<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 09:59:10 +0000</lastBuildDate>
    <item>
      <title>c54fd5ef-50ad-4d96-94aa-33d5ff469e66</title>
      <link>https://vulnerability.circl.lu/sighting/c54fd5ef-50ad-4d96-94aa-33d5ff469e66/export</link>
      <description>{"uuid": "c54fd5ef-50ad-4d96-94aa-33d5ff469e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:09.063844Z"}</description>
      <content:encoded>{"uuid": "c54fd5ef-50ad-4d96-94aa-33d5ff469e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:00:09.063844Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c54fd5ef-50ad-4d96-94aa-33d5ff469e66/export</guid>
      <pubDate>Tue, 15 Sep 2026 10:00:09 +0000</pubDate>
    </item>
    <item>
      <title>fd878c7a-d686-4976-9477-191fff3773f6</title>
      <link>https://vulnerability.circl.lu/sighting/fd878c7a-d686-4976-9477-191fff3773f6/export</link>
      <description>{"uuid": "fd878c7a-d686-4976-9477-191fff3773f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:06.445822Z"}</description>
      <content:encoded>{"uuid": "fd878c7a-d686-4976-9477-191fff3773f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:06.445822Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fd878c7a-d686-4976-9477-191fff3773f6/export</guid>
      <pubDate>Sun, 13 Sep 2026 10:00:06 +0000</pubDate>
    </item>
    <item>
      <title>ddda1a94-ac76-45e4-9d24-23106398124a</title>
      <link>https://vulnerability.circl.lu/sighting/ddda1a94-ac76-45e4-9d24-23106398124a/export</link>
      <description>{"uuid": "ddda1a94-ac76-45e4-9d24-23106398124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:15.440706Z"}</description>
      <content:encoded>{"uuid": "ddda1a94-ac76-45e4-9d24-23106398124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-11)", "content": "", "creation_timestamp": "2026-09-12T10:00:15.440706Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ddda1a94-ac76-45e4-9d24-23106398124a/export</guid>
      <pubDate>Sat, 12 Sep 2026 10:00:15 +0000</pubDate>
    </item>
    <item>
      <title>748079de-d878-42e6-887e-4d87f5f79a80</title>
      <link>https://vulnerability.circl.lu/sighting/748079de-d878-42e6-887e-4d87f5f79a80/export</link>
      <description>{"uuid": "748079de-d878-42e6-887e-4d87f5f79a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:09.476925Z"}</description>
      <content:encoded>{"uuid": "748079de-d878-42e6-887e-4d87f5f79a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5222", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:09.476925Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/748079de-d878-42e6-887e-4d87f5f79a80/export</guid>
      <pubDate>Thu, 10 Sep 2026 10:00:09 +0000</pubDate>
    </item>
    <item>
      <title>00168264-a0e4-430c-b8b3-110b98f6722f</title>
      <link>https://vulnerability.circl.lu/sighting/00168264-a0e4-430c-b8b3-110b98f6722f/export</link>
      <description>{"uuid": "00168264-a0e4-430c-b8b3-110b98f6722f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-52356", "type": "published-proof-of-concept", "source": "Telegram/kc9UW5nOC5vPF097P4Zev_-FbCZk6QpDcNXo5dsuTh5NQ6w", "content": "", "creation_timestamp": "2026-09-09T00:00:34.506449Z"}</description>
      <content:encoded>{"uuid": "00168264-a0e4-430c-b8b3-110b98f6722f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-52356", "type": "published-proof-of-concept", "source": "Telegram/kc9UW5nOC5vPF097P4Zev_-FbCZk6QpDcNXo5dsuTh5NQ6w", "content": "", "creation_timestamp": "2026-09-09T00:00:34.506449Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00168264-a0e4-430c-b8b3-110b98f6722f/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:34 +0000</pubDate>
    </item>
    <item>
      <title>c560ffaa-be25-4623-ac83-cfd31473ba5e</title>
      <link>https://vulnerability.circl.lu/sighting/c560ffaa-be25-4623-ac83-cfd31473ba5e/export</link>
      <description>{"uuid": "c560ffaa-be25-4623-ac83-cfd31473ba5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5217", "type": "exploited", "source": "https://t.me/Hackme_news/852", "content": "\ud83d\udea8\u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: #Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2023-5217), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f. \n\n\u0412 \u0441\u0440\u0435\u0434\u0443 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "creation_timestamp": "2026-09-09T00:00:11.754957Z"}</description>
      <content:encoded>{"uuid": "c560ffaa-be25-4623-ac83-cfd31473ba5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5217", "type": "exploited", "source": "https://t.me/Hackme_news/852", "content": "\ud83d\udea8\u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: #Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2023-5217), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f. \n\n\u0412 \u0441\u0440\u0435\u0434\u0443 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "creation_timestamp": "2026-09-09T00:00:11.754957Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c560ffaa-be25-4623-ac83-cfd31473ba5e/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:11 +0000</pubDate>
    </item>
    <item>
      <title>941b5680-3ebf-4e6e-be21-65a6a346cf21</title>
      <link>https://vulnerability.circl.lu/sighting/941b5680-3ebf-4e6e-be21-65a6a346cf21/export</link>
      <description>{"uuid": "941b5680-3ebf-4e6e-be21-65a6a346cf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5217", "type": "exploited", "source": "https://t.me/Hackme_news/852", "content": "\ud83d\udea8\u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: #Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2023-5217), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f. \n\n\u0412 \u0441\u0440\u0435\u0434\u0443 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "creation_timestamp": "2026-09-08T23:00:05.310453Z"}</description>
      <content:encoded>{"uuid": "941b5680-3ebf-4e6e-be21-65a6a346cf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-5217", "type": "exploited", "source": "https://t.me/Hackme_news/852", "content": "\ud83d\udea8\u0421\u0440\u043e\u0447\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435: #Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u043d\u043e\u0432\u0443\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f (CVE-2023-5217), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f. \n\n\u0412 \u0441\u0440\u0435\u0434\u0443 Google \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u043e\u0432\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome. https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html", "creation_timestamp": "2026-09-08T23:00:05.310453Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/941b5680-3ebf-4e6e-be21-65a6a346cf21/export</guid>
      <pubDate>Tue, 08 Sep 2026 23:00:05 +0000</pubDate>
    </item>
    <item>
      <title>ecde91fb-de2f-4b83-9c6e-b0124ef3d9fa</title>
      <link>https://vulnerability.circl.lu/sighting/ecde91fb-de2f-4b83-9c6e-b0124ef3d9fa/export</link>
      <description>{"uuid": "ecde91fb-de2f-4b83-9c6e-b0124ef3d9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-52924", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:02.591069Z"}</description>
      <content:encoded>{"uuid": "ecde91fb-de2f-4b83-9c6e-b0124ef3d9fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2023-52924", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:02.591069Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ecde91fb-de2f-4b83-9c6e-b0124ef3d9fa/export</guid>
      <pubDate>Tue, 08 Sep 2026 20:45:02 +0000</pubDate>
    </item>
    <item>
      <title>af71df8f-6505-46b6-a6cd-81da02401ddf</title>
      <link>https://vulnerability.circl.lu/sighting/af71df8f-6505-46b6-a6cd-81da02401ddf/export</link>
      <description>{"uuid": "af71df8f-6505-46b6-a6cd-81da02401ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-52356", "type": "seen", "source": "Telegram/kc9UW5nOC5vPF097P4Zev_-FbCZk6QpDcNXo5dsuTh5NQ6w", "content": "", "creation_timestamp": "2026-09-08T08:00:04.901797Z"}</description>
      <content:encoded>{"uuid": "af71df8f-6505-46b6-a6cd-81da02401ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-52356", "type": "seen", "source": "Telegram/kc9UW5nOC5vPF097P4Zev_-FbCZk6QpDcNXo5dsuTh5NQ6w", "content": "", "creation_timestamp": "2026-09-08T08:00:04.901797Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/af71df8f-6505-46b6-a6cd-81da02401ddf/export</guid>
      <pubDate>Tue, 08 Sep 2026 08:00:04 +0000</pubDate>
    </item>
    <item>
      <title>e0adee25-d111-4f15-96dd-4e3253e75be5</title>
      <link>https://vulnerability.circl.lu/sighting/e0adee25-d111-4f15-96dd-4e3253e75be5/export</link>
      <description>{"uuid": "e0adee25-d111-4f15-96dd-4e3253e75be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-52251", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kafka_ui_unauth_rce_cve_2023_52251.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die-gr3y \", \"BobTheShopLifter and Thingstad\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A command injection vulnerability exists in Kafka ui between `v0.4.0` and `v0.7.1` allowing\\n          an attacker to inject and execute arbitrary shell commands via the `groovy` filter parameter\\n          at the `topic` section.\", \"disclosure_date\": \"2023-09-27\", \"fullname\": \"exploit/linux/http/kafka_ui_unauth_rce_cve_2023_52251\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Kafka UI Unauthenticated Remote Command Execution via the Groovy Filter option.\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/kafka_ui_unauth_rce_cve_2023_52251.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/kafka_ui_unauth_rce_cve_2023_52251\", \"references\": [\"CVE-2023-52251\", \"URL-https://attackerkb.com/topics/ATJ1hTVB8H/cve-2023-52251\", \"URL-https://github.com/BobTheShoplifter/CVE-2023-52251-POC\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:41.451973Z"}</description>
      <content:encoded>{"uuid": "e0adee25-d111-4f15-96dd-4e3253e75be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-52251", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/kafka_ui_unauth_rce_cve_2023_52251.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"h00die-gr3y \", \"BobTheShopLifter and Thingstad\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A command injection vulnerability exists in Kafka ui between `v0.4.0` and `v0.7.1` allowing\\n          an attacker to inject and execute arbitrary shell commands via the `groovy` filter parameter\\n          at the `topic` section.\", \"disclosure_date\": \"2023-09-27\", \"fullname\": \"exploit/linux/http/kafka_ui_unauth_rce_cve_2023_52251\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Kafka UI Unauthenticated Remote Command Execution via the Groovy Filter option.\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/kafka_ui_unauth_rce_cve_2023_52251.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/kafka_ui_unauth_rce_cve_2023_52251\", \"references\": [\"CVE-2023-52251\", \"URL-https://attackerkb.com/topics/ATJ1hTVB8H/cve-2023-52251\", \"URL-https://github.com/BobTheShoplifter/CVE-2023-52251-POC\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Unix/Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:41.451973Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e0adee25-d111-4f15-96dd-4e3253e75be5/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:48:41 +0000</pubDate>
    </item>
  </channel>
</rss>
