https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 03 Aug 2026 20:46:19 +0000 https://vulnerability.circl.lu/sighting/a08847f9-224d-4ea6-a8b8-42ef4a858307/export {"uuid": "a08847f9-224d-4ea6-a8b8-42ef4a858307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9830\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:42:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:10.397320Z"} {"uuid": "a08847f9-224d-4ea6-a8b8-42ef4a858307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/95407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9830\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:42:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-28T00:00:10.397320Z"} https://vulnerability.circl.lu/sighting/a08847f9-224d-4ea6-a8b8-42ef4a858307/export Tue, 28 Jul 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/bfb271ec-e830-48c5-a74e-8f0b48865210/export {"uuid": "bfb271ec-e830-48c5-a74e-8f0b48865210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "Telegram/MNUQPIGpAGeGg3W_QfZgMMHal6jpwzokF-mfI2PhU7te8xo", "content": "", "creation_timestamp": "2026-07-28T00:00:10.247783Z"} {"uuid": "bfb271ec-e830-48c5-a74e-8f0b48865210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "Telegram/MNUQPIGpAGeGg3W_QfZgMMHal6jpwzokF-mfI2PhU7te8xo", "content": "", "creation_timestamp": "2026-07-28T00:00:10.247783Z"} https://vulnerability.circl.lu/sighting/bfb271ec-e830-48c5-a74e-8f0b48865210/export Tue, 28 Jul 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/d3a6a336-27eb-41c5-bc72-84605ef70c79/export {"uuid": "d3a6a336-27eb-41c5-bc72-84605ef70c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-28T00:00:10.060002Z"} {"uuid": "d3a6a336-27eb-41c5-bc72-84605ef70c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "published-proof-of-concept", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-28T00:00:10.060002Z"} https://vulnerability.circl.lu/sighting/d3a6a336-27eb-41c5-bc72-84605ef70c79/export Tue, 28 Jul 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/623f2e8a-49d6-4501-9326-1b71620177b6/export {"uuid": "623f2e8a-49d6-4501-9326-1b71620177b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-27T21:00:03.659707Z"} {"uuid": "623f2e8a-49d6-4501-9326-1b71620177b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "Telegram/jZonNK9LGM_SvoC2Djs86LRDYxmpyv3NgFItsHIOxESbAXI", "content": "", "creation_timestamp": "2026-07-27T21:00:03.659707Z"} https://vulnerability.circl.lu/sighting/623f2e8a-49d6-4501-9326-1b71620177b6/export Mon, 27 Jul 2026 21:00:03 +0000 https://vulnerability.circl.lu/sighting/c38c4da0-1709-4b3e-8250-4510133cd5dd/export {"uuid": "c38c4da0-1709-4b3e-8250-4510133cd5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "Telegram/MNUQPIGpAGeGg3W_QfZgMMHal6jpwzokF-mfI2PhU7te8xo", "content": "", "creation_timestamp": "2026-07-27T21:00:03.619441Z"} {"uuid": "c38c4da0-1709-4b3e-8250-4510133cd5dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "Telegram/MNUQPIGpAGeGg3W_QfZgMMHal6jpwzokF-mfI2PhU7te8xo", "content": "", "creation_timestamp": "2026-07-27T21:00:03.619441Z"} https://vulnerability.circl.lu/sighting/c38c4da0-1709-4b3e-8250-4510133cd5dd/export Mon, 27 Jul 2026 21:00:03 +0000 https://vulnerability.circl.lu/sighting/ca70addc-b2ab-467f-b764-4537faaf4499/export {"uuid": "ca70addc-b2ab-467f-b764-4537faaf4499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "https://t.me/GithubRedTeam/95407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9830\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:42:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T21:00:03.456513Z"} {"uuid": "ca70addc-b2ab-467f-b764-4537faaf4499", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-9830", "type": "seen", "source": "https://t.me/GithubRedTeam/95407", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-9830\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ChPratik\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-27 16:42:49\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe bookingpress-appointment-booking-pro WordPress plugin before 5.7.3 does not correctly invoke its REST permission callback, leaving every route in one of its API namespaces reachable without authentication and allowing unauthenticated attackers to read customer booking data and modify other users' bookings.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-27T21:00:03.456513Z"} https://vulnerability.circl.lu/sighting/ca70addc-b2ab-467f-b764-4537faaf4499/export Mon, 27 Jul 2026 21:00:03 +0000