<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T09:01:34.713303+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/984a2905-0151-4d8f-8365-f8bf55d01d9d/export</id>
    <title>984a2905-0151-4d8f-8365-f8bf55d01d9d</title>
    <updated>2026-09-17T09:01:34.735287+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "984a2905-0151-4d8f-8365-f8bf55d01d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32117", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:00:03.909194Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/984a2905-0151-4d8f-8365-f8bf55d01d9d/export"/>
    <published>2026-09-16T10:00:03.909194+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f4abdcc3-b47d-4587-8dc4-a715963190d9/export</id>
    <title>f4abdcc3-b47d-4587-8dc4-a715963190d9</title>
    <updated>2026-09-17T09:01:34.737375+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f4abdcc3-b47d-4587-8dc4-a715963190d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32117", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:05.999497Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f4abdcc3-b47d-4587-8dc4-a715963190d9/export"/>
    <published>2026-09-15T10:00:05.999497+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f8131dc6-ca25-4c03-a03b-166bca774410/export</id>
    <title>f8131dc6-ca25-4c03-a03b-166bca774410</title>
    <updated>2026-09-17T09:01:34.737574+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f8131dc6-ca25-4c03-a03b-166bca774410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32407", "type": "published-proof-of-concept", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-15T00:00:26.383726Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f8131dc6-ca25-4c03-a03b-166bca774410/export"/>
    <published>2026-09-15T00:00:26.383726+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/50287385-094c-4e77-ae85-aae87a9220ee/export</id>
    <title>50287385-094c-4e77-ae85-aae87a9220ee</title>
    <updated>2026-09-17T09:01:34.737727+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "50287385-094c-4e77-ae85-aae87a9220ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32407", "type": "seen", "source": "Telegram/9NrP2a5dbad0SvG7fb9Uapx71qe-XVfVxvb8R_NhR-XYGGI", "content": "", "creation_timestamp": "2026-09-14T03:00:08.152939Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/50287385-094c-4e77-ae85-aae87a9220ee/export"/>
    <published>2026-09-14T03:00:08.152939+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/466ce21a-ff45-43ed-ac61-a5d352603111/export</id>
    <title>466ce21a-ff45-43ed-ac61-a5d352603111</title>
    <updated>2026-09-17T09:01:34.737870+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "466ce21a-ff45-43ed-ac61-a5d352603111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32563", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:13.415255Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/466ce21a-ff45-43ed-ac61-a5d352603111/export"/>
    <published>2026-09-10T10:00:13.415255+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/135b0e14-277d-4c37-862f-2303f1feb70e/export</id>
    <title>135b0e14-277d-4c37-862f-2303f1feb70e</title>
    <updated>2026-09-17T09:01:34.738015+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "135b0e14-277d-4c37-862f-2303f1feb70e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32031", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7316", "content": "#DiyakoSecureBow\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nexploit\n1. CVE-2023-32031:\nMS Exchange PowerShell backend RCE\nhttps://github.com/Avento/CVE-2023-32031\n\n2. CVE-2021-43609:\nThe full exploit chain is SQLi &amp;gt; RCE\nhttps://github.com/d5sec/CVE-2021-43609-POC\n\n-Business Secure Continuity-\n1402.08.20\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n#cyberattack #exploit #rce #exchange \n#BusinessSecureContinuity\n\nhttps://www.linkedin.com/posts/diyako-secure-bow_github-aventocve-2023-32031-cve-2023-activity-7129082639319207936-eU3A?utm_source=share&amp;amp;utm_medium=member_ios", "creation_timestamp": "2026-09-10T00:00:23.634153Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/135b0e14-277d-4c37-862f-2303f1feb70e/export"/>
    <published>2026-09-10T00:00:23.634153+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7d7e2575-0f56-4a8e-b49f-b3f76227e3f3/export</id>
    <title>7d7e2575-0f56-4a8e-b49f-b3f76227e3f3</title>
    <updated>2026-09-17T09:01:34.738163+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7d7e2575-0f56-4a8e-b49f-b3f76227e3f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32707", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7309", "content": "https://osdfir.blogspot.com/2023/10/introducing-osdfir-infrastructure.html\n\nexploit\n1. CVE-2023-32707:\nSplunk edit_user Capability Privilege Escalation\nhttps://packetstormsecurity.com/files/175386/Splunk-edit_user-Capability-Privilege-Escalation.html\n\n2. Exploit for Maltrail web service v0.53\nUnauthenticated OS Command Injection (RCE)\nhttps://github.com/spookier/Maltrail-v0.53-Exploit\n\n3. CVE-2023-46517:\nXAMPP 3.3.0 Buffer Overflow Exploit\nhttps://github.com/ripp3rdoc/XAMPPv3.3.0-BOF\n\n\ud83d\udea8 Cisco alerts about a critical UNPATCHED zero-day security vulnerability (CVE-2023-20198) in its IOS XE software that's under active exploitation. \nLearn more: \nhttps://thehackernews.com/2023/10/warning-unpatched-cisco-zero-day.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.14", "creation_timestamp": "2026-09-10T00:00:23.416027Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7d7e2575-0f56-4a8e-b49f-b3f76227e3f3/export"/>
    <published>2026-09-10T00:00:23.416027+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7155ce7d-5bce-43ec-ba2f-5463b971a57b/export</id>
    <title>7155ce7d-5bce-43ec-ba2f-5463b971a57b</title>
    <updated>2026-09-17T09:01:34.738317+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7155ce7d-5bce-43ec-ba2f-5463b971a57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32629", "type": "seen", "source": "https://t.me/cissp/7061", "content": "\ud83d\udea8 Heads up, Ubuntu users! \n \nResearchers have discovered high-severity Linux flaws in the Ubuntu kernel, affecting 40% of users! \n \nLearn about GameOver(lay) vulnerabilities CVE-2023-32629 and CVE-2023-2640: https://thehackernews.com/2023/07/gameoverlay-two-severe-linux.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.05.06", "creation_timestamp": "2026-09-10T00:00:11.300871Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7155ce7d-5bce-43ec-ba2f-5463b971a57b/export"/>
    <published>2026-09-10T00:00:11.300871+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94344869-2e95-4ef9-9877-b3ad15a85431/export</id>
    <title>94344869-2e95-4ef9-9877-b3ad15a85431</title>
    <updated>2026-09-17T09:01:34.738445+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94344869-2e95-4ef9-9877-b3ad15a85431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32784", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6873", "content": "tools\nOffensive security\n1. KeeFarce Reborn - standalone DLL that exports databases in cleartext once injected in the KeePass process\nhttps://github.com/d3lb3/KeeFarceReborn#make-keepass-inject-keefarce-reborn-as-a-plugin\n]-&amp;gt; Extract Passphrase from Memory (CVE-2023-32784):\nhttps://ppn.snovvcrash.rocks/pentest/infrastructure/ad/credential-harvesting/keepass#abusing-the-keepass-plugin-cache\n2. SSH-Harvester - Harvest passwords automatically from OpenSSH server\nhttps://github.com/jm33-m0/SSH-Harvester\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.02", "creation_timestamp": "2026-09-10T00:00:09.454558Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94344869-2e95-4ef9-9877-b3ad15a85431/export"/>
    <published>2026-09-10T00:00:09.454558+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eb229343-8ae8-43f3-9923-ba0d25896c28/export</id>
    <title>eb229343-8ae8-43f3-9923-ba0d25896c28</title>
    <updated>2026-09-17T09:01:34.738567+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eb229343-8ae8-43f3-9923-ba0d25896c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-32784", "type": "seen", "source": "https://t.me/cissp/6867", "content": "\ud83d\udea8 Attention KeePass users! A newly discovered security flaw (CVE-2023-32784) could expose your master password in cleartext! \n \nRead details here: https://thehackernews.com/2023/05/keepass-exploit-allows-attackers-to.html \n \nUpgrade to KeePass 2.54 once it's released.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.03.01", "creation_timestamp": "2026-09-10T00:00:09.111998Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eb229343-8ae8-43f3-9923-ba0d25896c28/export"/>
    <published>2026-09-10T00:00:09.111998+00:00</published>
  </entry>
</feed>
