https://vulnerability.circl.lu/sightings/feed 2026-09-17T12:07:03.783814+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/6229348f-3595-4f8e-b1e6-959d543a8c59/export 2026-09-17T12:07:03.801768+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "6229348f-3595-4f8e-b1e6-959d543a8c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71378", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-9w88-8rmg-7g2p", "content": "", "creation_timestamp": "2026-09-11T20:35:10.805317Z"} 2026-09-11T20:35:10.805317+00:00 https://vulnerability.circl.lu/sighting/f5da5954-a0c9-44f5-b35c-30d378a127c3/export 2026-09-17T12:07:03.804975+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "f5da5954-a0c9-44f5-b35c-30d378a127c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71357", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-j343-8v2j-ff7w", "content": "", "creation_timestamp": "2026-09-11T20:35:08.591276Z"} 2026-09-11T20:35:08.591276+00:00 https://vulnerability.circl.lu/sighting/4f73d947-96ca-4b13-bdf1-8c7ed74b96a3/export 2026-09-17T12:07:03.805100+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "4f73d947-96ca-4b13-bdf1-8c7ed74b96a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71351", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-v7x6-rv5q-mhwc", "content": "", "creation_timestamp": "2026-09-11T20:35:06.381684Z"} 2026-09-11T20:35:06.381684+00:00 https://vulnerability.circl.lu/sighting/d1c1c6cd-3359-461c-b71b-a7b66e1c788f/export 2026-09-17T12:07:03.805175+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "d1c1c6cd-3359-461c-b71b-a7b66e1c788f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71348", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-vv6j-3g6g-2pvj", "content": "", "creation_timestamp": "2026-09-11T20:35:04.152798Z"} 2026-09-11T20:35:04.152798+00:00 https://vulnerability.circl.lu/sighting/8242383e-6534-49a7-b70a-b313c7ed2486/export 2026-09-17T12:07:03.805242+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "8242383e-6534-49a7-b70a-b313c7ed2486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-71132", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities_20260902", "content": "", "creation_timestamp": "2026-09-08T20:45:18.009868Z"} 2026-09-08T20:45:18.009868+00:00 https://vulnerability.circl.lu/sighting/5f69e936-50f4-4b40-b6a7-674dbb31b89d/export 2026-09-17T12:07:03.805337+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5f69e936-50f4-4b40-b6a7-674dbb31b89d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71243", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spip_saisies_rce.rb", "content": "{\"aliases\": [], \"arch\": \"php, cmd\", \"author\": [\"OpenStudio\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated PHP code injection in the SPIP\\n Saisies plugin (CVE-2025-71243). The _anciennes_valeurs form parameter is\\n interpolated unsanitized into a hidden field rendered with\\n interdire_scripts=false, allowing direct PHP code execution via template\\n eval.\\n\\n Exploitation requires a publicly accessible page containing a\\n saisies-powered form, most commonly created with the Formidable plugin.\\n Use the FORM_PAGE option to specify a known form page, or set it to\\n 'crawl' to automatically discover one by following internal links from\\n the SPIP sitemap.\\n\\n Versions 5.4.0 through 5.11.0 of the saisies plugin are affected.\", \"disclosure_date\": \"2025-02-19\", \"fullname\": \"exploit/multi/http/spip_saisies_rce\", \"is_install_path\": true, \"mod_time\": \"2026-03-05 14:13:05 +0000\", \"name\": \"SPIP Saisies Plugin Unauthenticated RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/spip_saisies_rce.rb\", \"platform\": \"Linux,PHP,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/spip_saisies_rce\", \"references\": [\"CVE-2025-71243\", \"URL-https://blog.spip.net/Mise-a-jour-critique-de-securite-pour-le-plugin-Saisies.html\", \"URL-https://plugins.spip.net/saisies\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"PHP In-Memory\", \"Unix/Linux Command Shell\", \"Windows Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:13.208165Z"} 2026-09-08T06:50:13.208165+00:00 https://vulnerability.circl.lu/sighting/74269a89-99eb-4e71-8b22-92a61149d278/export 2026-09-17T12:07:03.806277+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "74269a89-99eb-4e71-8b22-92a61149d278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71387", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o", "content": "\u300cTrendAI Vision One\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - 2025\u5e74\u306b\u4fee\u6b63\u6e08\u307f\n\n\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u306f\u3001\u540c\u793e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u88fd\u54c1\u300cTrendAI Vision One\u300d\u306b\u95a2\u9023\u3057\u3001\u6df1\u523b\u306a\u8106\u5f31\u6027\u30922025\u5e74\u5f8c\u534a\u306b\u89e3\u6d88\u3057\u3066\u3044\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u540c\u793e\u306f2026\u5e747\u670822\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u306b\u3088\u308a\u60c5\u5831\u6f0f\u6d29\u304c\u751f\u3058\u308b\u8106\u5f31\u6027\u300cCVE-2025-71386\u300d\u3084\u3001\u7279\u5b9a\u306e\u30ed\u30fc\u30eb\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u3063\u3066\u6a29\u9650\u306e\u6607\u683c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2025-71387\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u306f\u3001\u300cCVE-2025-...", "creation_timestamp": "2026-08-30T13:33:24.983918Z"} 2026-08-30T13:33:24.983918+00:00 https://vulnerability.circl.lu/sighting/f8132bcc-6824-45ad-a73a-46e51cb953ec/export 2026-09-17T12:07:03.806397+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f8132bcc-6824-45ad-a73a-46e51cb953ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71386", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mucixhfot22o", "content": "\u300cTrendAI Vision One\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - 2025\u5e74\u306b\u4fee\u6b63\u6e08\u307f\n\n\u30c8\u30ec\u30f3\u30c9\u30de\u30a4\u30af\u30ed\u306f\u3001\u540c\u793e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u88fd\u54c1\u300cTrendAI Vision One\u300d\u306b\u95a2\u9023\u3057\u3001\u6df1\u523b\u306a\u8106\u5f31\u6027\u30922025\u5e74\u5f8c\u534a\u306b\u89e3\u6d88\u3057\u3066\u3044\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u540c\u793e\u306f2026\u5e747\u670822\u65e5\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30c9\u30d0\u30a4\u30b6\u30ea\u3092\u516c\u958b\u3002\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30a2\u30af\u30bb\u30b9\u306b\u3088\u308a\u60c5\u5831\u6f0f\u6d29\u304c\u751f\u3058\u308b\u8106\u5f31\u6027\u300cCVE-2025-71386\u300d\u3084\u3001\u7279\u5b9a\u306e\u30ed\u30fc\u30eb\u3092\u6301\u3064\u30e6\u30fc\u30b6\u30fc\u306b\u3088\u3063\u3066\u6a29\u9650\u306e\u6607\u683c\u304c\u53ef\u80fd\u3068\u306a\u308b\u8106\u5f31\u6027\u300cCVE-2025-71387\u300d\u3078\u5bfe\u51e6\u3057\u305f\u3053\u3068\u3092\u660e\u3089\u304b\u306b\u3057\u305f\u3002\n\n\u5171\u901a\u8106\u5f31\u6027\u8a55\u4fa1\u30b7\u30b9\u30c6\u30e0\u300cCVSSv3.1\u300d\u306e\u30d9\u30fc\u30b9\u30b9\u30b3\u30a2\u306f\u3001\u300cCVE-2025-...", "creation_timestamp": "2026-08-30T13:33:24.935481Z"} 2026-08-30T13:33:24.935481+00:00 https://vulnerability.circl.lu/sighting/5db3347e-baec-4135-bad3-1d1324d6b8ad/export 2026-09-17T12:07:03.806471+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5db3347e-baec-4135-bad3-1d1324d6b8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71407", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtwwc6v4vu25", "content": "CVE-2025-71407 - nokogiri\nThe Ruby library Nokogiri, used to read and process XML data, can be forced to crash or run unwanted code when it handles specially crafted XML definitions from untrusted\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#nokogiri #sparklemotion #CVE #infosec", "creation_timestamp": "2026-08-25T23:00:06.724983Z"} 2026-08-25T23:00:06.724983+00:00 https://vulnerability.circl.lu/sighting/8129d650-f66b-467b-85bc-fd3fc5c34a88/export 2026-09-17T12:07:03.806549+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8129d650-f66b-467b-85bc-fd3fc5c34a88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-71407", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mtwfxywrn32e", "content": "\ud83d\udea8 CVE-2025-71407 \u2014 CVSS 9.3 CRITICAL\n\nNokogiri before 1.18.3 contains a stack buffer overflow vulnerability in libxml2 when reporting DTD validat...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-71407\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-25T18:08:05.565439Z"} 2026-08-25T18:08:05.565439+00:00