https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 19 Aug 2026 22:15:03 +0000 https://vulnerability.circl.lu/sighting/bd066b46-9ea5-41b0-a2c4-f7ba2b8af03b/export {"uuid": "bd066b46-9ea5-41b0-a2c4-f7ba2b8af03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:36.281296Z"} {"uuid": "bd066b46-9ea5-41b0-a2c4-f7ba2b8af03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:36.281296Z"} https://vulnerability.circl.lu/sighting/bd066b46-9ea5-41b0-a2c4-f7ba2b8af03b/export Sun, 16 Aug 2026 00:00:36 +0000 https://vulnerability.circl.lu/sighting/adcbd77f-e946-40c1-a772-8a11d48db3a2/export {"uuid": "adcbd77f-e946-40c1-a772-8a11d48db3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.017151Z"} {"uuid": "adcbd77f-e946-40c1-a772-8a11d48db3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30458", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 New GitHub PoC CVE \u2013 Research Picks (Today / Fresh Only)\nBelow are recent CVE vulnerabilities with publicly available Proof-of-Concept repositories on GitHub, selected to avoid duplicates and previously shared entries.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-33321\n\ud83c\udfaf vBulletin \u2013 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/whitehatsk/CVE-2026-33321\n\n\ud83e\udde0 Overview\nA vulnerability in vBulletin allows attackers to execute arbitrary code via crafted requests targeting improperly validated input parameters.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Web forum compromise\n\u2022 Full server takeover\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-32014\n\ud83c\udfaf Liferay Portal \u2013 Authentication Bypass\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/ColdFusionX/CVE-2026-32014\n\n\ud83e\udde0 Overview\nA flaw in Liferay Portal allows attackers to bypass authentication and gain unauthorized access to restricted resources.\n\n\u2699\ufe0f Impact\n\u2022 Authentication bypass\n\u2022 Privileged access\n\u2022 Enterprise portal compromise\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-30977\n\ud83c\udfaf PrestaShop \u2013 SQL Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/0xInfection/CVE-2026-30977\n\n\ud83e\udde0 Overview\nA SQL injection vulnerability in PrestaShop enables attackers to manipulate database queries through crafted input.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Sensitive data exposure\n\u2022 Privilege escalation\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-29866\n\ud83c\udfaf Flask-Based Application \u2013 Template Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/d3vilbug/CVE-2026-29866\n\n\ud83e\udde0 Overview\nA server-side template injection vulnerability allows attackers to execute arbitrary code via unsanitized user input.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Application compromise\n\u2022 Data exposure\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-28792\n\ud83c\udfaf Magento \u2013 Arbitrary File Upload\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/blackhatsociety/CVE-2026-28792\n\n\ud83e\udde0 Overview\nA vulnerability in Magento allows attackers to upload malicious files, leading to remote code execution on the server.\n\n\u2699\ufe0f Impact\n\u2022 Arbitrary file upload\n\u2022 Remote code execution\n\u2022 Full system compromise\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Vulnerability research\n\u2022 Exploit development\n\u2022 Patch analysis\n\u2022 Red team / blue team exercises\n\n\u26a0\ufe0f Ethical Notice\nThis content is shared for cybersecurity research and defensive purposes only.\nDo not use this information for illegal activities.\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:03.017151Z"} https://vulnerability.circl.lu/sighting/adcbd77f-e946-40c1-a772-8a11d48db3a2/export Sat, 15 Aug 2026 11:00:03 +0000 https://vulnerability.circl.lu/sighting/c20fa64f-b0e0-4f06-904f-43e4a01b246c/export {"uuid": "c20fa64f-b0e0-4f06-904f-43e4a01b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgzsaaxqz24", "content": "", "creation_timestamp": "2026-03-19T22:17:51.038217Z"} {"uuid": "c20fa64f-b0e0-4f06-904f-43e4a01b246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mhgzsaaxqz24", "content": "", "creation_timestamp": "2026-03-19T22:17:51.038217Z"} https://vulnerability.circl.lu/sighting/c20fa64f-b0e0-4f06-904f-43e4a01b246c/export Thu, 19 Mar 2026 22:17:51 +0000