https://vulnerability.circl.lu/sightings/feed 2026-09-17T15:04:40.997600+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/7fd025c3-8bae-4dff-a87a-422e7d02b247/export 2026-09-17T15:04:41.066984+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7fd025c3-8bae-4dff-a87a-422e7d02b247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44823", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2702", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Nagios Log Server \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432 Nagios Log Server. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a BDU:2025-14348 \u0438 CVE-2025-44823, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e,...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 10:17 | Author: Vulner Queen\n\n#nagios #general_cyber_news #server\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-nagios-log-server-ugrozhaet-bezopasnosti-korporativnyh-sistem-monitoringa_16385", "creation_timestamp": "2026-09-10T00:00:45.739967Z"} 2026-09-10T00:00:45.739967+00:00 https://vulnerability.circl.lu/sighting/7d57f1a9-4d42-4f12-80ea-81b8a5be7ecd/export 2026-09-17T15:04:41.075433+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7d57f1a9-4d42-4f12-80ea-81b8a5be7ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44823", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2702", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Nagios Log Server \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430\n\n\u2014\n\nSummary:\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043b\u043e\u0433\u043e\u0432 Nagios Log Server. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043a BDU:2025-14348 \u0438 CVE-2025-44823, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 API \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c. \u041a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e,...\n\n\u2014\n\nSource: \u0410\u0440\u0445\u0438\u0432\u044b \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 - SEC-1275-1\nPublished: 2025-11-18 10:17 | Author: Vulner Queen\n\n#nagios #general_cyber_news #server\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-nagios-log-server-ugrozhaet-bezopasnosti-korporativnyh-sistem-monitoringa_16385", "creation_timestamp": "2026-09-09T05:00:10.547569Z"} 2026-09-09T05:00:10.547569+00:00 https://vulnerability.circl.lu/sighting/7d3178cd-4e43-41de-85ed-a69633b452b3/export 2026-09-17T15:04:41.075586+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7d3178cd-4e43-41de-85ed-a69633b452b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4428", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"CERT-EU\", \"Sonny Macdonald\", \"Piotr Bazydlo\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution exploit chain for Ivanti EPMM,\\n tracked as CVE-2025-4427 and CVE-2025-4428. An authentication flaw permits unauthenticated\\n access to an administrator web API endpoint, which allows for code execution via expression\\n language injection. This module executes in the context of the 'tomcat' user. This module\\n should also work on many versions of MobileIron Core (rebranded as Ivanti EPMM).\", \"disclosure_date\": \"2025-05-13\", \"fullname\": \"exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"references\": [\"CVE-2025-4427\", \"EDB-52421\", \"CVE-2025-4428\", \"URL-https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM?language=en_US\", \"URL-https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428\", \"URL-https://blog.eclecticiq.com/china-nexus-threat-actor-actively-exploiting-ivanti-endpoint-manager-mobile-cve-2025-4428-vulnerability\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.753260Z"} 2026-09-08T06:49:50.753260+00:00 https://vulnerability.circl.lu/sighting/5b2a6b0a-73d5-4d91-bea8-b33bc8054e64/export 2026-09-17T15:04:41.075714+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5b2a6b0a-73d5-4d91-bea8-b33bc8054e64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4427", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb", "content": "{\"aliases\": [], \"arch\": \"python\", \"author\": [\"CERT-EU\", \"Sonny Macdonald\", \"Piotr Bazydlo\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution exploit chain for Ivanti EPMM,\\n tracked as CVE-2025-4427 and CVE-2025-4428. An authentication flaw permits unauthenticated\\n access to an administrator web API endpoint, which allows for code execution via expression\\n language injection. This module executes in the context of the 'tomcat' user. This module\\n should also work on many versions of MobileIron Core (rebranded as Ivanti EPMM).\", \"disclosure_date\": \"2025-05-13\", \"fullname\": \"exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"is_install_path\": true, \"mod_time\": \"2026-06-02 10:32:30 +0000\", \"name\": \"Ivanti EPMM Authentication Bypass for Expression Language Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb\", \"platform\": \"Python\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/ivanti_epmm_rce_cve_2025_4427_4428\", \"references\": [\"CVE-2025-4427\", \"EDB-52421\", \"CVE-2025-4428\", \"URL-https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM?language=en_US\", \"URL-https://github.com/watchtowrlabs/watchTowr-vs-Ivanti-EPMM-CVE-2025-4427-CVE-2025-4428\", \"URL-https://blog.eclecticiq.com/china-nexus-threat-actor-actively-exploiting-ivanti-endpoint-manager-mobile-cve-2025-4428-vulnerability\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:50.675940Z"} 2026-09-08T06:49:50.675940+00:00 https://vulnerability.circl.lu/sighting/02a330df-2800-44cc-841f-dfe760af54cd/export 2026-09-17T15:04:41.075824+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "02a330df-2800-44cc-841f-dfe760af54cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4403", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-07T01:00:11.546900Z"} 2026-09-07T01:00:11.546900+00:00 https://vulnerability.circl.lu/sighting/e5eeb57f-90a5-407e-bce6-57dbea7d26f0/export 2026-09-17T15:04:41.075919+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e5eeb57f-90a5-407e-bce6-57dbea7d26f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4403", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-06T15:00:03.458958Z"} 2026-09-06T15:00:03.458958+00:00 https://vulnerability.circl.lu/sighting/3486caa2-bcbd-48b1-9238-bbbe670f67a0/export 2026-09-17T15:04:41.076012+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3486caa2-bcbd-48b1-9238-bbbe670f67a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/168959", "content": "XSS Mass Hunting CVE-2025-44148\nhttps://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:01:00.522445Z"} 2026-09-04T00:01:00.522445+00:00 https://vulnerability.circl.lu/sighting/89d0413e-9621-4677-a1f2-7e9045985807/export 2026-09-17T15:04:41.076109+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89d0413e-9621-4677-a1f2-7e9045985807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/168961", "content": "Google + Shodan + FOFA + ZoomEye DorkingContinue reading on LegionHunters \u00bb (https://medium.com/legionhunters/xss-mass-hunting-cve-2025-44148-8737e86c04d9?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:01:00.481056Z"} 2026-09-04T00:01:00.481056+00:00 https://vulnerability.circl.lu/sighting/e418aca5-62f4-45b1-b01d-ae87b62d4664/export 2026-09-17T15:04:41.076200+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e418aca5-62f4-45b1-b01d-ae87b62d4664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "seen", "source": "https://t.me/hacking_Attack/168953", "content": "XSS Mass Hunting CVE-2025-44148\n\nGoogle + Shodan + FOFA + ZoomEye DorkingContinue reading on LegionHunters \u00bb\nRead more...", "creation_timestamp": "2026-09-04T00:01:00.229235Z"} 2026-09-04T00:01:00.229235+00:00 https://vulnerability.circl.lu/sighting/3d9713a1-8af2-4a5f-89a3-77e919f68301/export 2026-09-17T15:04:41.076293+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3d9713a1-8af2-4a5f-89a3-77e919f68301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44148", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/166206", "content": "I am Will Star a security newbie. Today I will talk about my little exploration in finding vulnerabilities in enterprise web and how I\u2026Continue reading on Medium \u00bb (https://medium.com/@will.star/cve-2025-44148-cross-site-scripting-xss-vulnerability-on-a-small-business-f88f109262f6?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:59.046352Z"} 2026-09-04T00:00:59.046352+00:00