<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-19T04:23:52.845763+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/583f1bf0-3dd2-45eb-ae02-691ff0df3eb5/export</id>
    <title>583f1bf0-3dd2-45eb-ae02-691ff0df3eb5</title>
    <updated>2026-09-19T04:23:52.873308+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "583f1bf0-3dd2-45eb-ae02-691ff0df3eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Chebuya (Rhino Security Labs)\", \"Takahiro Yokoyama\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"An attacker can update NetAlertX settings with no authentication, which results in RCE.\", \"disclosure_date\": \"2025-01-30\", \"fullname\": \"exploit/linux/http/netalertx_rce_cve_2024_46506\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:55:15 +0000\", \"name\": \"Unauthenticated RCE in NetAlertX\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"config-changes\", \"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netalertx_rce_cve_2024_46506\", \"references\": [\"CVE-2024-46506\", \"URL-https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/\"], \"rport\": 20211, \"session_types\": false, \"targets\": [\"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:47.081902Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/583f1bf0-3dd2-45eb-ae02-691ff0df3eb5/export"/>
    <published>2026-09-08T06:48:47.081902+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c/export</id>
    <title>4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c</title>
    <updated>2026-09-19T04:23:52.876029+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-08-03T02:14:00.846511Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ae7f2e3-4841-4ebd-badc-ce319cb4fe0c/export"/>
    <published>2026-08-03T02:14:00.846511+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8253db83-02a5-4985-83a9-fd744dbec835/export</id>
    <title>8253db83-02a5-4985-83a9-fd744dbec835</title>
    <updated>2026-09-19T04:23:52.876167+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8253db83-02a5-4985-83a9-fd744dbec835", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-08-02T03:00:04.677749Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8253db83-02a5-4985-83a9-fd744dbec835/export"/>
    <published>2026-08-02T03:00:04.677749+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/be54bd28-3b47-4695-a940-ba656574739e/export</id>
    <title>be54bd28-3b47-4695-a940-ba656574739e</title>
    <updated>2026-09-19T04:23:52.876290+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "be54bd28-3b47-4695-a940-ba656574739e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-07-30T00:02:15.898875Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/be54bd28-3b47-4695-a940-ba656574739e/export"/>
    <published>2026-07-30T00:02:15.898875+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0df9c0b0-030c-4d82-875e-526a74dea128/export</id>
    <title>0df9c0b0-030c-4d82-875e-526a74dea128</title>
    <updated>2026-09-19T04:23:52.876389+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0df9c0b0-030c-4d82-875e-526a74dea128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://t.me/reverseame/4988", "content": "CVE-2024-46507: Yeti Platform Server-Side Template Injection (SSTI) #CVE-2024-46507 #SSTI #RCE #YetiPlatform #RhinoSecurityLabs https://rhinosecuritylabs.com/research/cve-2024-46507-yeti-server-side-template-injection-ssti/", "creation_timestamp": "2026-07-29T12:02:04.852771Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0df9c0b0-030c-4d82-875e-526a74dea128/export"/>
    <published>2026-07-29T12:02:04.852771+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b4c6dc59-22ae-474e-a462-918c31912250/export</id>
    <title>b4c6dc59-22ae-474e-a462-918c31912250</title>
    <updated>2026-09-19T04:23:52.876486+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b4c6dc59-22ae-474e-a462-918c31912250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46508", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mldf4rg56e2k", "content": "CVE-2024-46508 - Yeti-Platform JWT Token Forgery Vulnerability\nCVE ID : CVE-2024-46508\n \n Published : May 8, 2026, 6:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : yeti-platform yeti before 2.1.12 allows attackers to generate valid JWT tokens is the secret is not changed (b...", "creation_timestamp": "2026-05-08T09:10:43.357225Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b4c6dc59-22ae-474e-a462-918c31912250/export"/>
    <published>2026-05-08T09:10:43.357225+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/063f6ae1-6455-4e4b-af56-0f96b6349cb1/export</id>
    <title>063f6ae1-6455-4e4b-af56-0f96b6349cb1</title>
    <updated>2026-09-19T04:23:52.876589+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "063f6ae1-6455-4e4b-af56-0f96b6349cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46507", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlddsdd4p72e", "content": "CVE-2024-46507 - Yeti-Platform SSTI Code Execution\nCVE ID : CVE-2024-46507\n \n Published : May 8, 2026, 6:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before ...", "creation_timestamp": "2026-05-08T08:46:59.345596Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/063f6ae1-6455-4e4b-af56-0f96b6349cb1/export"/>
    <published>2026-05-08T08:46:59.345596+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8/export</id>
    <title>790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8</title>
    <updated>2026-09-19T04:23:52.876690+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "published-proof-of-concept", "source": "Telegram/fKVTyseO1uYL9TllYOizt7PACaW5f67udAzHLYRojaAhnqE", "content": "", "creation_timestamp": "2025-12-28T03:00:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/790e7e3a-7cb0-4ee9-8a3f-fbfa02edbba8/export"/>
    <published>2025-12-28T03:00:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8/export</id>
    <title>e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8</title>
    <updated>2026-09-19T04:23:52.876785+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e8e85e8b-fef4-4fba-9a4b-89a9699e7bb8/export"/>
    <published>2025-10-23T21:13:03+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07/export</id>
    <title>3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07</title>
    <updated>2026-09-19T04:23:52.876876+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-46506", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lylnhhezmp27", "content": "", "creation_timestamp": "2025-09-11T21:02:29.320716Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3a0c326d-f689-4f2a-8d88-6ca8ba1b6b07/export"/>
    <published>2025-09-11T21:02:29.320716+00:00</published>
  </entry>
</feed>
