https://vulnerability.circl.lu/sightings/feed 2026-05-31T05:45:46.818176+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/298d7357-276d-42cd-8e2a-12ead9f299f4/export 2026-05-31T05:45:47.029435+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "298d7357-276d-42cd-8e2a-12ead9f299f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2563", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23948\n\ud83d\udd39 Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5.\n\ud83d\udccf Published: 2025-01-22T14:29:24.502Z\n\ud83d\udccf Modified: 2025-01-22T15:24:58.850Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/wordpress/plugin/background-animation-blocks/vulnerability/wordpress-background-animation-blocks-plugin-2-1-5-local-file-inclusion-vulnerability?_s_id=cve", "creation_timestamp": "2025-01-22T16:01:51.000000Z"} 2025-01-22T16:01:51+00:00 https://vulnerability.circl.lu/sighting/e17e1475-0d18-449b-a156-7baa16020ad0/export 2026-05-31T05:45:47.029314+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e17e1475-0d18-449b-a156-7baa16020ad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://t.me/cvedetector/16094", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23942 - NgocCode WP Load Gallery Remote File Upload\", \n \"Content\": \"CVE ID : CVE-2025-23942 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Unrestricted Upload of File with Dangerous Type vulnerability in NgocCode WP Load Gallery allows Upload a Web Shell to a Web Server. This issue affects WP Load Gallery: from n/a through 2.1.6. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"} 2025-01-22T17:13:28+00:00 https://vulnerability.circl.lu/sighting/5421258e-009c-40d0-8080-1deeda783bc1/export 2026-05-31T05:45:47.029190+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "5421258e-009c-40d0-8080-1deeda783bc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23944", "type": "seen", "source": "https://t.me/cvedetector/16095", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23944 - WOOEXIM.COM WOOEXIM Object Injection Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23944 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Deserialization of Untrusted Data vulnerability in WOOEXIM.COM WOOEXIM allows Object Injection. This issue affects WOOEXIM: from n/a through 5.0.0. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:28.000000Z"} 2025-01-22T17:13:28+00:00 https://vulnerability.circl.lu/sighting/9773bc7c-72ad-4f8c-94e4-34efd566ac54/export 2026-05-31T05:45:47.029067+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9773bc7c-72ad-4f8c-94e4-34efd566ac54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23948", "type": "seen", "source": "https://t.me/cvedetector/16096", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23948 - WebArea PHP Remote File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23948 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebArea Background animation blocks allows PHP Local File Inclusion. This issue affects Background animation blocks: from n/a through 2.1.5. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:29.000000Z"} 2025-01-22T17:13:29+00:00 https://vulnerability.circl.lu/sighting/a3c57bae-c1b7-41bb-85f8-ff0043af92cd/export 2026-05-31T05:45:47.028934+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a3c57bae-c1b7-41bb-85f8-ff0043af92cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23949", "type": "seen", "source": "https://t.me/cvedetector/16097", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-23949 - Mihajlovic Nenad Improved Sale Badges PHP Remote File Inclusion Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-23949 \nPublished : Jan. 22, 2025, 3:15 p.m. | 44\u00a0minutes ago \nDescription : Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mihajlovic Nenad Improved Sale Badges \u2013 Free Version allows PHP Local File Inclusion. This issue affects Improved Sale Badges \u2013 Free Version: from n/a through 1.0.1. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"22 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T17:13:33.000000Z"} 2025-01-22T17:13:33+00:00 https://vulnerability.circl.lu/sighting/dbec780f-4231-4d83-add5-24b94127c740/export 2026-05-31T05:45:47.028806+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "dbec780f-4231-4d83-add5-24b94127c740", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lgg3apvlew2z", "content": "", "creation_timestamp": "2025-01-23T14:19:48.813245Z"} 2025-01-23T14:19:48.813245+00:00 https://vulnerability.circl.lu/sighting/46f2186b-cd9d-4c21-ad44-bc8cb754b285/export 2026-05-31T05:45:47.028689+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "46f2186b-cd9d-4c21-ad44-bc8cb754b285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/hOLG--AO3JPkph5SXhaEZPsqsMyW7qsjKUHXu0bcblbq2os", "content": "", "creation_timestamp": "2025-02-25T16:00:09.000000Z"} 2025-02-25T16:00:09+00:00 https://vulnerability.circl.lu/sighting/bafada83-907b-444b-910e-3127504523de/export 2026-05-31T05:45:47.028563+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "bafada83-907b-444b-910e-3127504523de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23942", "type": "published-proof-of-concept", "source": "Telegram/RTL4c24ehL4PcIHiJWtbR38qnR2ShnHV1PtZpJt4LwM00pI", "content": "", "creation_timestamp": "2025-02-25T20:00:08.000000Z"} 2025-02-25T20:00:08+00:00 https://vulnerability.circl.lu/sighting/59427951-2748-4d0c-ac21-7c30c84f7727/export 2026-05-31T05:45:47.028397+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "59427951-2748-4d0c-ac21-7c30c84f7727", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17368", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2394\n\ud83d\udd25 CVSS Score: 4.7 (cvssV4_0, Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H)\n\ud83d\udd39 Description: Ecovacs Home Android and iOS Mobile Applications up to version 3.3.0 contained embedded access keys and secrets for Alibaba Object Storage Service (OSS), leading to sensitive data disclosure.\n\ud83d\udccf Published: 2025-05-23T00:03:32.603Z\n\ud83d\udccf Modified: 2025-05-23T00:04:10.950Z\n\ud83d\udd17 References:\n1. https://www.themissinglink.com.au/security-advisories/cve-2025-2394\n2. https://www.ecovacs.com/global/userhelp/dsa20250507001", "creation_timestamp": "2025-05-23T00:44:03.000000Z"} 2025-05-23T00:44:03+00:00 https://vulnerability.circl.lu/sighting/fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83/export 2026-05-31T05:45:47.025798+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fd6dbc7a-fa8f-490b-b1f9-ab19c90efd83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-23945", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"} 2025-08-19T13:26:45+00:00