https://vulnerability.circl.lu/sightings/feed 2026-09-03T20:55:02.227112+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/3836521a-1757-42f8-a6f5-ac35595a48e0/export 2026-09-03T20:55:02.260784+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3836521a-1757-42f8-a6f5-ac35595a48e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/43502", "content": "EventLogin \u2014 CVE-2025-29969\n\nA flaw in the MS-EVEN protocol. Low-privileged users can write arbitrary files to a remote machine, effectively bypassing the need for an administrator account for remote file writes\n\n\ud83d\udd17 Source: \nhttps://github.com/SafeBreach-Labs/EventLogin-CVE-2025-29969\n\n\ud83d\udd17 Research:\nhttps://www.safebreach.com/blog/safebreach_labs_discovers_cve-2025-29969/\n\n#ad #windows #eventlog #rpc", "creation_timestamp": "2026-09-03T00:00:46.899590Z"} 2026-09-03T00:00:46.899590+00:00 https://vulnerability.circl.lu/sighting/192df7fc-bccb-4c52-b72c-49e4c1a0f662/export 2026-09-03T20:55:02.262179+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "192df7fc-bccb-4c52-b72c-49e4c1a0f662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43502", "content": "EventLogin \u2014 CVE-2025-29969\n\nA flaw in the MS-EVEN protocol. Low-privileged users can write arbitrary files to a remote machine, effectively bypassing the need for an administrator account for remote file writes\n\n\ud83d\udd17 Source: \nhttps://github.com/SafeBreach-Labs/EventLogin-CVE-2025-29969\n\n\ud83d\udd17 Research:\nhttps://www.safebreach.com/blog/safebreach_labs_discovers_cve-2025-29969/\n\n#ad #windows #eventlog #rpc", "creation_timestamp": "2026-09-02T06:00:15.771896Z"} 2026-09-02T06:00:15.771896+00:00 https://vulnerability.circl.lu/sighting/ef184441-e013-4e9a-89f6-177322bdd856/export 2026-09-03T20:55:02.262278+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "ef184441-e013-4e9a-89f6-177322bdd856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrutwtkftv2i", "content": "When I saw the CVE-2025-29969 fix (by \n@safebreach\n), I knew there was more to it. It's not as critical as it seems, but it was fun trying to find a way to still exploit this EventLog RPC endpoint\n\n\ud83d\udd01 RT @HackAndDo | reposted by @HackingLZ\nhttps://x.com/HackAndDo/status/2082839830707269811", "creation_timestamp": "2026-07-30T16:22:15.682646Z"} 2026-07-30T16:22:15.682646+00:00 https://vulnerability.circl.lu/sighting/fd0c34a3-db4c-4271-9a75-4ee21eae72c6/export 2026-09-03T20:55:02.262353+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fd0c34a3-db4c-4271-9a75-4ee21eae72c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://t.me/proxy_bar/3157", "content": "CVE-2025-29969 EventLogin\n*\n\u0414\u044b\u0440\u043a\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 MS-EVEN.\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nExploitation", "creation_timestamp": "2026-07-22T00:00:27.772239Z"} 2026-07-22T00:00:27.772239+00:00 https://vulnerability.circl.lu/sighting/18f94797-f165-41de-95e6-71ee3c231452/export 2026-09-03T20:55:02.262435+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "18f94797-f165-41de-95e6-71ee3c231452", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "published-proof-of-concept", "source": "Telegram/pPAZ8wXA8vH6MRSBmBOnia7CtKIzDGIvt__8Gq7G6sfmpzwm", "content": "", "creation_timestamp": "2026-07-21T00:00:38.493156Z"} 2026-07-21T00:00:38.493156+00:00 https://vulnerability.circl.lu/sighting/3afd3889-a18b-4639-9979-58b0947adf70/export 2026-09-03T20:55:02.262502+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3afd3889-a18b-4639-9979-58b0947adf70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://t.me/proxy_bar/3157", "content": "CVE-2025-29969 EventLogin\n*\n\u0414\u044b\u0440\u043a\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 MS-EVEN.\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nExploitation", "creation_timestamp": "2026-07-21T00:00:24.908147Z"} 2026-07-21T00:00:24.908147+00:00 https://vulnerability.circl.lu/sighting/18954d59-223f-487d-8e14-7db281abdaf6/export 2026-09-03T20:55:02.262580+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "18954d59-223f-487d-8e14-7db281abdaf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://t.me/proxy_bar/3157", "content": "CVE-2025-29969 EventLogin\n*\n\u0414\u044b\u0440\u043a\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 MS-EVEN.\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nExploitation", "creation_timestamp": "2026-07-20T19:00:07.885895Z"} 2026-07-20T19:00:07.885895+00:00 https://vulnerability.circl.lu/sighting/002b8727-17c4-4272-8175-41c0d2e20223/export 2026-09-03T20:55:02.262657+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "002b8727-17c4-4272-8175-41c0d2e20223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "published-proof-of-concept", "source": "Telegram/pPAZ8wXA8vH6MRSBmBOnia7CtKIzDGIvt__8Gq7G6sfmpzwm", "content": "", "creation_timestamp": "2026-07-20T16:00:05.285357Z"} 2026-07-20T16:00:05.285357+00:00 https://vulnerability.circl.lu/sighting/efe515b5-3dfa-4670-ae23-2891cb4c7e3b/export 2026-09-03T20:55:02.262724+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "efe515b5-3dfa-4670-ae23-2891cb4c7e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/co11ateral.bsky.social/post/3mfepsfvh622s", "content": "", "creation_timestamp": "2026-02-21T13:23:42.693743Z"} 2026-02-21T13:23:42.693743+00:00 https://vulnerability.circl.lu/sighting/736bc051-fdc1-4b9e-aac9-f26829be53c5/export 2026-09-03T20:55:02.262787+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "736bc051-fdc1-4b9e-aac9-f26829be53c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mfe3qx5q5x2c", "content": "", "creation_timestamp": "2026-02-21T07:24:32.936562Z"} 2026-02-21T07:24:32.936562+00:00