https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 02 Sep 2026 11:01:58 +0000 https://vulnerability.circl.lu/sighting/78dcc14b-c33f-4900-9795-7a27a8ceaab2/export {"uuid": "78dcc14b-c33f-4900-9795-7a27a8ceaab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-02T01:04:21.356770Z"} {"uuid": "78dcc14b-c33f-4900-9795-7a27a8ceaab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-02T01:04:21.356770Z"} https://vulnerability.circl.lu/sighting/78dcc14b-c33f-4900-9795-7a27a8ceaab2/export Wed, 02 Sep 2026 01:04:21 +0000 https://vulnerability.circl.lu/sighting/bb013a90-7002-4027-bf60-d44a3e396c69/export {"uuid": "bb013a90-7002-4027-bf60-d44a3e396c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-01T17:00:36.677669Z"} {"uuid": "bb013a90-7002-4027-bf60-d44a3e396c69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "seen", "source": "https://t.me/cissp/4726", "content": "exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. Ghostscript sandbox bypass (CVE-2021-3781)\nhttps://security.tencent.com/index.php/blog/msg/205\n\nThreat_Research\nContainer Breakouts:\nPart 1 - Access to root directory of the Host\nhttps://blog.nody.cc/posts/container-breakouts-part1\nPart 2 - Privileged Container\nhttps://blog.nody.cc/posts/container-breakouts-part2\nPart 3 - Docker Socket\nhttps://blog.nody.cc/posts/container-breakouts-part3\n\nCloud_Security\nMesh-kridik: performs various security checks\non a Kubernetes cluster\nhttps://github.com/chen-keinan/mesh-kridik#requirements\n\nOffensive_security\nCVE-2021-30920 - CVE-2021-1784 strikes back -\nTCC bypass via mounting\nhttps://theevilbit.github.io/posts/cve_2021_30920", "creation_timestamp": "2026-09-01T17:00:36.677669Z"} https://vulnerability.circl.lu/sighting/bb013a90-7002-4027-bf60-d44a3e396c69/export Tue, 01 Sep 2026 17:00:36 +0000 https://vulnerability.circl.lu/sighting/35c74670-a28b-4bed-9cb1-e4a4f1882f64/export {"uuid": "35c74670-a28b-4bed-9cb1-e4a4f1882f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4649", "content": "#exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. CVE-2021-3781:\nGhostscript sandbox bypass\nhttps://security.tencent.com/index.php/blog/msg/205", "creation_timestamp": "2024-10-04T14:45:29.000000Z"} {"uuid": "35c74670-a28b-4bed-9cb1-e4a4f1882f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28079", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4649", "content": "#exploit\n1. CVE-2021-28079:\nJamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability\nhttps://github.com/g33xter/CVE-2021-28079\n\n2. Silent DOC Exploit for Microsoft Office\nhttps://github.com/attakercyebr/Exploit-doc\n\n3. CVE-2021-3781:\nGhostscript sandbox bypass\nhttps://security.tencent.com/index.php/blog/msg/205", "creation_timestamp": "2024-10-04T14:45:29.000000Z"} https://vulnerability.circl.lu/sighting/35c74670-a28b-4bed-9cb1-e4a4f1882f64/export Fri, 04 Oct 2024 14:45:29 +0000