https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 19 Aug 2026 06:28:20 +0000 https://vulnerability.circl.lu/sighting/19ed4a6b-d5d4-4bbd-9b39-cef28663bc4f/export {"uuid": "19ed4a6b-d5d4-4bbd-9b39-cef28663bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/431", "content": "", "creation_timestamp": "2026-08-19T00:00:27.366311Z"} {"uuid": "19ed4a6b-d5d4-4bbd-9b39-cef28663bc4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/431", "content": "", "creation_timestamp": "2026-08-19T00:00:27.366311Z"} https://vulnerability.circl.lu/sighting/19ed4a6b-d5d4-4bbd-9b39-cef28663bc4f/export Wed, 19 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/402d58ca-b45e-489a-9fa2-8644e75ba16f/export {"uuid": "402d58ca-b45e-489a-9fa2-8644e75ba16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/432", "content": "python poc-cve-2026-28185.py --host https://test.com/ --code 4/F0ATsMZqBVDRrYEE********** --username admin@test.com", "creation_timestamp": "2026-08-19T00:00:27.333448Z"} {"uuid": "402d58ca-b45e-489a-9fa2-8644e75ba16f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/432", "content": "python poc-cve-2026-28185.py --host https://test.com/ --code 4/F0ATsMZqBVDRrYEE********** --username admin@test.com", "creation_timestamp": "2026-08-19T00:00:27.333448Z"} https://vulnerability.circl.lu/sighting/402d58ca-b45e-489a-9fa2-8644e75ba16f/export Wed, 19 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/caa52caa-de94-49ca-b744-26e9bdcab017/export {"uuid": "caa52caa-de94-49ca-b744-26e9bdcab017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://t.me/captainsmok3r_official/430", "content": "CVE-2026-28185 - \"Log in with Google\" (WordPress) treats an unverified Google email as proof of ownership\nAffected: rtCamp \"Log in with Google\" plugin (slug login-with-google) <= 1.4.2, fixed in 1.4.3\nType: Auth bypass (unauthenticated account takeover, including administrator)", "creation_timestamp": "2026-08-19T00:00:27.299325Z"} {"uuid": "caa52caa-de94-49ca-b744-26e9bdcab017", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://t.me/captainsmok3r_official/430", "content": "CVE-2026-28185 - \"Log in with Google\" (WordPress) treats an unverified Google email as proof of ownership\nAffected: rtCamp \"Log in with Google\" plugin (slug login-with-google) <= 1.4.2, fixed in 1.4.3\nType: Auth bypass (unauthenticated account takeover, including administrator)", "creation_timestamp": "2026-08-19T00:00:27.299325Z"} https://vulnerability.circl.lu/sighting/caa52caa-de94-49ca-b744-26e9bdcab017/export Wed, 19 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/5436a845-ebde-41ea-84f9-0ad95c2042c2/export {"uuid": "5436a845-ebde-41ea-84f9-0ad95c2042c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-19T00:00:27.262630Z"} {"uuid": "5436a845-ebde-41ea-84f9-0ad95c2042c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-19T00:00:27.262630Z"} https://vulnerability.circl.lu/sighting/5436a845-ebde-41ea-84f9-0ad95c2042c2/export Wed, 19 Aug 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/3a5f7cad-8615-49b3-af63-144e87bdb0b3/export {"uuid": "3a5f7cad-8615-49b3-af63-144e87bdb0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-18T03:00:03.033860Z"} {"uuid": "3a5f7cad-8615-49b3-af63-144e87bdb0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/433", "content": "--code: An authorization code already issued by Google (or a fake provider) for an unverified identity.\nTo obtain this --code, simply go to the wp-login.php page and click \"login with Google.\" Then, select the Gmail account you want to use to authorize the admin user access. after that, you will be redirected back to the website, and you will see something like this in the URL:\n\nsite.com/wp-login.php?code=...&state=...\n -> ?code= ...\n--code ...\n?code=...\npython poc-cve-2026-28185.py --host https://site.com/ --code ... --username admin@site.com\n\n \u203c\ufe0f this poc doesn\u2019t require authentication, but you do need to have the admin\u2019s email address of the website(for wp-login.php), and that email address must already exist as an admin account. That makes the process a bit difficult.", "creation_timestamp": "2026-08-18T03:00:03.033860Z"} https://vulnerability.circl.lu/sighting/3a5f7cad-8615-49b3-af63-144e87bdb0b3/export Tue, 18 Aug 2026 03:00:03 +0000 https://vulnerability.circl.lu/sighting/9a480023-ad6f-4cb4-846f-cda320d27624/export {"uuid": "9a480023-ad6f-4cb4-846f-cda320d27624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/431", "content": "", "creation_timestamp": "2026-08-18T02:00:04.324207Z"} {"uuid": "9a480023-ad6f-4cb4-846f-cda320d27624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/431", "content": "", "creation_timestamp": "2026-08-18T02:00:04.324207Z"} https://vulnerability.circl.lu/sighting/9a480023-ad6f-4cb4-846f-cda320d27624/export Tue, 18 Aug 2026 02:00:04 +0000 https://vulnerability.circl.lu/sighting/e59dd42f-7a90-4647-93c0-73ef99bcf6aa/export {"uuid": "e59dd42f-7a90-4647-93c0-73ef99bcf6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/432", "content": "python poc-cve-2026-28185.py --host https://test.com/ --code 4/F0ATsMZqBVDRrYEE********** --username admin@test.com", "creation_timestamp": "2026-08-18T02:00:04.281258Z"} {"uuid": "e59dd42f-7a90-4647-93c0-73ef99bcf6aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "published-proof-of-concept", "source": "https://t.me/captainsmok3r_official/432", "content": "python poc-cve-2026-28185.py --host https://test.com/ --code 4/F0ATsMZqBVDRrYEE********** --username admin@test.com", "creation_timestamp": "2026-08-18T02:00:04.281258Z"} https://vulnerability.circl.lu/sighting/e59dd42f-7a90-4647-93c0-73ef99bcf6aa/export Tue, 18 Aug 2026 02:00:04 +0000 https://vulnerability.circl.lu/sighting/914a627e-a8c5-47f2-b69a-2714e0fa8801/export {"uuid": "914a627e-a8c5-47f2-b69a-2714e0fa8801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://t.me/captainsmok3r_official/430", "content": "CVE-2026-28185 - \"Log in with Google\" (WordPress) treats an unverified Google email as proof of ownership\nAffected: rtCamp \"Log in with Google\" plugin (slug login-with-google) <= 1.4.2, fixed in 1.4.3\nType: Auth bypass (unauthenticated account takeover, including administrator)", "creation_timestamp": "2026-08-18T02:00:04.229727Z"} {"uuid": "914a627e-a8c5-47f2-b69a-2714e0fa8801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://t.me/captainsmok3r_official/430", "content": "CVE-2026-28185 - \"Log in with Google\" (WordPress) treats an unverified Google email as proof of ownership\nAffected: rtCamp \"Log in with Google\" plugin (slug login-with-google) <= 1.4.2, fixed in 1.4.3\nType: Auth bypass (unauthenticated account takeover, including administrator)", "creation_timestamp": "2026-08-18T02:00:04.229727Z"} https://vulnerability.circl.lu/sighting/914a627e-a8c5-47f2-b69a-2714e0fa8801/export Tue, 18 Aug 2026 02:00:04 +0000 https://vulnerability.circl.lu/sighting/cdec873e-5649-4375-bfcc-e0509b09a742/export {"uuid": "cdec873e-5649-4375-bfcc-e0509b09a742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxwylaa5f2e", "content": "CVE-2026-28185\nIf you use Log in with Google to authenticate users, versions up to 1.4.2 have a security issue. An attacker can potentially bypass login requirements and gain unauthorized access to your application. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T15:20:05.975528Z"} {"uuid": "cdec873e-5649-4375-bfcc-e0509b09a742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-28185", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msxwylaa5f2e", "content": "CVE-2026-28185\nIf you use Log in with Google to authenticate users, versions up to 1.4.2 have a security issue. An attacker can potentially bypass login requirements and gain unauthorized access to your application. Update to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-13T15:20:05.975528Z"} https://vulnerability.circl.lu/sighting/cdec873e-5649-4375-bfcc-e0509b09a742/export Thu, 13 Aug 2026 15:20:05 +0000