https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:26:36.297319+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7f48107d-27dd-435f-ac14-cb24948ecb3d/export 2026-09-17T10:26:36.325573+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7f48107d-27dd-435f-ac14-cb24948ecb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46805", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:15:07.506222Z"} 2026-09-14T10:15:07.506222+00:00 https://vulnerability.circl.lu/sighting/e5aeb671-3773-4c5e-a5ff-4873405b1770/export 2026-09-17T10:26:36.328092+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e5aeb671-3773-4c5e-a5ff-4873405b1770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46805", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:15:18.571863Z"} 2026-09-12T10:15:18.571863+00:00 https://vulnerability.circl.lu/sighting/8e846253-4588-4e12-a878-59385efa365e/export 2026-09-17T10:26:36.328225+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8e846253-4588-4e12-a878-59385efa365e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46805", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:15:39.264707Z"} 2026-09-11T10:15:39.264707+00:00 https://vulnerability.circl.lu/sighting/0cc7bef5-d0c9-4ddb-b5fc-432e2d603595/export 2026-09-17T10:26:36.328329+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0cc7bef5-d0c9-4ddb-b5fc-432e2d603595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46604", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/1627", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ActiveMQ \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0432\u043e\u043b\u043d\u0443 \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-46604 \u0432 Apache ActiveMQ. \u0413\u0440\u0443\u043f\u043f\u0430 Kinsing, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a H2Miner, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043c\u0435\u0442\u043e\u0434 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a Linux, \u0442\u0430\u043a \u0438 Windows-\u0441\u0438\u0441\u0442\u0435\u043c, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442 \u0438 \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2023-46604 \u0432 Apache ActiveMQ \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430. Apache ActiveMQ [\u2026]\n\u0421\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-04 07:33 | Author: SEC-1275\n\n#activemq #general_cyber_news\n\nhttps://1275.ru/ioc/kiberprestupniki-aktivno-ekspluatiruyut-uyazvimost-v-activemq-dlya-ustanovki-vredonosnogo-po_15899", "creation_timestamp": "2026-09-10T00:00:34.875966Z"} 2026-09-10T00:00:34.875966+00:00 https://vulnerability.circl.lu/sighting/80a428f4-9319-4a5e-a1cb-5871cf26946b/export 2026-09-17T10:26:36.328451+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "80a428f4-9319-4a5e-a1cb-5871cf26946b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46604", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7331", "content": "tools\nCloud Security\n1. A collection of resources, tools and more for pentesting/securing MS Azure\nhttps://github.com/Kyuu-Ji/Awesome-Azure-Pentest\n\n2. Finding complex attack paths in Kubernetes clusters\ud83e\udd79\nhttps://labs.withsecure.com/tools/icekube--finding-complex-attack-paths-in-kubernetes-clusters\n]-> https://github.com/WithSecureLabs/IceKube\n\n\u26a0\ufe0f New PoC exploit for CVE-2023-46604 flaw in Apache ActiveMQ could let attackers stealthily execute malicious code. \n \nCVSS score: 10.0! Are your servers secure? \n \nLearn more about this critical vulnerability: \nhttps://thehackernews.com/2023/11/new-poc-exploit-for-apache-activemq.html\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.09.07", "creation_timestamp": "2026-09-10T00:00:23.679540Z"} 2026-09-10T00:00:23.679540+00:00 https://vulnerability.circl.lu/sighting/6a043809-0d77-4357-8ef8-8b48fa05e8ac/export 2026-09-17T10:26:36.328564+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6a043809-0d77-4357-8ef8-8b48fa05e8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46517", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7309", "content": "https://osdfir.blogspot.com/2023/10/introducing-osdfir-infrastructure.html\n\nexploit\n1. CVE-2023-32707:\nSplunk edit_user Capability Privilege Escalation\nhttps://packetstormsecurity.com/files/175386/Splunk-edit_user-Capability-Privilege-Escalation.html\n\n2. Exploit for Maltrail web service v0.53\nUnauthenticated OS Command Injection (RCE)\nhttps://github.com/spookier/Maltrail-v0.53-Exploit\n\n3. CVE-2023-46517:\nXAMPP 3.3.0 Buffer Overflow Exploit\nhttps://github.com/ripp3rdoc/XAMPPv3.3.0-BOF\n\n\ud83d\udea8 Cisco alerts about a critical UNPATCHED zero-day security vulnerability (CVE-2023-20198) in its IOS XE software that's under active exploitation. \nLearn more: \nhttps://thehackernews.com/2023/10/warning-unpatched-cisco-zero-day.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.14", "creation_timestamp": "2026-09-10T00:00:23.522153Z"} 2026-09-10T00:00:23.522153+00:00 https://vulnerability.circl.lu/sighting/c5aa9da5-8c28-4b46-98d9-6ef4a4f1f177/export 2026-09-17T10:26:36.328690+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c5aa9da5-8c28-4b46-98d9-6ef4a4f1f177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46747", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7303", "content": "exploit\n1. Wyze Cam v3 RCE Exploit\nhttps://github.com/blasty/unwyze\n\n2. CVE-2023-5044:\nKubernetes ingress-nginx <1.9.0 - API command injection\nhttps://raesene.github.io/blog/2023/10/29/exploiting-CVE-2023-5044\nhttps://github.com/r0binak/CVE-2023-5044\n\n3. CVE-2023-46747:\nF5 BIG-IP unauthenticated RCE and authentication bypass\nhttps://github.com/AliBrTab/CVE-2023-46747-POC\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.09", "creation_timestamp": "2026-09-10T00:00:23.367099Z"} 2026-09-10T00:00:23.367099+00:00 https://vulnerability.circl.lu/sighting/8e2e893f-b8a9-404e-867f-be97c8159362/export 2026-09-17T10:26:36.328791+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "8e2e893f-b8a9-404e-867f-be97c8159362", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46747", "type": "seen", "source": "https://t.me/cissp/7295", "content": "\u26a1 Urgent \u2014 F5 warns of a critical vulnerability (CVE-2023-46747) in BIG-IP, allowing unauthenticated remote code execution. \n \nLearn more: https://thehackernews.com/2023/10/f5-issues-warning-big-ip-vulnerability.html\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.05", "creation_timestamp": "2026-09-10T00:00:23.160336Z"} 2026-09-10T00:00:23.160336+00:00 https://vulnerability.circl.lu/sighting/5bce4809-ce84-4adf-908e-e239a26b4743/export 2026-09-17T10:26:36.328890+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5bce4809-ce84-4adf-908e-e239a26b4743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46604", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7331", "content": "tools\nCloud Security\n1. A collection of resources, tools and more for pentesting/securing MS Azure\nhttps://github.com/Kyuu-Ji/Awesome-Azure-Pentest\n\n2. Finding complex attack paths in Kubernetes clusters\ud83e\udd79\nhttps://labs.withsecure.com/tools/icekube--finding-complex-attack-paths-in-kubernetes-clusters\n]-> https://github.com/WithSecureLabs/IceKube\n\n\u26a0\ufe0f New PoC exploit for CVE-2023-46604 flaw in Apache ActiveMQ could let attackers stealthily execute malicious code. \n \nCVSS score: 10.0! Are your servers secure? \n \nLearn more about this critical vulnerability: \nhttps://thehackernews.com/2023/11/new-poc-exploit-for-apache-activemq.html\n\n\n-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.09.07", "creation_timestamp": "2026-09-09T20:00:07.886523Z"} 2026-09-09T20:00:07.886523+00:00 https://vulnerability.circl.lu/sighting/340743c4-6781-43e8-a46a-54b37a87e8b8/export 2026-09-17T10:26:36.329022+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "340743c4-6781-43e8-a46a-54b37a87e8b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-46517", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7309", "content": "https://osdfir.blogspot.com/2023/10/introducing-osdfir-infrastructure.html\n\nexploit\n1. CVE-2023-32707:\nSplunk edit_user Capability Privilege Escalation\nhttps://packetstormsecurity.com/files/175386/Splunk-edit_user-Capability-Privilege-Escalation.html\n\n2. Exploit for Maltrail web service v0.53\nUnauthenticated OS Command Injection (RCE)\nhttps://github.com/spookier/Maltrail-v0.53-Exploit\n\n3. CVE-2023-46517:\nXAMPP 3.3.0 Buffer Overflow Exploit\nhttps://github.com/ripp3rdoc/XAMPPv3.3.0-BOF\n\n\ud83d\udea8 Cisco alerts about a critical UNPATCHED zero-day security vulnerability (CVE-2023-20198) in its IOS XE software that's under active exploitation. \nLearn more: \nhttps://thehackernews.com/2023/10/warning-unpatched-cisco-zero-day.html\n\n\n\u2069-Cyber Security awareness-\n\u00a0\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.08.14", "creation_timestamp": "2026-09-09T20:00:07.754740Z"} 2026-09-09T20:00:07.754740+00:00