<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-08T03:58:48.844222+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/eee1fe45-d6ea-4798-932a-4a36b3292b08/export</id>
    <title>eee1fe45-d6ea-4798-932a-4a36b3292b08</title>
    <updated>2026-06-08T03:58:48.858257+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "eee1fe45-d6ea-4798-932a-4a36b3292b08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33829", "type": "seen", "source": "Telegram/vpOabQVvb76izlIWt2pzp7PU5zl-D7jeeGQcHuuxEyFlkWM", "content": "", "creation_timestamp": "2026-05-21T09:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/eee1fe45-d6ea-4798-932a-4a36b3292b08/export"/>
    <published>2026-05-21T09:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b018c136-9c29-436e-bf27-2addec26f765/export</id>
    <title>b018c136-9c29-436e-bf27-2addec26f765</title>
    <updated>2026-06-08T03:58:48.858140+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b018c136-9c29-436e-bf27-2addec26f765", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/85570", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC #Exploit\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a IKEV2-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EpSiLoNPoInTOrI\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a C++\n\u2b50 Star\u6570\u91cf\uff1a 2  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-05-23 14:46:42\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nIKEv2, ikeext.dll, CVE-2026-33824, double free, heap grooming, ROP, SKF fragmentation, Windows exploit, anti-debug, obfuscation, API hooking, shellcode, reverse shell\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-05-23T15:00:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b018c136-9c29-436e-bf27-2addec26f765/export"/>
    <published>2026-05-23T15:00:04+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b0c9ac80-78d3-43ab-9c45-777ef1042cb7/export</id>
    <title>b0c9ac80-78d3-43ab-9c45-777ef1042cb7</title>
    <updated>2026-06-08T03:58:48.858030+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b0c9ac80-78d3-43ab-9c45-777ef1042cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33829", "type": "seen", "source": "https://bsky.app/profile/oxfemale.bsky.social/post/3mnd5ut2d7c2e", "content": "Same bug class. No CVE. No fix. The NTLM coercion primitive in the Windows search: URI handler is technically identical to CVE-2026-33829 in the Snipping Tool. Same severity rating, same mechanism,\nhttps://core-jmp.org/2026/06/one-click-one-hash-unpatched-ntlm-coercion-in-windows-search-uri-handler/", "creation_timestamp": "2026-06-02T17:51:24.944390Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b0c9ac80-78d3-43ab-9c45-777ef1042cb7/export"/>
    <published>2026-06-02T17:51:24.944390+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c022923-f116-4cba-94ba-ef8cbde09720/export</id>
    <title>3c022923-f116-4cba-94ba-ef8cbde09720</title>
    <updated>2026-06-08T03:58:48.857915+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c022923-f116-4cba-94ba-ef8cbde09720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33829", "type": "seen", "source": "https://thehackernews.com/2026/06/unpatched-windows-search-uri.html", "content": "Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker.\n\nLike in the case of CVE-2026-33829, which impacted the Windows Snipping Tool's ms-screensketch: URI handler, the newly flagged issue resides in the search: URI handler, per Huntress.\n\nCVE-2026-33829 refers to a spoofing vulnerability that could expose", "creation_timestamp": "2026-06-03T08:18:52.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c022923-f116-4cba-94ba-ef8cbde09720/export"/>
    <published>2026-06-03T08:18:52+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e1111636-da82-4b7c-ac08-22f348f29582/export</id>
    <title>e1111636-da82-4b7c-ac08-22f348f29582</title>
    <updated>2026-06-08T03:58:48.857800+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e1111636-da82-4b7c-ac08-22f348f29582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33829", "type": "seen", "source": "Telegram/x2qwCNvu1PGZuLFoFtok9OYnsOTKYazwumGAflAk82TqFw", "content": "", "creation_timestamp": "2026-06-03T12:01:59.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e1111636-da82-4b7c-ac08-22f348f29582/export"/>
    <published>2026-06-03T12:01:59+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7fb76f38-e91d-4dbc-8192-88e4b0143d04/export</id>
    <title>7fb76f38-e91d-4dbc-8192-88e4b0143d04</title>
    <updated>2026-06-08T03:58:48.857673+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7fb76f38-e91d-4dbc-8192-88e4b0143d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33829", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mngy3pusi22h", "content": "Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes\n\nCybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to the attacker.\n\nLike in the case of CVE-2026-33829, which impacted the W\u2026\n#hackernews #news", "creation_timestamp": "2026-06-04T06:18:31.774055Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7fb76f38-e91d-4dbc-8192-88e4b0143d04/export"/>
    <published>2026-06-04T06:18:31.774055+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ff82333c-8994-4af3-8f97-94119cfc51a0/export</id>
    <title>ff82333c-8994-4af3-8f97-94119cfc51a0</title>
    <updated>2026-06-08T03:58:48.857544+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ff82333c-8994-4af3-8f97-94119cfc51a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33825", "type": "seen", "source": "https://bsky.app/profile/newstecnicas.com/post/3mnhnqqn3hc24", "content": "\ud83d\udee1\ufe0f #Alerta de #Seguridad: C\u00f3mo Proteger tus Sistemas de la Falla #Cr\u00edtica CVE-2026-33825 en #Oracle www.newstecnicas.com/2026/06/aler...", "creation_timestamp": "2026-06-04T12:46:09.595360Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ff82333c-8994-4af3-8f97-94119cfc51a0/export"/>
    <published>2026-06-04T12:46:09.595360+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7c1b5b5-40e6-478e-baef-4ad89888f6de/export</id>
    <title>e7c1b5b5-40e6-478e-baef-4ad89888f6de</title>
    <updated>2026-06-08T03:58:48.857418+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7c1b5b5-40e6-478e-baef-4ad89888f6de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33829", "type": "seen", "source": "https://bsky.app/profile/securitycyberuk.bsky.social/post/3mnithx6gpx2v", "content": "\ud83d\udea8 [CRITICAL INFRASTRUCTURE ALERT]: CVE-2026-33829\n\n\u2022 CVE ID: CVE-2026-33829\n\u2022 CVSS Score: 4.3 (Medium)\n\u2022 Affected: Unpatched Window\n\nhttps://securitycyber.uk", "creation_timestamp": "2026-06-05T00:01:12.501292Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7c1b5b5-40e6-478e-baef-4ad89888f6de/export"/>
    <published>2026-06-05T00:01:12.501292+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46709373-32ad-450f-82d8-1217b493f856/export</id>
    <title>46709373-32ad-450f-82d8-1217b493f856</title>
    <updated>2026-06-08T03:58:48.857264+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46709373-32ad-450f-82d8-1217b493f856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33824", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mnk57guyks24", "content": "CVE-2026-33824: Remote Code Execution in Windows IKEv2\n\nwww.zerodayinitiative.com/blog/2026/4/...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-06-05T12:28:07.342302Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46709373-32ad-450f-82d8-1217b493f856/export"/>
    <published>2026-06-05T12:28:07.342302+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43eb11d1-4635-4a8e-9b8b-fd4ccb35a44a/export</id>
    <title>43eb11d1-4635-4a8e-9b8b-fd4ccb35a44a</title>
    <updated>2026-06-08T03:58:48.855827+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43eb11d1-4635-4a8e-9b8b-fd4ccb35a44a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-33824", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mnk57guyks24", "content": "CVE-2026-33824: Remote Code Execution in Windows IKEv2\n\nwww.zerodayinitiative.com/blog/2026/4/...\n\n#Cybersecurity #ThreatIntel #Vulnerability", "creation_timestamp": "2026-06-05T12:28:07.356162Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43eb11d1-4635-4a8e-9b8b-fd4ccb35a44a/export"/>
    <published>2026-06-05T12:28:07.356162+00:00</published>
  </entry>
</feed>
