd32f3e36b1f/export 2026-07-28T11:44:28.803099+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9ff3cf49-4419-40a1-bd32-bd32f3e36b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15681", "type": "seen", "source": "https://t.me/cibsecurity/17440", "content": "\u203c CVE-2017-15681 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:02.000000Z"} 2020-12-09T07:32:02+00:00 https://vulnerability.circl.lu/sighting/693987cd-4e26-4664-98df-ff916b1b18dc/export 2026-07-28T11:44:28.803250+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "693987cd-4e26-4664-98df-ff916b1b18dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15686", "type": "seen", "source": "https://t.me/cibsecurity/17437", "content": "\u203c CVE-2017-15686 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users\u00e2\u20ac\u2122 cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:59.000000Z"} 2020-12-09T07:31:59+00:00 https://vulnerability.circl.lu/sighting/f4e4b030-f993-4da6-a068-f662a0808a7e/export 2026-07-28T11:44:28.803399+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f4e4b030-f993-4da6-a068-f662a0808a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15680", "type": "seen", "source": "https://t.me/cibsecurity/17436", "content": "\u203c CVE-2017-15680 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:55.000000Z"} 2020-12-09T07:31:55+00:00 https://vulnerability.circl.lu/sighting/830609e4-f055-45aa-b330-d98cce5910a3/export 2026-07-28T11:44:28.803540+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "830609e4-f055-45aa-b330-d98cce5910a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15684", "type": "seen", "source": "https://t.me/cibsecurity/17434", "content": "\u203c CVE-2017-15684 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:54.000000Z"} 2020-12-09T07:31:54+00:00 https://vulnerability.circl.lu/sighting/a8a984c4-b381-4367-a16b-d166e4a2ea99/export 2026-07-28T11:44:28.803686+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a8a984c4-b381-4367-a16b-d166e4a2ea99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15685", "type": "seen", "source": "https://t.me/cibsecurity/17432", "content": "\u203c CVE-2017-15685 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:52.000000Z"} 2020-12-09T07:31:52+00:00 https://vulnerability.circl.lu/sighting/c3a6297d-11c5-4a90-84b5-29338277ff39/export 2026-07-28T11:44:28.803824+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c3a6297d-11c5-4a90-84b5-29338277ff39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/16899", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:19.000000Z"} 2020-11-27T20:50:19+00:00 https://vulnerability.circl.lu/sighting/e3051f7d-3e3c-4d15-bfeb-e846b9baaeda/export 2026-07-28T11:44:28.803964+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e3051f7d-3e3c-4d15-bfeb-e846b9baaeda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/16898", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:18.000000Z"} 2020-11-27T20:50:18+00:00