<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-13T07:33:44.753598+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/863fc831-cb2a-4f91-a161-74cedb1d5a62/export</id>
    <title>863fc831-cb2a-4f91-a161-74cedb1d5a62</title>
    <updated>2026-08-13T07:33:44.773283+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "863fc831-cb2a-4f91-a161-74cedb1d5a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-08-05T00:00:57.516599Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/863fc831-cb2a-4f91-a161-74cedb1d5a62/export"/>
    <published>2026-08-05T00:00:57.516599+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/836b30ae-46ec-4ca8-a790-23f9aa5180e8/export</id>
    <title>836b30ae-46ec-4ca8-a790-23f9aa5180e8</title>
    <updated>2026-08-13T07:33:44.774785+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "836b30ae-46ec-4ca8-a790-23f9aa5180e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-08-04T03:00:05.426857Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/836b30ae-46ec-4ca8-a790-23f9aa5180e8/export"/>
    <published>2026-08-04T03:00:05.426857+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/42da1e99-d564-4c0c-9c8b-d0ddcba3e3da/export</id>
    <title>42da1e99-d564-4c0c-9c8b-d0ddcba3e3da</title>
    <updated>2026-08-13T07:33:44.774886+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "42da1e99-d564-4c0c-9c8b-d0ddcba3e3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-07-30T00:03:05.129975Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/42da1e99-d564-4c0c-9c8b-d0ddcba3e3da/export"/>
    <published>2026-07-30T00:03:05.129975+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6aafa103-9d16-4f8a-9b85-898f5cfdc08c/export</id>
    <title>6aafa103-9d16-4f8a-9b85-898f5cfdc08c</title>
    <updated>2026-08-13T07:33:44.774960+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6aafa103-9d16-4f8a-9b85-898f5cfdc08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-07-29T12:03:19.387939Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6aafa103-9d16-4f8a-9b85-898f5cfdc08c/export"/>
    <published>2026-07-29T12:03:19.387939+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/95bebf4e-db9b-444f-ae81-4727229d679c/export</id>
    <title>95bebf4e-db9b-444f-ae81-4727229d679c</title>
    <updated>2026-08-13T07:33:44.775030+00:00</updated>
    <author>
      <name>Cédric Bonhomme</name>
      <uri>https://cve.circl.lu/user/cedric</uri>
    </author>
    <content>{"uuid": "95bebf4e-db9b-444f-ae81-4727229d679c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97a1ede4-827c-45ea-81af-e18a23edc706", "content": "", "creation_timestamp": "2026-06-30T09:42:47.379991Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/95bebf4e-db9b-444f-ae81-4727229d679c/export"/>
    <published>2026-06-30T09:42:47.379991+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0ee270a7-1e06-4fa4-b438-e3904078ba2a/export</id>
    <title>0ee270a7-1e06-4fa4-b438-e3904078ba2a</title>
    <updated>2026-08-13T07:33:44.776273+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0ee270a7-1e06-4fa4-b438-e3904078ba2a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8240934f-cdb1-43f6-a6ac-2c4d8728f0d4", "content": "", "creation_timestamp": "2026-06-23T14:05:40.648658Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0ee270a7-1e06-4fa4-b438-e3904078ba2a/export"/>
    <published>2026-06-23T14:05:40.648658+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b1a4029-f780-47bd-8aeb-14b0522b12e5/export</id>
    <title>8b1a4029-f780-47bd-8aeb-14b0522b12e5</title>
    <updated>2026-08-13T07:33:44.776365+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b1a4029-f780-47bd-8aeb-14b0522b12e5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2cf15d3-6470-4140-84d3-53fb5035e010", "content": "", "creation_timestamp": "2026-06-19T12:46:55.082598Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b1a4029-f780-47bd-8aeb-14b0522b12e5/export"/>
    <published>2026-06-19T12:46:55.082598+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/94b4123d-3913-4f58-87c9-bbc7c2cf25b5/export</id>
    <title>94b4123d-3913-4f58-87c9-bbc7c2cf25b5</title>
    <updated>2026-08-13T07:33:44.776432+00:00</updated>
    <author>
      <name>Cédric Bonhomme</name>
      <uri>https://cve.circl.lu/user/cedric</uri>
    </author>
    <content>{"uuid": "94b4123d-3913-4f58-87c9-bbc7c2cf25b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6af0b57b-a0d7-4c26-b727-ba346fff2936", "content": "", "creation_timestamp": "2026-02-02T12:26:59.039469Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/94b4123d-3913-4f58-87c9-bbc7c2cf25b5/export"/>
    <published>2026-02-02T12:26:59.039469+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2f66b3fd-faee-4ca6-948e-b4a5ffb0defa/export</id>
    <title>2f66b3fd-faee-4ca6-948e-b4a5ffb0defa</title>
    <updated>2026-08-13T07:33:44.776498+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2f66b3fd-faee-4ca6-948e-b4a5ffb0defa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:58.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2f66b3fd-faee-4ca6-948e-b4a5ffb0defa/export"/>
    <published>2025-08-31T03:12:58+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/35620325-94d2-41eb-a851-21727329d03b/export</id>
    <title>35620325-94d2-41eb-a851-21727329d03b</title>
    <updated>2026-08-13T07:33:44.776571+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "35620325-94d2-41eb-a851-21727329d03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25719\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers' installations).\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T21:07:15.640Z\n\ud83d\udd17 References:\n1. https://www.connectwise.com\n2. https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/\n3. https://www.huntress.com/blog/clearing-the-air-overblown-claims-of-vulnerabilities-exploits-severity\n4. https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures\n5. https://m.youtube.com/watch?v=fbNVUgmstSc&amp;amp;pp=0gcJCf0Ao7VqN5tD", "creation_timestamp": "2025-06-18T21:40:39.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/35620325-94d2-41eb-a851-21727329d03b/export"/>
    <published>2025-06-18T21:40:39+00:00</published>
  </entry>
</feed>
