https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 11:06:43 +0000 https://vulnerability.circl.lu/sighting/411523aa-e4df-4683-b007-76dcb54772ae/export {"uuid": "411523aa-e4df-4683-b007-76dcb54772ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hackeronereports/266", "content": "\ud83c\udfaf New Report #2939104: CVE-2024-56374: Denial-of-service vulnerability in IPv6 validation\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: sav \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: 2162\n\ud83d\udd50 Submitted: 2025-01-15\n\u23f0 Disclosed: 2025-05-27 12:26:37\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in Django's IPv6 validation. The lack of an upper bound limit enforcement in strings passed during IPv6 validation could lead to a potential denial-of-service attack. The vulnerable functions, clean ipv6 address and is valid ipv6 address, as well as the django.forms.GenericIPAddressField form field, have been updated to address this issue.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.161118Z"} {"uuid": "411523aa-e4df-4683-b007-76dcb54772ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hackeronereports/266", "content": "\ud83c\udfaf New Report #2939104: CVE-2024-56374: Denial-of-service vulnerability in IPv6 validation\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: sav \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: 2162\n\ud83d\udd50 Submitted: 2025-01-15\n\u23f0 Disclosed: 2025-05-27 12:26:37\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in Django's IPv6 validation. The lack of an upper bound limit enforcement in strings passed during IPv6 validation could lead to a potential denial-of-service attack. The vulnerable functions, clean ipv6 address and is valid ipv6 address, as well as the django.forms.GenericIPAddressField form field, have been updated to address this issue.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.161118Z"} https://vulnerability.circl.lu/sighting/411523aa-e4df-4683-b007-76dcb54772ae/export Tue, 15 Sep 2026 00:00:28 +0000 https://vulnerability.circl.lu/sighting/7f69220e-d1cc-4881-9fad-79243555b2b6/export {"uuid": "7f69220e-d1cc-4881-9fad-79243555b2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hackeronereports/266", "content": "\ud83c\udfaf New Report #2939104: CVE-2024-56374: Denial-of-service vulnerability in IPv6 validation\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: sav \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: 2162\n\ud83d\udd50 Submitted: 2025-01-15\n\u23f0 Disclosed: 2025-05-27 12:26:37\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in Django's IPv6 validation. The lack of an upper bound limit enforcement in strings passed during IPv6 validation could lead to a potential denial-of-service attack. The vulnerable functions, clean ipv6 address and is valid ipv6 address, as well as the django.forms.GenericIPAddressField form field, have been updated to address this issue.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.813458Z"} {"uuid": "7f69220e-d1cc-4881-9fad-79243555b2b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hackeronereports/266", "content": "\ud83c\udfaf New Report #2939104: CVE-2024-56374: Denial-of-service vulnerability in IPv6 validation\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: sav \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: 2162\n\ud83d\udd50 Submitted: 2025-01-15\n\u23f0 Disclosed: 2025-05-27 12:26:37\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in Django's IPv6 validation. The lack of an upper bound limit enforcement in strings passed during IPv6 validation could lead to a potential denial-of-service attack. The vulnerable functions, clean ipv6 address and is valid ipv6 address, as well as the django.forms.GenericIPAddressField form field, have been updated to address this issue.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.813458Z"} https://vulnerability.circl.lu/sighting/7f69220e-d1cc-4881-9fad-79243555b2b6/export Mon, 14 Sep 2026 06:00:04 +0000 https://vulnerability.circl.lu/sighting/6b2b0cbc-2c3b-4729-ad9e-8b61d9a76a39/export {"uuid": "6b2b0cbc-2c3b-4729-ad9e-8b61d9a76a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_ftp_template.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"jheysel-r7\", \"Valentin Lobstein\", \"AssetNote\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Twig template injection vulnerability in Craft CMS by abusing the --templatesPath argument.\\n The vulnerability allows arbitrary template loading via FTP, leading to Remote Code Execution (RCE).\", \"disclosure_date\": \"2024-12-19\", \"fullname\": \"exploit/linux/http/craftcms_ftp_template\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Craft CMS Twig Template Injection RCE via FTP Templates Path\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/craftcms_ftp_template.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/craftcms_ftp_template\", \"references\": [\"CVE-2024-56145\", \"URL-https://github.com/Chocapikk/CVE-2024-56145\", \"URL-https://www.assetnote.io/resources/research/how-an-obscure-php-footgun-led-to-rce-in-craft-cms\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:28.694399Z"} {"uuid": "6b2b0cbc-2c3b-4729-ad9e-8b61d9a76a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56145", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_ftp_template.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"jheysel-r7\", \"Valentin Lobstein\", \"AssetNote\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Twig template injection vulnerability in Craft CMS by abusing the --templatesPath argument.\\n The vulnerability allows arbitrary template loading via FTP, leading to Remote Code Execution (RCE).\", \"disclosure_date\": \"2024-12-19\", \"fullname\": \"exploit/linux/http/craftcms_ftp_template\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Craft CMS Twig Template Injection RCE via FTP Templates Path\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/craftcms_ftp_template.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/craftcms_ftp_template\", \"references\": [\"CVE-2024-56145\", \"URL-https://github.com/Chocapikk/CVE-2024-56145\", \"URL-https://www.assetnote.io/resources/research/how-an-obscure-php-footgun-led-to-rce-in-craft-cms\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:28.694399Z"} https://vulnerability.circl.lu/sighting/6b2b0cbc-2c3b-4729-ad9e-8b61d9a76a39/export Tue, 08 Sep 2026 06:48:28 +0000 https://vulnerability.circl.lu/sighting/28db0c34-078b-45f6-9241-d227581213ac/export {"uuid": "28db0c34-078b-45f6-9241-d227581213ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163020", "content": "A Denial-of-Service vulnerability hidden in IPv6 address validation\u200a\u2014\u200ahow it worked, how to spot similar flaws, and how I earned a bountyContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:54.525078Z"} {"uuid": "28db0c34-078b-45f6-9241-d227581213ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163020", "content": "A Denial-of-Service vulnerability hidden in IPv6 address validation\u200a\u2014\u200ahow it worked, how to spot similar flaws, and how I earned a bountyContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:54.525078Z"} https://vulnerability.circl.lu/sighting/28db0c34-078b-45f6-9241-d227581213ac/export Fri, 04 Sep 2026 00:00:54 +0000 https://vulnerability.circl.lu/sighting/c90cbf79-e8ec-4f6b-b88e-a5bde9bedb44/export {"uuid": "c90cbf79-e8ec-4f6b-b88e-a5bde9bedb44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:54.127733Z"} {"uuid": "c90cbf79-e8ec-4f6b-b88e-a5bde9bedb44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:54.127733Z"} https://vulnerability.circl.lu/sighting/c90cbf79-e8ec-4f6b-b88e-a5bde9bedb44/export Fri, 04 Sep 2026 00:00:54 +0000 https://vulnerability.circl.lu/sighting/f5fd6c2c-36ac-4b2a-9cd3-177148376738/export {"uuid": "f5fd6c2c-36ac-4b2a-9cd3-177148376738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163020", "content": "A Denial-of-Service vulnerability hidden in IPv6 address validation\u200a\u2014\u200ahow it worked, how to spot similar flaws, and how I earned a bountyContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T09:00:06.379581Z"} {"uuid": "f5fd6c2c-36ac-4b2a-9cd3-177148376738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163020", "content": "A Denial-of-Service vulnerability hidden in IPv6 address validation\u200a\u2014\u200ahow it worked, how to spot similar flaws, and how I earned a bountyContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T09:00:06.379581Z"} https://vulnerability.circl.lu/sighting/f5fd6c2c-36ac-4b2a-9cd3-177148376738/export Thu, 03 Sep 2026 09:00:06 +0000 https://vulnerability.circl.lu/sighting/c7837484-558c-43c8-aff4-bc18adf63c3f/export {"uuid": "c7837484-558c-43c8-aff4-bc18adf63c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T09:00:05.984219Z"} {"uuid": "c7837484-558c-43c8-aff4-bc18adf63c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T09:00:05.984219Z"} https://vulnerability.circl.lu/sighting/c7837484-558c-43c8-aff4-bc18adf63c3f/export Thu, 03 Sep 2026 09:00:05 +0000 https://vulnerability.circl.lu/sighting/e679a796-bef7-4eb7-8b07-f551065766a0/export {"uuid": "e679a796-bef7-4eb7-8b07-f551065766a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:39.897109Z"} {"uuid": "e679a796-bef7-4eb7-8b07-f551065766a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:39.897109Z"} https://vulnerability.circl.lu/sighting/e679a796-bef7-4eb7-8b07-f551065766a0/export Wed, 02 Sep 2026 01:00:39 +0000 https://vulnerability.circl.lu/sighting/b6f52f6f-f669-479d-83e0-0c9c92e23d1e/export {"uuid": "b6f52f6f-f669-479d-83e0-0c9c92e23d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hacking_Attack/163020", "content": "A Denial-of-Service vulnerability hidden in IPv6 address validation\u200a\u2014\u200ahow it worked, how to spot similar flaws, and how I earned a bountyContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:39.492023Z"} {"uuid": "b6f52f6f-f669-479d-83e0-0c9c92e23d1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hacking_Attack/163020", "content": "A Denial-of-Service vulnerability hidden in IPv6 address validation\u200a\u2014\u200ahow it worked, how to spot similar flaws, and how I earned a bountyContinue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:39.492023Z"} https://vulnerability.circl.lu/sighting/b6f52f6f-f669-479d-83e0-0c9c92e23d1e/export Wed, 02 Sep 2026 01:00:39 +0000 https://vulnerability.circl.lu/sighting/76959d0b-628a-4c33-be3e-1c85ebe1fb39/export {"uuid": "76959d0b-628a-4c33-be3e-1c85ebe1fb39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:22.403575Z"} {"uuid": "76959d0b-628a-4c33-be3e-1c85ebe1fb39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-56374", "type": "seen", "source": "https://t.me/hacking_Attack/163018", "content": "$2,162 Bounty: CVE-2024\u201356374\u200a\u2014\u200aDoS in Django\u2019s IPv6 Validation\nhttps://infosecwriteups.com/2-162-bounty-cve-2024-56374-dos-in-djangos-ipv6-validation-d689da7584b9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:22.403575Z"} https://vulnerability.circl.lu/sighting/76959d0b-628a-4c33-be3e-1c85ebe1fb39/export Tue, 01 Sep 2026 20:00:22 +0000