<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 17 Aug 2026 11:48:09 +0000</lastBuildDate>
    <item>
      <title>1f593fbd-8bbc-48b5-9712-d80b6a16addc</title>
      <link>https://vulnerability.circl.lu/sighting/1f593fbd-8bbc-48b5-9712-d80b6a16addc/export</link>
      <description>{"uuid": "1f593fbd-8bbc-48b5-9712-d80b6a16addc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "MISP/8e9b3bed-1887-43d9-873a-1ebd13fea7f8", "content": "", "creation_timestamp": "2024-11-14T06:08:53.000000Z"}</description>
      <content:encoded>{"uuid": "1f593fbd-8bbc-48b5-9712-d80b6a16addc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "MISP/8e9b3bed-1887-43d9-873a-1ebd13fea7f8", "content": "", "creation_timestamp": "2024-11-14T06:08:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1f593fbd-8bbc-48b5-9712-d80b6a16addc/export</guid>
      <pubDate>Thu, 14 Nov 2024 06:08:53 +0000</pubDate>
    </item>
    <item>
      <title>1f6403fe-6286-4c4b-bb31-bad0b7322576</title>
      <link>https://vulnerability.circl.lu/sighting/1f6403fe-6286-4c4b-bb31-bad0b7322576/export</link>
      <description>{"uuid": "1f6403fe-6286-4c4b-bb31-bad0b7322576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}</description>
      <content:encoded>{"uuid": "1f6403fe-6286-4c4b-bb31-bad0b7322576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1f6403fe-6286-4c4b-bb31-bad0b7322576/export</guid>
      <pubDate>Tue, 18 Apr 2023 19:18:40 +0000</pubDate>
    </item>
    <item>
      <title>16dfedc2-1c1b-435d-87c7-276d11d20d4f</title>
      <link>https://vulnerability.circl.lu/sighting/16dfedc2-1c1b-435d-87c7-276d11d20d4f/export</link>
      <description>{"uuid": "16dfedc2-1c1b-435d-87c7-276d11d20d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}</description>
      <content:encoded>{"uuid": "16dfedc2-1c1b-435d-87c7-276d11d20d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/16dfedc2-1c1b-435d-87c7-276d11d20d4f/export</guid>
      <pubDate>Tue, 18 Apr 2023 19:18:40 +0000</pubDate>
    </item>
    <item>
      <title>12824446-4c75-4966-bd6e-d3119d5f5688</title>
      <link>https://vulnerability.circl.lu/sighting/12824446-4c75-4966-bd6e-d3119d5f5688/export</link>
      <description>{"uuid": "12824446-4c75-4966-bd6e-d3119d5f5688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}</description>
      <content:encoded>{"uuid": "12824446-4c75-4966-bd6e-d3119d5f5688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "seen", "source": "https://t.me/jokerplstaeen/15957", "content": "In the last month I worked with @joker_plstaeen finding bugs at Webmin, and we were able to register 3 CVEs and 7 more are being registered\n\nCVE-2021-31760\nCVE-2021-31761\nCVE-2021-31762\n\n#admin", "creation_timestamp": "2023-04-18T19:18:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/12824446-4c75-4966-bd6e-d3119d5f5688/export</guid>
      <pubDate>Tue, 18 Apr 2023 19:18:40 +0000</pubDate>
    </item>
    <item>
      <title>417dfbe4-4000-443f-af90-0e6cc68c40dc</title>
      <link>https://vulnerability.circl.lu/sighting/417dfbe4-4000-443f-af90-0e6cc68c40dc/export</link>
      <description>{"uuid": "417dfbe4-4000-443f-af90-0e6cc68c40dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/775", "content": "CVE-2021-31762 Webmin 1.973 CSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31762_Webmin_1.973_CSRF%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T04:42:13.000000Z"}</description>
      <content:encoded>{"uuid": "417dfbe4-4000-443f-af90-0e6cc68c40dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "seen", "source": "https://t.me/pwnwiki_zhchannel/775", "content": "CVE-2021-31762 Webmin 1.973 CSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31762_Webmin_1.973_CSRF%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T04:42:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/417dfbe4-4000-443f-af90-0e6cc68c40dc/export</guid>
      <pubDate>Tue, 21 Sep 2021 04:42:13 +0000</pubDate>
    </item>
    <item>
      <title>2edc1e50-5db2-445c-af9f-bb579607f27c</title>
      <link>https://vulnerability.circl.lu/sighting/2edc1e50-5db2-445c-af9f-bb579607f27c/export</link>
      <description>{"uuid": "2edc1e50-5db2-445c-af9f-bb579607f27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31769", "type": "seen", "source": "https://t.me/cibsecurity/25572", "content": "\u203c CVE-2021-31769 \u203c\n\nMyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\\MyQ\\PHP\\Sessions directory. The \"Select server file\" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as commands to create new .php files) via the Task Scheduler component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-21T14:15:03.000000Z"}</description>
      <content:encoded>{"uuid": "2edc1e50-5db2-445c-af9f-bb579607f27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31769", "type": "seen", "source": "https://t.me/cibsecurity/25572", "content": "\u203c CVE-2021-31769 \u203c\n\nMyQ Server in MyQ X Smart before 8.2 allows remote code execution by unprivileged users because administrative session data can be read in the %PROGRAMFILES%\\MyQ\\PHP\\Sessions directory. The \"Select server file\" feature is only intended for administrators but actually does not require authorization. An attacker can inject arbitrary OS commands (such as commands to create new .php files) via the Task Scheduler component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-21T14:15:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2edc1e50-5db2-445c-af9f-bb579607f27c/export</guid>
      <pubDate>Mon, 21 Jun 2021 14:15:03 +0000</pubDate>
    </item>
    <item>
      <title>de28d793-aca3-4aa7-913a-031f322730bd</title>
      <link>https://vulnerability.circl.lu/sighting/de28d793-aca3-4aa7-913a-031f322730bd/export</link>
      <description>{"uuid": "de28d793-aca3-4aa7-913a-031f322730bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}</description>
      <content:encoded>{"uuid": "de28d793-aca3-4aa7-913a-031f322730bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31760", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/de28d793-aca3-4aa7-913a-031f322730bd/export</guid>
      <pubDate>Sun, 25 Apr 2021 13:43:01 +0000</pubDate>
    </item>
    <item>
      <title>7994918f-a466-42f8-ba1c-24ec1521d448</title>
      <link>https://vulnerability.circl.lu/sighting/7994918f-a466-42f8-ba1c-24ec1521d448/export</link>
      <description>{"uuid": "7994918f-a466-42f8-ba1c-24ec1521d448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}</description>
      <content:encoded>{"uuid": "7994918f-a466-42f8-ba1c-24ec1521d448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7994918f-a466-42f8-ba1c-24ec1521d448/export</guid>
      <pubDate>Sun, 25 Apr 2021 13:43:01 +0000</pubDate>
    </item>
    <item>
      <title>c7563f1f-e406-42ed-8c1e-3a161fcfced2</title>
      <link>https://vulnerability.circl.lu/sighting/c7563f1f-e406-42ed-8c1e-3a161fcfced2/export</link>
      <description>{"uuid": "c7563f1f-e406-42ed-8c1e-3a161fcfced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}</description>
      <content:encoded>{"uuid": "c7563f1f-e406-42ed-8c1e-3a161fcfced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31761", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3207", "content": "CVE-2021-31760/\nCVE-2021-31761/\nCVE-2021-31762:\nExploiting a CSRF/XSS/CSRF attack to get a RCE through the Webmin's running process feature (PoC)\nhttps://github.com/Mesh3l911/CVE-2021-31760\nhttps://github.com/Mesh3l911/CVE-2021-31761\nhttps://github.com/Mesh3l911/CVE-2021-31762", "creation_timestamp": "2021-04-25T13:43:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c7563f1f-e406-42ed-8c1e-3a161fcfced2/export</guid>
      <pubDate>Sun, 25 Apr 2021 13:43:01 +0000</pubDate>
    </item>
    <item>
      <title>da6e921e-6634-42ed-9c5f-c5f12348343d</title>
      <link>https://vulnerability.circl.lu/sighting/da6e921e-6634-42ed-9c5f-c5f12348343d/export</link>
      <description>{"uuid": "da6e921e-6634-42ed-9c5f-c5f12348343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/259", "content": "CVE-2021-31762 Webmin CSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31762_Webmin_CSRF%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-25T10:27:48.000000Z"}</description>
      <content:encoded>{"uuid": "da6e921e-6634-42ed-9c5f-c5f12348343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31762", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/259", "content": "CVE-2021-31762 Webmin CSRF\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-31762_Webmin_CSRF%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-25T10:27:48.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/da6e921e-6634-42ed-9c5f-c5f12348343d/export</guid>
      <pubDate>Sun, 25 Apr 2021 10:27:48 +0000</pubDate>
    </item>
  </channel>
</rss>
