https://vulnerability.circl.lu/sightings/feed 2026-07-02T09:49:20.919621+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/86e42ad6-8925-45b8-a284-a738dc0c319b/export 2026-07-02T09:49:21.275634+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "86e42ad6-8925-45b8-a284-a738dc0c319b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54252", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19472", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-54252\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Missing Authorization vulnerability in Pinpoint Booking System allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pinpoint Booking System: from n/a through 2.9.9.5.6.\n\ud83d\udccf Published: 2024-12-13T14:24:39.817Z\n\ud83d\udccf Modified: 2025-06-25T14:52:05.064Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/booking-system/vulnerability/wordpress-pinpoint-booking-system-plugin-2-9-9-5-2-broken-access-control-vulnerability?_s_id=cve", "creation_timestamp": "2025-06-25T15:52:18.000000Z"} 2025-06-25T15:52:18+00:00 https://vulnerability.circl.lu/sighting/7e7993be-f86b-4502-8be5-5284b80d4b5b/export 2026-07-02T09:49:21.278505+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7e7993be-f86b-4502-8be5-5284b80d4b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54257", "type": "seen", "source": "https://t.me/cvedetector/13009", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54257 - Molefed Cross-site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-54257 \nPublished : Dec. 16, 2024, 4:15 p.m. | 42\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Molefed allows Reflected XSS.This issue affects tydskrif: from n/a through 1.1.3. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-16T18:11:09.000000Z"} 2024-12-16T18:11:09+00:00 https://vulnerability.circl.lu/sighting/812c080c-479c-4ef3-9bf9-b433e51f7f20/export 2026-07-02T09:49:21.278655+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "812c080c-479c-4ef3-9bf9-b433e51f7f20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54259", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648113398784249", "content": "", "creation_timestamp": "2024-12-13T23:29:50.194626Z"} 2024-12-13T23:29:50.194626+00:00 https://vulnerability.circl.lu/sighting/59532977-5a35-4098-b516-ed5fc23750f5/export 2026-07-02T09:49:21.278769+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "59532977-5a35-4098-b516-ed5fc23750f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54258", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648113365796601", "content": "", "creation_timestamp": "2024-12-13T23:29:49.781710Z"} 2024-12-13T23:29:49.781710+00:00 https://vulnerability.circl.lu/sighting/2919e35b-1cb3-487e-a622-369fa47eb0b9/export 2026-07-02T09:49:21.278870+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "2919e35b-1cb3-487e-a622-369fa47eb0b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54256", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648113351969638", "content": "", "creation_timestamp": "2024-12-13T23:29:49.488868Z"} 2024-12-13T23:29:49.488868+00:00 https://vulnerability.circl.lu/sighting/ffd74dfd-dcc4-46f3-9401-0fc61aaef870/export 2026-07-02T09:49:21.278969+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ffd74dfd-dcc4-46f3-9401-0fc61aaef870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54252", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648054336143435", "content": "", "creation_timestamp": "2024-12-13T23:14:49.178204Z"} 2024-12-13T23:14:49.178204+00:00 https://vulnerability.circl.lu/sighting/3f3bfff0-5c7d-464a-bbea-00b775f92b93/export 2026-07-02T09:49:21.279063+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3f3bfff0-5c7d-464a-bbea-00b775f92b93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54250", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113648054322947119", "content": "", "creation_timestamp": "2024-12-13T23:14:49.046829Z"} 2024-12-13T23:14:49.046829+00:00 https://vulnerability.circl.lu/sighting/e5e30fce-eb1e-4e77-9cfa-c7c910d9abd5/export 2026-07-02T09:49:21.279164+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e5e30fce-eb1e-4e77-9cfa-c7c910d9abd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54254", "type": "seen", "source": "https://t.me/cvedetector/12377", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54254 - Kofi Mokome Message Filter for Contact Form 7 Missing Authorization Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-54254 \nPublished : Dec. 9, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Kofi Mokome Message Filter for Contact Form 7.This issue affects Message Filter for Contact Form 7: from n/a through 1.6.3. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"09 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T14:41:38.000000Z"} 2024-12-09T14:41:38+00:00 https://vulnerability.circl.lu/sighting/c3fca48f-3504-4dd4-a37e-5ed40d1a6cab/export 2026-07-02T09:49:21.279263+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c3fca48f-3504-4dd4-a37e-5ed40d1a6cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54253", "type": "seen", "source": "https://t.me/cvedetector/12376", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54253 - Xpro Elementor Addons Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-54253 \nPublished : Dec. 9, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xpro Xpro Elementor Addons allows Stored XSS.This issue affects Xpro Elementor Addons: from n/a through 1.4.6.1. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"09 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T14:41:37.000000Z"} 2024-12-09T14:41:37+00:00 https://vulnerability.circl.lu/sighting/ea9ab76a-3ec7-4ea5-92dc-9947d46309f0/export 2026-07-02T09:49:21.279360+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea9ab76a-3ec7-4ea5-92dc-9947d46309f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-54251", "type": "seen", "source": "https://t.me/cvedetector/12375", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-54251 - Prodigy Commerce Unauthorized Access\", \n \"Content\": \"CVE ID : CVE-2024-54251 \nPublished : Dec. 9, 2024, 1:15 p.m. | 21\u00a0minutes ago \nDescription : Missing Authorization vulnerability in Prodigy Commerce Prodigy Commerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prodigy Commerce: from n/a through 3.0.9. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"09 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-09T14:41:37.000000Z"} 2024-12-09T14:41:37+00:00