https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 13:08:02 +0000 https://vulnerability.circl.lu/sighting/58b171a5-8cba-4448-a1f0-417af678d168/export {"uuid": "58b171a5-8cba-4448-a1f0-417af678d168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.107622Z"} {"uuid": "58b171a5-8cba-4448-a1f0-417af678d168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.107622Z"} https://vulnerability.circl.lu/sighting/58b171a5-8cba-4448-a1f0-417af678d168/export Tue, 15 Sep 2026 00:00:23 +0000 https://vulnerability.circl.lu/sighting/46d3fcb5-1bf4-4532-a910-676cac7e4060/export {"uuid": "46d3fcb5-1bf4-4532-a910-676cac7e4060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-14T03:00:13.239779Z"} {"uuid": "46d3fcb5-1bf4-4532-a910-676cac7e4060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-14T03:00:13.239779Z"} https://vulnerability.circl.lu/sighting/46d3fcb5-1bf4-4532-a910-676cac7e4060/export Mon, 14 Sep 2026 03:00:13 +0000 https://vulnerability.circl.lu/sighting/4feae80b-7323-44cb-ac71-a053007371a2/export {"uuid": "4feae80b-7323-44cb-ac71-a053007371a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Nicolas Joly\", \"Matthias Kaiser\", \"Sanjay Gondaliya\", \"Pratik Shah \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a local privilege escalation bug which exists\\n in Microsoft COM for Windows when it fails to properly handle serialized objects.\", \"disclosure_date\": \"2018-08-05\", \"fullname\": \"post/windows/escalate/unmarshal_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-09 10:51:17 +0000\", \"name\": \"Windows unmarshal post exploitation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/escalate/unmarshal_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/escalate/unmarshal_cmd_exec\", \"references\": [\"CVE-2018-0824\", \"URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824\", \"URL-https://github.com/x73x61x6ex6ax61x79/UnmarshalPwn\", \"EDB-44906\"], \"rport\": null, \"session_types\": [], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.779628Z"} {"uuid": "4feae80b-7323-44cb-ac71-a053007371a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/escalate/unmarshal_cmd_exec.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Nicolas Joly\", \"Matthias Kaiser\", \"Sanjay Gondaliya\", \"Pratik Shah \"], \"autofilter_ports\": null, \"autofilter_services\": null, \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a local privilege escalation bug which exists\\n in Microsoft COM for Windows when it fails to properly handle serialized objects.\", \"disclosure_date\": \"2018-08-05\", \"fullname\": \"post/windows/escalate/unmarshal_cmd_exec\", \"is_install_path\": true, \"mod_time\": \"2025-05-09 10:51:17 +0000\", \"name\": \"Windows unmarshal post exploitation\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/post/windows/escalate/unmarshal_cmd_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/escalate/unmarshal_cmd_exec\", \"references\": [\"CVE-2018-0824\", \"URL-https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0824\", \"URL-https://github.com/x73x61x6ex6ax61x79/UnmarshalPwn\", \"EDB-44906\"], \"rport\": null, \"session_types\": [], \"targets\": null, \"type\": \"post\"}", "creation_timestamp": "2026-09-08T06:52:41.779628Z"} https://vulnerability.circl.lu/sighting/4feae80b-7323-44cb-ac71-a053007371a2/export Tue, 08 Sep 2026 06:52:41 +0000 https://vulnerability.circl.lu/sighting/15435b17-8346-4ece-bdc8-9361e8c6d416/export {"uuid": "15435b17-8346-4ece-bdc8-9361e8c6d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This is an exploit for the chunked encoding buffer overflow\\n described in MS03-051 and originally reported by Brett\\n Moore. This particular modules works against versions of\\n Windows 2000 between SP0 and SP3. Service Pack 4 fixes the\\n issue.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/isapi/ms03_051_fp30reg_chunked\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/isapi/ms03_051_fp30reg_chunked\", \"references\": [\"CVE-2003-0822\", \"OSVDB-2952\", \"BID-9007\", \"MSB-MS03-051\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows 2000 SP0-SP3\", \"Windows 2000 07/22/02\", \"Windows 2000 10/06/99\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:05.939045Z"} {"uuid": "15435b17-8346-4ece-bdc8-9361e8c6d416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This is an exploit for the chunked encoding buffer overflow\\n described in MS03-051 and originally reported by Brett\\n Moore. This particular modules works against versions of\\n Windows 2000 between SP0 and SP3. Service Pack 4 fixes the\\n issue.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/isapi/ms03_051_fp30reg_chunked\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"MS03-051 Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/isapi/ms03_051_fp30reg_chunked.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/isapi/ms03_051_fp30reg_chunked\", \"references\": [\"CVE-2003-0822\", \"OSVDB-2952\", \"BID-9007\", \"MSB-MS03-051\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Windows 2000 SP0-SP3\", \"Windows 2000 07/22/02\", \"Windows 2000 10/06/99\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:05.939045Z"} https://vulnerability.circl.lu/sighting/15435b17-8346-4ece-bdc8-9361e8c6d416/export Tue, 08 Sep 2026 06:52:05 +0000 https://vulnerability.circl.lu/sighting/178eef96-63e4-463b-bc47-2e4c7cb7a37e/export {"uuid": "178eef96-63e4-463b-bc47-2e4c7cb7a37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Nicolas Joly\", \"Shahin Ramezany \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP.\\n By supplying a .xls file with a malformed OBJ (recType 0x5D) record an attacker\\n can get the control of the execution flow. This results in arbitrary code execution under\\n the context of the user.\", \"disclosure_date\": \"2010-06-08\", \"fullname\": \"exploit/windows/fileformat/ms10_038_excel_obj_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/ms10_038_excel_obj_bof\", \"references\": [\"CVE-2010-0822\", \"OSVDB-65236\", \"BID-40520\", \"MSB-MS10-038\", \"URL-https://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Microsoft Office Excel 2002 10.2614.2625 Service Pack 0(Office XP) on Windows XP SP3\", \"Microsoft Office Excel 2002 10.6501.6626 Service Pack 3 (Office XP SP3) on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:27.934617Z"} {"uuid": "178eef96-63e4-463b-bc47-2e4c7cb7a37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0822", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Nicolas Joly\", \"Shahin Ramezany \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Excel 2002 of Microsoft Office XP.\\n By supplying a .xls file with a malformed OBJ (recType 0x5D) record an attacker\\n can get the control of the execution flow. This results in arbitrary code execution under\\n the context of the user.\", \"disclosure_date\": \"2010-06-08\", \"fullname\": \"exploit/windows/fileformat/ms10_038_excel_obj_bof\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS11-038 Microsoft Office Excel Malformed OBJ Record Handling Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms10_038_excel_obj_bof.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/fileformat/ms10_038_excel_obj_bof\", \"references\": [\"CVE-2010-0822\", \"OSVDB-65236\", \"BID-40520\", \"MSB-MS10-038\", \"URL-https://www.exploit-db.com/moaub-24-microsoft-excel-obj-record-stack-overflow/\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Microsoft Office Excel 2002 10.2614.2625 Service Pack 0(Office XP) on Windows XP SP3\", \"Microsoft Office Excel 2002 10.6501.6626 Service Pack 3 (Office XP SP3) on Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:27.934617Z"} https://vulnerability.circl.lu/sighting/178eef96-63e4-463b-bc47-2e4c7cb7a37e/export Tue, 08 Sep 2026 06:51:27 +0000 https://vulnerability.circl.lu/sighting/22dd9987-5761-4f6f-a05c-dbcbe6ef6a06/export {"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"} {"uuid": "22dd9987-5761-4f6f-a05c-dbcbe6ef6a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"sfewer-r7\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"CVE-2026-0826 is a critical unauthenticated stack-based buffer overflow vulnerability affecting all\\n models in the VVX series (VVX 150, VVX 250, VVX 350, and VVX 450), as well as three models from the Trio IP\\n Conference series (Trio 8800, Trio 8500, and Trio 8300). A remote attacker can leverage CVE-2026-0826 to achieve\\n unauthenticated remote code execution (RCE) with root privileges on a target device. The vulnerability is present\\n in the device's parsing of Session Description Protocol (SDP) attributes for Interactive Connectivity Establishment\\n (ICE). The ICE feature, which is not enabled by default, must be enabled for the device to be exploitable by a\\n remote attacker.\", \"disclosure_date\": \"2026-06-01\", \"fullname\": \"exploit/linux/misc/poly_unauth_rce_cve_2026_0826\", \"is_install_path\": true, \"mod_time\": \"2026-06-05 11:39:49 +0000\", \"name\": \"HP Poly Voice Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-os-restarts\"]}, \"path\": \"/modules/exploits/linux/misc/poly_unauth_rce_cve_2026_0826.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"linux/misc/poly_unauth_rce_cve_2026_0826\", \"references\": [\"CVE-2026-0826\", \"URL-https://support.hp.com/us-en/document/ish_15052661-15052687-16/hpsbpy04083\", \"URL-https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/\"], \"rport\": 5060, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:18.714885Z"} https://vulnerability.circl.lu/sighting/22dd9987-5761-4f6f-a05c-dbcbe6ef6a06/export Tue, 08 Sep 2026 06:49:18 +0000 https://vulnerability.circl.lu/sighting/cc1df2f6-24c0-4bb6-81de-265827e1067e/export {"uuid": "cc1df2f6-24c0-4bb6-81de-265827e1067e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"faisalfs10x\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"In Webmin version 1.984, any authenticated low privilege user without access rights to\\n the File Manager module could interact with file manager functionalities such as downloading files from remote URLs and\\n changing file permissions. It is possible to achieve Remote Code Execution via a crafted .cgi file by chaining those\\n functionalities in the file manager.\", \"disclosure_date\": \"2022-02-26\", \"fullname\": \"exploit/linux/http/webmin_file_manager_rce\", \"is_install_path\": true, \"mod_time\": \"2022-10-27 11:26:31 +0000\", \"name\": \"Webmin File Manager RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/webmin_file_manager_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/webmin_file_manager_rce\", \"references\": [\"URL-https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/\", \"URL-https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\", \"CVE-2022-0824\"], \"rport\": 10000, \"session_types\": false, \"targets\": [\"Automatic (Unix In-Memory)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.980944Z"} {"uuid": "cc1df2f6-24c0-4bb6-81de-265827e1067e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"faisalfs10x\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"In Webmin version 1.984, any authenticated low privilege user without access rights to\\n the File Manager module could interact with file manager functionalities such as downloading files from remote URLs and\\n changing file permissions. It is possible to achieve Remote Code Execution via a crafted .cgi file by chaining those\\n functionalities in the file manager.\", \"disclosure_date\": \"2022-02-26\", \"fullname\": \"exploit/linux/http/webmin_file_manager_rce\", \"is_install_path\": true, \"mod_time\": \"2022-10-27 11:26:31 +0000\", \"name\": \"Webmin File Manager RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/webmin_file_manager_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/webmin_file_manager_rce\", \"references\": [\"URL-https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/\", \"URL-https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\", \"CVE-2022-0824\"], \"rport\": 10000, \"session_types\": false, \"targets\": [\"Automatic (Unix In-Memory)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.980944Z"} https://vulnerability.circl.lu/sighting/cc1df2f6-24c0-4bb6-81de-265827e1067e/export Tue, 08 Sep 2026 06:49:02 +0000 https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export {"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"} {"uuid": "347134c9-fdb5-471a-97e1-5de78b8a869d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "published-proof-of-concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-04T00:01:01.692297Z"} https://vulnerability.circl.lu/sighting/347134c9-fdb5-471a-97e1-5de78b8a869d/export Fri, 04 Sep 2026 00:01:01 +0000 https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export {"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"} {"uuid": "15652bbc-4c7d-4de0-b83d-24f834ee1796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0828", "type": "seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "content": "", "creation_timestamp": "2026-09-03T03:00:05.595157Z"} https://vulnerability.circl.lu/sighting/15652bbc-4c7d-4de0-b83d-24f834ee1796/export Thu, 03 Sep 2026 03:00:05 +0000 https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export {"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"} {"uuid": "2d91ced9-838b-4c3b-8627-6c5a3cd52006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0826", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/46473", "content": "CVE-2026-0826: Unauthenticated stack buffer overflow in HP Poly VVX and Trio VoIP Phones (RCE as root)\n\nVulnerable: VVX 150, VVX 250, VVX 350, and VVX 450), as well as Trio IP Conference series (Trio 8800, Trio 8500, and Trio 8300).\n\nBlog: https://www.rapid7.com/blog/post/ve-cve-2026-0826-critical-unauthenticated-stack-buffer-overflow-hp-poly-vvx-trio-voip-phones-fixed/", "creation_timestamp": "2026-09-03T00:00:50.751689Z"} https://vulnerability.circl.lu/sighting/2d91ced9-838b-4c3b-8627-6c5a3cd52006/export Thu, 03 Sep 2026 00:00:50 +0000