https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 09:29:24 +0000 https://vulnerability.circl.lu/sighting/e4baadca-0986-45cc-b7a5-97cbdd2d5eaf/export {"uuid": "e4baadca-0986-45cc-b7a5-97cbdd2d5eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29720", "type": "seen", "source": "https://t.me/cibsecurity/64431", "content": "\u203c CVE-2023-29720 \u203c\n\nSofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T00:32:24.000000Z"} {"uuid": "e4baadca-0986-45cc-b7a5-97cbdd2d5eaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29720", "type": "seen", "source": "https://t.me/cibsecurity/64431", "content": "\u203c CVE-2023-29720 \u203c\n\nSofaWiki <=3.8.9 is vulnerable to Cross Site Scripting (XSS) via index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T00:32:24.000000Z"} https://vulnerability.circl.lu/sighting/e4baadca-0986-45cc-b7a5-97cbdd2d5eaf/export Fri, 19 May 2023 00:32:24 +0000 https://vulnerability.circl.lu/sighting/a390a29b-e9f1-4e2e-9bfc-c25ee0aff2f0/export {"uuid": "a390a29b-e9f1-4e2e-9bfc-c25ee0aff2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2972", "type": "seen", "source": "https://t.me/cibsecurity/64779", "content": "\u203c CVE-2023-2972 \u203c\n\nPrototype Pollution in GitHub repository antfu/utils prior to 0.7.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T14:18:31.000000Z"} {"uuid": "a390a29b-e9f1-4e2e-9bfc-c25ee0aff2f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2972", "type": "seen", "source": "https://t.me/cibsecurity/64779", "content": "\u203c CVE-2023-2972 \u203c\n\nPrototype Pollution in GitHub repository antfu/utils prior to 0.7.3.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T14:18:31.000000Z"} https://vulnerability.circl.lu/sighting/a390a29b-e9f1-4e2e-9bfc-c25ee0aff2f0/export Tue, 30 May 2023 14:18:31 +0000 https://vulnerability.circl.lu/sighting/be67cc42-ee6e-42a2-8822-56db6729f8fa/export {"uuid": "be67cc42-ee6e-42a2-8822-56db6729f8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29723", "type": "seen", "source": "https://t.me/cibsecurity/64872", "content": "\u203c CVE-2023-29723 \u203c\n\nThe Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T00:25:34.000000Z"} {"uuid": "be67cc42-ee6e-42a2-8822-56db6729f8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29723", "type": "seen", "source": "https://t.me/cibsecurity/64872", "content": "\u203c CVE-2023-29723 \u203c\n\nThe Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-02T00:25:34.000000Z"} https://vulnerability.circl.lu/sighting/be67cc42-ee6e-42a2-8822-56db6729f8fa/export Fri, 02 Jun 2023 00:25:34 +0000 https://vulnerability.circl.lu/sighting/048e6732-6c6d-447d-8255-fbdd418e5457/export {"uuid": "048e6732-6c6d-447d-8255-fbdd418e5457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29725", "type": "seen", "source": "https://t.me/cibsecurity/64874", "content": "\u203c CVE-2023-29725 \u203c\n\nThe BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T09:38:09.000000Z"} {"uuid": "048e6732-6c6d-447d-8255-fbdd418e5457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29725", "type": "seen", "source": "https://t.me/cibsecurity/64874", "content": "\u203c CVE-2023-29725 \u203c\n\nThe BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T09:38:09.000000Z"} https://vulnerability.circl.lu/sighting/048e6732-6c6d-447d-8255-fbdd418e5457/export Wed, 07 Jun 2023 09:38:09 +0000 https://vulnerability.circl.lu/sighting/31292597-4fba-42e1-b26e-564cc0702697/export {"uuid": "31292597-4fba-42e1-b26e-564cc0702697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29724", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/836", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29724\n\ud83d\udd39 Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:47:31.678Z\n\ud83d\udd17 References:\n1. http://bungaakpstudio007.com\n2. https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK\n3. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29724/CVE%20detail.md", "creation_timestamp": "2025-01-08T21:13:38.000000Z"} {"uuid": "31292597-4fba-42e1-b26e-564cc0702697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29724", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/836", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29724\n\ud83d\udd39 Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:47:31.678Z\n\ud83d\udd17 References:\n1. http://bungaakpstudio007.com\n2. https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK\n3. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29724/CVE%20detail.md", "creation_timestamp": "2025-01-08T21:13:38.000000Z"} https://vulnerability.circl.lu/sighting/31292597-4fba-42e1-b26e-564cc0702697/export Wed, 08 Jan 2025 21:13:38 +0000 https://vulnerability.circl.lu/sighting/991007ff-4ddd-4314-be5a-32cedf802c1c/export {"uuid": "991007ff-4ddd-4314-be5a-32cedf802c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/838", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29725\n\ud83d\udd39 Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:44:44.018Z\n\ud83d\udd17 References:\n1. http://bungaakpstudio007.com\n2. https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK\n3. https://play.google.com/store/apps/details?id=com.cuiet.blockCalls\n4. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29725/CVE%20detail.md", "creation_timestamp": "2025-01-08T21:13:43.000000Z"} {"uuid": "991007ff-4ddd-4314-be5a-32cedf802c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29725", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/838", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29725\n\ud83d\udd39 Description: The BT21 x BTS Wallpaper app 12 for Android allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\ud83d\udccf Published: 2023-06-02T00:00:00\n\ud83d\udccf Modified: 2025-01-08T20:44:44.018Z\n\ud83d\udd17 References:\n1. http://bungaakpstudio007.com\n2. https://apkpure.com/cn/bt21-x-bts-wallpaper-hd-4k/com.bungaakp007.bt21wallpaperoffline130920/download/12-APK\n3. https://play.google.com/store/apps/details?id=com.cuiet.blockCalls\n4. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29725/CVE%20detail.md", "creation_timestamp": "2025-01-08T21:13:43.000000Z"} https://vulnerability.circl.lu/sighting/991007ff-4ddd-4314-be5a-32cedf802c1c/export Wed, 08 Jan 2025 21:13:43 +0000 https://vulnerability.circl.lu/sighting/4ee8e747-5e77-4d41-8ba1-5b7a433919e8/export {"uuid": "4ee8e747-5e77-4d41-8ba1-5b7a433919e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29722", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29722\n\ud83d\udd39 Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:51:33.129Z\n\ud83d\udd17 References:\n1. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md", "creation_timestamp": "2025-01-09T18:17:17.000000Z"} {"uuid": "4ee8e747-5e77-4d41-8ba1-5b7a433919e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29722", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1000", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29722\n\ud83d\udd39 Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized apps to actively request permission to modify data in the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the app is opened. An attacker could tamper with this data to cause an escalation of privilege attack.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:51:33.129Z\n\ud83d\udd17 References:\n1. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29722/CVE%20detail.md", "creation_timestamp": "2025-01-09T18:17:17.000000Z"} https://vulnerability.circl.lu/sighting/4ee8e747-5e77-4d41-8ba1-5b7a433919e8/export Thu, 09 Jan 2025 18:17:17 +0000 https://vulnerability.circl.lu/sighting/ed0e46ba-911f-4221-856c-fbb2b1d502dd/export {"uuid": "ed0e46ba-911f-4221-856c-fbb2b1d502dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29723\n\ud83d\udd39 Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:50:13.770Z\n\ud83d\udd17 References:\n1. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29723/CVE%20detail.md", "creation_timestamp": "2025-01-09T18:17:28.000000Z"} {"uuid": "ed0e46ba-911f-4221-856c-fbb2b1d502dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29723", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1001", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-29723\n\ud83d\udd39 Description: The Glitter Unicorn Wallpaper app for Android 7.0 thru 8.0 allows unauthorized applications to actively request permission to insert data into the database that records information about a user's personal preferences and will be loaded into memory to be read and used when the application is opened. By injecting data, the attacker can force the application to load malicious image URLs and display them in the UI. As the amount of data increases, it will eventually cause the application to trigger an OOM error and crash, resulting in a persistent denial of service attack.\n\ud83d\udccf Published: 2023-06-01T00:00:00\n\ud83d\udccf Modified: 2025-01-09T17:50:13.770Z\n\ud83d\udd17 References:\n1. https://github.com/LianKee/SO-CVEs/blob/main/CVEs/CVE-2023-29723/CVE%20detail.md", "creation_timestamp": "2025-01-09T18:17:28.000000Z"} https://vulnerability.circl.lu/sighting/ed0e46ba-911f-4221-856c-fbb2b1d502dd/export Thu, 09 Jan 2025 18:17:28 +0000 https://vulnerability.circl.lu/sighting/50eace9f-cc51-42e8-b26f-e2b6564c61cc/export {"uuid": "50eace9f-cc51-42e8-b26f-e2b6564c61cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2972", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-2972\n\ud83d\udd39 Description: Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.\n\ud83d\udccf Published: 2023-05-30T00:00:00\n\ud83d\udccf Modified: 2025-01-10T18:53:01.436Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/009f1cd9-401c-49a7-bd08-be35cff6faef\n2. https://github.com/antfu/utils/commit/7f8b16c6181c988bdb96613fbb2533b345f68682", "creation_timestamp": "2025-01-10T19:07:02.000000Z"} {"uuid": "50eace9f-cc51-42e8-b26f-e2b6564c61cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-2972", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1212", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-2972\n\ud83d\udd39 Description: Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3.\n\ud83d\udccf Published: 2023-05-30T00:00:00\n\ud83d\udccf Modified: 2025-01-10T18:53:01.436Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/009f1cd9-401c-49a7-bd08-be35cff6faef\n2. https://github.com/antfu/utils/commit/7f8b16c6181c988bdb96613fbb2533b345f68682", "creation_timestamp": "2025-01-10T19:07:02.000000Z"} https://vulnerability.circl.lu/sighting/50eace9f-cc51-42e8-b26f-e2b6564c61cc/export Fri, 10 Jan 2025 19:07:02 +0000