https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 19 Aug 2026 07:34:03 +0000 https://vulnerability.circl.lu/sighting/0910521b-deb3-41fa-8130-8ed077eb5ffb/export {"uuid": "0910521b-deb3-41fa-8130-8ed077eb5ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-18T00:00:12.486816Z"} {"uuid": "0910521b-deb3-41fa-8130-8ed077eb5ffb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-18T00:00:12.486816Z"} https://vulnerability.circl.lu/sighting/0910521b-deb3-41fa-8130-8ed077eb5ffb/export Tue, 18 Aug 2026 00:00:12 +0000 https://vulnerability.circl.lu/sighting/72b0bd07-69ea-4778-8c24-53f93755a1a7/export {"uuid": "72b0bd07-69ea-4778-8c24-53f93755a1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-18T00:00:12.288159Z"} {"uuid": "72b0bd07-69ea-4778-8c24-53f93755a1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "published-proof-of-concept", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-18T00:00:12.288159Z"} https://vulnerability.circl.lu/sighting/72b0bd07-69ea-4778-8c24-53f93755a1a7/export Tue, 18 Aug 2026 00:00:12 +0000 https://vulnerability.circl.lu/sighting/87188b22-2a54-4bfe-990a-5d4c08e84627/export {"uuid": "87188b22-2a54-4bfe-990a-5d4c08e84627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-17T18:00:04.557898Z"} {"uuid": "87188b22-2a54-4bfe-990a-5d4c08e84627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/2zSHnWnjNO3Na1wVQn9SXZ4BXbp1iBqREE5RdHe5T4MRT7s", "content": "", "creation_timestamp": "2026-08-17T18:00:04.557898Z"} https://vulnerability.circl.lu/sighting/87188b22-2a54-4bfe-990a-5d4c08e84627/export Mon, 17 Aug 2026 18:00:04 +0000 https://vulnerability.circl.lu/sighting/dbe4bca0-0a34-469e-b0fd-39b8b69d271a/export {"uuid": "dbe4bca0-0a34-469e-b0fd-39b8b69d271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-17T18:00:04.239741Z"} {"uuid": "dbe4bca0-0a34-469e-b0fd-39b8b69d271a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "Telegram/V7oTBRUbkXzaHvYy2QQxFpYYbPBlxoSiyiRu3UGCulCLojY", "content": "", "creation_timestamp": "2026-08-17T18:00:04.239741Z"} https://vulnerability.circl.lu/sighting/dbe4bca0-0a34-469e-b0fd-39b8b69d271a/export Mon, 17 Aug 2026 18:00:04 +0000 https://vulnerability.circl.lu/sighting/3b5ef626-b104-43fb-b27c-6e32755448ef/export {"uuid": "3b5ef626-b104-43fb-b27c-6e32755448ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mtbmk2g6m72a", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-74251\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specific...", "creation_timestamp": "2026-08-17T11:39:38.593651Z"} {"uuid": "3b5ef626-b104-43fb-b27c-6e32755448ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cybersecinsight.bsky.social/post/3mtbmk2g6m72a", "content": "\ud83d\udd0d Vulnerability Spotlight | Part 2/3\n\n\u26a0\ufe0f CVE-2026-74251\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attribute) and s[] (specific...", "creation_timestamp": "2026-08-17T11:39:38.593651Z"} https://vulnerability.circl.lu/sighting/3b5ef626-b104-43fb-b27c-6e32755448ef/export Mon, 17 Aug 2026 11:39:38 +0000 https://vulnerability.circl.lu/sighting/560388f1-a436-4a2a-ae0c-a5641b9c302b/export {"uuid": "560388f1-a436-4a2a-ae0c-a5641b9c302b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtapjrrsns2w", "content": "Phoca Cart for Joomla (v5.0.0 \u2013 6.1.16) hit by CRITICAL unauthenticated SQL injection \u2014 full DB at risk. Patch status unknown; check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #Off...", "creation_timestamp": "2026-08-17T03:00:32.031316Z"} {"uuid": "560388f1-a436-4a2a-ae0c-a5641b9c302b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mtapjrrsns2w", "content": "Phoca Cart for Joomla (v5.0.0 \u2013 6.1.16) hit by CRITICAL unauthenticated SQL injection \u2014 full DB at risk. Patch status unknown; check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #Off...", "creation_timestamp": "2026-08-17T03:00:32.031316Z"} https://vulnerability.circl.lu/sighting/560388f1-a436-4a2a-ae0c-a5641b9c302b/export Mon, 17 Aug 2026 03:00:32 +0000 https://vulnerability.circl.lu/sighting/57698fa7-866c-49d1-baf4-2a5ab1007b46/export {"uuid": "57698fa7-866c-49d1-baf4-2a5ab1007b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117108613380665635", "content": "CVE-2026-74251: Phoca Cart (Joomla ext. v5.0.0 \u2013 6.1.16) suffers CRITICAL SQL injection via unauthenticated a[]/s[] params. Full DB extraction possible. Patch status unclear \u2014 check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #OffSeq #SQLInjection #Joomla #Infosec", "creation_timestamp": "2026-08-17T03:00:29.644472Z"} {"uuid": "57698fa7-866c-49d1-baf4-2a5ab1007b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-74251", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117108613380665635", "content": "CVE-2026-74251: Phoca Cart (Joomla ext. v5.0.0 \u2013 6.1.16) suffers CRITICAL SQL injection via unauthenticated a[]/s[] params. Full DB extraction possible. Patch status unclear \u2014 check vendor. https://radar.offseq.com/threat/cve-2026-74251-cwe-89-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection-a5081e610a943a93 #OffSeq #SQLInjection #Joomla #Infosec", "creation_timestamp": "2026-08-17T03:00:29.644472Z"} https://vulnerability.circl.lu/sighting/57698fa7-866c-49d1-baf4-2a5ab1007b46/export Mon, 17 Aug 2026 03:00:29 +0000 https://vulnerability.circl.lu/sighting/a7026b92-4f83-4c25-9cfe-06eb8d250d30/export {"uuid": "a7026b92-4f83-4c25-9cfe-06eb8d250d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/47e5nnaikipyw", "content": "CVE-2026-74251 - Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.16\nCVE ID : CVE-2026-74251\n \n Published : Aug. 16, 2026, 1:16 p.m. | 56\u00a0minutes ago\n \n Description : Joomla Extension - phoca.cz - Unauthenticated SQL inje...", "creation_timestamp": "2026-08-16T15:00:38.308066Z"} {"uuid": "a7026b92-4f83-4c25-9cfe-06eb8d250d30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/47e5nnaikipyw", "content": "CVE-2026-74251 - Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.16\nCVE ID : CVE-2026-74251\n \n Published : Aug. 16, 2026, 1:16 p.m. | 56\u00a0minutes ago\n \n Description : Joomla Extension - phoca.cz - Unauthenticated SQL inje...", "creation_timestamp": "2026-08-16T15:00:38.308066Z"} https://vulnerability.circl.lu/sighting/a7026b92-4f83-4c25-9cfe-06eb8d250d30/export Sun, 16 Aug 2026 15:00:38 +0000 https://vulnerability.circl.lu/sighting/4c4260cc-c65c-4d8f-a725-bdbbccc61b07/export {"uuid": "4c4260cc-c65c-4d8f-a725-bdbbccc61b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt7ftqjdzx25", "content": "Phoca Cart, a Joomla store extension, has a critical flaw (CVE-2026-74251) that lets anyone read the shop's whole database, no login needed.\n\nCustomer records and password hashes are exposed on the public shop page.\n\nAffects 5.0.0 to 6.1.6. Fixed in 6.1.7. Update now.", "creation_timestamp": "2026-08-16T14:34:28.744209Z"} {"uuid": "4c4260cc-c65c-4d8f-a725-bdbbccc61b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt7ftqjdzx25", "content": "Phoca Cart, a Joomla store extension, has a critical flaw (CVE-2026-74251) that lets anyone read the shop's whole database, no login needed.\n\nCustomer records and password hashes are exposed on the public shop page.\n\nAffects 5.0.0 to 6.1.6. Fixed in 6.1.7. Update now.", "creation_timestamp": "2026-08-16T14:34:28.744209Z"} https://vulnerability.circl.lu/sighting/4c4260cc-c65c-4d8f-a725-bdbbccc61b07/export Sun, 16 Aug 2026 14:34:28 +0000 https://vulnerability.circl.lu/sighting/930a5e6a-9e14-4157-94aa-6cb8a4c3c58e/export {"uuid": "930a5e6a-9e14-4157-94aa-6cb8a4c3c58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7ecw4x6623", "content": "\ud83d\udea8 CVE-2026-74251 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.16...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74251\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T14:07:10.073868Z"} {"uuid": "930a5e6a-9e14-4157-94aa-6cb8a4c3c58e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-74251", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mt7ecw4x6623", "content": "\ud83d\udea8 CVE-2026-74251 \u2014 CVSS 9.3 CRITICAL\n\nJoomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.16...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-74251\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-16T14:07:10.073868Z"} https://vulnerability.circl.lu/sighting/930a5e6a-9e14-4157-94aa-6cb8a4c3c58e/export Sun, 16 Aug 2026 14:07:10 +0000