<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-10T15:04:03.677190+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6c6fe990-18fb-497e-b118-71f50c23d007/export</id>
    <title>6c6fe990-18fb-497e-b118-71f50c23d007</title>
    <updated>2026-05-10T15:04:03.815511+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6c6fe990-18fb-497e-b118-71f50c23d007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "MISP/90e532fb-4efa-4ff2-95ab-ddaf25454791", "content": "", "creation_timestamp": "2025-07-01T21:18:45.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6c6fe990-18fb-497e-b118-71f50c23d007/export"/>
    <published>2025-07-01T21:18:45+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/da74445f-9013-43f5-ab11-aa2a977af91a/export</id>
    <title>da74445f-9013-43f5-ab11-aa2a977af91a</title>
    <updated>2026-05-10T15:04:03.815429+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "da74445f-9013-43f5-ab11-aa2a977af91a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lswu2mpe6k2p", "content": "", "creation_timestamp": "2025-07-01T23:28:45.414194Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/da74445f-9013-43f5-ab11-aa2a977af91a/export"/>
    <published>2025-07-01T23:28:45.414194+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/24b12ad1-2519-45f6-96e2-6eb5c013ac10/export</id>
    <title>24b12ad1-2519-45f6-96e2-6eb5c013ac10</title>
    <updated>2026-05-10T15:04:03.815355+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "24b12ad1-2519-45f6-96e2-6eb5c013ac10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "https://gist.github.com/AstaGITS/306c35e191920f6229e94fd4f1745e86", "content": "", "creation_timestamp": "2025-07-02T08:22:07.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/24b12ad1-2519-45f6-96e2-6eb5c013ac10/export"/>
    <published>2025-07-02T08:22:07+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b5db8a6-7d6f-483e-b7cd-1b21744183bc/export</id>
    <title>8b5db8a6-7d6f-483e-b7cd-1b21744183bc</title>
    <updated>2026-05-10T15:04:03.815263+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b5db8a6-7d6f-483e-b7cd-1b21744183bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "https://gist.github.com/AstaGITS/a8e25e05f51e6430e80a30bb15e2d2d6", "content": "", "creation_timestamp": "2025-07-02T09:41:34.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b5db8a6-7d6f-483e-b7cd-1b21744183bc/export"/>
    <published>2025-07-02T09:41:34+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02006187-fb03-439b-acf7-049ec23bb1a8/export</id>
    <title>02006187-fb03-439b-acf7-049ec23bb1a8</title>
    <updated>2026-05-10T15:04:03.815164+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02006187-fb03-439b-acf7-049ec23bb1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "https://gist.github.com/AstaGITS/abc86c56e2a9c8ed2f2a7b39ce70f4f4", "content": "", "creation_timestamp": "2025-07-02T09:53:41.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02006187-fb03-439b-acf7-049ec23bb1a8/export"/>
    <published>2025-07-02T09:53:41+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b6cc6d40-44a7-4fa1-8553-dfb9e4415b24/export</id>
    <title>b6cc6d40-44a7-4fa1-8553-dfb9e4415b24</title>
    <updated>2026-05-10T15:04:03.815061+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b6cc6d40-44a7-4fa1-8553-dfb9e4415b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "published-proof-of-concept", "source": "https://t.me/Linux_Arabss/84", "content": "\u0645\u062c\u0645\u0648\u0639\u0629 \u0628\u0631\u0627\u0645\u062c \u0627\u0644\u0641\u062f\u064a\u0629 BlackByte \u062a\u0642\u0648\u0645 \u0628\u0625\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0627\u062a ProxyShell \u0641\u064a \u062e\u0627\u062f\u0645 Microsoft Exchange \u0644\u0644\u0648\u0635\u0648\u0644 \u0644\u0634\u0628\u0643\u0627\u062a \u0627\u0644\u0634\u0631\u0643\u0627\u062a\n_ \u0641\u064a \u062a\u0642\u0631\u064a\u0631 \u0645\u0641\u0635\u0644 \u0639\u0646 Red Canary \u062d\u0644\u0644 \u0627\u0644\u0628\u0627\u062d\u062b\u0648\u0646 \u0647\u062c\u0648\u0645 BlackByte Ransomware \u0648\u0625\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0644\u062b\u063a\u0631\u0629 ProxyShell \u0644\u062a\u062b\u0628\u064a\u062a web shells \u0639\u0644\u0649 \u062e\u0627\u062f\u0645 Exchange \u0645\u064f\u062e\u062a\u0631\u0642\n\nRed Canary\nhttps://redcanary.com/blog/blackbyte-ransomware\n\nBleeping Computer\nhttps://www.bleepingcomputer.com/news/security/microsoft-exchange-servers-hacked-to-deploy-blackbyte-ransomware\n\n#ProxyShell #exploit #CVE-2021-31207 dCVE-2021-34523 #CVE-2021-34473\nProxyShell #poc\nhttps://github.com/dmaasland/proxyshell-poc\n\nProxyShell poc Exploit : Exchange Server RCE (ACL Bypass + EoP + Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\n#poc for scanning ProxyShell\nhttps://github.com/mithridates1313/ProxyShell_POC\n\nAutomatic ProxyShell #Exploit\nhttps://github.com/Udyz/proxyshell-auto", "creation_timestamp": "2025-08-15T00:31:25.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b6cc6d40-44a7-4fa1-8553-dfb9e4415b24/export"/>
    <published>2025-08-15T00:31:25+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/73f83a37-7de1-4567-a3b0-8e1cd51b2ddc/export</id>
    <title>73f83a37-7de1-4567-a3b0-8e1cd51b2ddc</title>
    <updated>2026-05-10T15:04:03.814932+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "73f83a37-7de1-4567-a3b0-8e1cd51b2ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "https://gist.github.com/Hamid-K/f4288dae3a1f2dea8905b1cf16d59c1b", "content": "", "creation_timestamp": "2025-10-03T16:37:38.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/73f83a37-7de1-4567-a3b0-8e1cd51b2ddc/export"/>
    <published>2025-10-03T16:37:38+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4ddd45ed-70a2-4b57-88ca-ead50145cf99/export</id>
    <title>4ddd45ed-70a2-4b57-88ca-ead50145cf99</title>
    <updated>2026-05-10T15:04:03.813243+00:00</updated>
    <author>
      <name>Cédric Bonhomme</name>
      <uri>http://cve.circl.lu/user/cedric</uri>
    </author>
    <content>{"uuid": "4ddd45ed-70a2-4b57-88ca-ead50145cf99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-31207", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ddc64a36-fa4b-44b6-aeed-22cf0b07b28e", "content": "", "creation_timestamp": "2026-02-02T12:28:52.102799Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4ddd45ed-70a2-4b57-88ca-ead50145cf99/export"/>
    <published>2026-02-02T12:28:52.102799+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b5647b96-51f8-4b13-967a-97b4ea5ac668/export</id>
    <title>b5647b96-51f8-4b13-967a-97b4ea5ac668</title>
    <updated>2026-05-10T15:04:03.813113+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b5647b96-51f8-4b13-967a-97b4ea5ac668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "MISP/a9eb9e8e-d894-4f36-a6c2-ca8142f72d29", "content": "", "creation_timestamp": "2026-02-06T21:11:55.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b5647b96-51f8-4b13-967a-97b4ea5ac668/export"/>
    <published>2026-02-06T21:11:55+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9c4eca8b-4295-45bd-a366-e94b3d0631c3/export</id>
    <title>9c4eca8b-4295-45bd-a366-e94b3d0631c3</title>
    <updated>2026-05-10T15:04:03.810447+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9c4eca8b-4295-45bd-a366-e94b3d0631c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-31207", "type": "seen", "source": "MISP/c2d3cd1d-c08d-4312-8a7f-882826e2d83b", "content": "", "creation_timestamp": "2026-04-19T02:35:52.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9c4eca8b-4295-45bd-a366-e94b3d0631c3/export"/>
    <published>2026-04-19T02:35:52+00:00</published>
  </entry>
</feed>
