<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T13:28:57.139829+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e/export</id>
    <title>5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e</title>
    <updated>2026-09-17T13:28:57.190026+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:17.053906Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e/export"/>
    <published>2026-09-16T10:15:17.053906+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58a3c18b-b184-463b-897f-9899607d0f3c/export</id>
    <title>58a3c18b-b184-463b-897f-9899607d0f3c</title>
    <updated>2026-09-17T13:28:57.192526+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58a3c18b-b184-463b-897f-9899607d0f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1326", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-15T00:00:23.689741Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58a3c18b-b184-463b-897f-9899607d0f3c/export"/>
    <published>2026-09-15T00:00:23.689741+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c8be363f-6c9f-435a-8ca9-28ed31f72601/export</id>
    <title>c8be363f-6c9f-435a-8ca9-28ed31f72601</title>
    <updated>2026-09-17T13:28:57.192686+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c8be363f-6c9f-435a-8ca9-28ed31f72601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1326", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-14T03:00:11.806796Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c8be363f-6c9f-435a-8ca9-28ed31f72601/export"/>
    <published>2026-09-14T03:00:11.806796+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/75bd2023-626e-424b-a252-a6f3b4edf852/export</id>
    <title>75bd2023-626e-424b-a252-a6f3b4edf852</title>
    <updated>2026-09-17T13:28:57.192796+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "75bd2023-626e-424b-a252-a6f3b4edf852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-11T00:00:56.843066Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/75bd2023-626e-424b-a252-a6f3b4edf852/export"/>
    <published>2026-09-11T00:00:56.843066+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/99a95474-bd89-4d1c-bcff-2e92ae989044/export</id>
    <title>99a95474-bd89-4d1c-bcff-2e92ae989044</title>
    <updated>2026-09-17T13:28:57.192908+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "99a95474-bd89-4d1c-bcff-2e92ae989044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-10T01:00:04.461681Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/99a95474-bd89-4d1c-bcff-2e92ae989044/export"/>
    <published>2026-09-10T01:00:04.461681+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/03410c10-54eb-4a66-91e1-b4dd6450d79a/export</id>
    <title>03410c10-54eb-4a66-91e1-b4dd6450d79a</title>
    <updated>2026-09-17T13:28:57.193018+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "03410c10-54eb-4a66-91e1-b4dd6450d79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "https://t.me/cissp/6818", "content": "Heads up, everyone! \n\nCISA has issued an advisory warning of active exploitation of three known vulnerabilities, including CVE-2023-1389 (TP-Link Archer AX-21), CVE-2021-45046 (Apache Log4j2) and CVE-2023-21839 (Oracle WebLogic). \nDetails: https://thehackernews.com/2023/05/active-exploitation-of-tp-link-apache.html\n\nCritical flaw affecting ME RTU remote terminal units!  \nCISA has issued an advisory about the security vulnerability tracked as CVE-2023-2131, which has received the highest severity rating of 10.0 on the CVSS scoring system. \nDetails: https://thehackernews.com/2023/05/cisa-issues-advisory-on-critical-rce.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.13", "creation_timestamp": "2026-09-10T00:00:07.379593Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/03410c10-54eb-4a66-91e1-b4dd6450d79a/export"/>
    <published>2026-09-10T00:00:07.379593+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/aea4a9db-eb19-42a2-98da-686b5c80f3ab/export</id>
    <title>aea4a9db-eb19-42a2-98da-686b5c80f3ab</title>
    <updated>2026-09-17T13:28:57.193136+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "aea4a9db-eb19-42a2-98da-686b5c80f3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/784", "content": "\u041d\u043e\u0432\u043e\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u0435 \u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u041f\u041e ! \u041c\u043e\u0449\u043d\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 Condi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link Archer AX21, \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044f \u0438\u0445 \u0432 \u043c\u0430\u0448\u0438\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\nhttps://www.fortinet.com/blog/threat-research/condi-ddos-botnet-spreads-via-tp-links-cve-2023-1389", "creation_timestamp": "2026-09-09T00:00:10.356213Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/aea4a9db-eb19-42a2-98da-686b5c80f3ab/export"/>
    <published>2026-09-09T00:00:10.356213+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ec9300ce-3fab-4029-b6e4-00fe6398bc8c/export</id>
    <title>ec9300ce-3fab-4029-b6e4-00fe6398bc8c</title>
    <updated>2026-09-17T13:28:57.193247+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ec9300ce-3fab-4029-b6e4-00fe6398bc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:10.605056Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ec9300ce-3fab-4029-b6e4-00fe6398bc8c/export"/>
    <published>2026-09-07T10:15:10.605056+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3/export</id>
    <title>3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3</title>
    <updated>2026-09-17T13:28:57.193352+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:12.000650Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3/export"/>
    <published>2026-09-06T10:15:12.000650+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7f533c4-06e2-4d2a-9699-80dd1a96d1fb/export</id>
    <title>e7f533c4-06e2-4d2a-9699-80dd1a96d1fb</title>
    <updated>2026-09-17T13:28:57.193468+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7f533c4-06e2-4d2a-9699-80dd1a96d1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:10.848738Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7f533c4-06e2-4d2a-9699-80dd1a96d1fb/export"/>
    <published>2026-09-02T10:15:10.848738+00:00</published>
  </entry>
</feed>
