https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 05 Sep 2026 01:07:04 +0000 https://vulnerability.circl.lu/sighting/75ea32c1-b59e-43bb-ab25-cf239df1b240/export {"uuid": "75ea32c1-b59e-43bb-ab25-cf239df1b240", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-32790", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b71d29b1-f9dd-434b-a531-37d69701d07c", "content": "", "creation_timestamp": "2026-06-30T10:22:03.114937Z"} {"uuid": "75ea32c1-b59e-43bb-ab25-cf239df1b240", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-32790", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b71d29b1-f9dd-434b-a531-37d69701d07c", "content": "", "creation_timestamp": "2026-06-30T10:22:03.114937Z"} https://vulnerability.circl.lu/sighting/75ea32c1-b59e-43bb-ab25-cf239df1b240/export Tue, 30 Jun 2026 10:22:03 +0000 https://vulnerability.circl.lu/sighting/041e4caa-14d9-48ac-bd4b-aed8864578ae/export {"uuid": "041e4caa-14d9-48ac-bd4b-aed8864578ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32790", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a28ba911-9645-4b76-9333-57ea97aac019", "content": "", "creation_timestamp": "2026-06-23T14:06:18.289914Z"} {"uuid": "041e4caa-14d9-48ac-bd4b-aed8864578ae", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32790", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a28ba911-9645-4b76-9333-57ea97aac019", "content": "", "creation_timestamp": "2026-06-23T14:06:18.289914Z"} https://vulnerability.circl.lu/sighting/041e4caa-14d9-48ac-bd4b-aed8864578ae/export Tue, 23 Jun 2026 14:06:18 +0000 https://vulnerability.circl.lu/sighting/029d69b8-9bd8-429b-93d0-db2f7a5546d8/export {"uuid": "029d69b8-9bd8-429b-93d0-db2f7a5546d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32792", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"} {"uuid": "029d69b8-9bd8-429b-93d0-db2f7a5546d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32792", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"} https://vulnerability.circl.lu/sighting/029d69b8-9bd8-429b-93d0-db2f7a5546d8/export Tue, 15 Oct 2024 10:14:15 +0000 https://vulnerability.circl.lu/sighting/d4f821fc-5b7d-487b-b631-e0407a17aae5/export {"uuid": "d4f821fc-5b7d-487b-b631-e0407a17aae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32791", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"} {"uuid": "d4f821fc-5b7d-487b-b631-e0407a17aae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32791", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"} https://vulnerability.circl.lu/sighting/d4f821fc-5b7d-487b-b631-e0407a17aae5/export Tue, 15 Oct 2024 10:14:15 +0000 https://vulnerability.circl.lu/sighting/a75b0314-82a3-45a7-86a5-67fc2904a4c2/export {"uuid": "a75b0314-82a3-45a7-86a5-67fc2904a4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32790", "type": "published-proof-of-concept", "source": "https://t.me/hack_room_channel/134", "content": "Proof of Concept for the WooCommerce 3.3-5.5 Blind Time based SQL Injection\n\nPreuve de concept pour l'injection SQL bas\u00e9e sur le temps aveugle WooCommerce 3.3-5.5\n\nhttps://github.com/LazyTitan33/CVE-2021-32790-PoC/tree/main\n\n#0-day #Exploit", "creation_timestamp": "2022-01-21T08:03:01.000000Z"} {"uuid": "a75b0314-82a3-45a7-86a5-67fc2904a4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32790", "type": "published-proof-of-concept", "source": "https://t.me/hack_room_channel/134", "content": "Proof of Concept for the WooCommerce 3.3-5.5 Blind Time based SQL Injection\n\nPreuve de concept pour l'injection SQL bas\u00e9e sur le temps aveugle WooCommerce 3.3-5.5\n\nhttps://github.com/LazyTitan33/CVE-2021-32790-PoC/tree/main\n\n#0-day #Exploit", "creation_timestamp": "2022-01-21T08:03:01.000000Z"} https://vulnerability.circl.lu/sighting/a75b0314-82a3-45a7-86a5-67fc2904a4c2/export Fri, 21 Jan 2022 08:03:01 +0000 https://vulnerability.circl.lu/sighting/29f9e939-49b9-490b-a08e-5b1ebe078ed6/export {"uuid": "29f9e939-49b9-490b-a08e-5b1ebe078ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-32797", "type": "published-proof-of-concept", "source": "https://github.com/google/security-research/security/advisories/GHSA-c469-p3jp-2vhx", "content": "", "creation_timestamp": "2021-10-20T16:18:20.000000Z"} {"uuid": "29f9e939-49b9-490b-a08e-5b1ebe078ed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2021-32797", "type": "published-proof-of-concept", "source": "https://github.com/google/security-research/security/advisories/GHSA-c469-p3jp-2vhx", "content": "", "creation_timestamp": "2021-10-20T16:18:20.000000Z"} https://vulnerability.circl.lu/sighting/29f9e939-49b9-490b-a08e-5b1ebe078ed6/export Wed, 20 Oct 2021 16:18:20 +0000 https://vulnerability.circl.lu/sighting/798f6264-e3a6-4b53-b521-189dba4aa6de/export {"uuid": "798f6264-e3a6-4b53-b521-189dba4aa6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32797", "type": "seen", "source": "https://t.me/cibsecurity/27038", "content": "\u203c CVE-2021-32797 \u203c\n\nJupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn\u00e2\u20ac\u2122t sanitize the action attribute of html ``. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T00:36:47.000000Z"} {"uuid": "798f6264-e3a6-4b53-b521-189dba4aa6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32797", "type": "seen", "source": "https://t.me/cibsecurity/27038", "content": "\u203c CVE-2021-32797 \u203c\n\nJupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook. In affected versions untrusted notebook can execute code on load. In particular JupyterLab doesn\u00e2\u20ac\u2122t sanitize the action attribute of html ``. Using this it is possible to trigger the form validation outside of the form itself. This is a remote code execution, but requires user action to open a notebook.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T00:36:47.000000Z"} https://vulnerability.circl.lu/sighting/798f6264-e3a6-4b53-b521-189dba4aa6de/export Tue, 10 Aug 2021 00:36:47 +0000 https://vulnerability.circl.lu/sighting/81d422df-d69e-456a-84e0-8927f3be61ea/export {"uuid": "81d422df-d69e-456a-84e0-8927f3be61ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32798", "type": "seen", "source": "https://t.me/cibsecurity/27028", "content": "\u203c CVE-2021-32798 \u203c\n\nThe Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T00:36:32.000000Z"} {"uuid": "81d422df-d69e-456a-84e0-8927f3be61ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32798", "type": "seen", "source": "https://t.me/cibsecurity/27028", "content": "\u203c CVE-2021-32798 \u203c\n\nThe Jupyter notebook is a web-based notebook environment for interactive computing. In affected versions untrusted notebook can execute code on load. Jupyter Notebook uses a deprecated version of Google Caja to sanitize user inputs. A public Caja bypass can be used to trigger an XSS when a victim opens a malicious ipynb document in Jupyter Notebook. The XSS allows an attacker to execute arbitrary code on the victim computer using Jupyter APIs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-10T00:36:32.000000Z"} https://vulnerability.circl.lu/sighting/81d422df-d69e-456a-84e0-8927f3be61ea/export Tue, 10 Aug 2021 00:36:32 +0000 https://vulnerability.circl.lu/sighting/d0840b14-464f-4686-8374-5b92e122f429/export {"uuid": "d0840b14-464f-4686-8374-5b92e122f429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32793", "type": "seen", "source": "https://t.me/cibsecurity/26854", "content": "\u203c CVE-2021-32793 \u203c\n\nPi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability. User input added as a wildcard domain to a blocklist or allowlist is unfiltered in the web interface. Since the payload is stored permanently as a wildcard domain, this is a persistent XSS vulnerability. A remote attacker can therefore attack administrative user accounts through client-side attacks. Pi-hole Web Interface version 5.5.1 contains a patch for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-04T23:23:50.000000Z"} {"uuid": "d0840b14-464f-4686-8374-5b92e122f429", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32793", "type": "seen", "source": "https://t.me/cibsecurity/26854", "content": "\u203c CVE-2021-32793 \u203c\n\nPi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the function to add domains to blocklists or allowlists is vulnerable to a stored cross-site-scripting vulnerability. User input added as a wildcard domain to a blocklist or allowlist is unfiltered in the web interface. Since the payload is stored permanently as a wildcard domain, this is a persistent XSS vulnerability. A remote attacker can therefore attack administrative user accounts through client-side attacks. Pi-hole Web Interface version 5.5.1 contains a patch for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-04T23:23:50.000000Z"} https://vulnerability.circl.lu/sighting/d0840b14-464f-4686-8374-5b92e122f429/export Wed, 04 Aug 2021 23:23:50 +0000 https://vulnerability.circl.lu/sighting/c981185f-7a08-4556-b445-58ba3b5ae4d1/export {"uuid": "c981185f-7a08-4556-b445-58ba3b5ae4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32796", "type": "seen", "source": "https://t.me/cibsecurity/26549", "content": "\u203c CVE-2021-32796 \u203c\n\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This issue has been resolved in version 0.7.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-28T02:12:45.000000Z"} {"uuid": "c981185f-7a08-4556-b445-58ba3b5ae4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-32796", "type": "seen", "source": "https://t.me/cibsecurity/26549", "content": "\u203c CVE-2021-32796 \u203c\n\nxmldom is an open source pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.6.0 and older do not correctly escape special characters when serializing elements removed from their ancestor. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This issue has been resolved in version 0.7.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-28T02:12:45.000000Z"} https://vulnerability.circl.lu/sighting/c981185f-7a08-4556-b445-58ba3b5ae4d1/export Wed, 28 Jul 2021 02:12:45 +0000