https://vulnerability.circl.lu/sightings/feed 2026-09-17T11:13:01.325574+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a9201474-c2d2-47fa-998a-653abff86cd5/export 2026-09-17T11:13:01.342643+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a9201474-c2d2-47fa-998a-653abff86cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-15T00:00:23.776490Z"} 2026-09-15T00:00:23.776490+00:00 https://vulnerability.circl.lu/sighting/aa009318-5e06-4a24-90cf-7fad64afcbcb/export 2026-09-17T11:13:01.345645+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "aa009318-5e06-4a24-90cf-7fad64afcbcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28664", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-14T03:00:11.968601Z"} 2026-09-14T03:00:11.968601+00:00 https://vulnerability.circl.lu/sighting/f66f4944-32df-457d-a687-970346ac0f8d/export 2026-09-17T11:13:01.345787+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f66f4944-32df-457d-a687-970346ac0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28474", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3694", "content": "Red Team Tactics\n1. Open-Source PE Packer\nhttps://iwantmore.pizza/posts/PEzor4.html\n]-> https://github.com/phra/PEzor\n2. XNU IPC - Mach messages\nhttps://dmcyk.xyz/post/xnu_ipc_i_mach_messages\n3. Avoiding Fork&Run .NET Execution With InlineExecute-Assembly\nhttps://securityintelligence.com/posts/net-execution-inlineexecute-assembly\n]-> Beacon Object File PoC:\nhttps://github.com/xforcered/InlineExecute-Assembly\n\nBlue Team Techniques\nAPI Security Need to Know:\nTop 5 Authentication Pitfalls\nhttps://www.cequence.ai/blog/api-security-need-to-know-top-5-authentication-pitfalls\n\nThreat Research\nCVE-2021-28474:\nSharePoint RCE via Server-Side Control Interpretation Conflict\nhttps://www.zerodayinitiative.com/blog/2021/7/7/cve-2021-28474-sharepoint-remote-code-execution-via-server-side-control-interpretation-conflict\n\nCloud Security\nREST API Fuzz Testing (RAFT):\nSource code for self-hosted service developed for Azure, including the API, orchestration engine, and default set of security tools (including MSR's RESTler), that enables developers to embed security tooling into their CI/CD workflows\nhttps://github.com/microsoft/rest-api-fuzz-testing", "creation_timestamp": "2026-09-12T00:00:56.901196Z"} 2026-09-12T00:00:56.901196+00:00 https://vulnerability.circl.lu/sighting/5cece3ce-64f1-4524-aa67-1112d1d9ca33/export 2026-09-17T11:13:01.345917+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5cece3ce-64f1-4524-aa67-1112d1d9ca33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28091", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3331", "content": "Malware analysis\n1. Hex-Rays, GetProcAddress, and Malware Analysis\nhttps://www.msreverseengineering.com/blog/2021/6/1/hex-rays-getprocaddress-and-malware-analysis\n2. Kimsuky APT continues to target South Korean government using AppleSeed backdoor\nhttps://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor\n\nSCADA Security\nMultiple Critical Vulnerabilities in Korenix Technology, Westermo and Pepperl+Fuchs products\nhttps://sec-consult.com/vulnerability-lab/advisory/multiple-critical-vulnerabilities-in-korenix-technology-westermo-pepperl-fuchs\n// Products affected include JetNet 5428G-20SFP, 5810G, 4706F, 4706, 4510, 5010, 5310, 6095\n]-> PoC:\nhttps://packetstormsecurity.com/files/162903/SA-20210601-0.txt\n\nFinding Memory Bugs with Google Address Sanitizer (ASAN) on Microcontrollers\nhttps://mcuoneclipse.com/2021/05/31/finding-memory-bugs-with-google-address-sanitizer-asan-on-microcontrollers\n\nThreat Research\n1. Technical analysis of two RCE in Grav CMS 1.7.10 (CVE-2021-29439, CVE-2021-29440)\nhttps://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities\n2. Akamai EAA Impersonation Vulnerability\n(PoC for CVE-2021-28091)\nhttps://blogs.akamai.com/2021/06/akamai-eaa-impersonation-vulnerability---a-deep-dive.html\n\nApple ROM/BootROM Collection\nhttp://securerom.fun", "creation_timestamp": "2026-09-12T00:00:52.761198Z"} 2026-09-12T00:00:52.761198+00:00 https://vulnerability.circl.lu/sighting/efd0960e-5b5f-47fd-bb1a-cfc356eaa873/export 2026-09-17T11:13:01.346031+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "efd0960e-5b5f-47fd-bb1a-cfc356eaa873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28476", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3314", "content": "Threat Research\n1. Threats from Readme:\nSuspected years of supply chain attack analysis\nhttps://security.tencent.com/index.php/blog/msg/192\n2. PoC for CVE-2021-28476 a guest-to-host\n\"Hyper-V RCE Vulnerability\" in vmswitch.sys\nhttps://github.com/0vercl0k/CVE-2021-28476\n\n\n-", "creation_timestamp": "2026-09-12T00:00:51.742715Z"} 2026-09-12T00:00:51.742715+00:00 https://vulnerability.circl.lu/sighting/9c0c2de4-0d9e-4d6b-8407-a60e7907383e/export 2026-09-17T11:13:01.346131+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9c0c2de4-0d9e-4d6b-8407-a60e7907383e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28312", "type": "published-proof-of-concept", "source": "https://t.me/cissp/3148", "content": "CVE-2021-1815:\nmacOS Local Privilege Escalation Via Preferences (PoC)\nhttps://www.offensive-security.com/offsec/macos-preferences-priv-escalation/?utm_content=165476462&utm_medium=social&utm_source=twitter&hss_channel=tw-134994790\n]-> Compromising the macOS Kernel through Safari by Chaining Six \ud83e\udd2aVulnerabilities (code):\nhttps://github.com/sslab-gatech/pwn2own2020\n\nThreat Research\n1. Data Only Attack:\nNeutralizing EtwTi Provider\nhttps://public.cnotools.studio/bring-your-own-vulnerable-kernel-driver-byovkd/exploits/data-only-attack-neutralizing-etwti-provider\n2. Unauthorized access to Facebook environment\ud83d\udc4d\ud83c\udffd\nhttps://mvinni.medium.com/workplace-by-facebook-unauthorized-access-to-companies-environment-27-5k-a593a57092f1\n\nexploit\nCVE-2021-28312:\nWindows 10 1809/1909/2004/20H2, Server 2019 - NTFS DoS Vulnerability (PoC)\nhttps://github.com/shubham0d/CVE-2021-28312", "creation_timestamp": "2026-09-12T00:00:49.357526Z"} 2026-09-12T00:00:49.357526+00:00 https://vulnerability.circl.lu/sighting/100a86ae-3342-40a7-99c5-df1fbde0bf8e/export 2026-09-17T11:13:01.346239+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "100a86ae-3342-40a7-99c5-df1fbde0bf8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28310", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.418234Z"} 2026-09-12T00:00:48.418234+00:00 https://vulnerability.circl.lu/sighting/7009ca57-ca62-4548-ae3f-55ab8858e810/export 2026-09-17T11:13:01.346343+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7009ca57-ca62-4548-ae3f-55ab8858e810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28316", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.330267Z"} 2026-09-12T00:00:48.330267+00:00 https://vulnerability.circl.lu/sighting/8ab9f468-8f9c-4ca7-a5b8-d44900bf256c/export 2026-09-17T11:13:01.346451+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8ab9f468-8f9c-4ca7-a5b8-d44900bf256c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28483", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.237528Z"} 2026-09-12T00:00:48.237528+00:00 https://vulnerability.circl.lu/sighting/dffbf50e-0578-4931-bd68-2735ae4b79f4/export 2026-09-17T11:13:01.346561+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "dffbf50e-0578-4931-bd68-2735ae4b79f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28480", "type": "seen", "source": "https://t.me/cissp/3093", "content": "Analytics\nTop Most Used Vulnerabilities of the Month (April 1-30)\n\nCVE-2020-13379 - Unauth Full-Read SSRF in Grafana\n\nCVE-2021-24086 - Win IPv4/6 Stack RCE/DoS Vulns\nhttps://unit42.paloaltonetworks.com/cve-2021-24074-patch-tuesday\n\nCVE-2021-22893 Pulse SecureVPN \nRCE\n\nCVE-2021-28310 - Win32k EoP Vulnerability\n\nCVE-2021-26411 - IE mshtml UAF\n\nCVE-2021-22204 - DjVu improper neutralization of user data\nhttps://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800\n\nCVE-2021-24027 - Remote exploitation of a man-in-the-disk vulnerability in WhatsApp\n\nCVE-2021-28316 - Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability\n\nCVE-2021-28480/28482 - MS Exchange Server RCE\ud83d\ude01\nhttps://www.tenable.com/blog/cve-2021-28480-cve-2021-28481-cve-2021-28482-cve-2021-28483-four-critical-microsoft-exchange", "creation_timestamp": "2026-09-12T00:00:48.200640Z"} 2026-09-12T00:00:48.200640+00:00