https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 03:44:48 +0000 https://vulnerability.circl.lu/sighting/7fe7f695-baf3-4e00-a75d-76f704ae8e01/export {"uuid": "7fe7f695-baf3-4e00-a75d-76f704ae8e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:12.714544Z"} {"uuid": "7fe7f695-baf3-4e00-a75d-76f704ae8e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-16T00:00:12.714544Z"} https://vulnerability.circl.lu/sighting/7fe7f695-baf3-4e00-a75d-76f704ae8e01/export Wed, 16 Sep 2026 00:00:12 +0000 https://vulnerability.circl.lu/sighting/d753514d-22d1-476f-ade7-d6397c40f5df/export {"uuid": "d753514d-22d1-476f-ade7-d6397c40f5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.422044Z"} {"uuid": "d753514d-22d1-476f-ade7-d6397c40f5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://t.me/GithubRedTeam/102416", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #XSS #CVE #Stored\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-82090-18-Years-All-Versions-CVSS-9.2-CRITICAL-The-Pocket-Forever-Day\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a FUNFACTOR1\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 2 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-15 16:28:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-82090 \u00b7 CVSS 9.2 CRITICAL \u00b7 0-click stored XSS in Mozilla Pocket \u2014 all versions (v0 \u2192 v8.33.0.0) \u00b7 18-year forever-day \u00b7 no patch \u00b7 MITRE published\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T19:00:05.422044Z"} https://vulnerability.circl.lu/sighting/d753514d-22d1-476f-ade7-d6397c40f5df/export Tue, 15 Sep 2026 19:00:05 +0000 https://vulnerability.circl.lu/sighting/8dcc0186-8d03-4dbb-aaed-92212f97af09/export {"uuid": "8dcc0186-8d03-4dbb-aaed-92212f97af09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6oxex4sm2p", "content": "CVE-2026-82090\nThe Pocket application (through version 8.33.0.0) can be tricked into inserting outside content that runs hidden scripts. This could allow an attacker to change what the app shows or does without your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T01:10:05.682945Z"} {"uuid": "8dcc0186-8d03-4dbb-aaed-92212f97af09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mu6oxex4sm2p", "content": "CVE-2026-82090\nThe Pocket application (through version 8.33.0.0) can be tricked into inserting outside content that runs hidden scripts. This could allow an attacker to change what the app shows or does without your\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-29T01:10:05.682945Z"} https://vulnerability.circl.lu/sighting/8dcc0186-8d03-4dbb-aaed-92212f97af09/export Sat, 29 Aug 2026 01:10:05 +0000 https://vulnerability.circl.lu/sighting/1909afc3-db60-4c76-bc8b-7ef4d3097785/export {"uuid": "1909afc3-db60-4c76-bc8b-7ef4d3097785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3", "content": "CVE-2026-82090 - Pocket Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-82090\n \n Published : Aug. 28, 2026, 5:16 a.m. | 51\u00a0minutes ago\n \n Description : Pocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript code can alt...", "creation_timestamp": "2026-08-28T06:27:24.098571Z"} {"uuid": "1909afc3-db60-4c76-bc8b-7ef4d3097785", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gb7bzwqhkfxf3", "content": "CVE-2026-82090 - Pocket Cross-Site Scripting Vulnerability\nCVE ID : CVE-2026-82090\n \n Published : Aug. 28, 2026, 5:16 a.m. | 51\u00a0minutes ago\n \n Description : Pocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript code can alt...", "creation_timestamp": "2026-08-28T06:27:24.098571Z"} https://vulnerability.circl.lu/sighting/1909afc3-db60-4c76-bc8b-7ef4d3097785/export Fri, 28 Aug 2026 06:27:24 +0000 https://vulnerability.circl.lu/sighting/9969de0c-1d61-4e35-b80d-b08677cfd26e/export {"uuid": "9969de0c-1d61-4e35-b80d-b08677cfd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e", "content": "\ud83d\udea8 CVE-2026-82090 \u2014 CVSS 9.2 CRITICAL\n\nPocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82090\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T06:08:14.285800Z"} {"uuid": "9969de0c-1d61-4e35-b80d-b08677cfd26e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-82090", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mu4p5kipnr2e", "content": "\ud83d\udea8 CVE-2026-82090 \u2014 CVSS 9.2 CRITICAL\n\nPocket through 8.33.0.0 allows XSS because \"Save to Pocket\" injects external HTML into the DOM.\u00a0\u00a0JavaScript...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-82090\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-28T06:08:14.285800Z"} https://vulnerability.circl.lu/sighting/9969de0c-1d61-4e35-b80d-b08677cfd26e/export Fri, 28 Aug 2026 06:08:14 +0000