<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-19T22:43:40.114431+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1e6b82c3-9a7d-4797-9b26-dfe3c8145a01/export</id>
    <title>1e6b82c3-9a7d-4797-9b26-dfe3c8145a01</title>
    <updated>2026-06-19T22:43:40.536623+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1e6b82c3-9a7d-4797-9b26-dfe3c8145a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5301", "type": "seen", "source": "https://t.me/cibsecurity/71360", "content": "\u203c CVE-2023-5301 \u203c\n\nA vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipulation of the argument albumUploadFiles leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-240940.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-30T23:19:25.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1e6b82c3-9a7d-4797-9b26-dfe3c8145a01/export"/>
    <published>2023-09-30T23:19:25+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c631b331-3b4e-4b10-8148-432a5e0ee45d/export</id>
    <title>c631b331-3b4e-4b10-8148-432a5e0ee45d</title>
    <updated>2026-06-19T22:43:40.536523+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c631b331-3b4e-4b10-8148-432a5e0ee45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-53017", "type": "seen", "source": "https://t.me/cvedetector/21330", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-53017 - Linux Bluetooth HCI Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-53017 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: hci_sync: fix memory leak in hci_update_adv_data()  \n  \nWhen hci_cmd_sync_queue() failed in hci_update_adv_data(), inst_ptr is  \nnot freed, which will cause memory leak, convert to use ERR_PTR/PTR_ERR  \nto pass the instance to callback so no memory needs to be allocated. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:10:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c631b331-3b4e-4b10-8148-432a5e0ee45d/export"/>
    <published>2025-03-27T19:10:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ea75e90-2a32-4c55-b0d5-1042a42ca7de/export</id>
    <title>4ea75e90-2a32-4c55-b0d5-1042a42ca7de</title>
    <updated>2026-06-19T22:43:40.536417+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4ea75e90-2a32-4c55-b0d5-1042a42ca7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-53018", "type": "seen", "source": "https://t.me/cvedetector/21332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-53018 - Linux Bluetooth hci_conn Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-53018 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nBluetooth: hci_conn: Fix memory leaks  \n  \nWhen hci_cmd_sync_queue() failed in hci_le_terminate_big() or  \nhci_le_big_terminate(), the memory pointed by variable d is not freed,  \nwhich will cause memory leak. Add release process to error path. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:10:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ea75e90-2a32-4c55-b0d5-1042a42ca7de/export"/>
    <published>2025-03-27T19:10:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c9bce729-bbc6-4b13-bcdc-341975122d6d/export</id>
    <title>c9bce729-bbc6-4b13-bcdc-341975122d6d</title>
    <updated>2026-06-19T22:43:40.535533+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c9bce729-bbc6-4b13-bcdc-341975122d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-53019", "type": "seen", "source": "https://t.me/cvedetector/21331", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-53019 - \"Qualcomm Snapdragon netMDIO Array Index Out-of-Bounds Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2023-53019 \nPublished : March 27, 2025, 5:15 p.m. | 27\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: mdio: validate parameter addr in mdiobus_get_phy()  \n  \nThe caller may pass any value as addr, what may result in an out-of-bounds  \naccess to array mdio_map. One existing case is stmmac_init_phy() that  \nmay pass -1 as addr. Therefore validate addr before using it. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T19:10:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c9bce729-bbc6-4b13-bcdc-341975122d6d/export"/>
    <published>2025-03-27T19:10:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34c98cfc-ba77-4501-be8f-e638e1393728/export</id>
    <title>34c98cfc-ba77-4501-be8f-e638e1393728</title>
    <updated>2026-06-19T22:43:40.534161+00:00</updated>
    <author>
      <name>Alexandre Dulaunoy</name>
      <uri>https://vulnerability.circl.lu/user/adulau</uri>
    </author>
    <content>{"uuid": "34c98cfc-ba77-4501-be8f-e638e1393728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2023-53010", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34c98cfc-ba77-4501-be8f-e638e1393728/export"/>
    <published>2025-12-03T14:14:49.267740+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cda9297f-a6eb-4e12-abe4-fa128e9a6c15/export</id>
    <title>cda9297f-a6eb-4e12-abe4-fa128e9a6c15</title>
    <updated>2026-06-19T22:43:40.531819+00:00</updated>
    <author>
      <name>Joseph Lee</name>
      <uri>https://vulnerability.circl.lu/user/syspect</uri>
    </author>
    <content>{"uuid": "cda9297f-a6eb-4e12-abe4-fa128e9a6c15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-53010", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cda9297f-a6eb-4e12-abe4-fa128e9a6c15/export"/>
    <published>2026-03-19T00:00:00+00:00</published>
  </entry>
</feed>
