https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 26 Jul 2026 19:28:34 +0000 https://vulnerability.circl.lu/sighting/f4f12547-3ad0-433c-a0e9-39eee94c7793/export {"uuid": "f4f12547-3ad0-433c-a0e9-39eee94c7793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57308", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrczel3k7n2g", "content": "Apache Syncope patches an SQL injection (CVE-2026-57308) and a privilege escalation flaw (CVE-2026-62183). Update to 4.0.7 or 4.1.2 to stay safe.\n\n#ApacheSyncope #SQLInjection #PrivilegeEscalation #CVE202657308 #CVE202662183 #IdentityManagement #InfoSec #PatchNow", "creation_timestamp": "2026-07-23T14:11:30.447095Z"} {"uuid": "f4f12547-3ad0-433c-a0e9-39eee94c7793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57308", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mrczel3k7n2g", "content": "Apache Syncope patches an SQL injection (CVE-2026-57308) and a privilege escalation flaw (CVE-2026-62183). Update to 4.0.7 or 4.1.2 to stay safe.\n\n#ApacheSyncope #SQLInjection #PrivilegeEscalation #CVE202657308 #CVE202662183 #IdentityManagement #InfoSec #PatchNow", "creation_timestamp": "2026-07-23T14:11:30.447095Z"} https://vulnerability.circl.lu/sighting/f4f12547-3ad0-433c-a0e9-39eee94c7793/export Thu, 23 Jul 2026 14:11:30 +0000 https://vulnerability.circl.lu/sighting/d11f2025-3cd7-4082-b621-a70433035a8b/export {"uuid": "d11f2025-3cd7-4082-b621-a70433035a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57308", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224", "content": "CVE-2026-57308 - apache syncope\nApache Syncope, a user identity management tool, has a security flaw that allows an administrator with proper access to execute unauthorized SQL code. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-21T15:34:05.277727Z"} {"uuid": "d11f2025-3cd7-4082-b621-a70433035a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57308", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr652fqmc224", "content": "CVE-2026-57308 - apache syncope\nApache Syncope, a user identity management tool, has a security flaw that allows an administrator with proper access to execute unauthorized SQL code. This\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#apachesyncope #apachefoundation #CVE #infosec", "creation_timestamp": "2026-07-21T15:34:05.277727Z"} https://vulnerability.circl.lu/sighting/d11f2025-3cd7-4082-b621-a70433035a8b/export Tue, 21 Jul 2026 15:34:05 +0000 https://vulnerability.circl.lu/sighting/393991a9-488c-41b6-b615-4bab3ce5f590/export {"uuid": "393991a9-488c-41b6-b615-4bab3ce5f590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57308", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26", "content": "CVE-2026-57308: Apache Syncope: SQL injection vulnerability in Audit Events search", "creation_timestamp": "2026-07-20T17:37:57.507786Z"} {"uuid": "393991a9-488c-41b6-b615-4bab3ce5f590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57308", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mr3tiydqqx26", "content": "CVE-2026-57308: Apache Syncope: SQL injection vulnerability in Audit Events search", "creation_timestamp": "2026-07-20T17:37:57.507786Z"} https://vulnerability.circl.lu/sighting/393991a9-488c-41b6-b615-4bab3ce5f590/export Mon, 20 Jul 2026 17:37:57 +0000 https://vulnerability.circl.lu/sighting/03af8ad0-6f90-421e-b5e0-9530d790c6f2/export {"uuid": "03af8ad0-6f90-421e-b5e0-9530d790c6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-57309", "content": "", "creation_timestamp": "2026-07-20T16:15:03.572805Z"} {"uuid": "03af8ad0-6f90-421e-b5e0-9530d790c6f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://cert.pl/en/posts/2026/07/CVE-2026-57309", "content": "", "creation_timestamp": "2026-07-20T16:15:03.572805Z"} https://vulnerability.circl.lu/sighting/03af8ad0-6f90-421e-b5e0-9530d790c6f2/export Mon, 20 Jul 2026 16:15:03 +0000 https://vulnerability.circl.lu/sighting/5397c890-a8f4-4475-90a3-96730fd8503e/export {"uuid": "5397c890-a8f4-4475-90a3-96730fd8503e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57309", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr3fomsqr724", "content": "Windu CMS 4.1 hit by CRITICAL Blind SQL Injection (CVE-2026-57309). No patch \u2014 restrict access and monitor for suspicious DB activity. More: https://radar.offseq.com/threat/cve-2026-57309-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-69fa2f89e7c44ad0 #Off...", "creation_timestamp": "2026-07-20T13:30:35.252054Z"} {"uuid": "5397c890-a8f4-4475-90a3-96730fd8503e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57309", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mr3fomsqr724", "content": "Windu CMS 4.1 hit by CRITICAL Blind SQL Injection (CVE-2026-57309). No patch \u2014 restrict access and monitor for suspicious DB activity. More: https://radar.offseq.com/threat/cve-2026-57309-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-69fa2f89e7c44ad0 #Off...", "creation_timestamp": "2026-07-20T13:30:35.252054Z"} https://vulnerability.circl.lu/sighting/5397c890-a8f4-4475-90a3-96730fd8503e/export Mon, 20 Jul 2026 13:30:35 +0000 https://vulnerability.circl.lu/sighting/1861aa8e-ff60-4038-b699-b2c036ea7d54/export {"uuid": "1861aa8e-ff60-4038-b699-b2c036ea7d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57309", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116952546163275877", "content": "CVE-2026-57309 (CRITICAL, CVSS 9.3): Windu CMS 4.1 suffers from a blind SQL injection via HTTP header URL path. No patch yet \u2014 restrict exposed endpoints and monitor for abnormal DB activity. Details: https://radar.offseq.com/threat/cve-2026-57309-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-69fa2f89e7c44ad0 #OffSeq #SQLi #Vuln #CVE202657309", "creation_timestamp": "2026-07-20T13:30:32.957541Z"} {"uuid": "1861aa8e-ff60-4038-b699-b2c036ea7d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-57309", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116952546163275877", "content": "CVE-2026-57309 (CRITICAL, CVSS 9.3): Windu CMS 4.1 suffers from a blind SQL injection via HTTP header URL path. No patch yet \u2014 restrict exposed endpoints and monitor for abnormal DB activity. Details: https://radar.offseq.com/threat/cve-2026-57309-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-69fa2f89e7c44ad0 #OffSeq #SQLi #Vuln #CVE202657309", "creation_timestamp": "2026-07-20T13:30:32.957541Z"} https://vulnerability.circl.lu/sighting/1861aa8e-ff60-4038-b699-b2c036ea7d54/export Mon, 20 Jul 2026 13:30:32 +0000 https://vulnerability.circl.lu/sighting/47326865-d4e6-4628-8d7f-625c45fed36a/export {"uuid": "47326865-d4e6-4628-8d7f-625c45fed36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fkjakgt2x", "content": "CVE-2026-57309 - Blind SQL Injection in Windu CMS\nCVE ID : CVE-2026-57309\n \n Published : July 20, 2026, 12:52 p.m. | 29\u00a0minutes ago\n \n Description : A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL sy...", "creation_timestamp": "2026-07-20T13:28:16.179391Z"} {"uuid": "47326865-d4e6-4628-8d7f-625c45fed36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr3fkjakgt2x", "content": "CVE-2026-57309 - Blind SQL Injection in Windu CMS\nCVE ID : CVE-2026-57309\n \n Published : July 20, 2026, 12:52 p.m. | 29\u00a0minutes ago\n \n Description : A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL sy...", "creation_timestamp": "2026-07-20T13:28:16.179391Z"} https://vulnerability.circl.lu/sighting/47326865-d4e6-4628-8d7f-625c45fed36a/export Mon, 20 Jul 2026 13:28:16 +0000 https://vulnerability.circl.lu/sighting/7c0bc182-ebb7-45ed-b4c1-4a7d7d6d6581/export {"uuid": "7c0bc182-ebb7-45ed-b4c1-4a7d7d6d6581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3fk5onpq2z", "content": "CVE-2026-57309 - windu cms\nWindu CMS versions, including 4.1, are at risk of SQL injection attacks. An attacker can inject malicious SQL code into the URL, potentially stealing sensitive data or disrupting the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#winducms #jcd #CVE #infosec", "creation_timestamp": "2026-07-20T13:28:04.323061Z"} {"uuid": "7c0bc182-ebb7-45ed-b4c1-4a7d7d6d6581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57309", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3fk5onpq2z", "content": "CVE-2026-57309 - windu cms\nWindu CMS versions, including 4.1, are at risk of SQL injection attacks. An attacker can inject malicious SQL code into the URL, potentially stealing sensitive data or disrupting the\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#winducms #jcd #CVE #infosec", "creation_timestamp": "2026-07-20T13:28:04.323061Z"} https://vulnerability.circl.lu/sighting/7c0bc182-ebb7-45ed-b4c1-4a7d7d6d6581/export Mon, 20 Jul 2026 13:28:04 +0000 https://vulnerability.circl.lu/sighting/c2068932-a48b-408b-86ec-5e25ee8a1844/export {"uuid": "c2068932-a48b-408b-86ec-5e25ee8a1844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq254tqfsn2a", "content": "CVE-2026-5730 - IDOR in Idvlabs' Ontime\nCVE ID : CVE-2026-5730\n \n Published : July 7, 2026, 6:45 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploita...", "creation_timestamp": "2026-07-07T07:59:36.603049Z"} {"uuid": "c2068932-a48b-408b-86ec-5e25ee8a1844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5730", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mq254tqfsn2a", "content": "CVE-2026-5730 - IDOR in Idvlabs' Ontime\nCVE ID : CVE-2026-5730\n \n Published : July 7, 2026, 6:45 a.m. | 1\u00a0hour, 2\u00a0minutes ago\n \n Description : Authorization bypass through User-Controlled key vulnerability in Idvlabs Software and Consulting Services Inc. Ontime allows Exploita...", "creation_timestamp": "2026-07-07T07:59:36.603049Z"} https://vulnerability.circl.lu/sighting/c2068932-a48b-408b-86ec-5e25ee8a1844/export Tue, 07 Jul 2026 07:59:36 +0000 https://vulnerability.circl.lu/sighting/8fb6a0b5-2d5c-4eca-aaf5-74fe4fd58a31/export {"uuid": "8fb6a0b5-2d5c-4eca-aaf5-74fe4fd58a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57301", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkdbq6jqu2l", "content": "\ud83d\udccc CVE-2026-57301 - Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with... https://www.cyberhub.blog/cves/CVE-2026-57301", "creation_timestamp": "2026-07-01T01:07:07.256342Z"} {"uuid": "8fb6a0b5-2d5c-4eca-aaf5-74fe4fd58a31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-57301", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpkdbq6jqu2l", "content": "\ud83d\udccc CVE-2026-57301 - Jenkins OWASP ZAP Plugin 1.0.7 and earlier performs build operations on the Jenkins controller rather than the assigned agent, allowing attackers with... https://www.cyberhub.blog/cves/CVE-2026-57301", "creation_timestamp": "2026-07-01T01:07:07.256342Z"} https://vulnerability.circl.lu/sighting/8fb6a0b5-2d5c-4eca-aaf5-74fe4fd58a31/export Wed, 01 Jul 2026 01:07:07 +0000