<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-11T08:46:45.858338+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0fe8c57c-cf74-44e7-ab6a-30f76ff9cbd0/export</id>
    <title>0fe8c57c-cf74-44e7-ab6a-30f76ff9cbd0</title>
    <updated>2026-10-11T08:46:45.865740+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0fe8c57c-cf74-44e7-ab6a-30f76ff9cbd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-H637-C88J-47WQ", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1946", "content": "1.Hacking HTTP CORS from inside out -\na theory to practice approach\nhttps://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528\n\n2.Vulnerabilities in Linux Bluetooth Allow , Zero-Click Attacks-BleedingTooth- CVE-2020-12351\nHeap-Based Type Confusion in L2CAP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n\n3.CVE-2020-12352\nBadChoice - Stack-Based Information Leak in A2MP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n\n4.CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649\n\n5.Amazon Kindle - iOS App Reverse Engineering for eBooks Leaking\", 2020.\nhttps://abjurato.github.io/stories/kindleEbooks.html", "creation_timestamp": "2026-09-11T22:00:04.787048Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0fe8c57c-cf74-44e7-ab6a-30f76ff9cbd0/export"/>
    <published>2026-09-11T22:00:04.787048+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6f273a13-3e20-4101-b05e-cefd2ee9bc82/export</id>
    <title>6f273a13-3e20-4101-b05e-cefd2ee9bc82</title>
    <updated>2026-10-11T08:46:45.867047+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6f273a13-3e20-4101-b05e-cefd2ee9bc82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-H637-C88J-47WQ", "type": "seen", "source": "https://t.me/cissp/1946", "content": "1.Hacking HTTP CORS from inside out -\na theory to practice approach\nhttps://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528\n\n2.Vulnerabilities in Linux Bluetooth Allow , Zero-Click Attacks-BleedingTooth- CVE-2020-12351\nHeap-Based Type Confusion in L2CAP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n\n3.CVE-2020-12352\nBadChoice - Stack-Based Information Leak in A2MP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n\n4.CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649\n\n5.Amazon Kindle - iOS App Reverse Engineering for eBooks Leaking\", 2020.\nhttps://abjurato.github.io/stories/kindleEbooks.html", "creation_timestamp": "2026-09-01T17:01:09.239149Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6f273a13-3e20-4101-b05e-cefd2ee9bc82/export"/>
    <published>2026-09-01T17:01:09.239149+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8de4bc96-2629-4e20-92d7-4b746b3398fb/export</id>
    <title>8de4bc96-2629-4e20-92d7-4b746b3398fb</title>
    <updated>2026-10-11T08:46:45.867148+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8de4bc96-2629-4e20-92d7-4b746b3398fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-H637-C88J-47WQ", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1918", "content": "#WLAN_Security\nBleedingTooth:\nVulnerabilities in Linux Bluetooth Allow 0-Click Attacks:\n1. CVE-2020-12351.\nHeap-Based Type Confusion in L2CAP:\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n2. CVE-2020-12352.\nBadChoice - Stack-Based Infoleak in A2MP:\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n3. CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser:\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649", "creation_timestamp": "2024-07-19T19:59:44.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8de4bc96-2629-4e20-92d7-4b746b3398fb/export"/>
    <published>2024-07-19T19:59:44+00:00</published>
  </entry>
</feed>
