https://vulnerability.circl.lu/sightings/feed 2026-09-17T08:35:15.302345+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/32aa0953-3504-4b85-a3f9-619264061b05/export 2026-09-17T08:35:15.332580+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "32aa0953-3504-4b85-a3f9-619264061b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.499136Z"} 2026-09-15T00:00:28.499136+00:00 https://vulnerability.circl.lu/sighting/e6b47f6b-efb5-48c9-861c-8d5d43bf3caa/export 2026-09-17T08:35:15.335434+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e6b47f6b-efb5-48c9-861c-8d5d43bf3caa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.206400Z"} 2026-09-15T00:00:28.206400+00:00 https://vulnerability.circl.lu/sighting/19a888f2-ae4d-414d-937a-5c6ff25f91b8/export 2026-09-17T08:35:15.335580+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "19a888f2-ae4d-414d-937a-5c6ff25f91b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n @hackeronereports", "creation_timestamp": "2026-09-15T00:00:27.982065Z"} 2026-09-15T00:00:27.982065+00:00 https://vulnerability.circl.lu/sighting/9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3/export 2026-09-17T08:35:15.335688+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9a7ac58f-ceeb-47a7-89c3-2f327bd25ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:03.205168Z"} 2026-09-14T10:00:03.205168+00:00 https://vulnerability.circl.lu/sighting/c4950275-fccd-44de-a16c-07a0b22dfa3b/export 2026-09-17T08:35:15.335783+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c4950275-fccd-44de-a16c-07a0b22dfa3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27210", "type": "seen", "source": "https://t.me/hackeronereports/405", "content": "\ud83c\udfaf New Report #3255707: Windows Device Names Still Allow Path Traversal in UNC Paths After CVE-2025-27210 Fix\n\ud83d\udd3aSeverity: High\n\ud83d\udc7d Reporter: oblivionsage\n\u2b50\ufe0f Reputation: 248\n\ud83d\udee0 State: informative\n\ud83d\udcbc Team: Node.js\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-07-16\n\u23f0 Disclosed: 2025-07-28 18:56:39\n\ud83d\udcdd Summary: null\n\ud83d\udcc2 Report JSON File: 3255707\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:05.173512Z"} 2026-09-14T06:00:05.173512+00:00 https://vulnerability.circl.lu/sighting/88752d32-b3e2-413f-be5c-6ec2e498b08c/export 2026-09-17T08:35:15.335883+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "88752d32-b3e2-413f-be5c-6ec2e498b08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27218", "type": "seen", "source": "https://t.me/hackeronereports/244", "content": "\ud83c\udfaf New Report #3090123: insecure deserilize object leads to RCE On Sitecore (CVE-\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588-27218)\n\ud83d\udd3aSeverity: Critical\n\ud83d\udc7d Reporter: reinhardtthe\n\ud83d\udcbc Team: Mars\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-04-12\n\u23f0 Disclosed: 2025-05-12 16:04:46\n\ud83d\udcdd Summary: This critical vulnerability involved an insecure deserialization issue in Sitecore implementation, which was assigned CVE-2025-27218. The vulnerability allowed remote code execution through unsanitized user input in the ThumbnailsAccessToken header. The vulnerability was remediated by removing public access to the affected site, which was then protected behind Cloudflare WAF.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.871227Z"} 2026-09-14T06:00:04.871227+00:00 https://vulnerability.circl.lu/sighting/74229fa8-a58d-41f1-bec8-be4d49e2bd20/export 2026-09-17T08:35:15.335982+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "74229fa8-a58d-41f1-bec8-be4d49e2bd20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27219", "type": "published-proof-of-concept", "source": "https://t.me/hackeronereports/216", "content": "\ud83c\udfaf New Report #3013913: [CVE-2025-27219 Denial of Service in CGI::Cookie.parse](https://hackerone.com/reports/3013913)\n\ud83d\udd3aSeverity: Medium\n\ud83d\udc7d Reporter: lio346\n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-26\n\u23f0 Disclosed: 2025-04-27 14:27:52\n\ud83d\udcdd Summary: A denial-of-service vulnerability was discovered in the CGI::Cookie.parse method of the Ruby cgi gem. The vulnerability was caused by the method taking super-linear time to parse a maliciously crafted cookie string. This could have led to service disruptions. The vulnerability was assigned the CVE identifier CVE-2025-27219.\n @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.590734Z"} 2026-09-14T06:00:04.590734+00:00 https://vulnerability.circl.lu/sighting/264a9f84-e723-4bce-8451-63ff2fe3cc51/export 2026-09-17T08:35:15.336079+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "264a9f84-e723-4bce-8451-63ff2fe3cc51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2775", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:04.703220Z"} 2026-09-12T10:00:04.703220+00:00 https://vulnerability.circl.lu/sighting/bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e/export 2026-09-17T08:35:15.336171+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bedb5f9e-7d06-43e6-a73b-c0848d2a5f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101875", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE-in-Apache-Camel\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-10 00:00:25\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2025-27636 PoC written in Python\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.308609Z"} 2026-09-11T00:00:53.308609+00:00 https://vulnerability.circl.lu/sighting/3e8d32ec-d642-4312-8bcf-28465d093a8d/export 2026-09-17T08:35:15.336268+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3e8d32ec-d642-4312-8bcf-28465d093a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-27636", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/101876", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-27636-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a AC8999\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-09 23:33:38\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC written in python for CVE-2025-27636\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-11T00:00:53.265824Z"} 2026-09-11T00:00:53.265824+00:00