https://vulnerability.circl.lu/sightings/feed 2026-05-06T10:39:28.502829+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e4baadca-0986-45cc-b7a5-97cbdd2d5eaf/export 2026-05-06T10:39:28.840557+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e4baadca-0986-45cc-b7a5-97cbdd2d5eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29720", "type": "seen", "source": "https://t.me/cibsecurity/64431", "content": "\u203c CVE-2023-29720 \u203c\n\nSofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T00:32:24.000000Z"} 2023-05-19T00:32:24+00:00 https://vulnerability.circl.lu/sighting/a390a29b-e9f1-4e2e-9bfc-c25ee0aff2f0/export 2026-05-06T10:39:28.840446+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "a390a29b-e9f1-4e2e-9bfc-c25ee0aff2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2972", "type": "seen", "source": "https://t.me/cibsecurity/64779", "content": "\u203c CVE-2023-2972 \u203c\n\nPrototype Pollution in GitHub repository antfu/utils prior to 0.7.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T14:18:31.000000Z"} 2023-05-30T14:18:31+00:00 https://vulnerability.circl.lu/sighting/be67cc42-ee6e-42a2-8822-56db6729f8fa/export 2026-05-06T10:39:28.840357+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "be67cc42-ee6e-42a2-8822-56db6729f8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29723", "type": "seen", "source": "https://t.me/cibsecurity/64872", "content": "\u203c CVE-2023-29723 \u203c\n\nThe Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T00:25:34.000000Z"} 2023-06-02T00:25:34+00:00 https://vulnerability.circl.lu/sighting/048e6732-6c6d-447d-8255-fbdd418e5457/export 2026-05-06T10:39:28.840235+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "048e6732-6c6d-447d-8255-fbdd418e5457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29725", "type": "seen", "source": "https://t.me/cibsecurity/64874", "content": "\u203c CVE-2023-29725 \u203c\n\nThe BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T09:38:09.000000Z"} 2023-06-07T09:38:09+00:00 https://vulnerability.circl.lu/sighting/31292597-4fba-42e1-b26e-564cc0702697/export 2026-05-06T10:39:28.840132+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "31292597-4fba-42e1-b26e-564cc0702697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29724", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/836", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29724\n\ud83d\udd39 Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:47:31.678Z\n\ud83d\udd17 References:\n1. http://bungaakpstudio007.com\n2. https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK\n3. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29724/CVE%20detail.md", "creation_timestamp": "2025-01-08T21:13:38.000000Z"} 2025-01-08T21:13:38+00:00 https://vulnerability.circl.lu/sighting/991007ff-4ddd-4314-be5a-32cedf802c1c/export 2026-05-06T10:39:28.840013+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "991007ff-4ddd-4314-be5a-32cedf802c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/838", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29725\n\ud83d\udd39 Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:44:44.018Z\n\ud83d\udd17 References:\n1. http://bungaakpstudio007.com\n2. https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK\n3. https://play.google.com/store/apps/details?id=com.cuiet.blockCalls\n4. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29725/CVE%20detail.md", "creation_timestamp": "2025-01-08T21:13:43.000000Z"} 2025-01-08T21:13:43+00:00 https://vulnerability.circl.lu/sighting/4ee8e747-5e77-4d41-8ba1-5b7a433919e8/export 2026-05-06T10:39:28.839895+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "4ee8e747-5e77-4d41-8ba1-5b7a433919e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29722", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29722\n\ud83d\udd39 Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:51:33.129Z\n\ud83d\udd17 References:\n1. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md", "creation_timestamp": "2025-01-09T18:17:17.000000Z"} 2025-01-09T18:17:17+00:00 https://vulnerability.circl.lu/sighting/ed0e46ba-911f-4221-856c-fbb2b1d502dd/export 2026-05-06T10:39:28.839730+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "ed0e46ba-911f-4221-856c-fbb2b1d502dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29723\n\ud83d\udd39 Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:50:13.770Z\n\ud83d\udd17 References:\n1. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29723/CVE%20detail.md", "creation_timestamp": "2025-01-09T18:17:28.000000Z"} 2025-01-09T18:17:28+00:00 https://vulnerability.circl.lu/sighting/50eace9f-cc51-42e8-b26f-e2b6564c61cc/export 2026-05-06T10:39:28.836545+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "50eace9f-cc51-42e8-b26f-e2b6564c61cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2972", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-2972\n\ud83d\udd39 Description: Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.\n\ud83d\udccf Published: 2023-05-30T00:00:00\n\ud83d\udccf Modified: 2025-01-10T18:53:01.436Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/009f1cd9-401c-49a7-bd08-be35cff6faef\n2. https://github.com/antfu/utils/commit/7f8b16c6181c988bdb96613fbb2533b345f68682", "creation_timestamp": "2025-01-10T19:07:02.000000Z"} 2025-01-10T19:07:02+00:00