<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-23T08:57:31.130160+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/954167dd-f2af-4534-a2cf-8a3393d923a4/export</id>
    <title>954167dd-f2af-4534-a2cf-8a3393d923a4</title>
    <updated>2026-08-23T08:57:31.156947+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "954167dd-f2af-4534-a2cf-8a3393d923a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnx32ot4m2p", "content": "CVE-2026-63385 - libevent\nThe Libevent library used for handling network events may treat specially encoded characters in web addresses as actual null bytes, causing parts of the address to be cut\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#libevent #debian #Debian12 #CVE #infosec", "creation_timestamp": "2026-08-22T09:20:04.059718Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/954167dd-f2af-4534-a2cf-8a3393d923a4/export"/>
    <published>2026-08-22T09:20:04.059718+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8568a8d9-af53-4cd7-b272-b3be780439bf/export</id>
    <title>8568a8d9-af53-4cd7-b272-b3be780439bf</title>
    <updated>2026-08-23T08:57:31.159942+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8568a8d9-af53-4cd7-b272-b3be780439bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtnmhcjcoy2p", "content": "CVE-2026-63385\nOlder versions of the Libevent library can mishandle specially crafted web requests. By using hidden characters in a URL or header, attackers may trick the software into skipping security checks, potentially\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-22T06:10:03.707951Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8568a8d9-af53-4cd7-b272-b3be780439bf/export"/>
    <published>2026-08-22T06:10:03.707951+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f78446e0-08b4-403e-99da-395897fbb598/export</id>
    <title>f78446e0-08b4-403e-99da-395897fbb598</title>
    <updated>2026-08-23T08:57:31.160107+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f78446e0-08b4-403e-99da-395897fbb598", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtk2dpdykp2p", "content": "\ud83d\udea8 CVE-2026-63385 \u2014 CVSS 9.2 CRITICAL\n\nLibevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has two HTTP parsing w...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-63385\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-20T20:07:55.960675Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f78446e0-08b4-403e-99da-395897fbb598/export"/>
    <published>2026-08-20T20:07:55.960675+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bdf435f1-d9f1-4418-a543-a7f9f3393367/export</id>
    <title>bdf435f1-d9f1-4418-a543-a7f9f3393367</title>
    <updated>2026-08-23T08:57:31.160220+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bdf435f1-d9f1-4418-a543-a7f9f3393367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-63385", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjzdqug2n2c", "content": "CVE-2026-63385\nOlder versions of the Libevent library can treat specially coded characters in web requests incorrectly. This can cause parts of a URL to be cut off or headers to be read differently, potentially letting\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T19:50:04.037014Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bdf435f1-d9f1-4418-a543-a7f9f3393367/export"/>
    <published>2026-08-20T19:50:04.037014+00:00</published>
  </entry>
</feed>
