https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 22 Sep 2026 09:21:46 +0000 https://vulnerability.circl.lu/sighting/9911758f-c0d4-4943-bb4e-0ba487df47a9/export {"uuid": "9911758f-c0d4-4943-bb4e-0ba487df47a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://gist.github.com/ichintu/b0ff4b467c604a3012760cd37eb92671", "content": "This threat intelligence digest highlights critical vulnerabilities, advanced threats, and AI-driven industry shifts:\n\n**Vulnerabilities:** A severe Open VSX cache poisoning flaw (CVE-2025-12999) enables extension supply chain attacks via header injection. Godot reports three memory-safety bugs in its file parsers, though maintainers dispute the security impact. BioStar\u2019s BIOS utility contains a publicly exploited write-what-where IOCTL flaw (CVE-2026-94146) amid vendor silence.\n\n**Threat Actor Activity:** GraphWorm, a China-linked APT, uses cloud-hosted Microsoft Graph/OneDrive C2 with instant credential rotation, rendering standard token revocation ineffective; mitigation requires targeting app registrations and identity telemetry. ChainScript RAT is delivered via ClickFix lures impersonating legitimate software by the Blackpoint APG.\n\n**AI Security & Workforce Trends:** Rapid model drift makes one-time security testing obsolete, necessitating continuous, automated validation. Concurrently, AI is reshaping the cybersecurity job market by automating routine tasks, consolidating leadership roles, and widening skills gaps, while exposing foundational control deficiencies and shrinking entry-level talent pipelines.", "creation_timestamp": "2026-09-21T12:02:45.117353Z"} {"uuid": "9911758f-c0d4-4943-bb4e-0ba487df47a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://gist.github.com/ichintu/b0ff4b467c604a3012760cd37eb92671", "content": "This threat intelligence digest highlights critical vulnerabilities, advanced threats, and AI-driven industry shifts:\n\n**Vulnerabilities:** A severe Open VSX cache poisoning flaw (CVE-2025-12999) enables extension supply chain attacks via header injection. Godot reports three memory-safety bugs in its file parsers, though maintainers dispute the security impact. BioStar\u2019s BIOS utility contains a publicly exploited write-what-where IOCTL flaw (CVE-2026-94146) amid vendor silence.\n\n**Threat Actor Activity:** GraphWorm, a China-linked APT, uses cloud-hosted Microsoft Graph/OneDrive C2 with instant credential rotation, rendering standard token revocation ineffective; mitigation requires targeting app registrations and identity telemetry. ChainScript RAT is delivered via ClickFix lures impersonating legitimate software by the Blackpoint APG.\n\n**AI Security & Workforce Trends:** Rapid model drift makes one-time security testing obsolete, necessitating continuous, automated validation. Concurrently, AI is reshaping the cybersecurity job market by automating routine tasks, consolidating leadership roles, and widening skills gaps, while exposing foundational control deficiencies and shrinking entry-level talent pipelines.", "creation_timestamp": "2026-09-21T12:02:45.117353Z"} https://vulnerability.circl.lu/sighting/9911758f-c0d4-4943-bb4e-0ba487df47a9/export Mon, 21 Sep 2026 12:02:45 +0000 https://vulnerability.circl.lu/sighting/f41f022a-d292-4d63-ad17-7476f0f03915/export {"uuid": "f41f022a-d292-4d63-ad17-7476f0f03915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvzhotoe4t25", "content": "\ud83d\udea8 CVE-2025-12999 \u2014 CVSS 9.1 CRITICAL\n\nUrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 fro...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-12999\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T10:07:08.278565Z"} {"uuid": "f41f022a-d292-4d63-ad17-7476f0f03915", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvzhotoe4t25", "content": "\ud83d\udea8 CVE-2025-12999 \u2014 CVSS 9.1 CRITICAL\n\nUrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 fro...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-12999\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-21T10:07:08.278565Z"} https://vulnerability.circl.lu/sighting/f41f022a-d292-4d63-ad17-7476f0f03915/export Mon, 21 Sep 2026 10:07:08 +0000 https://vulnerability.circl.lu/sighting/55c3ddfd-6c14-4649-9465-bc4838de5a19/export {"uuid": "55c3ddfd-6c14-4649-9465-bc4838de5a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hafbptppfxukv", "content": "CVE-2025-12999 - Open VSX Cache Poisoning via Header Injection\nCVE ID : CVE-2025-12999\n \n Published : Sept. 21, 2026, 9:17 a.m. | 17\u00a0minutes ago\n \n Description : UrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 from the X-...", "creation_timestamp": "2026-09-21T09:57:40.766750Z"} {"uuid": "55c3ddfd-6c14-4649-9465-bc4838de5a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/hafbptppfxukv", "content": "CVE-2025-12999 - Open VSX Cache Poisoning via Header Injection\nCVE ID : CVE-2025-12999\n \n Published : Sept. 21, 2026, 9:17 a.m. | 17\u00a0minutes ago\n \n Description : UrlUtil.getBaseUrl builds the absolute URLs in a response \u2014 download links, icons, asset and API URLs \u2014 from the X-...", "creation_timestamp": "2026-09-21T09:57:40.766750Z"} https://vulnerability.circl.lu/sighting/55c3ddfd-6c14-4649-9465-bc4838de5a19/export Mon, 21 Sep 2026 09:57:40 +0000 https://vulnerability.circl.lu/sighting/875ce98f-53eb-4eca-9998-fd0577bbd1f2/export {"uuid": "875ce98f-53eb-4eca-9998-fd0577bbd1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvzgqebuf42g", "content": "CVE-2025-12999 - eclipse open vsx\nThe OpenVSX server builds full web addresses for downloads and other resources using information supplied in certain network headers, without checking whether that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-09-21T09:50:04.855460Z"} {"uuid": "875ce98f-53eb-4eca-9998-fd0577bbd1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-12999", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvzgqebuf42g", "content": "CVE-2025-12999 - eclipse open vsx\nThe OpenVSX server builds full web addresses for downloads and other resources using information supplied in certain network headers, without checking whether that\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#eclipsefoundation #CVE #infosec", "creation_timestamp": "2026-09-21T09:50:04.855460Z"} https://vulnerability.circl.lu/sighting/875ce98f-53eb-4eca-9998-fd0577bbd1f2/export Mon, 21 Sep 2026 09:50:04 +0000