{"vulnerability": "-074", "sightings": [{"uuid": "00c253cc-cccc-47e9-83be-c5dee5150782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0744", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51257", "content": "", "creation_timestamp": "2023-04-05T00:00:00.000000Z"}, {"uuid": "3cae0be9-e859-431b-b2c1-fca3b070b069", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0743", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43962", "content": "", "creation_timestamp": "2018-02-02T00:00:00.000000Z"}, {"uuid": "8e8a7b8e-f86e-4e04-b6bb-d41e19bb7161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0745", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43470", "content": "", "creation_timestamp": "2018-01-09T00:00:00.000000Z"}, {"uuid": "7d998f53-58bc-425b-a5f5-8f1e36fc4d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0746", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43471", "content": "", "creation_timestamp": "2018-01-09T00:00:00.000000Z"}, {"uuid": "479c079f-93b3-456a-8870-542dcc7587b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0748", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43514", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "ebf30b43-2e6c-45de-a0f7-dd805ff3f3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0749", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43517", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "c25247c4-3d4e-4095-b632-dc4e6ec1ea0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0744", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43446", "content": "", "creation_timestamp": "2018-01-05T00:00:00.000000Z"}, {"uuid": "ba87b352-23d0-4d25-b477-da1683f4ef02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5l5mti2u", "content": "", "creation_timestamp": "2025-01-30T15:24:55.626870Z"}, {"uuid": "f5ba5590-1932-490a-8d20-e624d882af15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5kvogx2g", "content": "", "creation_timestamp": "2025-01-30T15:24:54.559056Z"}, {"uuid": "659808da-7587-4c08-b922-2279e2d0c43e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5kzyev2q", "content": "", "creation_timestamp": "2025-01-30T15:24:55.088174Z"}, {"uuid": "77e8b8da-d01d-418a-9a6d-daef36ced4a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lnpaf2q", "content": "", "creation_timestamp": "2025-01-30T15:24:57.734988Z"}, {"uuid": "35d59d3a-d0ea-4072-9556-e9ff9a089ba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0746", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lqzh52r", "content": "", "creation_timestamp": "2025-01-30T15:24:58.266319Z"}, {"uuid": "911903e8-f7b4-4875-a2ff-bd4a3d57c589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5ludha2i", "content": "", "creation_timestamp": "2025-01-30T15:24:58.759351Z"}, {"uuid": "fe334fd4-6add-4253-8d9e-f43445ccf629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5lxxcp25", "content": "", "creation_timestamp": "2025-01-30T15:24:59.327294Z"}, {"uuid": "f615e64f-6f31-4956-8bc5-0e0024d9c420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5m3ehf2q", "content": "", "creation_timestamp": "2025-01-30T15:24:59.906885Z"}, {"uuid": "bae6fce3-3cc5-48bd-aedc-308ddf12392e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5m6moo2h", "content": "", "creation_timestamp": "2025-01-30T15:25:00.543420Z"}, {"uuid": "67d2c802-c369-4484-94e7-ad9e644a3171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgxs5mgaff2q", "content": "", "creation_timestamp": "2025-01-30T15:25:01.867535Z"}, {"uuid": "5a04871b-e77a-4ef9-9590-0805da6de6f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeajuefg2h", "content": "", "creation_timestamp": "2025-01-30T11:16:00.292405Z"}, {"uuid": "73da5655-e3de-421e-a154-fe2920ca6814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxeamhmyh2f", "content": "", "creation_timestamp": "2025-01-30T11:16:03.109971Z"}, {"uuid": "01112656-e616-4daf-af13-b357ce2de243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917075587379126", "content": "", "creation_timestamp": "2025-01-30T11:30:27.507668Z"}, {"uuid": "34a4db33-a88c-4167-8419-2be6e6c36c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113917075552632233", "content": "", "creation_timestamp": "2025-01-30T11:30:26.929933Z"}, {"uuid": "da8c3be3-927b-4339-92bf-92dedc0fb014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlxtu2s2j", "content": "", "creation_timestamp": "2025-01-30T12:16:05.341824Z"}, {"uuid": "1eeef040-d06b-400e-8dfe-87008eb4973e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0746", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm4k77n2n", "content": "", "creation_timestamp": "2025-01-30T12:16:10.180221Z"}, {"uuid": "d4142a17-c446-4c67-a150-2c2be6734629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlswlhn2n", "content": "", "creation_timestamp": "2025-01-30T12:16:00.378433Z"}, {"uuid": "ff8c5358-431a-4ecd-870c-73bcf40556e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhlvhjlw27", "content": "", "creation_timestamp": "2025-01-30T12:16:02.788687Z"}, {"uuid": "a4dcde7a-5627-4e25-8d0c-e559ad45dd18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm26rjk2j", "content": "", "creation_timestamp": "2025-01-30T12:16:07.873570Z"}, {"uuid": "67259cb2-cc09-4237-93e3-45365e7b3033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxhm6qxgx2b", "content": "", "creation_timestamp": "2025-01-30T12:16:12.572348Z"}, {"uuid": "2e89596e-e968-4a39-ad0f-7997debdceb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113917383559471730", "content": "", "creation_timestamp": "2025-01-30T12:59:36.292881Z"}, {"uuid": "f5ed3c05-27d4-4cb8-8169-37e3d03e82f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "1fa22bb1-f58a-4ed0-8149-fb02e815ae87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113917854232361806", "content": "", "creation_timestamp": "2025-01-30T14:48:28.873217Z"}, {"uuid": "ff35b886-be1d-4b5e-b91c-0af914307634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114119101325685363", "content": "", "creation_timestamp": "2025-03-07T03:48:15.681219Z"}, {"uuid": "5b0c5cfe-d52e-4a58-89b1-09adb4df839f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddpoqfo2s", "content": "", "creation_timestamp": "2025-03-07T05:59:29.861945Z"}, {"uuid": "694a91af-2e9d-420e-9e2a-c627f6d536d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljrddq4pfc2o", "content": "", "creation_timestamp": "2025-03-07T05:59:31.099085Z"}, {"uuid": "120a2480-d11b-4985-a3d5-c3dd62425987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "18359567-2b16-4979-ba75-59e08d4d72df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "b5970860-93c1-491d-bac3-d00a1fcb2c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0746", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lztee5rpkc2a", "content": "", "creation_timestamp": "2025-09-27T16:06:08.214294Z"}, {"uuid": "88fe14c2-6903-4ccb-9bbf-adafd73ec982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0747", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lze6kkcvasq2", "content": "", "creation_timestamp": "2025-09-21T15:12:31.461699Z"}, {"uuid": "6eb83454-e272-42b7-9955-2fbd49c5ca40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrluq2g26", "content": "", "creation_timestamp": "2025-10-16T21:02:40.750644Z"}, {"uuid": "1a3d98f4-59dd-44e0-8096-842f4102e4e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:19.000000Z"}, {"uuid": "47e8981a-f6e1-4b87-aa9a-707bf6f54405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "MISP/f7787455-9994-4047-b6f7-77347597c104", "content": "", "creation_timestamp": "2025-08-26T18:36:20.000000Z"}, {"uuid": "7f9fbaa5-54d5-4d84-a698-67638c859881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "b91b01cd-033d-4460-8c42-8362817c60a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "ba6a5a80-9938-4496-869f-46935a689fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "2dbab668-fb07-4ad1-bfc1-fc93eb3272cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "f7a26c63-3767-4616-b798-228ce3a4a8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "61969248-3c08-4180-95f0-b6ad01eda3b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0745", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meuk7cjbye24", "content": "", "creation_timestamp": "2026-02-15T03:00:32.050621Z"}, {"uuid": "cf0d7d7c-0774-4a8f-ac17-766bda7a8e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0745", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116072410591755680", "content": "", "creation_timestamp": "2026-02-15T03:00:45.874942Z"}, {"uuid": "83b16151-08c0-4372-ac82-5dd25107cf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "ac398f12-3469-4bcf-99a6-2d68cfe7e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0747", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mbwwz6kj3n2g", "content": "", "creation_timestamp": "2026-01-08T21:39:29.010623Z"}, {"uuid": "4f5a2bf0-51d7-4f47-8724-954859b8a65c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0747", "type": "seen", "source": "https://gist.github.com/Darkcrai86/68a1e4235d1b22a604cc96babe17d144", "content": "", "creation_timestamp": "2026-01-09T09:13:32.000000Z"}, {"uuid": "286ca8bf-51a8-4f4e-a174-724ba2fdf59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2008-0747", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/10650", "content": "", "creation_timestamp": "2009-12-25T00:00:00.000000Z"}, {"uuid": "a721914d-dc5f-443a-8071-e2e66e22be02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0741", "type": "seen", "source": "https://gist.github.com/Darkcrai86/67e8682ea1a2bd86b7dfe3375857d64b", "content": "", "creation_timestamp": "2026-01-14T09:14:26.000000Z"}, {"uuid": "1f39e9e2-b366-4496-83c0-2ede9a277147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0741", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcevcnpx3u2q", "content": "", "creation_timestamp": "2026-01-14T10:46:15.619707Z"}, {"uuid": "9dba9c50-7894-4a90-8375-eb219c8b7dec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0745", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35467", "content": "", "creation_timestamp": "2011-03-15T00:00:00.000000Z"}, {"uuid": "f590f494-9bc2-41b2-8550-7651165285d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0740", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35261", "content": "", "creation_timestamp": "2011-01-23T00:00:00.000000Z"}, {"uuid": "974fb007-5afe-4a33-b703-e00679931c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0748", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18419", "content": "", "creation_timestamp": "2012-01-26T00:00:00.000000Z"}, {"uuid": "3ebda7e1-70d5-4544-ba75-0603c0a50be7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0741", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32797", "content": "", "creation_timestamp": "2009-02-10T00:00:00.000000Z"}, {"uuid": "9f6b7f37-5455-4b60-ba8b-715f2e968953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0744", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32817", "content": "", "creation_timestamp": "2009-02-25T00:00:00.000000Z"}, {"uuid": "20867050-1f95-42aa-b63a-50f9030deebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mitrjp4tp22q", "content": "", "creation_timestamp": "2026-04-06T17:19:46.940705Z"}, {"uuid": "f5f9e77e-b45a-43be-8b38-484581581e2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0746", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32775", "content": "", "creation_timestamp": "2009-02-16T00:00:00.000000Z"}, {"uuid": "5c4cf1e3-a53c-440f-abd3-ee3f0ccb6c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0740", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/12334", "content": "", "creation_timestamp": "2010-04-22T00:00:00.000000Z"}, {"uuid": "9e441d49-edfd-4fae-b3f4-0f24f2af630c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-0742", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/26805", "content": "", "creation_timestamp": "2013-07-13T00:00:00.000000Z"}, {"uuid": "aeadb90c-08cb-422c-befb-8d06860119eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0740", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8035", "content": "", "creation_timestamp": "2009-02-10T00:00:00.000000Z"}, {"uuid": "d0c657d0-efdf-4f85-8666-178b1851b501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0744", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/37643", "content": "", "creation_timestamp": "2012-08-27T00:00:00.000000Z"}, {"uuid": "ae1a9a05-a406-4ea8-a151-8d67894c7171", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/81668", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a murrez\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-25 23:14:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-26T00:00:04.000000Z"}, {"uuid": "32b390c9-6d8b-4ee2-ae90-196492fab415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3miuzmkuxzz2r", "content": "", "creation_timestamp": "2026-04-07T05:17:09.572568Z"}, {"uuid": "148ccfad-bd38-4570-9a66-7436ee2a407b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0740", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116361778335158064", "content": "", "creation_timestamp": "2026-04-07T05:30:31.359765Z"}, {"uuid": "5c6572ee-1b8e-480c-80e8-12555f61fc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0740", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3miv2ejndkt27", "content": "", "creation_timestamp": "2026-04-07T05:30:33.352433Z"}, {"uuid": "997e14dd-d6d2-4e41-8ff9-c7382fe9414d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3miv5y6suex27", "content": "", "creation_timestamp": "2026-04-07T06:35:26.134484Z"}, {"uuid": "28e7dc84-6a5d-497e-98b2-d0f63f5900a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mivpheuhrn2q", "content": "", "creation_timestamp": "2026-04-07T11:47:57.506463Z"}, {"uuid": "ff105b58-3ab2-499d-83f8-8e7081d3151b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mix22tsqq327", "content": "", "creation_timestamp": "2026-04-08T00:30:31.411297Z"}, {"uuid": "e5f6f39b-271b-4fb1-a1bd-d46697934c5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/9988", "content": "\u041e\u0434\u0438\u043d POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043b\u0435\u0436\u0438\u0442 PHP-\u0448\u0435\u043b\u043b\n\n\u0411\u0435\u0437 \u043b\u043e\u0433\u0438\u043d\u0430. \u0411\u0435\u0437 \u043f\u0430\u0440\u043e\u043b\u044f. CVE-2026-0740 \u0432 Ninja Forms \u2014 File Uploads: CVSS 9.8, PR:N, UI:N.\n\n\ud83d\udd0d \u0427\u0442\u043e \u0441\u043b\u043e\u043c\u0430\u043d\u043e: \u0444\u0443\u043d\u043a\u0446\u0438\u044f handle_upload \u043d\u0435 \u0432\u0430\u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u0442\u0438\u043f \u0444\u0430\u0439\u043b\u0430. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0448\u043b\u0451\u0442 POST \u043d\u0430 admin-ajax.php \u2014 \u0438 .php-\u0444\u0430\u0439\u043b \u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 wp-content/uploads/. \u041a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0439 CWE-434.\n\n\u26a0\ufe0f \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a \u2014 \u043f\u0440\u0435\u043c\u0438\u0443\u043c-\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435: \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435 \u0438\u0434\u0443\u0442 \u0447\u0435\u0440\u0435\u0437 WordPress.org, \u043d\u0443\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e. \u041f\u0430\u0442\u0447 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.27) \u0432\u044b\u0448\u0435\u043b 19 \u043c\u0430\u0440\u0442\u0430 2026-\u0433\u043e, CVE \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 7 \u0430\u043f\u0440\u0435\u043b\u044f \u2014 \u0442\u0440\u0438 \u043d\u0435\u0434\u0435\u043b\u0438 \u0444\u043e\u0440\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445.\n\n\u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u2014 \u0440\u0430\u0437\u0431\u043e\u0440 kill chain \u043f\u043e MITRE ATT\\&CK: \u043e\u0442 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 WPScan \u0434\u043e \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f DB-credentials \u0438\u0437 wp-config.php, \u043f\u043b\u044e\u0441 detection-\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0438 \u043f\u0430\u0442\u0447-\u0434\u0438\u0444\u0444.\n\nhttps://codeby.net/threads/uyazvimost-ninja-forms-rce-cve-2026-0740-polnyi-razbor-ekspluatatsii-i-zashchity-wordpress.92676/", "creation_timestamp": "2026-04-17T05:02:09.000000Z"}, {"uuid": "3b3a6462-8518-4259-a7fd-ce5e2a2a83b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3miz6wtzjyj2y", "content": "", "creation_timestamp": "2026-04-08T21:03:04.653208Z"}, {"uuid": "5fa6b707-30da-46ba-9ddd-8d34a90e8a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mj2xzbopvh26", "content": "", "creation_timestamp": "2026-04-09T14:04:26.524289Z"}, {"uuid": "f25509da-133d-46db-97ba-955f5a3cda71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mj3zd2biqt27", "content": "", "creation_timestamp": "2026-04-10T00:00:27.945554Z"}, {"uuid": "e899b99f-3623-464e-a05d-41cbd3f4111f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mj5ig6fwrv2x", "content": "", "creation_timestamp": "2026-04-10T14:03:18.680306Z"}, {"uuid": "d2372bcc-9a99-4774-9e20-2ab35bdc75b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mj5r3c3eym2x", "content": "", "creation_timestamp": "2026-04-10T16:38:16.919063Z"}, {"uuid": "bd872da4-5cae-40c2-bad0-a0fe9073d0b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://www.acn.gov.it/portale/w/wordpress-rilevato-sfruttamento-della-cve-2026-0740-nel-plugin-ninja-forms", "content": "", "creation_timestamp": "2026-04-13T05:34:04.000000Z"}, {"uuid": "eb4383bf-933f-4095-8d05-b3a7fcf2fb51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjhkafkddp2f", "content": "", "creation_timestamp": "2026-04-14T14:02:29.628010Z"}, {"uuid": "0959ca05-f356-4171-81c2-9758145a88c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/mysites.guru/post/3mjhkbytrsl2q", "content": "", "creation_timestamp": "2026-04-14T14:03:23.248050Z"}, {"uuid": "142fe34e-70ba-4b09-bcda-8577199dce49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://bsky.app/profile/wordfenceofficial.bsky.social/post/3mjndlief222t", "content": "", "creation_timestamp": "2026-04-16T21:19:35.151242Z"}, {"uuid": "fbee1173-3b14-4fac-b8a3-7210b271c79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://t.me/cvedetector/19774", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0749 - Homey WordPress Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0749 \nPublished : March 7, 2025, 2:15 a.m. | 33\u00a0minutes ago \nDescription : The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T04:03:58.000000Z"}, {"uuid": "a4f5fe4d-3d97-4cb2-b4ef-cbe32fae7413", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "https://t.me/cvedetector/19773", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0748 - Homey WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-0748 \nPublished : March 7, 2025, 2:15 a.m. | 33\u00a0minutes ago \nDescription : The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This is due to missing or incorrect nonce validation on the 'homey_verify_user_manually' function. This makes it possible for unauthenticated attackers to update verify an user via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T04:03:58.000000Z"}, {"uuid": "46d40753-08f4-48e0-b91a-09faf93e1628", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://t.me/true_secator/8079", "content": "Defiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u043c\u0430\u0441\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0442\u043d\u043e\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 Ninja Forms File Uploads \u0434\u043b\u044f WordPress, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0435\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Wordfence \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 3600\u00a0\u0430\u0442\u0430\u043a \u043d\u0430 CVE-2026-0740 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 24 \u0447\u0430\u0441\u0430.\n\nNinja Forms - \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0439 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440 \u0444\u043e\u0440\u043c \u0434\u043b\u044f WordPress \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 600 \u0442\u044b\u0441. \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u0444\u043e\u0440\u043c\u044b \u0431\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0435\u0440\u0435\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u043d\u0438\u044f. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0442\u043e\u043c \u0436\u0435 \u043f\u0430\u043a\u0435\u0442\u0435, \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 90 \u0442\u044b\u0441. \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\nCVE-2026-0740 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 9,8 \u0438\u0437 10 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Ninja Forms File Upload \u0434\u043e 3.3.26 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Wordfence, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u043e\u0432/\u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0438\u043c\u0435\u043d\u0438 \u0444\u0430\u0439\u043b\u0430, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0432\u043a\u043b\u044e\u0447\u0430\u044f PHP-\u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430\u043c\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438.\n\n\u0412 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0442\u0438\u043f\u0430 \u0444\u0430\u0439\u043b\u0430 \u0438\u043b\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0438\u043c\u0435\u043d\u0438 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u043d\u043e \u0438 \u0444\u0430\u0439\u043b\u044b \u0441 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435\u043c .php.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0438\u043c\u0435\u043d \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f, \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u043b\u0435\u0433\u0447\u0430\u0435\u0442 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0435\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0444\u0430\u0439\u043b \u0434\u0430\u0436\u0435 \u0432 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u0412\u0441\u0435 \u044d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043a\u043e\u0434, \u0430 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0443 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u0435\u043a \u0438 \u043f\u043e\u043b\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0430\u0439\u0442\u0430.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0421\u0435\u043b\u0438\u043c\u043e\u043c \u041b\u0430\u043d\u0443\u0430\u0440\u043e\u043c (whattheslime), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 8 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b \u043f\u043e \u043d\u0435\u0439 \u043e\u0442\u0447\u0435\u0442 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a Wordfence.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 Wordfence \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0430\u0432\u0438\u043b \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0434\u043b\u044f \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043f\u043e\u043b\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 3.3.27, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0441 19 \u043c\u0430\u0440\u0442\u0430.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e Wordfence \u0442\u0435\u043f\u0435\u0440\u044c \u0435\u0436\u0435\u0434\u043d\u0435\u0432\u043d\u043e \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0432\u0437\u043b\u043e\u043c\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c Ninja Forms File Upload \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2026-04-08T15:49:34.000000Z"}, {"uuid": "80035ceb-b18b-473e-99cf-92fa1e0a81e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/kFmk3IZ3Z2qzEI0aWgGpXK0TflqqE9Sd4_8Q2OIAfUn3vfM", "content": "", "creation_timestamp": "2026-04-17T07:00:12.000000Z"}, {"uuid": "16a78d17-dc00-42b2-851e-522a5bcd54a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/PccILqNbDdjDYDrDdIeHFnNV8hFt7Dml8Dmmd7IXINWTSDI", "content": "", "creation_timestamp": "2026-04-07T07:15:32.000000Z"}, {"uuid": "e91a5f73-dc4b-44a5-8e98-e842a69c2f7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/-3DL24OhrtcIgo9QG72TD8xQtaEdTWVMF9bFoz5wsaSPnZU", "content": "", "creation_timestamp": "2026-04-08T19:00:26.000000Z"}, {"uuid": "0dbaea5b-e9b9-445e-9ae5-4bb073dec9f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/jQQxeN2mPQPtfMYo_To2hQ-_smSd26JApgUtHwY05JTWW84", "content": "", "creation_timestamp": "2026-04-08T21:00:04.000000Z"}, {"uuid": "9ba4994b-6fa9-4ffb-b6c3-3d447711bcab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "Telegram/WbW5s21pKEBDtIiSv6GpyJP2joIwE1UmbnyPnIaK2uZmw7gS", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "e3847d21-3e43-4433-894e-d273ae5e06f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "Telegram/kK6lmzK_UF0Rhr6IZUgSQL2n6P0B2KjZhbwrC7DHTrrGFzMI", "content": "", "creation_timestamp": "2025-03-08T04:34:55.000000Z"}, {"uuid": "6960398a-0f78-4e52-8bc2-b19deb8972d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2004-0747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1984", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2004-0747\n\ud83d\udd39 Description: Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.\n\ud83d\udccf Published: 2004-09-17T04:00:00\n\ud83d\udccf Modified: 2025-01-16T17:47:15.175Z\n\ud83d\udd17 References:\n1. http://www.novell.com/linux/security/advisories/2004_32_apache2.html\n2. http://www.redhat.com/support/errata/RHSA-2004-463.html\n3. https://exchange.xforce.ibmcloud.com/vulnerabilities/17384\n4. http://www.vupen.com/english/advisories/2009/1233\n5. http://secunia.com/advisories/12540\n6. https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11561\n7. http://secunia.com/advisories/34920\n8. http://www.trustix.org/errata/2004/0047/\n9. http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:096\n10. http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147\n11. http://www.gentoo.org/security/en/glsa/glsa-200409-21.xml\n12. http://www.kb.cert.org/vuls/id/481998\n13. http://securitytracker.com/id?1011303\n14. https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E\n15. https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79%40%3Ccvs.httpd.apache.org%3E\n16. https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc%40%3Ccvs.httpd.apache.org%3E\n17. https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb%40%3Ccvs.httpd.apache.org%3E\n18. https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E\n19. https://lists.apache.org/thread.html/re895fc1736d25c8cf57e102c871613b8aeec9ea26fd8a44e7942b5ab%40%3Ccvs.httpd.apache.org%3E\n20. https://lists.apache.org/thread.html/rd65d8ba68ba17e7deedafbf5bb4899f2ae4dad781d21b931c2941ac3%40%3Ccvs.httpd.apache.org%3E\n21. https://lists.apache.org/thread.html/r2cb985de917e7da0848c440535f65a247754db8b2154a10089e4247b%40%3Ccvs.httpd.apache.org%3E\n22. https://lists.apache.org/thread.html/r9e8622254184645bc963a1d47c5d47f6d5a36d6f080d8d2c43b2b142%40%3Ccvs.httpd.apache.org%3E\n23. https://lists.apache.org/thread.html/r734a07156abf332d5ab27fb91d9d962cacfef4f3681e44056f064fa8%40%3Ccvs.httpd.apache.org%3E\n24. https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E\n25. https://lists.apache.org/thread.html/r8c9983f1172a3415f915ddb7e14de632d2d0c326eb1285755a024165%40%3Ccvs.httpd.apache.org%3E\n26. https://lists.apache.org/thread.html/r5001ecf3d6b2bdd0b732e527654248abb264f08390045d30709a92f6%40%3Ccvs.httpd.apache.org%3E", "creation_timestamp": "2025-01-16T17:55:35.000000Z"}, {"uuid": "1fc8179e-0c2b-4ab4-a740-bb3b74cc25a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3478", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0744\n\ud83d\udd25 CVSS Score: 7.5 (CVSS_V3)\n\ud83d\udd39 Description: an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the parameters of the \"/demos/embedai/pmt_cash_on_delivery/pay\" endpoint.\n\ud83d\udccf Published: 2025-01-30T12:31:19Z\n\ud83d\udccf Modified: 2025-01-30T12:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0744\n2. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai", "creation_timestamp": "2025-01-30T13:11:23.000000Z"}, {"uuid": "3898cb88-660d-4427-b44b-02c4dc6cd3af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0747\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat.\n\ud83d\udccf Published: 2025-01-30T12:31:20Z\n\ud83d\udccf Modified: 2025-01-30T12:31:20Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0747\n2. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai", "creation_timestamp": "2025-01-30T13:11:22.000000Z"}, {"uuid": "ae6fb777-8d15-4756-985c-8fdd7d34d799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0741\n\ud83d\udd25 CVSS Score: 6.0 (CVSS_V3)\n\ud83d\udd39 Description: An Improper Access Control vulnerability has been found in EmbedAI\n\n 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter \"chat_id\" of the POST request \"/embedai/chats/send_message\".\n\ud83d\udccf Published: 2025-01-30T12:31:19Z\n\ud83d\udccf Modified: 2025-01-30T12:31:19Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0741\n2. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-embedai", "creation_timestamp": "2025-01-30T13:11:27.000000Z"}, {"uuid": "388aa7ea-da2a-4184-8f7f-ab0b7bd7e6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5765", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0746\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.\n\ud83d\udccf Published: 2023-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T19:03:17.762Z\n\ud83d\udd17 References:\n1. https://www.incibe-cert.es/en/early-warning/ics-advisories/xss-vulnerability-gigavue-fm", "creation_timestamp": "2025-02-27T19:26:05.000000Z"}, {"uuid": "0065bf9f-5e68-4f84-9fe5-a6bf302f3153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0743", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8692", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0743\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.\n\ud83d\udccf Published: 2023-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T14:52:51.889Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/366cf8bb-19f6-4388-b089-d0a260efd863\n2. https://github.com/answerdev/answer/commit/860b1a3bd8cfaa8827e6e6f50ab1d98fa4c2c816", "creation_timestamp": "2025-03-25T15:24:13.000000Z"}, {"uuid": "1acfa97d-0b8f-4001-b1b9-a71c9ae095de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0749\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.\n\ud83d\udccf Published: 2025-03-07T01:44:53.516Z\n\ud83d\udccf Modified: 2025-03-07T01:44:53.516Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/05f87510-28c3-4ad1-b2be-2408a199cf68?source=cve\n2. https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog", "creation_timestamp": "2025-03-07T02:35:12.000000Z"}, {"uuid": "38fadac2-f7bc-43af-829c-5e166b977225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0748\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This is due to missing or incorrect nonce validation on the 'homey_verify_user_manually' function. This makes it possible for unauthenticated attackers to update verify an user via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-07T01:44:54.459Z\n\ud83d\udccf Modified: 2025-03-07T01:44:54.459Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a35a66c6-2a86-4f6e-b28e-d79e13489a49?source=cve\n2. https://favethemes.zendesk.com/hc/en-us/articles/4407721124884-Changelog", "creation_timestamp": "2025-03-07T02:35:10.000000Z"}, {"uuid": "f39ecf2a-219e-4968-8964-2bb4d32cdd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0741", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8688", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0741\n\ud83d\udd25 CVSS Score: 8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.\n\ud83d\udccf Published: 2023-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T15:10:05.475Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/78233bfa-871d-45e1-815f-dee73e397809\n2. https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad", "creation_timestamp": "2025-03-25T15:24:10.000000Z"}, {"uuid": "ace60951-07b6-4590-b335-82004ecb659a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0740", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0740\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.\n\ud83d\udccf Published: 2023-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T15:17:26.746Z\n\ud83d\udd17 References:\n1. https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad\n2. https://huntr.dev/bounties/802ee76d-fe01-482b-a9a4-34699a7c9110", "creation_timestamp": "2025-03-25T15:23:57.000000Z"}, {"uuid": "66f5529b-a46b-4343-93ed-5bdcac200f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8691", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0742\n\ud83d\udd25 CVSS Score: 8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.\n\ud83d\udccf Published: 2023-02-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T15:02:35.413Z\n\ud83d\udd17 References:\n1. https://github.com/answerdev/answer/commit/c3001de52af91f09c96e701facbce0b9fa0c98ad\n2. https://huntr.dev/bounties/d73a2c03-7035-453b-9c04-c733ace65544", "creation_timestamp": "2025-03-25T15:24:12.000000Z"}, {"uuid": "7bfd4f38-d40f-4e17-bf02-8ba88d3db607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12655", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-0742\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)\n\ud83d\udd39 Description: Memory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.\n\ud83d\udccf Published: 2022-03-18T11:20:11.000Z\n\ud83d\udccf Modified: 2025-04-21T13:55:10.245Z\n\ud83d\udd17 References:\n1. https://www.openwall.com/lists/oss-security/2022/03/15/3\n2. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2d3916f3189172d5c69d33065c3c21119fe539fc\n3. https://security.netapp.com/advisory/ntap-20220425-0001/", "creation_timestamp": "2025-04-21T14:02:14.000000Z"}, {"uuid": "8881c87d-79f9-4cd7-9ba5-8c65b7200213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/bj8doEkkdNqHpfVQfl8gvA4415dyF2kRdOr9jMxstG-0IPA", "content": "", "creation_timestamp": "2026-04-17T15:00:06.000000Z"}, {"uuid": "1c2ccf48-55a5-4a32-a356-befe76f6fe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/kld9yLBbS6fzFNytGTSDXwsTRi8Qoep-LDw8M-oA9J472Qs", "content": "", "creation_timestamp": "2026-04-26T03:00:05.000000Z"}, {"uuid": "1abea86f-5e9a-4ab8-b1e1-7c4a05b9b6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox < 122 and Thunderbird < 115.7.\n\ud83d\udccf Published: 2024-01-23T13:48:17.500Z\n\ud83d\udccf Modified: 2025-05-22T17:32:22.221Z\n\ud83d\udd17 References:\n1. https://bugzilla.mozilla.org/show_bug.cgi?id=1813463\n2. https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html\n3. https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html\n4. https://www.mozilla.org/security/advisories/mfsa2024-01/\n5. https://www.mozilla.org/security/advisories/mfsa2024-04/", "creation_timestamp": "2025-05-22T17:43:37.000000Z"}, {"uuid": "5d5bc36e-803e-4658-8ee5-de98b0f24567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0748", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18082", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0748\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A compromised content process could have updated the document URI. This could have allowed an attacker to set an arbitrary URI in the address bar or history. This vulnerability affects Firefox < 122.\n\ud83d\udccf Published: 2024-01-23T13:48:21.814Z\n\ud83d\udccf Modified: 2025-06-11T15:15:11.112Z\n\ud83d\udd17 References:\n1. https://bugzilla.mozilla.org/show_bug.cgi?id=1783504\n2. https://www.mozilla.org/security/advisories/mfsa2024-01/", "creation_timestamp": "2025-06-11T15:31:59.000000Z"}, {"uuid": "03ccbbb9-0b88-4523-8e16-be7a7c477007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/3889", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2024-03-25T11:49:23.000000Z"}, {"uuid": "58a85841-f19d-4266-8741-511891562923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0740", "type": "seen", "source": "https://t.me/cvedetector/16765", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0740 - EmbedAI Chat Message Data Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-0740 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI  \n  \n 2.1 and below. This vulnerability allows an authenticated attacker to obtain chat messages belonging to other users by changing the \u201cCHAT_ID\u201d of the endpoint \"/embedai/chats/load_messages?chat_id=\". \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:03.000000Z"}, {"uuid": "6beda6ae-44f2-4296-b9be-addc26ba7322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0741", "type": "seen", "source": "https://t.me/cvedetector/16766", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0741 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0741 \nPublished : Jan. 30, 2025, 11:15 a.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI  \n  \n 2.1 and below. This vulnerability allows an authenticated attacker to write messages into other users chat by changing the parameter \"chat_id\" of the POST request \"/embedai/chats/send_message\". \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:07.000000Z"}, {"uuid": "9a9152d1-29e7-4c4d-8fc1-84d946e87712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0745", "type": "seen", "source": "https://t.me/cvedetector/16761", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0745 - EmbedAI Unauthorized DB Backup Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-0745 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain the backups of the database by requesting the \"/embedai/app/uploads/database/\" endpoint. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:16:00.000000Z"}, {"uuid": "a8d46fb2-dfa1-4325-9d92-15619d9b274c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0744", "type": "seen", "source": "https://t.me/cvedetector/16760", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0744 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0744 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : an Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker change his subscription plan without paying by making a POST request changing the parameters of the \"/demos/embedai/pmt_cash_on_delivery/pay\" endpoint. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:55.000000Z"}, {"uuid": "194baea2-2217-4d19-9b74-e29281e7a5bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0743", "type": "seen", "source": "https://t.me/cvedetector/16759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0743 - EmbedAI Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0743 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to leverage the endpoint \"/embedai/visits/show/\" to obtain information about the visits made by other users. The information provided by this endpoint includes IP address, userAgent and location of the user that visited the web page. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:55.000000Z"}, {"uuid": "7f6407ec-f249-4bcf-bf94-e3cd2552cafb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0742", "type": "seen", "source": "https://t.me/cvedetector/16758", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0742 - EmbedAI Improper Access Control Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0742 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the \"FILE_ID\" of the endpoint \"/embedai/files/show/\". \nSeverity: 5.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:54.000000Z"}, {"uuid": "d27a6af5-1d1f-4a9f-967c-a38f36cabfd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0747", "type": "seen", "source": "https://t.me/cvedetector/16757", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0747 - EmbedAI Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-0747 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : A Stored Cross-Site Scripting vulnerability has been found in EmbedAI. This vulnerability allows an authenticated attacker to inject a malicious JavaScript code into a message that will be executed when a user opens the chat. \nSeverity: 8.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:53.000000Z"}, {"uuid": "713ee795-fed7-4b20-aa55-3940a2ce37d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0746", "type": "seen", "source": "https://t.me/cvedetector/16756", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0746 - EmbedAI Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0746 \nPublished : Jan. 30, 2025, 12:15 p.m. | 39\u00a0minutes ago \nDescription : A Reflected Cross-Site Scripting vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to craft a malicious URL leveraging the\"/embedai/users/show/\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T14:15:52.000000Z"}, {"uuid": "b0b7e0e4-b59f-4368-8237-c88dc719d27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "Telegram/HKj6TR4_hMohrGsEUcNFD_ijNGdim3MCZhggfzha3EYtXw", "content": "", "creation_timestamp": "2024-03-25T14:38:09.000000Z"}, {"uuid": "fbfface1-6df8-4cf7-8e06-a02a6e9d0c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0749", "type": "seen", "source": "Telegram/o17PDMXjXIroLAPLhX2CBJQu_xPemCZ1DH0KPyVxvTfNtfp_", "content": "", "creation_timestamp": "2025-03-02T11:44:20.000000Z"}, {"uuid": "ed51ffd8-1df1-45fe-8b61-55c7a5069976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/4400", "content": "roaches to define what a 'good fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources.\n\nThe list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.\nCVE program credit CVE-2007-3641 libarchive OUSPG CVE-2007-3644 libarchive OUSPG CVE-2007-3645 libarchive OUSPG CVE-2008-1372 bzip2 OUSPG CVE-2008-1387 ClamAV OUSPG CVE-2008-1412 F-Secure OUSPG CVE-2008-1837 ClamAV OUSPG CVE-2008-6536 7-zip OUSPG CVE-2008-6903 Sophos Anti-Virus OUSPG CVE-2010-0001 Gzip integer underflow in unlzw CVE-2010-0192 Acroread OUSPG CVE-2010-1205 libpng OUSPG CVE-2010-1410 Webkit OUSPG CVE-2010-1415 Webkit OUSPG CVE-2010-1793 Webkit OUSPG CVE-2010-2065 libtiff found by CERT-FI CVE-2010-2443 libtiff found by CERT-FI CVE-2010-2597 libtiff found by CERT-FI CVE-2010-2482 libtiff found by CERT-FI CVE-2011-0522 VLC found by Harry Sintonen CVE-2011-0181 Apple ImageIO found by Harry Sintonen CVE-2011-0198 Apple Type Services found by Harry Sintonen CVE-2011-0205 Apple ImageIO found by Harry Sintonen CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri CVE-2011-1186 Chrome OUSPG CVE-2011-1434 Chrome OUSPG CVE-2011-2348 Chrome OUSPG CVE-2011-2804 Chrome/pdf OUSPG CVE-2011-2830 Chrome/pdf OUSPG CVE-2011-2839 Chrome/pdf OUSPG CVE-2011-2861 Chrome/pdf OUSPG CVE-2011-3146 librsvg found by Sauli Pahlman CVE-2011-3654 Mozilla Firefox OUSPG CVE-2011-3892 Theora OUSPG CVE-2011-3893 Chrome OUSPG CVE-2011-3895 FFmpeg OUSPG CVE-2011-3957 Chrome OUSPG CVE-2011-3959 Chrome OUSPG CVE-2011-3960 Chrome OUSPG CVE-2011-3962 Chrome OUSPG CVE-2011-3966 Chrome OUSPG CVE-2011-3970 libxslt OUSPG CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-0469 Mozilla Firefox OUSPG CVE-2012-0470 Mozilla Firefox OUSPG CVE-2012-0457 Mozilla Firefox OUSPG CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2849 Chrome/GIF OUSPG CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-4922 tor found by the Tor project CVE-2012-5108 Chrome OUSPG via NodeFuzz CVE-2012-2887 Chrome OUSPG via NodeFuzz CVE-2012-5120 Chrome OUSPG via NodeFuzz CVE-2012-5121 Chrome OUSPG via NodeFuzz CVE-2012-5145 Chrome OUSPG via NodeFuzz CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-1691 Mozilla Firefox OUSPG CVE-2013-1708 Mozilla Firefox OUSPG CVE-2013-4082 Wireshark found by cons0ul CVE-2013-1732 Mozilla Firefox OUSPG CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3669 PHP CVE-2014-3668 PHP CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3707 cURL Symeon Paraschoudis CVE-2014-7933 Chrome OUSPG CVE-2015-0797 Mozilla Firefox OUSPG CVE-2015-0813 Mozilla Firefox OUSPG CVE-2015-1220 Chrome OUSPG CVE-2015-1224 Chrome OUSPG CVE-2015-2819 Sybase SQL vah_13 (ERPScan) CVE-2015-2820 SAP Afaria vah_13 (ERPScan) CVE-2015-7091 Apple QuickTime Pedro Ribeiro (pedrib@gmail.com) CVE-2015-8330 SAP PCo agent Mathieu G[...]", "creation_timestamp": "2024-03-25T14:38:09.000000Z"}, {"uuid": "8735f5ab-1a8e-44cf-8613-728738ee3d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/tengkorakcybercrewz/810", "content": "roaches to define what a 'good fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources.\n\nThe list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.\nCVE program credit CVE-2007-3641 libarchive OUSPG CVE-2007-3644 libarchive OUSPG CVE-2007-3645 libarchive OUSPG CVE-2008-1372 bzip2 OUSPG CVE-2008-1387 ClamAV OUSPG CVE-2008-1412 F-Secure OUSPG CVE-2008-1837 ClamAV OUSPG CVE-2008-6536 7-zip OUSPG CVE-2008-6903 Sophos Anti-Virus OUSPG CVE-2010-0001 Gzip integer underflow in unlzw CVE-2010-0192 Acroread OUSPG CVE-2010-1205 libpng OUSPG CVE-2010-1410 Webkit OUSPG CVE-2010-1415 Webkit OUSPG CVE-2010-1793 Webkit OUSPG CVE-2010-2065 libtiff found by CERT-FI CVE-2010-2443 libtiff found by CERT-FI CVE-2010-2597 libtiff found by CERT-FI CVE-2010-2482 libtiff found by CERT-FI CVE-2011-0522 VLC found by Harry Sintonen CVE-2011-0181 Apple ImageIO found by Harry Sintonen CVE-2011-0198 Apple Type Services found by Harry Sintonen CVE-2011-0205 Apple ImageIO found by Harry Sintonen CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri CVE-2011-1186 Chrome OUSPG CVE-2011-1434 Chrome OUSPG CVE-2011-2348 Chrome OUSPG CVE-2011-2804 Chrome/pdf OUSPG CVE-2011-2830 Chrome/pdf OUSPG CVE-2011-2839 Chrome/pdf OUSPG CVE-2011-2861 Chrome/pdf OUSPG CVE-2011-3146 librsvg found by Sauli Pahlman CVE-2011-3654 Mozilla Firefox OUSPG CVE-2011-3892 Theora OUSPG CVE-2011-3893 Chrome OUSPG CVE-2011-3895 FFmpeg OUSPG CVE-2011-3957 Chrome OUSPG CVE-2011-3959 Chrome OUSPG CVE-2011-3960 Chrome OUSPG CVE-2011-3962 Chrome OUSPG CVE-2011-3966 Chrome OUSPG CVE-2011-3970 libxslt OUSPG CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-0469 Mozilla Firefox OUSPG CVE-2012-0470 Mozilla Firefox OUSPG CVE-2012-0457 Mozilla Firefox OUSPG CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2849 Chrome/GIF OUSPG CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri CVE-2012-4922 tor found by the Tor project CVE-2012-5108 Chrome OUSPG via NodeFuzz CVE-2012-2887 Chrome OUSPG via NodeFuzz CVE-2012-5120 Chrome OUSPG via NodeFuzz CVE-2012-5121 Chrome OUSPG via NodeFuzz CVE-2012-5145 Chrome OUSPG via NodeFuzz CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz CVE-2013-1691 Mozilla Firefox OUSPG CVE-2013-1708 Mozilla Firefox OUSPG CVE-2013-4082 Wireshark found by cons0ul CVE-2013-1732 Mozilla Firefox OUSPG CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3669 PHP CVE-2014-3668 PHP CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com) CVE-2014-3707 cURL Symeon Paraschoudis CVE-2014-7933 Chrome OUSPG CVE-2015-0797 Mozilla Firefox OUSPG CVE-2015-0813 Mozilla Firefox OUSPG CVE-2015-1220 Chrome OUSPG CVE-2015-1224 Chrome OUSPG CVE-2015-2819 Sybase SQL vah_13 (ERPScan) CVE-2015-2820 SAP Afaria vah_13 (ERPScan) CVE-2015-7091 Apple QuickTime Pedro Ribeiro (pedrib@gmail.com) CVE-2015-8330 SAP PCo agent Mathieu G[...]", "creation_timestamp": "2024-03-25T14:38:09.000000Z"}, {"uuid": "06b9925e-fa09-4b4d-8c5c-8866c258ca29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0749", "type": "seen", "source": "Telegram/rDwGYm_YlfffaArRRWY262eYU245nTmzaz50xTQLFqY_c5s", "content": "", "creation_timestamp": "2025-03-07T04:01:04.000000Z"}, {"uuid": "c25c5543-b528-4e39-8699-c8c6da40c570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0742", "type": "seen", "source": "https://t.me/ctinow/186818", "content": "https://ift.tt/ei62I93\nCVE-2024-0742 | Mozilla Thunderbird up to 115.6 Browser Prompt unknown vulnerability (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:11:06.000000Z"}, {"uuid": "c3d235ef-1a20-400c-9084-bd87a2c63da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0749", "type": "seen", "source": "https://t.me/ctinow/186822", "content": "https://ift.tt/IDKt9Mr\nCVE-2024-0749 | Mozilla /Thunderbird about Dialog clickjacking", "creation_timestamp": "2024-02-17T09:11:10.000000Z"}, {"uuid": "b103aa53-acd6-44ce-a737-1255d596a5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0749", "type": "seen", "source": "https://t.me/ctinow/186821", "content": "https://ift.tt/qKDhcGC\nCVE-2024-0749 | Mozilla Firefox about Dialog clickjacking", "creation_timestamp": "2024-02-17T09:11:09.000000Z"}, {"uuid": "ac093412-3746-4147-8d96-77aab4c83d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0747", "type": "seen", "source": "https://t.me/ctinow/186820", "content": "https://ift.tt/dDhwvti\nCVE-2024-0747 | Mozilla Thunderbird up to 115.6 iFrame improper restriction of rendered ui layers (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:11:08.000000Z"}, {"uuid": "3e9c6109-acd5-42ce-9d43-9d5be7324d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0747", "type": "seen", "source": "https://t.me/ctinow/186819", "content": "https://ift.tt/qjzyriJ\nCVE-2024-0747 | Mozilla Firefox up to 115.6 iFrame improper restriction of rendered ui layers (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:11:07.000000Z"}, {"uuid": "109c6ac9-8eaf-4c6e-91a3-77a97f6541f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0743", "type": "seen", "source": "https://t.me/ctinow/186842", "content": "https://ift.tt/YU3Xrjf\nCVE-2024-0743 | Mozilla Firefox up to 121 TLS Handshake denial of service", "creation_timestamp": "2024-02-17T09:41:42.000000Z"}, {"uuid": "780e991e-274d-46a0-9c20-ffd193742577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0746", "type": "seen", "source": "https://t.me/ctinow/186841", "content": "https://ift.tt/cSixXwL\nCVE-2024-0746 | Mozilla Thunderbird up to 115.6 on Linux Print Preview Dialog denial of service (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:41:40.000000Z"}, {"uuid": "99ab21fc-5d51-442c-a8e2-1b97d86607f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0746", "type": "seen", "source": "https://t.me/ctinow/186824", "content": "https://ift.tt/0fLk1Fe\nCVE-2024-0746 | Mozilla Firefox up to 115.6 on Linux Print Preview Dialog denial of service (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:11:12.000000Z"}, {"uuid": "f3f905ca-f289-4c94-b609-957c788b33d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0744", "type": "seen", "source": "https://t.me/ctinow/186823", "content": "https://ift.tt/Jzy0HBk\nCVE-2024-0744 | Mozilla Firefox up to 121 JIT Code null pointer dereference", "creation_timestamp": "2024-02-17T09:11:11.000000Z"}, {"uuid": "6caf61c0-e10d-447b-a838-a37efa77d90c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0742", "type": "seen", "source": "https://t.me/ctinow/186814", "content": "https://ift.tt/Pa7hdMl\nCVE-2024-0742 | Mozilla Firefox up to 115.6 Browser Prompt unknown vulnerability (DLA 3720-1)", "creation_timestamp": "2024-02-17T08:41:38.000000Z"}, {"uuid": "f113dfa6-ab9d-48d2-9ef0-a7d6c0d48294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0741", "type": "seen", "source": "https://t.me/ctinow/186813", "content": "https://ift.tt/f6Chzny\nCVE-2024-0741 | Mozilla Thunderbird ANGLE out-of-bounds write (DLA 3720-1)", "creation_timestamp": "2024-02-17T08:41:36.000000Z"}, {"uuid": "6768a887-a722-405e-aaef-984d42dbb464", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0741", "type": "seen", "source": "https://t.me/ctinow/186812", "content": "https://ift.tt/DbWqRe0\nCVE-2024-0741 | Mozilla Firefox ANGLE out-of-bounds write (DLA 3720-1)", "creation_timestamp": "2024-02-17T08:41:35.000000Z"}, {"uuid": "b01ec6cd-8dfc-45dc-a522-11542f95394e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0748", "type": "seen", "source": "https://t.me/ctinow/186811", "content": "https://ift.tt/UdDIj4b\nCVE-2024-0748 | Mozilla Firefox up to 121 Document URI clickjacking", "creation_timestamp": "2024-02-17T08:41:34.000000Z"}, {"uuid": "f8be115e-118a-4322-bbdf-ef140752d9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0745", "type": "seen", "source": "https://t.me/ctinow/186843", "content": "https://ift.tt/cr5hi6G\nCVE-2024-0745 | Mozilla Firefox up to 121 WebAudio stack-based overflow", "creation_timestamp": "2024-02-17T09:41:43.000000Z"}, {"uuid": "ddfcb679-7f27-43d9-831f-ea7113533ebc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0749", "type": "seen", "source": "https://t.me/ctinow/177401", "content": "https://ift.tt/NdWhn8g\nCVE-2010-0749 | transmission up to 1.91 Endgame memory corruption (ID 1242)", "creation_timestamp": "2024-02-01T09:06:59.000000Z"}, {"uuid": "5181f319-92e5-4ca9-90bb-688fe35dc85b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0748", "type": "seen", "source": "https://t.me/ctinow/177400", "content": "https://ift.tt/Fies0jY\nCVE-2010-0748 | transmission up to 1.91 Magnet Link Argument input validation (ID 2965 / Nessus ID 45463)", "creation_timestamp": "2024-02-01T09:06:58.000000Z"}, {"uuid": "fb332c4a-b5c6-4ce5-ad1f-14f3f842cc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0749", "type": "seen", "source": "https://t.me/ctinow/173677", "content": "https://ift.tt/WsFJoa8\nCVE-2024-0749", "creation_timestamp": "2024-01-25T18:46:37.000000Z"}, {"uuid": "26a08fcf-c96a-4c5a-b597-5f049dba1213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0743", "type": "seen", "source": "https://t.me/ctinow/173727", "content": "https://ift.tt/CbPpMYO\nCVE-2024-0743", "creation_timestamp": "2024-01-25T19:31:49.000000Z"}, {"uuid": "9e6200cd-a9bf-480c-878d-6bd294742b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0744", "type": "seen", "source": "https://t.me/ctinow/173726", "content": "https://ift.tt/jwDOFE2\nCVE-2024-0744", "creation_timestamp": "2024-01-25T19:31:49.000000Z"}, {"uuid": "cfea50b1-7725-4896-af73-57a1d24237f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0745", "type": "seen", "source": "https://t.me/ctinow/173725", "content": "https://ift.tt/JNG9d87\nCVE-2024-0745", "creation_timestamp": "2024-01-25T19:31:48.000000Z"}, {"uuid": "72a3d5ff-0202-4ab1-8910-a6bf7bdc6025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0746", "type": "seen", "source": "https://t.me/ctinow/173679", "content": "https://ift.tt/cVyQji6\nCVE-2024-0746", "creation_timestamp": "2024-01-25T18:46:39.000000Z"}, {"uuid": "787b71cb-60a2-4918-b2f7-c558924366b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0747", "type": "seen", "source": "https://t.me/ctinow/173678", "content": "https://ift.tt/VtszM1O\nCVE-2024-0747", "creation_timestamp": "2024-01-25T18:46:38.000000Z"}, {"uuid": "d3557e45-e395-4e6b-8730-d219aeafcd63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0748", "type": "seen", "source": "https://t.me/ctinow/173724", "content": "https://ift.tt/hUmLsnO\nCVE-2024-0748", "creation_timestamp": "2024-01-25T19:31:46.000000Z"}, {"uuid": "e38a8594-42f2-42ce-af26-658873394516", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0741", "type": "seen", "source": "https://t.me/ctinow/173681", "content": "https://ift.tt/U2vXLVx\nCVE-2024-0741", "creation_timestamp": "2024-01-25T18:46:42.000000Z"}, {"uuid": "c642f667-04f7-4244-8c16-0ed55c4c81da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0742", "type": "seen", "source": "https://t.me/ctinow/173680", "content": "https://ift.tt/nj2Rd6F\nCVE-2024-0742", "creation_timestamp": "2024-01-25T18:46:40.000000Z"}, {"uuid": "4d8a513b-7df9-416d-b9bf-80dace6dd256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0741", "type": "seen", "source": "https://t.me/ctinow/172030", "content": "https://ift.tt/Ix2gVPK\nCVE-2024-0741", "creation_timestamp": "2024-01-23T15:26:46.000000Z"}, {"uuid": "85d61f74-9a80-4d05-b7e9-ee62b21cc04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0743", "type": "seen", "source": "https://t.me/ctinow/172032", "content": "https://ift.tt/HfZR5K3\nCVE-2024-0743", "creation_timestamp": "2024-01-23T15:26:51.000000Z"}, {"uuid": "5e529227-ef9c-40d3-9e0d-b27551c7db06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0742", "type": "seen", "source": "https://t.me/ctinow/172031", "content": "https://ift.tt/7tDknTK\nCVE-2024-0742", "creation_timestamp": "2024-01-23T15:26:47.000000Z"}, {"uuid": "8df3404e-3301-49d2-b284-367ce4354e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0744", "type": "seen", "source": "https://t.me/ctinow/172033", "content": "https://ift.tt/BnIoKEJ\nCVE-2024-0744", "creation_timestamp": "2024-01-23T15:26:52.000000Z"}, {"uuid": "58c8c353-72af-40e0-91ee-bb86d46b2538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0749", "type": "seen", "source": "https://t.me/ctinow/172038", "content": "https://ift.tt/LFJ90Yo\nCVE-2024-0749", "creation_timestamp": "2024-01-23T15:26:59.000000Z"}, {"uuid": "121d32b5-9045-4392-9b05-dc45fe0bab57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0748", "type": "seen", "source": "https://t.me/ctinow/172037", "content": "https://ift.tt/YEzBA3b\nCVE-2024-0748", "creation_timestamp": "2024-01-23T15:26:59.000000Z"}, {"uuid": "fb43a789-481f-48c8-a441-9bce705fa70b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0747", "type": "seen", "source": "https://t.me/ctinow/172036", "content": "https://ift.tt/ngJcCqZ\nCVE-2024-0747", "creation_timestamp": "2024-01-23T15:26:55.000000Z"}, {"uuid": "cab90f9e-6644-4571-8294-93f3638fc0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0746", "type": "seen", "source": "https://t.me/ctinow/172035", "content": "https://ift.tt/3Nv5gKM\nCVE-2024-0746", "creation_timestamp": "2024-01-23T15:26:54.000000Z"}, {"uuid": "500fd620-8c5a-4ff9-ab7f-08104d404408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0745", "type": "seen", "source": "https://t.me/ctinow/172034", "content": "https://ift.tt/hED1zuF\nCVE-2024-0745", "creation_timestamp": "2024-01-23T15:26:53.000000Z"}, {"uuid": "0dee6839-48e2-4b86-b01c-60b38985939b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0749", "type": "seen", "source": "https://t.me/cibsecurity/59911", "content": "\u203c CVE-2023-0749 \u203c\n\nThe Ocean Extra WordPress plugin before 2.1.3 does not ensure that the template to be loaded via a shortcode is actually a template, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, such as draft, private or even password protected ones.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:13.000000Z"}, {"uuid": "f3cd99d7-7432-4a38-9f3a-5492b6cf5c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0746", "type": "seen", "source": "https://t.me/cibsecurity/59793", "content": "\u203c CVE-2023-0746 \u203c\n\nThe help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inserting malicious JavaScript code into the URI, that could lead to a Reflected Cross site Scripting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-10T18:21:12.000000Z"}, {"uuid": "6c68f073-471d-43b4-a1b5-f56f656abba8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0744", "type": "seen", "source": "https://t.me/cibsecurity/57758", "content": "\u203c CVE-2023-0744 \u203c\n\nImproper Access Control in GitHub repository answerdev/answer prior to 1.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T12:24:59.000000Z"}, {"uuid": "00b61515-a4c9-4e06-8360-28543b36203a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0740", "type": "seen", "source": "https://t.me/cibsecurity/57757", "content": "\u203c CVE-2023-0740 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T12:24:58.000000Z"}, {"uuid": "482f0996-482e-426b-b683-118c98de1525", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0743", "type": "seen", "source": "https://t.me/cibsecurity/57760", "content": "\u203c CVE-2023-0743 \u203c\n\nCross-site Scripting (XSS) - Generic in GitHub repository answerdev/answer prior to 1.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T12:32:26.000000Z"}, {"uuid": "4635fa25-40b4-4f49-a5e8-729765540b86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0741", "type": "seen", "source": "https://t.me/cibsecurity/57755", "content": "\u203c CVE-2023-0741 \u203c\n\nCross-site Scripting (XSS) - DOM in GitHub repository answerdev/answer prior to 1.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T12:24:56.000000Z"}, {"uuid": "01292ff8-789c-4a5d-ab9a-981c6ef3f5f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0747", "type": "seen", "source": "https://t.me/cibsecurity/57769", "content": "\u203c CVE-2023-0747 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T16:24:58.000000Z"}, {"uuid": "b12328b6-9a0d-4b19-baac-be3f4dd080d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0742", "type": "seen", "source": "https://t.me/cibsecurity/57754", "content": "\u203c CVE-2023-0742 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T12:24:56.000000Z"}, {"uuid": "f2a91ba7-01cb-48ef-9fa7-6c540c6b3878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "seen", "source": "https://t.me/cibsecurity/39332", "content": "\u203c CVE-2022-0747 \u203c\n\nThe Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the post_id parameter before using it in a SQL statement via the qcld_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Injection\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-21T21:26:36.000000Z"}, {"uuid": "415c24eb-5727-4aef-9a77-3c0be277d247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0743", "type": "seen", "source": "https://t.me/cibsecurity/38231", "content": "\u203c CVE-2022-0743 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository getgrav/grav prior to 1.7.31.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-01T02:28:57.000000Z"}, {"uuid": "9e05c458-233f-49eb-87ed-b2ab8bbfe343", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0740", "type": "seen", "source": "https://t.me/cibsecurity/40124", "content": "\u203c CVE-2022-0740 \u203c\n\nIncorrect authorization in the Asana integration's branch restriction feature in all versions of GitLab CE/EE starting from version 7.8.0 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 makes it possible to close Asana tasks from unrestricted branches.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-05T00:28:01.000000Z"}, {"uuid": "647e2a36-277f-4ee4-a027-2dcf45c31959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0749", "type": "seen", "source": "https://t.me/cibsecurity/39145", "content": "\u203c CVE-2022-0749 \u203c\n\nThis affects all versions of package SinGooCMS.Utility. The socket client in the package can pass in the payload via the user-controllable input after it has been established, because this socket client transmission does not have the appropriate restrictions or type bindings for the BinaryFormatter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-17T15:27:32.000000Z"}, {"uuid": "2296dff9-3dd9-4460-bd93-4a6e61fa593b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0742", "type": "seen", "source": "https://t.me/cibsecurity/39199", "content": "\u203c CVE-2022-0742 \u203c\n\nMemory leak in icmp6 implementation in Linux Kernel 5.13+ allows a remote attacker to DoS a host by making it go out-of-memory via icmp6 packets of type 130 or 131. We recommend upgrading past commit 2d3916f3189172d5c69d33065c3c21119fe539fc.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T15:22:29.000000Z"}, {"uuid": "8da6ffa5-fc51-4e09-8077-81e8395ff3e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0748", "type": "seen", "source": "https://t.me/cibsecurity/39140", "content": "\u203c CVE-2022-0748 \u203c\n\nThe package post-loader from 0.0.0 are vulnerable to Arbitrary Code Execution which uses a markdown parser in an unsafe way so that any javascript code inside the markdown input files gets evaluated and executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-17T15:21:42.000000Z"}, {"uuid": "f42ecc05-f4ad-411c-9178-25b36f6759a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0746", "type": "seen", "source": "https://t.me/cibsecurity/38071", "content": "\u203c CVE-2022-0746 \u203c\n\nBusiness Logic Errors in GitHub repository dolibarr/dolibarr prior to 16.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-25T12:20:24.000000Z"}, {"uuid": "3a9d8a95-3692-4a5d-bb85-c75a7a91c5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0747", "type": "seen", "source": "https://t.me/cibsecurity/7793", "content": "ATENTION\u203c New - CVE-2010-0747\n\ndrbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-10-31T01:33:13.000000Z"}, {"uuid": "7e184a0e-c4d0-40ea-a625-647e43566c38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0749", "type": "seen", "source": "https://t.me/cibsecurity/7791", "content": "ATENTION\u203c New - CVE-2010-0749\n\nTransmission before 1.92 allows attackers to prevent download of a file by corrupted data during the endgame.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-10-31T01:33:11.000000Z"}, {"uuid": "02e93456-3229-45c6-9c7a-631c9a965df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0748", "type": "seen", "source": "https://t.me/cibsecurity/7792", "content": "ATENTION\u203c New - CVE-2010-0748\n\nTransmission before 1.92 allows an attacker to cause a denial of service (crash) or possibly have other unspecified impact via a large number of tr arguments in a magnet link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-10-31T01:33:12.000000Z"}, {"uuid": "de502aab-7ca3-4a1a-ad2c-c65ce19be1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0749", "type": "seen", "source": "https://t.me/cibsecurity/9913", "content": "ATENTION\u203c New - CVE-2015-0749\n\nA vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on the affected software. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker could exploit this vulnerability by convincing a user to follow a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected site or allow the attacker to access sensitive browser-based information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-02-19T07:52:18.000000Z"}, {"uuid": "af498560-081b-49de-a420-3c43181da7d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0744", "type": "seen", "source": "https://t.me/cibsecurity/15925", "content": "\u203c CVE-2016-0744 \u203c\n\n** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T02:56:07.000000Z"}, {"uuid": "fc87f580-88b2-4b34-9529-27ea361a6357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0745", "type": "seen", "source": "https://t.me/cibsecurity/15936", "content": "\u203c CVE-2016-0745 \u203c\n\n** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-06T02:56:20.000000Z"}, {"uuid": "599b04df-198e-4f10-9bae-564f285210ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/83819", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a zycoder0day\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-11 14:49:27\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n\u65e0\u63cf\u8ff0\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-11T15:00:05.000000Z"}, {"uuid": "0e4a7b73-c4a6-4287-a408-741e63922fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/APNnc0rGq8Mw668T50hT40wcIodfx4a7aX3kwnmD3UBVDH4", "content": "", "creation_timestamp": "2026-05-11T15:00:15.000000Z"}, {"uuid": "b5ce21e1-7cec-414b-8c56-241a303d9039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0745", "type": "published-proof-of-concept", "source": "Telegram/q3bZ7dzwt6XdRM-jyUWUHYQhep0OmyjD4PHNSw542P5jdgA", "content": "", "creation_timestamp": "2026-05-15T15:00:07.000000Z"}, {"uuid": "e0fabdea-c008-4207-aadf-e0b39c2ae705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/breachdetect/1244242", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"29 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-22T14:00:15.232069Z"}, {"uuid": "30ed8696-17bf-420b-b0fa-112fb7842e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/breachdetect/1265360", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"21 Aug 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-22T14:00:15.273790Z"}, {"uuid": "996b5c52-8c1f-45dd-821b-5ed6a62b55ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/STxGsrhQP6hZxkehr2eSvviXIon440Ogfxey7gY5WpdfDHc", "content": "", "creation_timestamp": "2026-08-22T08:00:04.030039Z"}, {"uuid": "f7203a2a-9fa9-4cf0-8fa3-f29aa8ec7c48", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b683f9a-e340-4410-9a0d-21b3ac5568dd", "content": "", "creation_timestamp": "2026-06-19T12:45:35.912029Z"}, {"uuid": "0ce4fb29-4c5c-4ee4-a7e0-6412d89a4a87", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dac237ff-d8df-4d1f-a9cd-ae7098db2f8a", "content": "", "creation_timestamp": "2026-06-19T12:45:39.301705Z"}, {"uuid": "b5a35930-84eb-4c2e-babc-8d618f233213", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0747", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d77daea0-f614-4017-8c17-ad4959a3f314", "content": "", "creation_timestamp": "2026-06-23T14:03:08.365583Z"}, {"uuid": "27f84130-28c3-4517-8119-cfd3c5e6d5c6", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-0747", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c081f3db-2a39-4d30-95b6-929b9895f1ff", "content": "", "creation_timestamp": "2026-06-30T09:23:22.577619Z"}, {"uuid": "57863ce3-47ab-40e0-b634-c2ec0fa45418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/92982", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740-mass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ExDev994\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 13:44:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 \u2014 Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:04.540333Z"}, {"uuid": "d12a40f4-09c1-4891-9b79-ddb807c781ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92982", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-0740-mass\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ExDev994\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-11 13:44:17\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC untuk CVE-2026-0740: Ninja Forms File Uploads <= 3.3.26 \u2014 Unauthenticated Arbitrary File Upload yang dapat mengarah ke RCE.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:08.352902Z"}, {"uuid": "90120120-22ca-4678-803c-297fbebeefb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/i85Ko9VIVau4rwOxRL9oM3geQpNWom8rCaBlkF_bPD1ezpI", "content": "", "creation_timestamp": "2026-08-26T13:00:03.467150Z"}, {"uuid": "f2f7a2d2-b709-483c-b34b-f11d6de5e80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/GithubRedTeam/93399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ninja-form-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MadExploits\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 15:45:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-16T12:00:06.892388Z"}, {"uuid": "afcf6252-23ce-480e-acd0-0c264d41c020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI", "content": "", "creation_timestamp": "2026-07-16T19:00:07.227746Z"}, {"uuid": "063fb937-146b-4335-9749-88fc838ebff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/EX_r4oRVdISPywpjEG1n7FWajVbuxB1s9-HYOhLwZS_cHlg", "content": "", "creation_timestamp": "2026-07-16T19:00:07.675409Z"}, {"uuid": "693aca42-35b3-40ef-aa17-d2afaf065f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/VUu0fqQ7rcdyvOW-H7Wu47NspWJgobhVReaY3yiN0ecBUoE", "content": "", "creation_timestamp": "2026-07-16T19:00:11.656050Z"}, {"uuid": "ee15e36e-d4f2-401a-829e-44b3e1cb863c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-16T19:00:11.353666Z"}, {"uuid": "80a50c08-b176-429c-9ea0-c554d0c7f98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/EX_r4oRVdISPywpjEG1n7FWajVbuxB1s9-HYOhLwZS_cHlg", "content": "", "creation_timestamp": "2026-07-17T00:00:09.875658Z"}, {"uuid": "cbc13e83-41ef-4f32-bd33-e6d0855bb4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/iYHsotoqlE8Z-AEKaQiVsXXSjTyl0MfV01akvHQ1zfYFYEI", "content": "", "creation_timestamp": "2026-07-17T00:00:10.532176Z"}, {"uuid": "732f8d42-1c88-4429-a3d4-b62a05686864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-17T00:00:26.910700Z"}, {"uuid": "fd65247b-9cc9-4e9d-be46-14a4b1ccaa47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/VUu0fqQ7rcdyvOW-H7Wu47NspWJgobhVReaY3yiN0ecBUoE", "content": "", "creation_timestamp": "2026-07-17T00:00:27.201600Z"}, {"uuid": "a062506b-d93b-4a6f-b3d7-dadd32e1bcf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/93399", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a ninja-form-exploit\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a MadExploits\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-14 15:45:56\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-0740\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-17T00:00:49.830004Z"}, {"uuid": "3f7b9510-415a-4ca0-8e5d-9daed0008062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/JZce1k3F7Nb0tM63EWv0Z1Rv7rG2qawkrkl2TccfYKUt5Pg", "content": "", "creation_timestamp": "2026-07-18T00:00:45.287889Z"}, {"uuid": "2fa466b3-4eb9-475e-bc8c-6ac7365240cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/VUu0fqQ7rcdyvOW-H7Wu47NspWJgobhVReaY3yiN0ecBUoE", "content": "", "creation_timestamp": "2026-07-18T00:00:45.025030Z"}, {"uuid": "7768b8d6-f20f-400a-b0f4-a0d307478981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/critical_bug/1709", "content": "\ud83d\udc31 *hacker voice* I'M IN \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-0740: Ninja Forms \u0434\u043b\u044f WordPress \u2014 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439!\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ninja Forms! CVSS: 9.8 Critical \ud83d\ude31\n\n\u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udc47 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0438\u0436\u0435", "creation_timestamp": "2026-07-19T16:00:10.671068Z"}, {"uuid": "d5bc9c93-4cbf-4a50-bf2b-ff7a2c4d9a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/critical_bug/1710", "content": "\ud83d\udd25 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress \ud83d\udd34\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f | 50,000+ \u0441\u0430\u0439\u0442\u043e\u0432\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u043b\u0430\u0433\u0438\u043d Ninja Forms - File Uploads \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0442\u0438\u043f \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0438\u043f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0441 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c image.jpg, \u043d\u043e \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 shell.php. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 PHP-\u0448\u0435\u043b\u043b!\n\n\u0411\u043e\u043d\u0443\u0441: \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d Path Traversal \u2014 \u0448\u0435\u043b\u043b \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u043e\u0440\u0435\u043d\u044c \u0441\u0430\u0439\u0442\u0430!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u2014 RCE \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c\n\u2014 \u041a\u0440\u0430\u0436\u0430 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0430 wp-config.php\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432\n\u2014 \u0411\u043e\u043b\u0435\u0435 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Ninja Forms - File Uploads \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.3.27 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.25 \u2014 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0439 \u043f\u0430\u0442\u0447!)\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\n3\ufe0f\u20e3 \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 PHP \u0432 \u043f\u0430\u043f\u043a\u0435 wp-content/uploads/\n4\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 .php \u0444\u0430\u0439\u043b\u043e\u0432\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#WordPress #NinjaForms #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-19T16:00:10.707995Z"}, {"uuid": "d0cdf254-faa9-4b72-8d06-40ea20b6a59f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/critical_bug/1711", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress (CVSS 9.8)", "creation_timestamp": "2026-07-19T16:00:10.758088Z"}, {"uuid": "f920bd6f-5e43-40b4-9210-d59a56492ed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1711", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress (CVSS 9.8)", "creation_timestamp": "2026-07-20T00:00:06.692713Z"}, {"uuid": "ec7a153b-866f-4b39-9396-3acd8c1715d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://t.me/critical_bug/1710", "content": "\ud83d\udd25 CVE-2026-0740: \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 Ninja Forms \u0434\u043b\u044f WordPress \ud83d\udd34\n\nCVSS: 9.8 Critical | \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f | 50,000+ \u0441\u0430\u0439\u0442\u043e\u0432\n\n\ud83d\udca5 \u0421\u0443\u0442\u044c \u0431\u0430\u0433\u0430:\n\u041f\u043b\u0430\u0433\u0438\u043d Ninja Forms - File Uploads \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0442\u0438\u043f \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430, \u043d\u043e \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0438\u043f \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043f\u0435\u0440\u0435\u0434 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0444\u0430\u0439\u043b \u0441 \u0431\u0435\u0437\u043e\u0431\u0438\u0434\u043d\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c image.jpg, \u043d\u043e \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0438\u043c\u0435\u043d\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 shell.php. \u0421\u0435\u0440\u0432\u0435\u0440 \u043f\u043e\u0441\u043b\u0443\u0448\u043d\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442 PHP-\u0448\u0435\u043b\u043b!\n\n\u0411\u043e\u043d\u0443\u0441: \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u0441\u0430\u043d\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0443\u0442\u0435\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u0435\u043d Path Traversal \u2014 \u0448\u0435\u043b\u043b \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0432 \u043a\u043e\u0440\u0435\u043d\u044c \u0441\u0430\u0439\u0442\u0430!\n\n\ud83d\udea8 \u0418\u043c\u043f\u0430\u043a\u0442:\n\u2014 RCE \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c\n\u2014 \u041a\u0440\u0430\u0436\u0430 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0430 wp-config.php\n\u2014 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432\n\u2014 \u0411\u043e\u043b\u0435\u0435 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430!\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u043e \u0441\u0435\u0439\u0447\u0430\u0441?\n1\ufe0f\u20e3 \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Ninja Forms - File Uploads \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.3.27 (\u0432\u0435\u0440\u0441\u0438\u044f 3.3.25 \u2014 \u043d\u0435\u043f\u043e\u043b\u043d\u044b\u0439 \u043f\u0430\u0442\u0447!)\n2\ufe0f\u20e3 \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u2014 \u0434\u0435\u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043b\u0430\u0433\u0438\u043d\n3\ufe0f\u20e3 \u0417\u0430\u043f\u0440\u0435\u0442\u0438\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 PHP \u0432 \u043f\u0430\u043f\u043a\u0435 wp-content/uploads/\n4\ufe0f\u20e3 \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 .php \u0444\u0430\u0439\u043b\u043e\u0432\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0451\u043d\u043d\u043e\u043c PDF! \ud83d\udc47\n\n\ud83d\udc8e \u0425\u043e\u0447\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u044d\u043a\u0441\u043a\u043b\u044e\u0437\u0438\u0432\u043d\u044b\u0435 \u0440\u0430\u0437\u0431\u043e\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 0-day \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u0435\u0440\u0432\u044b\u043c? \u041f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0439\u0441\u044f \u043d\u0430 \u043d\u0430\u0448\u0443 VIP-\u0432\u0435\u0440\u0441\u0438\u044e \u043a\u0430\u043d\u0430\u043b\u0430: vip.eh.su \ud83d\ude80\n\n#WordPress #NinjaForms #CVE #ZeroDay #RCE #CyberSecurity #Infosec #critical_bug", "creation_timestamp": "2026-07-20T00:00:06.746729Z"}, {"uuid": "620b24bf-d2e7-482f-b164-79c270d61d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "exploited", "source": "https://t.me/critical_bug/1709", "content": "\ud83d\udc31 *hacker voice* I'M IN \ud83d\udd34\n\n\ud83d\udd25 CVE-2026-0740: Ninja Forms \u0434\u043b\u044f WordPress \u2014 50,000 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439!\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ninja Forms! CVSS: 9.8 Critical \ud83d\ude31\n\n\u041e\u0434\u0438\u043d \u0437\u0430\u043f\u0440\u043e\u0441 \u2014 \u0438 \u0443 \u0432\u0430\u0441 \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c! \ud83d\udcbb\n\n\ud83d\udc47 \u041f\u043e\u043b\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043d\u0438\u0436\u0435", "creation_timestamp": "2026-07-20T00:00:06.792972Z"}, {"uuid": "f7b480fe-34d8-4865-b8ca-b7caca693cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/STxGsrhQP6hZxkehr2eSvviXIon440Ogfxey7gY5WpdfDHc", "content": "", "creation_timestamp": "2026-08-23T00:00:40.921819Z"}, {"uuid": "1ff73b66-4f7c-401b-8050-39c4cdb7e939", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/breachdetect/1244242", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"29 Jul 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-23T00:00:39.036192Z"}, {"uuid": "31bbfc01-45cd-4b95-84c4-a7c1a02f04ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/breachdetect/1265360", "content": "{\n  \"Source\": \"https://niflheim.top/\",\n  \"Content\": \"[Python/Bash + Apex AI] \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms Uploads \u0434\u043b\u044f WordPress (CVE-2026-0740)\", \n  \"author\": \" (DarkholdRT)\",\n  \"Detection Date\": \"21 Aug 2026\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetect  \ud83d\udd39", "creation_timestamp": "2026-08-23T00:00:38.198992Z"}, {"uuid": "1577d990-3c62-4345-a122-7501c96d36f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/i85Ko9VIVau4rwOxRL9oM3geQpNWom8rCaBlkF_bPD1ezpI", "content": "", "creation_timestamp": "2026-08-27T00:00:10.073311Z"}, {"uuid": "59d77781-acaf-4e71-b23f-0e7927ce2a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "https://t.me/ZerodayAlert/651", "content": "\u0414\u044b\u0440\u0430 \u0432 Ninja Forms \u0434\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms \u0434\u043b\u044f WordPress \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2026-0740. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u043d\u0438 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0432 \u0441\u0430\u043c\u043e\u0439  \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435, \u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c. \u041f\u043b\u0430\u0433\u0438\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043d\u043e \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0430\u0439\u043b \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430.\n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0451 \u0431\u044b\u0441\u0442\u0440\u043e: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0431\u0430\u0437\u043e\u0439, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2014 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438. \u041f\u043e\u043a\u0430 \u0441\u0430\u0439\u0442\u044b \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0431\u0443\u0434\u0443\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0431\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439.\n\n#ninjaforms #wordpress #cve #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:08.284776Z"}, {"uuid": "cd129cc4-699e-4698-aa6f-fe42df2782a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "https://t.me/ZerodayAlert/651", "content": "\u0414\u044b\u0440\u0430 \u0432 Ninja Forms \u0434\u0430\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 WordPress\n\n\u0412 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 Ninja Forms \u0434\u043b\u044f WordPress \u043d\u0430\u0448\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2026-0740. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043d\u0435 \u043d\u0443\u0436\u0435\u043d \u043d\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442, \u043d\u0438 \u043f\u0430\u0440\u043e\u043b\u044c.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043d\u0435 \u0432 \u0441\u0430\u043c\u043e\u0439  \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435, \u0430 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u0441\u043b\u0430\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u043a\u043e\u0434 \u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c. \u041f\u043b\u0430\u0433\u0438\u043d \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435, \u043d\u043e \u043d\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0435 \u043e\u0447\u0438\u0449\u0430\u0435\u0442 \u0438\u043c\u044f \u0444\u0430\u0439\u043b\u0430. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0444\u0430\u0439\u043b \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043a\u0430\u043a PHP-\u0441\u043a\u0440\u0438\u043f\u0442 \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0438 \u0441\u0440\u0430\u0437\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430.\n\n\u0414\u0430\u043b\u044c\u0448\u0435 \u0432\u0441\u0451 \u0431\u044b\u0441\u0442\u0440\u043e: \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0443, \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0431\u0430\u0437\u043e\u0439, \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. \u0413\u043b\u0430\u0432\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u2014 \u043c\u0430\u0441\u0448\u0442\u0430\u0431 \u0438 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u0430 \u0430\u0442\u0430\u043a\u0438. \u041f\u043e\u043a\u0430 \u0441\u0430\u0439\u0442\u044b \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c, \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0431\u0443\u0434\u0443\u0442 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430 \u0431\u0435\u0437 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439.\n\n#ninjaforms #wordpress #cve #rce\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:36.252460Z"}, {"uuid": "18fb4aa2-7013-46f1-aa0f-3f3e6ab795fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-01T20:00:35.528089Z"}, {"uuid": "756250f3-ddd4-4615-bb37-e19189100b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-02T01:00:53.883822Z"}, {"uuid": "a920a275-8165-4d84-a122-d8e24a788a85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-03T21:00:27.596955Z"}, {"uuid": "0627cdec-3dfd-4a05-9193-f3363074fa8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0744", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-04T00:00:17.621279Z"}, {"uuid": "e0cec573-e1db-4c05-bbd2-3c766da12b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "seen", "source": "Telegram/O8mSpyNy7kB1kY1fK9CD34PkE3MaZvnjKkC8Ugpy2sCZKZY", "content": "", "creation_timestamp": "2026-09-08T00:00:06.931337Z"}, {"uuid": "4c342c80-8ee8-4297-98a3-8d1d510deb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0740", "type": "published-proof-of-concept", "source": "Telegram/O8mSpyNy7kB1kY1fK9CD34PkE3MaZvnjKkC8Ugpy2sCZKZY", "content": "", "creation_timestamp": "2026-09-09T00:00:48.401118Z"}]}