https://vulnerability.circl.lu/sightings/feed 2026-09-17T09:01:41.797178+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/91c188e5-dc14-4389-8a46-b6502396c780/export 2026-09-17T09:01:41.814071+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "91c188e5-dc14-4389-8a46-b6502396c780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37735", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2016", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Elastic Defend \u0434\u043b\u044f Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\u2014\n\nSummary:\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Elastic \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Elastic Defend \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-37735, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Defend \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-10 07:44 | Author: Vulner Queen\n\n#defend #elastic #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-elastic-defend-dlya-windows-pozvolyaet-povyshat-privilegii_16155", "creation_timestamp": "2026-09-10T00:00:36.172853Z"} 2026-09-10T00:00:36.172853+00:00 https://vulnerability.circl.lu/sighting/f8cbf429-c385-499c-8cf8-9c6e9ca5efef/export 2026-09-17T09:01:41.817329+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f8cbf429-c385-499c-8cf8-9c6e9ca5efef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37735", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2016", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Elastic Defend \u0434\u043b\u044f Windows \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\u2014\n\nSummary:\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Elastic \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430 Elastic Defend \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Windows. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-37735, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u0441\u043b\u0443\u0436\u0431\u0435 Defend \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u044d\u0442\u0443 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0445...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-10 07:44 | Author: Vulner Queen\n\n#defend #elastic #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-elastic-defend-dlya-windows-pozvolyaet-povyshat-privilegii_16155", "creation_timestamp": "2026-09-09T05:00:15.454064Z"} 2026-09-09T05:00:15.454064+00:00 https://vulnerability.circl.lu/sighting/e7f7e20f-e922-4fd9-b5db-e00eb9f27e2a/export 2026-09-17T09:01:41.817487+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e7f7e20f-e922-4fd9-b5db-e00eb9f27e2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37164", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/hpe_oneview_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Nguyen Quoc Khanh\", \"remmons-r7\", \"sfewer-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated RCE vulnerability, CVE-2025-37164, against Hewlett Packard Enterprise\\n (HPE) OneView. All versions below 11.00 are vulnerable (so long as the vendor supplied hotfix has not been\\n applied), however some VM product versions do not enable the vulnerable \\\"ID Pools\\\" endpoint, and are not\\n exploitable.\", \"disclosure_date\": \"2025-12-16\", \"fullname\": \"exploit/linux/http/hpe_oneview_rce\", \"is_install_path\": true, \"mod_time\": \"2025-12-19 15:38:43 +0000\", \"name\": \"HPE OneView unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/hpe_oneview_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/hpe_oneview_rce\", \"references\": [\"CVE-2025-37164\", \"URL-https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbgn04985en_us&docLocale=en_US\", \"URL-https://www.rapid7.com/blog/post/etr-cve-2025-37164-critical-unauthenticated-rce-affecting-hewlett-packard-enterprise-oneview/\", \"URL-https://attackerkb.com/topics/ixWdbDvjwX/cve-2025-37164/rapid7-analysis\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:37.655458Z"} 2026-09-08T06:48:37.655458+00:00 https://vulnerability.circl.lu/sighting/c63568c0-6eed-46bb-a6b3-6eefc11e980d/export 2026-09-17T09:01:41.817632+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c63568c0-6eed-46bb-a6b3-6eefc11e980d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37899", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160936", "content": "Your strategy for hunting 0days\nhttps://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/\n\nI recently read the post about this guy finding a 0day using chatgpt o3 model and it's really interesting the way he talks about how he carefully picks the attack surface for the model to analyze, only providing certain handler functions to look for UAF's, up to a limited call depth. It made me wonder how hunting for 0days requires not only a carefully thought out strategy, but it's also probably different for everyone. I''m curious how different vuln researchers approach this? What is your strategy? How do you pick the codebase/project to research and how do you pick the specific part/section of the source code (or execution flow) to analyze? In general: what is your strategy? submitted by /u/Lmao_vogreward_shard (https://www.reddit.com/user/Lmao_vogreward_shard) \n [link] (https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/)", "creation_timestamp": "2026-09-04T00:00:53.645721Z"} 2026-09-04T00:00:53.645721+00:00 https://vulnerability.circl.lu/sighting/0a67c05e-6c7a-40a6-86d0-a92854b593bd/export 2026-09-17T09:01:41.817746+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0a67c05e-6c7a-40a6-86d0-a92854b593bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37899", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/160936", "content": "Your strategy for hunting 0days\nhttps://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/\n\nI recently read the post about this guy finding a 0day using chatgpt o3 model and it's really interesting the way he talks about how he carefully picks the attack surface for the model to analyze, only providing certain handler functions to look for UAF's, up to a limited call depth. It made me wonder how hunting for 0days requires not only a carefully thought out strategy, but it's also probably different for everyone. I''m curious how different vuln researchers approach this? What is your strategy? How do you pick the codebase/project to research and how do you pick the specific part/section of the source code (or execution flow) to analyze? In general: what is your strategy? submitted by /u/Lmao_vogreward_shard (https://www.reddit.com/user/Lmao_vogreward_shard) \n [link] (https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/)", "creation_timestamp": "2026-09-03T10:00:04.241147Z"} 2026-09-03T10:00:04.241147+00:00 https://vulnerability.circl.lu/sighting/41beb9c0-9b30-48c0-acae-aa1eb5d50249/export 2026-09-17T09:01:41.817864+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "41beb9c0-9b30-48c0-acae-aa1eb5d50249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37899", "type": "seen", "source": "https://t.me/hacking_Attack/160936", "content": "Your strategy for hunting 0days\nhttps://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/\n\nI recently read the post about this guy finding a 0day using chatgpt o3 model and it's really interesting the way he talks about how he carefully picks the attack surface for the model to analyze, only providing certain handler functions to look for UAF's, up to a limited call depth. It made me wonder how hunting for 0days requires not only a carefully thought out strategy, but it's also probably different for everyone. I''m curious how different vuln researchers approach this? What is your strategy? How do you pick the codebase/project to research and how do you pick the specific part/section of the source code (or execution flow) to analyze? In general: what is your strategy? submitted by /u/Lmao_vogreward_shard (https://www.reddit.com/user/Lmao_vogreward_shard) \n [link] (https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/)", "creation_timestamp": "2026-09-02T01:00:40.316224Z"} 2026-09-02T01:00:40.316224+00:00 https://vulnerability.circl.lu/sighting/ea5d8be6-c429-418c-a3bf-5549d2375a9c/export 2026-09-17T09:01:41.817972+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ea5d8be6-c429-418c-a3bf-5549d2375a9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37899", "type": "seen", "source": "https://t.me/hacking_Attack/160936", "content": "Your strategy for hunting 0days\nhttps://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/\n\nI recently read the post about this guy finding a 0day using chatgpt o3 model and it's really interesting the way he talks about how he carefully picks the attack surface for the model to analyze, only providing certain handler functions to look for UAF's, up to a limited call depth. It made me wonder how hunting for 0days requires not only a carefully thought out strategy, but it's also probably different for everyone. I''m curious how different vuln researchers approach this? What is your strategy? How do you pick the codebase/project to research and how do you pick the specific part/section of the source code (or execution flow) to analyze? In general: what is your strategy? submitted by /u/Lmao_vogreward_shard (https://www.reddit.com/user/Lmao_vogreward_shard) \n [link] (https://sean.heelan.io/2025/05/22/how-i-used-o3-to-find-cve-2025-37899-a-remote-zeroday-vulnerability-in-the-linux-kernels-smb-implementation/) [comments] (https://www.reddit.com/r/redteamsec/comments/1kwtl4f/your_strategy_for_hunting_0days/)", "creation_timestamp": "2026-09-01T20:00:23.771640Z"} 2026-09-01T20:00:23.771640+00:00 https://vulnerability.circl.lu/sighting/2c80fa02-a516-4bbf-826c-17e35ef9e7a5/export 2026-09-17T09:01:41.818075+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2c80fa02-a516-4bbf-826c-17e35ef9e7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37164", "type": "exploited", "source": "https://t.me/CyberDispatch/525", "content": "Check Point says CVE-2025-37164 is being mass-exploited to spread the RondoDox botnet, with 40,000+ attacks on Jan 7.\n\nThe activity targeted government, finance, and industrial sectors, prompting same-day KEV inclusion.", "creation_timestamp": "2026-08-31T00:00:10.670720Z"} 2026-08-31T00:00:10.670720+00:00 https://vulnerability.circl.lu/sighting/11ae2144-b2e0-481f-8196-2d956e35a2a9/export 2026-09-17T09:01:41.818177+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "11ae2144-b2e0-481f-8196-2d956e35a2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37164", "type": "seen", "source": "https://t.me/CyberDispatch/525", "content": "Check Point says CVE-2025-37164 is being mass-exploited to spread the RondoDox botnet, with 40,000+ attacks on Jan 7.\n\nThe activity targeted government, finance, and industrial sectors, prompting same-day KEV inclusion.", "creation_timestamp": "2026-08-30T00:00:49.263064Z"} 2026-08-30T00:00:49.263064+00:00 https://vulnerability.circl.lu/sighting/90b069e7-9d9a-48d0-92a7-119223a3ddb9/export 2026-09-17T09:01:41.818276+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "90b069e7-9d9a-48d0-92a7-119223a3ddb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-37164", "type": "seen", "source": "https://t.me/CyberDispatch/525", "content": "Check Point says CVE-2025-37164 is being mass-exploited to spread the RondoDox botnet, with 40,000+ attacks on Jan 7.\n\nThe activity targeted government, finance, and industrial sectors, prompting same-day KEV inclusion.", "creation_timestamp": "2026-08-29T20:00:23.670456Z"} 2026-08-29T20:00:23.670456+00:00