https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 11:33:10 +0000 https://vulnerability.circl.lu/sighting/ac1da857-2554-4a30-ac41-a36458eef613/export {"uuid": "ac1da857-2554-4a30-ac41-a36458eef613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50986", "type": "published-proof-of-concept", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-15T00:00:31.287275Z"} {"uuid": "ac1da857-2554-4a30-ac41-a36458eef613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50986", "type": "published-proof-of-concept", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-15T00:00:31.287275Z"} https://vulnerability.circl.lu/sighting/ac1da857-2554-4a30-ac41-a36458eef613/export Tue, 15 Sep 2026 00:00:31 +0000 https://vulnerability.circl.lu/sighting/eeb8e972-1baa-4d54-bad7-1573edac8d65/export {"uuid": "eeb8e972-1baa-4d54-bad7-1573edac8d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/268", "content": "\ud83c\udfaf New Report #2905013: [SECURITY CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet](https://hackerone.com/reports/2905013)\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: nacl 123\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2024-12-17\n\u23f0 Disclosed: 2025-05-27 15:31:48\n\ud83d\udcdd Summary: A vulnerability was discovered in Apache Tomcat where a race condition could be triggered on a Windows machine with a write-enabled default servlet, leading to remote code execution. The issue was caused by the case-insensitive nature of the file system, which allowed an uploaded file to be treated as a JSP script.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.456213Z"} {"uuid": "eeb8e972-1baa-4d54-bad7-1573edac8d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/268", "content": "\ud83c\udfaf New Report #2905013: [SECURITY CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet](https://hackerone.com/reports/2905013)\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: nacl 123\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2024-12-17\n\u23f0 Disclosed: 2025-05-27 15:31:48\n\ud83d\udcdd Summary: A vulnerability was discovered in Apache Tomcat where a race condition could be triggered on a Windows machine with a write-enabled default servlet, leading to remote code execution. The issue was caused by the case-insensitive nature of the file system, which allowed an uploaded file to be treated as a JSP script.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.456213Z"} https://vulnerability.circl.lu/sighting/eeb8e972-1baa-4d54-bad7-1573edac8d65/export Tue, 15 Sep 2026 00:00:28 +0000 https://vulnerability.circl.lu/sighting/82a54ceb-9503-4d82-8c3e-71803e889a83/export {"uuid": "82a54ceb-9503-4d82-8c3e-71803e889a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50971", "type": "published-proof-of-concept", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-15T00:00:26.494419Z"} {"uuid": "82a54ceb-9503-4d82-8c3e-71803e889a83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50971", "type": "published-proof-of-concept", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-15T00:00:26.494419Z"} https://vulnerability.circl.lu/sighting/82a54ceb-9503-4d82-8c3e-71803e889a83/export Tue, 15 Sep 2026 00:00:26 +0000 https://vulnerability.circl.lu/sighting/c592d0f4-0fed-4aec-9f40-3e79c7058d28/export {"uuid": "c592d0f4-0fed-4aec-9f40-3e79c7058d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50961", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.498158Z"} {"uuid": "c592d0f4-0fed-4aec-9f40-3e79c7058d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50961", "type": "published-proof-of-concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-15T00:00:24.498158Z"} https://vulnerability.circl.lu/sighting/c592d0f4-0fed-4aec-9f40-3e79c7058d28/export Tue, 15 Sep 2026 00:00:24 +0000 https://vulnerability.circl.lu/sighting/b8923a12-cc79-4b62-9a43-ba8904e53f3f/export {"uuid": "b8923a12-cc79-4b62-9a43-ba8904e53f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/268", "content": "\ud83c\udfaf New Report #2905013: [SECURITY CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet](https://hackerone.com/reports/2905013)\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: nacl 123\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2024-12-17\n\u23f0 Disclosed: 2025-05-27 15:31:48\n\ud83d\udcdd Summary: A vulnerability was discovered in Apache Tomcat where a race condition could be triggered on a Windows machine with a write-enabled default servlet, leading to remote code execution. The issue was caused by the case-insensitive nature of the file system, which allowed an uploaded file to be treated as a JSP script.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.118201Z"} {"uuid": "b8923a12-cc79-4b62-9a43-ba8904e53f3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50379", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/268", "content": "\ud83c\udfaf New Report #2905013: [SECURITY CVE-2024-50379 Apache Tomcat - RCE via write-enabled default servlet](https://hackerone.com/reports/2905013)\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: nacl 123\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2024-12-17\n\u23f0 Disclosed: 2025-05-27 15:31:48\n\ud83d\udcdd Summary: A vulnerability was discovered in Apache Tomcat where a race condition could be triggered on a Windows machine with a write-enabled default servlet, leading to remote code execution. The issue was caused by the case-insensitive nature of the file system, which allowed an uploaded file to be treated as a JSP script.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.118201Z"} https://vulnerability.circl.lu/sighting/b8923a12-cc79-4b62-9a43-ba8904e53f3f/export Mon, 14 Sep 2026 06:00:05 +0000 https://vulnerability.circl.lu/sighting/40a0bfdd-8538-4150-951f-f10f5f33e024/export {"uuid": "40a0bfdd-8538-4150-951f-f10f5f33e024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50961", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:10.688584Z"} {"uuid": "40a0bfdd-8538-4150-951f-f10f5f33e024", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50961", "type": "seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "content": "", "creation_timestamp": "2026-09-14T03:00:10.688584Z"} https://vulnerability.circl.lu/sighting/40a0bfdd-8538-4150-951f-f10f5f33e024/export Mon, 14 Sep 2026 03:00:10 +0000 https://vulnerability.circl.lu/sighting/c3008531-1a32-4b37-90b9-a67b2f6971a4/export {"uuid": "c3008531-1a32-4b37-90b9-a67b2f6971a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50971", "type": "seen", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-14T03:00:08.335931Z"} {"uuid": "c3008531-1a32-4b37-90b9-a67b2f6971a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50971", "type": "seen", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-14T03:00:08.335931Z"} https://vulnerability.circl.lu/sighting/c3008531-1a32-4b37-90b9-a67b2f6971a4/export Mon, 14 Sep 2026 03:00:08 +0000 https://vulnerability.circl.lu/sighting/adc1f1f3-f244-400a-8c83-da0ba76f8f6c/export {"uuid": "adc1f1f3-f244-400a-8c83-da0ba76f8f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50986", "type": "seen", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-14T03:00:05.964993Z"} {"uuid": "adc1f1f3-f244-400a-8c83-da0ba76f8f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50986", "type": "seen", "source": "Telegram/HpvRlDBORm0kLsO1zg2R5Kugqpwi6YO_LawI6LgE5lPyRWI", "content": "", "creation_timestamp": "2026-09-14T03:00:05.964993Z"} https://vulnerability.circl.lu/sighting/adc1f1f3-f244-400a-8c83-da0ba76f8f6c/export Mon, 14 Sep 2026 03:00:05 +0000 https://vulnerability.circl.lu/sighting/5e311b9c-c246-4252-bc78-2ec53296eaa3/export {"uuid": "5e311b9c-c246-4252-bc78-2ec53296eaa3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50340", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/737d80a1-2c10-486f-9282-3d667451f149", "content": "", "creation_timestamp": "2026-09-11T11:00:41.460660Z"} {"uuid": "5e311b9c-c246-4252-bc78-2ec53296eaa3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-50340", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/737d80a1-2c10-486f-9282-3d667451f149", "content": "", "creation_timestamp": "2026-09-11T11:00:41.460660Z"} https://vulnerability.circl.lu/sighting/5e311b9c-c246-4252-bc78-2ec53296eaa3/export Fri, 11 Sep 2026 11:00:41 +0000 https://vulnerability.circl.lu/sighting/82d96da1-0997-4acc-9dec-68d68d0675f7/export {"uuid": "82d96da1-0997-4acc-9dec-68d68d0675f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_hash_form_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Francesco Carlucci\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The Hash Form - Drag & Drop Form Builder plugin for WordPress suffers from a critical vulnerability\\n due to missing file type validation in the file_upload_action function. This vulnerability exists\\n in all versions up to and including 1.1.0. Unauthenticated attackers can exploit this flaw to upload arbitrary\\n files, including PHP scripts, to the server, potentially allowing for remote code execution on the affected\\n WordPress site. This module targets multiple platforms by adapting payload delivery and execution based on the\\n server environment.\", \"disclosure_date\": \"2024-05-23\", \"fullname\": \"exploit/multi/http/wp_hash_form_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"WordPress Hash Form Plugin RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_hash_form_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_hash_form_rce\", \"references\": [\"CVE-2024-5084\", \"URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/hash-form/hash-form-drag-drop-form-builder-110-unauthenticated-arbitrary-file-upload-to-remote-code-execution\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.679609Z"} {"uuid": "82d96da1-0997-4acc-9dec-68d68d0675f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5084", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_hash_form_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"Francesco Carlucci\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The Hash Form - Drag & Drop Form Builder plugin for WordPress suffers from a critical vulnerability\\n due to missing file type validation in the file_upload_action function. This vulnerability exists\\n in all versions up to and including 1.1.0. Unauthenticated attackers can exploit this flaw to upload arbitrary\\n files, including PHP scripts, to the server, potentially allowing for remote code execution on the affected\\n WordPress site. This module targets multiple platforms by adapting payload delivery and execution based on the\\n server environment.\", \"disclosure_date\": \"2024-05-23\", \"fullname\": \"exploit/multi/http/wp_hash_form_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:04 +0000\", \"name\": \"WordPress Hash Form Plugin RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_hash_form_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_hash_form_rce\", \"references\": [\"CVE-2024-5084\", \"URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/hash-form/hash-form-drag-drop-form-builder-110-unauthenticated-arbitrary-file-upload-to-remote-code-execution\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:21.679609Z"} https://vulnerability.circl.lu/sighting/82d96da1-0997-4acc-9dec-68d68d0675f7/export Tue, 08 Sep 2026 06:50:21 +0000