https://vulnerability.circl.lu/sightings/feed 2026-09-17T09:13:22.781312+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d0fad6f8-c8b0-439b-81f8-65aee934c8eb/export 2026-09-17T09:13:22.793381+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "d0fad6f8-c8b0-439b-81f8-65aee934c8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-rce-vulnerability-fortinet-fortios-and-fortiswitchmanager-patch-immediately", "content": "", "creation_timestamp": "2026-09-16T12:45:02.126140Z"} 2026-09-16T12:45:02.126140+00:00 https://vulnerability.circl.lu/sighting/2e1d20f8-60ed-475b-a454-9a7f17a0b512/export 2026-09-17T09:13:22.796777+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2e1d20f8-60ed-475b-a454-9a7f17a0b512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/bigg-thecreator.bsky.social/post/3mvl7cwswto27", "content": "CVE-2025-25249 is scored 7.4 by Fortinet's advisory and 9.8 by NVD. Same bug, two records, opposite sides of a severity boundary.\n\nIt is also the one SOCRadar tied to a campaign that infected 178 devices.\n\nIf two authorities disagree on the number, the number is not your sort key.", "creation_timestamp": "2026-09-15T18:00:04.150248Z"} 2026-09-15T18:00:04.150248+00:00 https://vulnerability.circl.lu/sighting/ac5eec48-29ed-4275-8074-1d12c106ac13/export 2026-09-17T09:13:22.798697+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ac5eec48-29ed-4275-8074-1d12c106ac13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25186", "type": "seen", "source": "https://t.me/hackeronereports/213", "content": "\ud83c\udfaf New Report #2987782: Possible DoS by memory exhaustion in net/imap \n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: manun\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-11\n\u23f0 Disclosed: 2025-04-27 13:45:48\n\ud83d\udcdd Summary: The net-imap gem implemented an IMAP client in Ruby. Versions prior to 0.3.8, 0.4.19, and 0.5.6 contained a vulnerability that could lead to denial of service by memory exhaustion. The vulnerability was caused by the response parser using Range#to a to convert uid-set data without limiting the expanded size of the ranges. This vulnerability has been assigned the CVE identifier CVE-2025-25186.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.068272Z"} 2026-09-15T00:00:28.068272+00:00 https://vulnerability.circl.lu/sighting/2e871098-239a-4361-b422-f7a1e40870ad/export 2026-09-17T09:13:22.798847+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2e871098-239a-4361-b422-f7a1e40870ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25231", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:08.086252Z"} 2026-09-14T10:00:08.086252+00:00 https://vulnerability.circl.lu/sighting/e667954a-7f10-44a3-acf5-e88f507624a0/export 2026-09-17T09:13:22.798952+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e667954a-7f10-44a3-acf5-e88f507624a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3mvhobw6fpswn", "content": "Fortinet\u88fd\u54c1\u306b\u304a\u3051\u308b\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u8106\u5f31\u6027\u3092\u60aa\u7528\u3057\u3001RAT\u300cPivotC2\u300d\u304c\u5c55\u958b\u3055\u308c\u308b\uff08CVE-2025-25249\uff09 | Codebook\uff5cSecurity News https://codebook.machinarecord.com/threatreport/silobreaker-cyber-alert/47685/", "creation_timestamp": "2026-09-14T08:17:14.755726Z"} 2026-09-14T08:17:14.755726+00:00 https://vulnerability.circl.lu/sighting/ffba34ec-9aa4-4665-9787-31a86bd1d012/export 2026-09-17T09:13:22.799063+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ffba34ec-9aa4-4665-9787-31a86bd1d012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mvhku7vx4q2n", "content": "Discover how the PivotC2 FortiGate RAT uses CVE-2025-25249 exploitation to harvest credentials and tunnel traffic across corporate network environments.\n\n#PivotC2 #FortiGate #Malware #Cybercrime #CVE202525249", "creation_timestamp": "2026-09-14T07:15:54.903611Z"} 2026-09-14T07:15:54.903611+00:00 https://vulnerability.circl.lu/sighting/2ba6c50a-b7c7-404a-9ab8-5851ad9a1cd0/export 2026-09-17T09:13:22.799166+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2ba6c50a-b7c7-404a-9ab8-5851ad9a1cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25186", "type": "seen", "source": "https://t.me/hackeronereports/213", "content": "\ud83c\udfaf New Report #2987782: Possible DoS by memory exhaustion in net/imap \n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: manun\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-11\n\u23f0 Disclosed: 2025-04-27 13:45:48\n\ud83d\udcdd Summary: The net-imap gem implemented an IMAP client in Ruby. Versions prior to 0.3.8, 0.4.19, and 0.5.6 contained a vulnerability that could lead to denial of service by memory exhaustion. The vulnerability was caused by the response parser using Range#to a to convert uid-set data without limiting the expanded size of the ranges. This vulnerability has been assigned the CVE identifier CVE-2025-25186.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.710931Z"} 2026-09-14T06:00:04.710931+00:00 https://vulnerability.circl.lu/sighting/bdbfed18-a36d-4166-aec8-f0720f21c4ba/export 2026-09-17T09:13:22.799268+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bdbfed18-a36d-4166-aec8-f0720f21c4ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvhdqymn7s2i", "content": "\ud83d\udd34 Fortinet CVE-2025-25249 under active attack\n\nAttackers are exploiting the Fortinet flaw to deploy PivotC2. Researchers found 30,000+ targeted IPs and 178 confirmed infected devices.\n\nstemshop.top/blog/fortine...\n\n#CVE #CVE202525249 #Fortinet #FortiGate #PivotC2 #CyberSecurity", "creation_timestamp": "2026-09-14T05:08:54.184367Z"} 2026-09-14T05:08:54.184367+00:00 https://vulnerability.circl.lu/sighting/184ba2eb-ece2-4c4b-8acc-99861962be89/export 2026-09-17T09:13:22.799368+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "184ba2eb-ece2-4c4b-8acc-99861962be89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhahybpxq2j", "content": "3/ FIREWALLS + PATCH: FortiGate CVE-2025-25249 exploited (PivotC2 RAT, 178 devices). PAN-OS CVE-2026-0310 (CVSS 9.2) root RCE. Sept Patch Tuesday: 973 vulns, 2 zero-days. Audit SSO, rotate creds, patch edge. #ThreatIntel", "creation_timestamp": "2026-09-14T04:10:06.219908Z"} 2026-09-14T04:10:06.219908+00:00 https://vulnerability.circl.lu/sighting/042ccdd1-2aae-46cb-89c3-2e00881caeef/export 2026-09-17T09:13:22.799470+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "042ccdd1-2aae-46cb-89c3-2e00881caeef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mvhaflnz2v2l", "content": "\ud83d\udea8 BREAKING: Dropbox breached via Lenovo SSO \u2014 5,000 accounts accessed w/o passwords. Microsoft 1M-email AI CEO fraud + passkey phishing. UNC3569 exploiting Tencent Sogou Input (CVE-2026-51990) \u2192 GrayRabbit. FortiGate CVE-2025-25249 (PivotC2 RAT). PAN-OS CVE-2026-0310 (CVSS 9.2). #CyberSecurity", "creation_timestamp": "2026-09-14T04:08:46.183375Z"} 2026-09-14T04:08:46.183375+00:00