<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T12:14:29.597567+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02bb5ff7-3ee2-4371-a71d-458d4b69d093/export</id>
    <title>02bb5ff7-3ee2-4371-a71d-458d4b69d093</title>
    <updated>2026-09-17T12:14:29.622512+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02bb5ff7-3ee2-4371-a71d-458d4b69d093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21707", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-&amp;gt; https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-11T00:00:56.973600Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02bb5ff7-3ee2-4371-a71d-458d4b69d093/export"/>
    <published>2026-09-11T00:00:56.973600+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/565c1acf-8817-4dde-881c-602107373736/export</id>
    <title>565c1acf-8817-4dde-881c-602107373736</title>
    <updated>2026-09-17T12:14:29.625008+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "565c1acf-8817-4dde-881c-602107373736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21991", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-11T00:00:56.926878Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/565c1acf-8817-4dde-881c-602107373736/export"/>
    <published>2026-09-11T00:00:56.926878+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a70bbb7d-fcfb-4603-b738-6bd5777ddaef/export</id>
    <title>a70bbb7d-fcfb-4603-b738-6bd5777ddaef</title>
    <updated>2026-09-17T12:14:29.625144+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a70bbb7d-fcfb-4603-b738-6bd5777ddaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21987", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-11T00:00:56.886589Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a70bbb7d-fcfb-4603-b738-6bd5777ddaef/export"/>
    <published>2026-09-11T00:00:56.886589+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/081b4130-7b29-49fc-83cf-785cbf05e736/export</id>
    <title>081b4130-7b29-49fc-83cf-785cbf05e736</title>
    <updated>2026-09-17T12:14:29.625253+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "081b4130-7b29-49fc-83cf-785cbf05e736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21931", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6785", "content": "exploit\n1. CVE-2022-22956, CVE-2022-22957:\nVMware Workspace ONE RCE\nhttps://packetstormsecurity.com/files/171918\n\n2. CVE-2023-25136:\nOpenSSH Pre-Auth Double Free\nhttps://github.com/adhikara13/CVE-2023-25136\n\n3. CVE-2023-21931:\nWebLogic After-Deserialization\nhttps://github.com/gobysec/Weblogic/blob/main/Research%20on%20WebLogic%20After-Deserialization.md\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.01", "creation_timestamp": "2026-09-11T00:00:56.673567Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/081b4130-7b29-49fc-83cf-785cbf05e736/export"/>
    <published>2026-09-11T00:00:56.673567+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f0a6c6fe-ad1b-4dd0-89c8-8e7e5bd6d0ca/export</id>
    <title>f0a6c6fe-ad1b-4dd0-89c8-8e7e5bd6d0ca</title>
    <updated>2026-09-17T12:14:29.625352+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f0a6c6fe-ad1b-4dd0-89c8-8e7e5bd6d0ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21839", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6628", "content": "exploit\n1. CVE-2022-41042:\nHTML/JavaScript injection in MS SARIF viewer/MS Live Preview extension, Path traversal in the local HTTP server in MS Live Preview extension\nhttps://blog.trailofbits.com/2023/02/21/vscode-extension-escape-vulnerability\n\n2. CVE-2023-21839:\nVulnerability in the Oracle WebLogic Server\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.05", "creation_timestamp": "2026-09-11T00:00:54.912612Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f0a6c6fe-ad1b-4dd0-89c8-8e7e5bd6d0ca/export"/>
    <published>2026-09-11T00:00:54.912612+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a1e6c5d-65fc-4b47-a9b4-bf9014f0b3e2/export</id>
    <title>9a1e6c5d-65fc-4b47-a9b4-bf9014f0b3e2</title>
    <updated>2026-09-17T12:14:29.625459+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a1e6c5d-65fc-4b47-a9b4-bf9014f0b3e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21752", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6474", "content": "CVE-2023-21752:\nPoC for arbitrary file delete vulnerability in Windows Backup service\nhttps://github.com/Wh04m1001/CVE-2023-21752\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.23", "creation_timestamp": "2026-09-11T00:00:52.858316Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a1e6c5d-65fc-4b47-a9b4-bf9014f0b3e2/export"/>
    <published>2026-09-11T00:00:52.858316+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94b9543d-7c20-486f-a924-af3845363b9f/export</id>
    <title>94b9543d-7c20-486f-a924-af3845363b9f</title>
    <updated>2026-09-17T12:14:29.625566+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "94b9543d-7c20-486f-a924-af3845363b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21752", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6474", "content": "CVE-2023-21752:\nPoC for arbitrary file delete vulnerability in Windows Backup service\nhttps://github.com/Wh04m1001/CVE-2023-21752\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.23", "creation_timestamp": "2026-09-10T04:00:04.711177Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94b9543d-7c20-486f-a924-af3845363b9f/export"/>
    <published>2026-09-10T04:00:04.711177+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ae4f5f2f-fd1a-4ba4-8d66-7eb762de1a6c/export</id>
    <title>ae4f5f2f-fd1a-4ba4-8d66-7eb762de1a6c</title>
    <updated>2026-09-17T12:14:29.625666+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ae4f5f2f-fd1a-4ba4-8d66-7eb762de1a6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21839", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6628", "content": "exploit\n1. CVE-2022-41042:\nHTML/JavaScript injection in MS SARIF viewer/MS Live Preview extension, Path traversal in the local HTTP server in MS Live Preview extension\nhttps://blog.trailofbits.com/2023/02/21/vscode-extension-escape-vulnerability\n\n2. CVE-2023-21839:\nVulnerability in the Oracle WebLogic Server\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.05", "creation_timestamp": "2026-09-10T02:00:04.189058Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ae4f5f2f-fd1a-4ba4-8d66-7eb762de1a6c/export"/>
    <published>2026-09-10T02:00:04.189058+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e0c2732-6308-4148-85ff-d4e02fa64f3d/export</id>
    <title>2e0c2732-6308-4148-85ff-d4e02fa64f3d</title>
    <updated>2026-09-17T12:14:29.625769+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e0c2732-6308-4148-85ff-d4e02fa64f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21707", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-&amp;gt; https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-10T01:00:04.596386Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e0c2732-6308-4148-85ff-d4e02fa64f3d/export"/>
    <published>2026-09-10T01:00:04.596386+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9bbd37bb-05b0-4252-aaf1-86f756eccd62/export</id>
    <title>9bbd37bb-05b0-4252-aaf1-86f756eccd62</title>
    <updated>2026-09-17T12:14:29.625866+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9bbd37bb-05b0-4252-aaf1-86f756eccd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-21991", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-10T01:00:04.554366Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9bbd37bb-05b0-4252-aaf1-86f756eccd62/export"/>
    <published>2026-09-10T01:00:04.554366+00:00</published>
  </entry>
</feed>
