https://vulnerability.circl.lu/sightings/feed 2026-07-22T02:57:04.558501+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/579d6182-6fed-41bd-bff8-71bb1d9c18c1/export 2026-07-22T02:57:04.584749+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "579d6182-6fed-41bd-bff8-71bb1d9c18c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpy2iivzyc2i", "content": "\ud83d\udccc CVE-2024-43488 - Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code exe... https://www.cyberhub.blog/cves/CVE-2024-43488", "creation_timestamp": "2026-07-06T12:07:09.758979Z"} 2026-07-06T12:07:09.758979+00:00 https://vulnerability.circl.lu/sighting/ba98e67b-8854-41bf-8a90-ae3857c0dcdc/export 2026-07-22T02:57:04.586665+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ba98e67b-8854-41bf-8a90-ae3857c0dcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43487", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/116755475429413960", "content": "I just realized that I'm personally \"credited\" in April's Microsoft Patch Tuesday with a CVE-less \"Defense-in-depth\" update.\nThe vulnerability?CAB files downloaded from the internet do not write the MotW for files extracted from them.\nI reported this to MSRC, and after refusing to generate a screen recording of the exploit (I mean, really?!), they finally acknowledged the problem. However, they went radio silent after that.\nMark of the Web (MotW) evasions have gotten CVEs in the past. If we look in the last 2 years we have: CVE-2024-38213, CVE-2024-38217, CVE-2024-43487, CVE-2025-24061, CVE-2025-27472, CVE-2025-47160, CVE-2025-49740, CVE-2026-20824, CVE-2026-32225, CVE-2026-45595\nSo, why does \"Windows doesn't write MotW for extracted CAB file contents\" get a CVE? Well, Microsoft is a CNA. So for the most part they can invent any rules that they'd like to play by. It could be as simple as \"We're not particularly fond of you\", and as a result, we have a vulnerability with no ID to track it.\nHere's a screen recording of a VM with March's Patch Tuesday level of updates. When you extract a file from a CAB file, no MotW is written. And as such, we get no protections that leverage the presence of MotW, such as SmartScreen, Smart Application Control, Office Protected View. In this case, we have a .URL file in a CAB. Double clicking on it results in a remote EXE running on your computer with no warning or other prompts. But, I suppose we all know that URL files are evil and have them blocked.", "creation_timestamp": "2026-06-15T18:12:54.535782Z"} 2026-06-15T18:12:54.535782+00:00 https://vulnerability.circl.lu/sighting/cc60d945-ea7e-4506-b84e-90640cf30ff0/export 2026-07-22T02:57:04.586848+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cc60d945-ea7e-4506-b84e-90640cf30ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/116719508098466554", "content": "#OT #Advisory VDE-2026-064METTLER TOLEDO: LabX Standard Report on External Component Analysis - v21.3\nMultiple vulnerabilities have been discovered in LabX Standard v21.3.22. Most of the vulnerabilities are fixed in LabX Standard v21.4.23. The Vulnerabilities CVE-2025-69419, CVE-2026-0915, CVE-2025-15467 and CVE-2025-58187 are not yet fixed. The fix will be available in the upcoming releases.#CVE CVE-2025-68121, CVE-2018-15727, CVE-2025-15467, CVE-2023-36414, CVE-2024-0056, CVE-2025-68154, CVE-2026-24737, CVE-2021-24112, CVE-2025-58187, CVE-2025-9230, CVE-2025-15281, CVE-2026-21218, CVE-2026-26127, CVE-2026-26130, CVE-2026-0915, CVE-2026-2391, CVE-2026-22036, CVE-2024-43483, CVE-2023-29331, CVE-2025-69419, CVE-2025-46817\nhttps://certvde.com/en/advisories/vde-2026-064/\n#CSAF https://mettler-toledo.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-064.json", "creation_timestamp": "2026-06-09T09:46:02.715533Z"} 2026-06-09T09:46:02.715533+00:00 https://vulnerability.circl.lu/sighting/fa6ead10-799c-4779-b12a-d814036fdc79/export 2026-07-22T02:57:04.586986+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fa6ead10-799c-4779-b12a-d814036fdc79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-06-16T02:45:15.399Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-06-16T03:35:27.000000Z"} 2025-06-16T03:35:27+00:00 https://vulnerability.circl.lu/sighting/38828849-a3f9-48a9-ad0d-0af32efd6127/export 2026-07-22T02:57:04.587116+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "38828849-a3f9-48a9-ad0d-0af32efd6127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43483", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02", "content": "", "creation_timestamp": "2025-05-15T10:00:00.000000Z"} 2025-05-15T10:00:00+00:00 https://vulnerability.circl.lu/sighting/5dad24de-0225-4bd0-b18d-ebcb8fb17fd6/export 2026-07-22T02:57:04.587238+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5dad24de-0225-4bd0-b18d-ebcb8fb17fd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-135-02", "content": "", "creation_timestamp": "2025-05-15T10:00:00.000000Z"} 2025-05-15T10:00:00+00:00 https://vulnerability.circl.lu/sighting/961ef8ed-21ea-4f68-90b2-6d638668e555/export 2026-07-22T02:57:04.587357+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "961ef8ed-21ea-4f68-90b2-6d638668e555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lgw3brca3y2k", "content": "", "creation_timestamp": "2025-01-29T23:02:58.453897Z"} 2025-01-29T23:02:58.453897+00:00 https://vulnerability.circl.lu/sighting/47eff563-38af-4880-bce3-8abd0a8542fa/export 2026-07-22T02:57:04.587482+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "47eff563-38af-4880-bce3-8abd0a8542fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-43488\n\ud83d\udd39 Description: Missing authentication for critical function in Visual Studio Code extension for Arduino allows an unauthenticated attacker to perform remote code execution through network attack vector.\n\ud83d\udccf Published: 2024-10-08T17:36:19.468Z\n\ud83d\udccf Modified: 2025-01-23T01:39:34.702Z\n\ud83d\udd17 References:\n1. https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43488", "creation_timestamp": "2025-01-23T02:02:34.000000Z"} 2025-01-23T02:02:34+00:00 https://vulnerability.circl.lu/sighting/76b21ada-b7a4-49dc-8bcd-51b3b5696485/export 2026-07-22T02:57:04.587622+00:00 Joseph Lee https://cve.circl.lu/user/syspect {"uuid": "76b21ada-b7a4-49dc-8bcd-51b3b5696485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-43488", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1390", "content": "", "creation_timestamp": "2024-10-09T04:00:00.000000Z"} 2024-10-09T04:00:00+00:00 https://vulnerability.circl.lu/sighting/c19802b6-c81d-409d-b793-23a4e62fff52/export 2026-07-22T02:57:04.588877+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c19802b6-c81d-409d-b793-23a4e62fff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-43485", "type": "seen", "source": "https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review", "content": "", "creation_timestamp": "2024-10-08T17:54:47.000000Z"} 2024-10-08T17:54:47+00:00