https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 13:08:10 +0000 https://vulnerability.circl.lu/sighting/74449144-b3f6-4553-a52a-70fba9a607ba/export {"uuid": "74449144-b3f6-4553-a52a-70fba9a607ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:05.337471Z"} {"uuid": "74449144-b3f6-4553-a52a-70fba9a607ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-17T00:00:05.337471Z"} https://vulnerability.circl.lu/sighting/74449144-b3f6-4553-a52a-70fba9a607ba/export Thu, 17 Sep 2026 00:00:05 +0000 https://vulnerability.circl.lu/sighting/49500abf-2ca7-421b-8ab3-ec4b88d86530/export {"uuid": "49500abf-2ca7-421b-8ab3-ec4b88d86530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:05.348809Z"} {"uuid": "49500abf-2ca7-421b-8ab3-ec4b88d86530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-16T00:00:05.348809Z"} https://vulnerability.circl.lu/sighting/49500abf-2ca7-421b-8ab3-ec4b88d86530/export Wed, 16 Sep 2026 00:00:05 +0000 https://vulnerability.circl.lu/sighting/bdd98d6f-037e-42d2-986e-8aadad363631/export {"uuid": "bdd98d6f-037e-42d2-986e-8aadad363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:06.996010Z"} {"uuid": "bdd98d6f-037e-42d2-986e-8aadad363631", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2026/CVE-2026-0768.yaml", "content": "", "creation_timestamp": "2026-09-15T09:00:06.996010Z"} https://vulnerability.circl.lu/sighting/bdd98d6f-037e-42d2-986e-8aadad363631/export Tue, 15 Sep 2026 09:00:06 +0000 https://vulnerability.circl.lu/sighting/30a4a4af-1dcb-47ae-bd48-caa42ad123ec/export {"uuid": "30a4a4af-1dcb-47ae-bd48-caa42ad123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.195596Z"} {"uuid": "30a4a4af-1dcb-47ae-bd48-caa42ad123ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:16.195596Z"} https://vulnerability.circl.lu/sighting/30a4a4af-1dcb-47ae-bd48-caa42ad123ec/export Sat, 12 Sep 2026 10:00:16 +0000 https://vulnerability.circl.lu/sighting/d7584e4d-e42d-40d4-9eea-b21423d955ea/export {"uuid": "d7584e4d-e42d-40d4-9eea-b21423d955ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:11.973972Z"} {"uuid": "d7584e4d-e42d-40d4-9eea-b21423d955ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0760", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:11.973972Z"} https://vulnerability.circl.lu/sighting/d7584e4d-e42d-40d4-9eea-b21423d955ea/export Fri, 11 Sep 2026 10:00:11 +0000 https://vulnerability.circl.lu/sighting/aa77ffbf-3b51-4a53-9414-653dbf1479a5/export {"uuid": "aa77ffbf-3b51-4a53-9414-653dbf1479a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theledgr.bsky.social/post/3muzzj2lbvn2t", "content": "CVE-2026-0768: pre-auth RCE in Langflow steals AI API keys. No login needed. Attack hits `/api/v1/run` with zero auth enforcement. Your competitors\u2019 senior engineers read this before standup. Come join them at TheLEDGR.io.\n\ntheledgr.io/join", "creation_timestamp": "2026-09-08T22:00:49.699609Z"} {"uuid": "aa77ffbf-3b51-4a53-9414-653dbf1479a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/theledgr.bsky.social/post/3muzzj2lbvn2t", "content": "CVE-2026-0768: pre-auth RCE in Langflow steals AI API keys. No login needed. Attack hits `/api/v1/run` with zero auth enforcement. Your competitors\u2019 senior engineers read this before standup. Come join them at TheLEDGR.io.\n\ntheledgr.io/join", "creation_timestamp": "2026-09-08T22:00:49.699609Z"} https://vulnerability.circl.lu/sighting/aa77ffbf-3b51-4a53-9414-653dbf1479a5/export Tue, 08 Sep 2026 22:00:49 +0000 https://vulnerability.circl.lu/sighting/051a0e9c-4d88-4936-9b08-cf303ff8e969/export {"uuid": "051a0e9c-4d88-4936-9b08-cf303ff8e969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0768", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/goodtech_telnet.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in GoodTech Systems Telnet Server\\n versions prior to 5.0.7. By sending an overly long string, an attacker can\\n overwrite the buffer and control program execution.\", \"disclosure_date\": \"2005-03-15\", \"fullname\": \"exploit/windows/telnet/goodtech_telnet\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"GoodTech Telnet Server Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/telnet/goodtech_telnet.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/telnet/goodtech_telnet\", \"references\": [\"CVE-2005-0768\", \"OSVDB-14806\", \"BID-12815\"], \"rport\": 2380, \"session_types\": false, \"targets\": [\"Windows 2000 Pro English All\", \"Windows XP Pro SP0/SP1 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.857623Z"} {"uuid": "051a0e9c-4d88-4936-9b08-cf303ff8e969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0768", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/telnet/goodtech_telnet.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"MC \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in GoodTech Systems Telnet Server\\n versions prior to 5.0.7. By sending an overly long string, an attacker can\\n overwrite the buffer and control program execution.\", \"disclosure_date\": \"2005-03-15\", \"fullname\": \"exploit/windows/telnet/goodtech_telnet\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"GoodTech Telnet Server Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/telnet/goodtech_telnet.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 200, \"ref_name\": \"windows/telnet/goodtech_telnet\", \"references\": [\"CVE-2005-0768\", \"OSVDB-14806\", \"BID-12815\"], \"rport\": 2380, \"session_types\": false, \"targets\": [\"Windows 2000 Pro English All\", \"Windows XP Pro SP0/SP1 English\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:35.857623Z"} https://vulnerability.circl.lu/sighting/051a0e9c-4d88-4936-9b08-cf303ff8e969/export Tue, 08 Sep 2026 06:52:35 +0000 https://vulnerability.circl.lu/sighting/0c229d9c-db8a-442a-afda-044ec9ee9222/export {"uuid": "0c229d9c-db8a-442a-afda-044ec9ee9222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0762", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ftp/vsftpd_232.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Nick Cottrell (Rad10Logic) \", \"Anna Graterol \", \"Mana Mostaani \", \"Maksymilian Arciemowicz\", \"g0tmi1k\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module triggers a Denial of Service condition in the VSFTPD server in\\n versions before 2.3.3 (tested on 2.3.0, 2.3.1, and 2.3.2).\\n Version 2.3.3 and higher should not be vulnerable.\", \"disclosure_date\": \"2011-02-03\", \"fullname\": \"auxiliary/dos/ftp/vsftpd_232\", \"is_install_path\": true, \"mod_time\": \"2026-05-19 14:22:39 +0000\", \"name\": \"VSFTPD 2.3.2 and Earlier STAT Denial of Service\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/ftp/vsftpd_232.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/ftp/vsftpd_232\", \"references\": [\"BID-46617\", \"CVE-2011-0762\", \"EDB-16270\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:58.307009Z"} {"uuid": "0c229d9c-db8a-442a-afda-044ec9ee9222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-0762", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/ftp/vsftpd_232.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Nick Cottrell (Rad10Logic) \", \"Anna Graterol \", \"Mana Mostaani \", \"Maksymilian Arciemowicz\", \"g0tmi1k\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module triggers a Denial of Service condition in the VSFTPD server in\\n versions before 2.3.3 (tested on 2.3.0, 2.3.1, and 2.3.2).\\n Version 2.3.3 and higher should not be vulnerable.\", \"disclosure_date\": \"2011-02-03\", \"fullname\": \"auxiliary/dos/ftp/vsftpd_232\", \"is_install_path\": true, \"mod_time\": \"2026-05-19 14:22:39 +0000\", \"name\": \"VSFTPD 2.3.2 and Earlier STAT Denial of Service\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/ftp/vsftpd_232.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/ftp/vsftpd_232\", \"references\": [\"BID-46617\", \"CVE-2011-0762\", \"EDB-16270\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:58.307009Z"} https://vulnerability.circl.lu/sighting/0c229d9c-db8a-442a-afda-044ec9ee9222/export Tue, 08 Sep 2026 06:46:58 +0000 https://vulnerability.circl.lu/sighting/a230fab9-519c-4f0c-ad14-617f52f1f072/export {"uuid": "a230fab9-519c-4f0c-ad14-617f52f1f072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0763", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability found in Advantech WebAccess 7.1. The\\n vulnerability exists in the DBVisitor.dll component, and can be abused through malicious\\n requests to the ChartThemeConfig web service. This module can be used to extract the site\\n and project usernames and hashes.\", \"disclosure_date\": \"2014-04-08\", \"fullname\": \"auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/scada/advantech_webaccess_dbvisitor_sqli\", \"references\": [\"CVE-2014-0763\", \"ZDI-14-077\", \"OSVDB-105572\", \"BID-66740\", \"URL-https://ics-cert.us-cert.gov/advisories/ICSA-14-079-03\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:55.278218Z"} {"uuid": "a230fab9-519c-4f0c-ad14-617f52f1f072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0763", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"rgod \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a SQL injection vulnerability found in Advantech WebAccess 7.1. The\\n vulnerability exists in the DBVisitor.dll component, and can be abused through malicious\\n requests to the ChartThemeConfig web service. This module can be used to extract the site\\n and project usernames and hashes.\", \"disclosure_date\": \"2014-04-08\", \"fullname\": \"auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-15 11:57:01 +0000\", \"name\": \"Advantech WebAccess DBVisitor.dll ChartThemeConfig SQL Injection\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/scada/advantech_webaccess_dbvisitor_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/scada/advantech_webaccess_dbvisitor_sqli\", \"references\": [\"CVE-2014-0763\", \"ZDI-14-077\", \"OSVDB-105572\", \"BID-66740\", \"URL-https://ics-cert.us-cert.gov/advisories/ICSA-14-079-03\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:55.278218Z"} https://vulnerability.circl.lu/sighting/a230fab9-519c-4f0c-ad14-617f52f1f072/export Tue, 08 Sep 2026 06:46:55 +0000 https://vulnerability.circl.lu/sighting/57a542c8-9bf7-4c35-a25f-8df9491b5880/export {"uuid": "57a542c8-9bf7-4c35-a25f-8df9491b5880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muyc43xvd524", "content": "The latest update for #Indusface includes \"Indusface WAS #AI-Assisted Pentest: Comprehensive Vulnerability Assessment Across Web, API and AI Apps\" and \"CVE-2026-0768: Critical RCE in Langflow AI Agent Builder\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-09-08T05:29:19.274351Z"} {"uuid": "57a542c8-9bf7-4c35-a25f-8df9491b5880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0768", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3muyc43xvd524", "content": "The latest update for #Indusface includes \"Indusface WAS #AI-Assisted Pentest: Comprehensive Vulnerability Assessment Across Web, API and AI Apps\" and \"CVE-2026-0768: Critical RCE in Langflow AI Agent Builder\".\n \n#cybersecurity #infosec https://opsmtrs.com/3ySs2VF", "creation_timestamp": "2026-09-08T05:29:19.274351Z"} https://vulnerability.circl.lu/sighting/57a542c8-9bf7-4c35-a25f-8df9491b5880/export Tue, 08 Sep 2026 05:29:19 +0000