<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 06 May 2026 13:33:37 +0000</lastBuildDate>
    <item>
      <title>ccf92813-12b8-4a0b-99af-ba2c9c016e4b</title>
      <link>https://vulnerability.circl.lu/sighting/ccf92813-12b8-4a0b-99af-ba2c9c016e4b/export</link>
      <description>{"uuid": "ccf92813-12b8-4a0b-99af-ba2c9c016e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "seen", "source": "https://t.me/cibsecurity/59408", "content": "\u203c CVE-2023-26213 \u203c\n\nOn Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a crafted HTTP request allows an authenticated attacker to execute arbitrary commands. For example, a name field can contain :password and a password field can contain shell metacharacters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-04T00:35:35.000000Z"}</description>
      <content:encoded>{"uuid": "ccf92813-12b8-4a0b-99af-ba2c9c016e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "seen", "source": "https://t.me/cibsecurity/59408", "content": "\u203c CVE-2023-26213 \u203c\n\nOn Barracuda CloudGen WAN Private Edge Gateway devices before 8 webui-sdwan-1089-8.3.1-174141891, an OS command injection vulnerability exists in /ajax/update_certificate - a crafted HTTP request allows an authenticated attacker to execute arbitrary commands. For example, a name field can contain :password and a password field can contain shell metacharacters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-04T00:35:35.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ccf92813-12b8-4a0b-99af-ba2c9c016e4b/export</guid>
      <pubDate>Sat, 04 Mar 2023 00:35:35 +0000</pubDate>
    </item>
    <item>
      <title>60eb8e17-451e-489e-a0e9-07263efc5a3b</title>
      <link>https://vulnerability.circl.lu/sighting/60eb8e17-451e-489e-a0e9-07263efc5a3b/export</link>
      <description>{"uuid": "60eb8e17-451e-489e-a0e9-07263efc5a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7875", "content": "#exploit\n1. CVE-2023-26213:\nBarracuda CloudGen WAN OS Command Injection\nhttps://packetstormsecurity.com/files/171235/Barracuda-CloudGen-WAN-OS-Command-Injection.html\n\n2. KeePass2: DLL Hijacking and hooking APIs\nhttps://skr1x.github.io/keepass-dll-hijacking", "creation_timestamp": "2023-03-06T11:00:22.000000Z"}</description>
      <content:encoded>{"uuid": "60eb8e17-451e-489e-a0e9-07263efc5a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7875", "content": "#exploit\n1. CVE-2023-26213:\nBarracuda CloudGen WAN OS Command Injection\nhttps://packetstormsecurity.com/files/171235/Barracuda-CloudGen-WAN-OS-Command-Injection.html\n\n2. KeePass2: DLL Hijacking and hooking APIs\nhttps://skr1x.github.io/keepass-dll-hijacking", "creation_timestamp": "2023-03-06T11:00:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/60eb8e17-451e-489e-a0e9-07263efc5a3b/export</guid>
      <pubDate>Mon, 06 Mar 2023 11:00:22 +0000</pubDate>
    </item>
    <item>
      <title>05b010f2-2c9c-47c6-af6a-37706b7fa487</title>
      <link>https://vulnerability.circl.lu/sighting/05b010f2-2c9c-47c6-af6a-37706b7fa487/export</link>
      <description>{"uuid": "05b010f2-2c9c-47c6-af6a-37706b7fa487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "published-proof-of-concept", "source": "Telegram/jPSnhCMejHbvrCa5vv5XjbnfZrfw8rqsp_9peBbwEW64iB8", "content": "", "creation_timestamp": "2023-03-06T18:56:09.000000Z"}</description>
      <content:encoded>{"uuid": "05b010f2-2c9c-47c6-af6a-37706b7fa487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "published-proof-of-concept", "source": "Telegram/jPSnhCMejHbvrCa5vv5XjbnfZrfw8rqsp_9peBbwEW64iB8", "content": "", "creation_timestamp": "2023-03-06T18:56:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/05b010f2-2c9c-47c6-af6a-37706b7fa487/export</guid>
      <pubDate>Mon, 06 Mar 2023 18:56:09 +0000</pubDate>
    </item>
    <item>
      <title>d7a86983-ead3-4510-a615-1bd899f9f767</title>
      <link>https://vulnerability.circl.lu/sighting/d7a86983-ead3-4510-a615-1bd899f9f767/export</link>
      <description>{"uuid": "d7a86983-ead3-4510-a615-1bd899f9f767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "seen", "source": "Telegram/-z8EBkexp6XXVXb95uMyjrK3uacHGRoex92QcJDlNWP4IR7p", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}</description>
      <content:encoded>{"uuid": "d7a86983-ead3-4510-a615-1bd899f9f767", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-26213", "type": "seen", "source": "Telegram/-z8EBkexp6XXVXb95uMyjrK3uacHGRoex92QcJDlNWP4IR7p", "content": "", "creation_timestamp": "2025-03-08T04:34:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d7a86983-ead3-4510-a615-1bd899f9f767/export</guid>
      <pubDate>Sat, 08 Mar 2025 04:34:57 +0000</pubDate>
    </item>
  </channel>
</rss>
