https://vulnerability.circl.lu/sightings/feed 2026-09-17T11:06:34.924389+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/50c43125-14f9-4094-890b-47a68492fd6d/export 2026-09-17T11:06:35.016667+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "50c43125-14f9-4094-890b-47a68492fd6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38352", "type": "published-proof-of-concept", "source": "Telegram/_lzdsLqQ7bGVpkz_qYAb1CGOr8QjF-qQV0vSyifZbJ3qZOY", "content": "", "creation_timestamp": "2026-09-15T00:00:29.687223Z"} 2026-09-15T00:00:29.687223+00:00 https://vulnerability.circl.lu/sighting/3f11d59b-13aa-4afc-a8af-3a67601ddb91/export 2026-09-17T11:06:35.019319+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3f11d59b-13aa-4afc-a8af-3a67601ddb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38502", "type": "published-proof-of-concept", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "content": "", "creation_timestamp": "2026-09-15T00:00:22.476081Z"} 2026-09-15T00:00:22.476081+00:00 https://vulnerability.circl.lu/sighting/1f9da077-c606-4651-8827-483b11661beb/export 2026-09-17T11:06:35.019514+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1f9da077-c606-4651-8827-483b11661beb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38502", "type": "seen", "source": "Telegram/SISeOiJWiDHPKa0-EGjfIE-t_IZnqvMDmbIqcTRDP3O63UA", "content": "", "creation_timestamp": "2026-09-14T03:00:13.095241Z"} 2026-09-14T03:00:13.095241+00:00 https://vulnerability.circl.lu/sighting/5c1368a6-5796-43df-bbf0-81fdb93f44fa/export 2026-09-17T11:06:35.019623+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5c1368a6-5796-43df-bbf0-81fdb93f44fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38352", "type": "seen", "source": "Telegram/_lzdsLqQ7bGVpkz_qYAb1CGOr8QjF-qQV0vSyifZbJ3qZOY", "content": "", "creation_timestamp": "2026-09-14T03:00:06.443548Z"} 2026-09-14T03:00:06.443548+00:00 https://vulnerability.circl.lu/sighting/9f15a794-1a97-4689-bb81-0eb8ba18298e/export 2026-09-17T11:06:35.019715+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "9f15a794-1a97-4689-bb81-0eb8ba18298e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38236", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1339", "content": "\u2728 General Cyber News \u2728\n\nFrom Chrome renderer code exec to kernel with MSG_OOB\n\n\u2014\n\nSummary:\nPosted by Jann Horn, Google Project ZeroIntroduction\n In early June, I was reviewing a new Linux kernel feature when I learned about the MSG_OOB feature supported by stream-oriented UNIX domain sockets. I reviewed the implementation of MSG_OOB, and discovered a security bug (CVE-2025-38236) affecting Linux >=6.9. I reported the bug to Linux, and it got fixed. Interestingly, while the MSG_OOB feature is not used by Chrome, it was exposed in the Chrome renderer sandbox. (Since...\n\n\u2014\n\nSource: Project Zero\nPublished: 2025-08-08 10:43 | Author: Google Project Zero (noreply@blogger.com)\n\n#general_cyber_news #renderer #chrome\n\nView Article", "creation_timestamp": "2026-09-10T00:00:24.232033Z"} 2026-09-10T00:00:24.232033+00:00 https://vulnerability.circl.lu/sighting/57651726-0134-49b3-b34f-67036e5e838a/export 2026-09-17T11:06:35.019822+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "57651726-0134-49b3-b34f-67036e5e838a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38724", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mv2riml24a2f", "content": "CVE-2025-38724 - linux-fips\nThe rootio-linux package in Debian 12 has a vulnerability that allows an attacker to run malicious code on your system without a password. This could be used to\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#linuxfips #canonical #RootDebian12 #CVE #infosec", "creation_timestamp": "2026-09-09T05:10:04.575782Z"} 2026-09-09T05:10:04.575782+00:00 https://vulnerability.circl.lu/sighting/618ea75c-7bc9-4380-a55f-cfac72cbdfb7/export 2026-09-17T11:06:35.019920+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "618ea75c-7bc9-4380-a55f-cfac72cbdfb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38236", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1339", "content": "\u2728 General Cyber News \u2728\n\nFrom Chrome renderer code exec to kernel with MSG_OOB\n\n\u2014\n\nSummary:\nPosted by Jann Horn, Google Project ZeroIntroduction\n In early June, I was reviewing a new Linux kernel feature when I learned about the MSG_OOB feature supported by stream-oriented UNIX domain sockets. I reviewed the implementation of MSG_OOB, and discovered a security bug (CVE-2025-38236) affecting Linux >=6.9. I reported the bug to Linux, and it got fixed. Interestingly, while the MSG_OOB feature is not used by Chrome, it was exposed in the Chrome renderer sandbox. (Since...\n\n\u2014\n\nSource: Project Zero\nPublished: 2025-08-08 10:43 | Author: Google Project Zero (noreply@blogger.com)\n\n#general_cyber_news #renderer #chrome\n\nView Article", "creation_timestamp": "2026-09-09T05:00:18.205671Z"} 2026-09-09T05:00:18.205671+00:00 https://vulnerability.circl.lu/sighting/ea88ba53-8900-418b-9654-eeb39168b83b/export 2026-09-17T11:06:35.020019+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ea88ba53-8900-418b-9654-eeb39168b83b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38900", "type": "published-proof-of-concept", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-25T00:00:09.212112Z"} 2026-08-25T00:00:09.212112+00:00 https://vulnerability.circl.lu/sighting/322b6b2a-524f-4436-8e59-eda650a44af4/export 2026-09-17T11:06:35.020138+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "322b6b2a-524f-4436-8e59-eda650a44af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38900", "type": "seen", "source": "Telegram/0Lzh2WjQOWsuTydOW_ekHZzZKDiwWQ3j_cpMbWJHlr9U_UA", "content": "", "creation_timestamp": "2026-08-24T21:00:04.554642Z"} 2026-08-24T21:00:04.554642+00:00 https://vulnerability.circl.lu/sighting/137dc805-3a65-4801-8ce7-c1eb562d78d4/export 2026-09-17T11:06:35.020235+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "137dc805-3a65-4801-8ce7-c1eb562d78d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-38352", "type": "exploited", "source": "https://t.me/NinjaSecurity/251", "content": "A free, open source, and extensible speech-to-text application that works completely offline.\n\nhttps://github.com/cjpais/Handy\n\n\nLogging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. \n\nhttps://github.com/cisagov/LME\n\nLet's fight phishing together\n\nhttps://github.com/Duddu-Hriday/Phish-Blitz\nawesome list of cybersecurity research, RE material, exploitation write-ups, and tools. \n\nhttps://github.com/0xor0ne/awesome-list \n\nModular, guided Linux privilege escalation assistant - smarter than blind enumeration.\n\nhttps://github.com/Null0x-sh/Nullpeas\n\n\ud83d\udc7b Transparent Network Implant | L2 Bridge | WireGuard Tunnel | MAC Cloning | Stealth Persistence | NanoPi R2S | Part of MoMo Ecosystem.\n\nhttps://github.com/M0M0Sec/Momo-GhostBridge\n\nThis is a proof of concept for CVE-2025-38352, a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin mentions that this vulnerability has been used in limited, targeted exploitation in the wild.\n\nhttps://github.com/farazsth98/poc-CVE-2025-38352\n\nNew 0 day vulnerability allowing to leak NTLM hashes from browsers with one click.\n\nhttps://github.com/rubenformation/ms-photos_NTLM_Leak\n\nCyberFind \u2014 a next-generation OSINT reconnaissance tool designed for cybersecurity professionals, penetration testers, and digital investigators. Search for users across 200+ platforms with speed and accuracy.\n\nhttps://github.com/vazor-code/cyber-find\n\nA phone number can reveal whether a device is active, in standby or offline (and more). This PoC demonstrates how delivery receipts + RTT timing leak sensitive device-activity patterns. (WhatsApp / Signal)\n\nhttps://github.com/gommzystudio/device-activity-tracker\n\nCVE-2025-14558\nFreeBSD rtsold DNSSL Command Injection (RCE)\n\nhttps://github.com/JohannesLks/CVE-2025-14558\n\nDiscover and explore a curated list of MCP servers, tools, and resources for AI assistants, enhancing your development and productivity.\n\nhttps://github.com/timunbasah3/awesome-mcp\n\nAutomagically decode DNS Exfiltration queries to convert Blind RCE into proper RCE via Burp Collaborator.\n\nhttps://github.com/LazyTitan33/DNS-Exfilnspector\n\nAnalyze Android APKs with AndroidBeautifest. Extract components and configurations, generating ADB commands for quick security assessment.\n\nhttps://github.com/pacomartinezea/androidBeautifest\n\nMimikatz implementation in pure Python\n\nhttps://github.com/skelsec/pypykatz\n\nContext-aware Nmap reconnaissance framework with traffic intelligence and AD awareness.\n\nhttps://github.com/lLVXX/PARANOID\n\nNext-generation intelligent Web Fuzzer & Directory Scanner written in Go. Features WAF detection, secret scanning, auto-calibration, and smart 403 bypass.\n\nhttps://github.com/hawtsauceTR/capsaicin\n\nA collection of intel and usernames scraped from various cybercrime sources & forums. DarkForums, HackForums, Patched, Cracked, BreachForums, LeakBase, & more.\n\nhttps://github.com/spmedia/Threat-Actor-Usernames-Scrape\n\nA curated list of resources regarding CVE-2025-55182, the critical Remote Code Execution (RCE) vulnerability in React Server Components known as \"React2Shell\".\n\nhttps://github.com/websecuritylabs/React2Shell-Library\n\nPlease Note: All mentioned tools are listed for educational purposes and authorized security testing only. Unauthorized use on systems you do not own or have explicit permission to test is illegal and unethical.\n\n#NinjaSecurity #HackersFactory", "creation_timestamp": "2026-08-20T00:00:09.292327Z"} 2026-08-20T00:00:09.292327+00:00