https://vulnerability.circl.lu/sightings/feed 2026-09-17T11:27:27.592644+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/eed30273-676f-41d2-ace7-158a2e8c74a6/export 2026-09-17T11:27:27.620312+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "eed30273-676f-41d2-ace7-158a2e8c74a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25639", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mvn3oxlzd32u", "content": "\ud83d\udd17 CVE : CVE-2023-48795, CVE-2023-6918, CVE-2026-25639, CVE-2026-73954, CVE-2026-73955, CVE-2026-73960, CVE-2026-7598, CVE-2026-82993, CVE-2026-83014, CVE-2026-83015, CVE-2026-83016, CVE-2026-83017, CVE-2026-83018, CVE-2026-83019, CVE-2026-83070, CVE-2026-83147, CVE-2026-83420, CVE-2026-87264", "creation_timestamp": "2026-09-16T12:00:30.171882Z"} 2026-09-16T12:00:30.171882+00:00 https://vulnerability.circl.lu/sighting/5241af59-14a8-4473-b944-02980c324a8a/export 2026-09-17T11:27:27.623626+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5241af59-14a8-4473-b944-02980c324a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25250", "type": "published-proof-of-concept", "source": "https://t.me/TengkorakCyberCrewzz/13761", "content": "CVE-2026-25250 \u2014 Updated! \u2013 kitploit.com\n\nThu, 03 Sep 2026 08:20:35", "creation_timestamp": "2026-09-16T00:00:11.305431Z"} 2026-09-16T00:00:11.305431+00:00 https://vulnerability.circl.lu/sighting/c63d6cb5-286e-4117-8ed7-3b141523fd82/export 2026-09-17T11:27:27.623783+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c63d6cb5-286e-4117-8ed7-3b141523fd82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25250", "type": "seen", "source": "https://t.me/TengkorakCyberCrewzz/13761", "content": "CVE-2026-25250 \u2014 Updated! \u2013 kitploit.com\n\nThu, 03 Sep 2026 08:20:35", "creation_timestamp": "2026-09-15T21:00:04.669242Z"} 2026-09-15T21:00:04.669242+00:00 https://vulnerability.circl.lu/sighting/1158add6-f2cd-4963-b3d4-7a8fa2f983b1/export 2026-09-17T11:27:27.623894+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1158add6-f2cd-4963-b3d4-7a8fa2f983b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25506", "type": "seen", "source": "https://t.me/purp_sec/1413", "content": "\ud83d\udcdd \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0447\u0438\u0442\u0430\u0435\u043c \u043f\u0440\u043e 20-\u043b\u0435\u0442\u043d\u044e\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Munge\n\n\u041f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0437\u0430\u0431\u0430\u0432\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c \u0431\u0430\u0433\u0430 (heap buffer overflow, CVE-2026-25506), \u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0432 Munge \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 0.5.0, \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 2006 \u0433\u043e\u0434\u0443, \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 0.5.17 (\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e \u0444\u0438\u043a\u0441\u0430).\n\nMunge (MUNGE Uid 'N' Gid Emporium) \u2014 \u044d\u0442\u043e \u043b\u0435\u0433\u043a\u0438\u0439 daemon, \u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u0439 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u0440\u0435\u0434\u044b (tickets) \u0434\u043b\u044f \u043c\u0435\u0436\u043d\u043e\u0434\u043e\u0432\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 root-\u043f\u0440\u0430\u0432. \u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 UNIX-\u0441\u043e\u043a\u0435\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 HMAC \u0441 \u043e\u0431\u0449\u0438\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u043c (keyfile). Munge \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Slurm, \u0441\u0430\u043c\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c workload manager \u0434\u043b\u044f HPC-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0438 \u0441\u0443\u043f\u0435\u0440\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432.\n\n\u2b07\ufe0f \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0411\u0430\u0433 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u043f\u0440\u0438 AFL-\u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0435 \u0445\u0430\u0440\u043d\u0435\u0441\u0430, \u044d\u043c\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u0438\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 UNIX-\u0441\u043e\u043a\u0435\u0442. \u0412 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 _msg_unpack \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0442\u0438\u043f\u0430 MUNGE_MSG_DEC_RSP \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 heap buffer overflow:\n\n\u23fa \u043f\u043e\u043b\u0435 m->addr_len (uint8_t) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u043b\u0438\u043d\u0430 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f,\n\u23fa \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e 255 \u0431\u0430\u0439\u0442 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 4-\u0431\u0430\u0439\u0442\u043e\u0432\u0443\u044e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 struct in_addr\n\u23fa \u043f\u0440\u0438 addr_len = 0xff \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0437\u0430\u043f\u0438\u0441\u044c 255 \u0431\u0430\u0439\u0442 \u0432 \u0431\u0443\u0444\u0435\u0440 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 4 \u0431\u0430\u0439\u0442\u0430,\n\u23fa \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e heap-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043e 251 \u0431\u0430\u0439\u0442\u0430 \u0437\u0430 \u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438,\n\u23fa \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u044f struct m_msg, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438,\n\u23fa \u043f\u0440\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c heap-layout \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 tcache poisoning b heap shaping.\n\n\u041a\u0430\u043a \u0438\u0442\u043e\u0433 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 tcache poisoning \u0438 heap shaping \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0434\u0435\u043c\u043e\u043d\u0430 munged, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 HMAC-\u043a\u043b\u044e\u0447 \u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u0437\u043b\u0430\u0445 HPC-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e root.\n\n\u2b07\ufe0f \u0421\u0442\u0430\u0442\u0443\u0441\n\n\u0424\u0438\u043a\u0441 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u0448\u0435\u043b 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 Munge 0.5.18. \u041d\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043e\u0431\u0449\u0443\u044e \u043d\u0435\u043b\u044e\u0431\u043e\u0432\u044c \u043a \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e HPC-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u041f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e in wild \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442. \n\n\ud83d\udcac \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.061385Z"} 2026-09-15T00:00:11.061385+00:00 https://vulnerability.circl.lu/sighting/75369c8f-2f24-45b7-a43f-fb9b99324eef/export 2026-09-17T11:27:27.624078+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "75369c8f-2f24-45b7-a43f-fb9b99324eef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25057", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102335", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-25057\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ustr\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0 | \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-14 21:58:09\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC for CVE-2026-25057\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-15T00:00:08.818765Z"} 2026-09-15T00:00:08.818765+00:00 https://vulnerability.circl.lu/sighting/6a19e2ee-dd01-48fb-bdf2-0e6e9ed1a50f/export 2026-09-17T11:27:27.624198+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6a19e2ee-dd01-48fb-bdf2-0e6e9ed1a50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25089", "type": "seen", "source": "https://bsky.app/profile/kotosecurity.bsky.social/post/3mviywqp6lq22", "content": "2/ FortiSandbox cmd-injection flaws (CVE-2026-39808 + CVE-2026-25089) hit CISA KEV Jul 16 \u2014 actively exploited, patch/pull offline by Jul 19. Plus OpenSSL 'HollowByte' pre-auth DoS (11-byte payload). Patch now. Src: CISA / Okta", "creation_timestamp": "2026-09-14T21:00:30.940000Z"} 2026-09-14T21:00:30.940000+00:00 https://vulnerability.circl.lu/sighting/21ec4968-7266-4d56-94e2-67816d12435f/export 2026-09-17T11:27:27.624314+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "21ec4968-7266-4d56-94e2-67816d12435f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25506", "type": "seen", "source": "https://t.me/purp_sec/1413", "content": "\ud83d\udcdd \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u0447\u0438\u0442\u0430\u0435\u043c \u043f\u0440\u043e 20-\u043b\u0435\u0442\u043d\u044e\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Munge\n\n\u041f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u043b \u0437\u0430\u0431\u0430\u0432\u043d\u044b\u0439 \u0441\u043b\u0443\u0447\u0430\u0439 \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435\u043c \u0431\u0430\u0433\u0430 (heap buffer overflow, CVE-2026-25506), \u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0432 Munge \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 0.5.0, \u0432\u044b\u0448\u0435\u0434\u0448\u0435\u0439 \u0432 2006 \u0433\u043e\u0434\u0443, \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 0.5.17 (\u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e \u0444\u0438\u043a\u0441\u0430).\n\nMunge (MUNGE Uid 'N' Gid Emporium) \u2014 \u044d\u0442\u043e \u043b\u0435\u0433\u043a\u0438\u0439 daemon, \u0441\u043e\u0437\u0434\u0430\u044e\u0449\u0438\u0439 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u044e\u0449\u0438\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u0440\u0435\u0434\u044b (tickets) \u0434\u043b\u044f \u043c\u0435\u0436\u043d\u043e\u0434\u043e\u0432\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 root-\u043f\u0440\u0430\u0432. \u0420\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 UNIX-\u0441\u043e\u043a\u0435\u0442\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 HMAC \u0441 \u043e\u0431\u0449\u0438\u043c \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u043c (keyfile). Munge \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Slurm, \u0441\u0430\u043c\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c workload manager \u0434\u043b\u044f HPC-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0438 \u0441\u0443\u043f\u0435\u0440\u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432.\n\n\u2b07\ufe0f \u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\n\u0411\u0430\u0433 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u043f\u0440\u0438 AFL-\u0444\u0430\u0437\u0437\u0438\u043d\u0433\u0435 \u0445\u0430\u0440\u043d\u0435\u0441\u0430, \u044d\u043c\u0443\u043b\u0438\u0440\u0443\u044e\u0449\u0435\u0433\u043e \u043f\u0440\u0438\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 UNIX-\u0441\u043e\u043a\u0435\u0442. \u0412 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 _msg_unpack \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u0442\u0438\u043f\u0430 MUNGE_MSG_DEC_RSP \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 heap buffer overflow:\n\n\u23fa \u043f\u043e\u043b\u0435 m->addr_len (uint8_t) \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u043b\u0438\u043d\u0430 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f,\n\u23fa \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0434\u043e 255 \u0431\u0430\u0439\u0442 \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 4-\u0431\u0430\u0439\u0442\u043e\u0432\u0443\u044e \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 struct in_addr\n\u23fa \u043f\u0440\u0438 addr_len = 0xff \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0437\u0430\u043f\u0438\u0441\u044c 255 \u0431\u0430\u0439\u0442 \u0432 \u0431\u0443\u0444\u0435\u0440 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 4 \u0431\u0430\u0439\u0442\u0430,\n\u23fa \u044d\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e heap-\u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043e 251 \u0431\u0430\u0439\u0442\u0430 \u0437\u0430 \u0435\u0433\u043e \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438,\n\u23fa \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u043f\u043e\u043b\u044f struct m_msg, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u0438,\n\u23fa \u043f\u0440\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c heap-layout \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 tcache poisoning b heap shaping.\n\n\u041a\u0430\u043a \u0438\u0442\u043e\u0433 \u2014 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0435\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 tcache poisoning \u0438 heap shaping \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0430\u043c\u044f\u0442\u044c \u0434\u0435\u043c\u043e\u043d\u0430 munged, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0439 HMAC-\u043a\u043b\u044e\u0447 \u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u0442\u043e\u043a\u0435\u043d\u044b, \u043f\u043e\u043b\u0443\u0447\u0430\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u043d\u0430 \u0443\u0437\u043b\u0430\u0445 HPC-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430 \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e root.\n\n\u2b07\ufe0f \u0421\u0442\u0430\u0442\u0443\u0441\n\n\u0424\u0438\u043a\u0441 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0432\u044b\u0448\u0435\u043b 10 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0432 Munge 0.5.18. \u041d\u043e, \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435\u043e\u0431\u0449\u0443\u044e \u043d\u0435\u043b\u044e\u0431\u043e\u0432\u044c \u043a \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e HPC-\u043a\u043b\u0430\u0441\u0442\u0435\u0440\u043e\u0432 \u0432\u0441\u0435 \u0435\u0449\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438. \u041f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043f\u0440\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e in wild \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442. \n\n\ud83d\udcac \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.978022Z"} 2026-09-14T18:00:06.978022+00:00 https://vulnerability.circl.lu/sighting/45c754ec-c434-4c9f-9a9e-e0928c2380af/export 2026-09-17T11:27:27.624481+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "45c754ec-c434-4c9f-9a9e-e0928c2380af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25787", "type": "seen", "source": "https://t.me/shimiscyberworld/1385", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-25787 \u2014 CVSS 9.1\nCVE-2026-25787: Critical XSS in Motion Control Diagnostics\n\nCVE-2026-25787 \u2014 Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the \"Motion Control Diagnostics\" page of the web interface. This cou\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-25787 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.941754Z"} 2026-09-13T00:00:51.941754+00:00 https://vulnerability.circl.lu/sighting/5ffac424-e316-4738-8757-c2e121cfd966/export 2026-09-17T11:27:27.624620+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5ffac424-e316-4738-8757-c2e121cfd966", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25786", "type": "seen", "source": "https://t.me/shimiscyberworld/1384", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2026-25786 \u2014 CVSS 9.1\nCVE-2026-25786: Critical XSS in PLC/Station Name Field\n\nCVE-2026-25786 \u2014 Affected devices do not properly validate and sanitize PLC/station name rendered on the \"communication\" parameters page of the web interface.\nThis could allow an \n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2026-25786 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:51.726404Z"} 2026-09-13T00:00:51.726404+00:00 https://vulnerability.circl.lu/sighting/bb1ec4cb-e3d3-462c-b75a-6e777a32fb65/export 2026-09-17T11:27:27.624743+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bb1ec4cb-e3d3-462c-b75a-6e777a32fb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-25863", "type": "seen", "source": "https://t.me/shimiscyberworld/1197", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-04\n\n\ud83d\udcca 31 vulnerabilities detected today \u2014 20 \ud83d\udd34 Critical, 11 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-42809 (9.9) \u2014 CVE-2026-42809: Apache Polaris Critical Credential\u2026\n \u2022 CVE-2026-42810 (9.9) \u2014 CVE-2026-42810: Apache Polaris S3 Wildcard Vulnerability\u2026\n \u2022 CVE-2026-42811 (9.9) \u2014 CVE-2026-42811: Apache Polaris Credential Bypass Exposes\u2026\n \u2022 CVE-2026-42812 (9.9) \u2014 Apache Iceberg CVE-2026-42812 Bypasses Metadata Location\u2026\n \u2022 CVE-2026-24118 (9.8) \u2014 VM2 Sandbox Breakout Vulnerability: Critical Flaw Exposes\u2026\n \u2022 CVE-2026-24120 (9.8) \u2014 CVE-2026-24120: vm2 Sandbox Escape Allows Host Command\u2026\n \u2022 CVE-2026-24781 (9.8) \u2014 VM2 Sandbox Escape Vulnerability (CVE-2026-24781) Exposes\u2026\n \u2022 CVE-2026-26332 (9.8) \u2014 vm2 Sandbox Escape (CVE-2026-26332) Exposes Node.js Apps to\u2026\n \u2026 and 12 more\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2025-58074 (8.8) \u2014 Norton Secure VPN Privilege Escalation via Microsoft Store\u2026\n \u2022 CVE-2026-6266 (8.3) \u2014 CVE-2026-6266: AAP Gateway Email Auto-Link Flaw Allows\u2026\n \u2022 CVE-2026-29004 (8.1) \u2014 BusyBox udhcpc6 Heap Overflow (CVE-2026-29004) Exposes\u2026\n \u2022 CVE-2026-42084 (8.1) \u2014 CVE-2026-42084: OpenC3 COSMOS Allows Password Change\u2026\n \u2022 CVE-2026-32834 (7.5) \u2014 CVE-2026-32834: WordPress Easy PayPal Plugin Authentication\u2026\n \u2022 CVE-2026-41471 (7.5) \u2014 CVE-2026-41471: PayPal Events WordPress Plugin Exposes All\u2026\n \u2022 CVE-2026-25863 (7.5) \u2014 CVE-2026-25863: WordPress Plugin DoS Vulnerability Hits\u2026\n \u2022 CVE-2026-42151 (7.5) \u2014 Prometheus Azure AD OAuth Secret Exposed via Plaintext\u2026\n \u2022 CVE-2026-42154 (7.5) \u2014 Prometheus CVE-2026-42154: Unauthenticated Memory\u2026\n \u2022 CVE-2026-3120 (7.2) \u2014 SambaBox CVE-2026-3120: High-Severity OS Command Injection\n \u2026 and 1 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:10.461255Z"} 2026-09-13T00:00:10.461255+00:00