https://vulnerability.circl.lu/sightings/feed 2026-05-09T14:35:52.885616+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/324904d3-53c8-4b21-8016-aff7d463d01e/export 2026-05-09T14:35:53.055784+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "324904d3-53c8-4b21-8016-aff7d463d01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29651", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114353854202263361", "content": "", "creation_timestamp": "2025-04-17T14:49:00.840886Z"} 2025-04-17T14:49:00.840886+00:00 https://vulnerability.circl.lu/sighting/bcd06a2d-a158-4a7c-9aa7-de97064168fb/export 2026-05-09T14:35:53.055700+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "bcd06a2d-a158-4a7c-9aa7-de97064168fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29652", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114353854237880441", "content": "", "creation_timestamp": "2025-04-17T14:49:01.246346Z"} 2025-04-17T14:49:01.246346+00:00 https://vulnerability.circl.lu/sighting/87810c4b-44ff-46f8-b49b-654ef0afaba5/export 2026-05-09T14:35:53.055621+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "87810c4b-44ff-46f8-b49b-654ef0afaba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29653", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114353854273473727", "content": "", "creation_timestamp": "2025-04-17T14:49:01.788890Z"} 2025-04-17T14:49:01.788890+00:00 https://vulnerability.circl.lu/sighting/fac6f681-bc38-447a-aa24-59504d2d5c8f/export 2026-05-09T14:35:53.055523+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "fac6f681-bc38-447a-aa24-59504d2d5c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29659", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12683", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29659\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the \"cmd_listen\" function located in the \"cmd\" binary.\n\ud83d\udccf Published: 2025-04-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T14:28:03.430Z\n\ud83d\udd17 References:\n1. https://github.com/Yasha-ops/RCE-YiIOT\n2. https://github.com/Yasha-ops/vulnerability-research/tree/master/CVE-2025-29659", "creation_timestamp": "2025-04-21T15:03:08.000000Z"} 2025-04-21T15:03:08+00:00 https://vulnerability.circl.lu/sighting/9e480702-e168-47c7-a25c-3092ba904e47/export 2026-05-09T14:35:53.055445+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "9e480702-e168-47c7-a25c-3092ba904e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29659", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114376800501667579", "content": "", "creation_timestamp": "2025-04-21T16:04:33.116336Z"} 2025-04-21T16:04:33.116336+00:00 https://vulnerability.circl.lu/sighting/4125ea7d-9626-4f1d-8e13-6ee59a25da5d/export 2026-05-09T14:35:53.055364+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "4125ea7d-9626-4f1d-8e13-6ee59a25da5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lndkntlln22h", "content": "", "creation_timestamp": "2025-04-21T16:13:56.563829Z"} 2025-04-21T16:13:56.563829+00:00 https://vulnerability.circl.lu/sighting/7fb6c1b3-aaf6-4c1c-89b2-7a333e07aca7/export 2026-05-09T14:35:53.055277+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "7fb6c1b3-aaf6-4c1c-89b2-7a333e07aca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29659", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114376973636531600", "content": "", "creation_timestamp": "2025-04-21T16:48:35.251782Z"} 2025-04-21T16:48:35.251782+00:00 https://vulnerability.circl.lu/sighting/b26f120a-d723-43f2-b3a7-da03e478f942/export 2026-05-09T14:35:53.055170+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "b26f120a-d723-43f2-b3a7-da03e478f942", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29659", "type": "seen", "source": "https://t.me/cvedetector/23437", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-29659 - Yi IOT XY-3820 Remote Command Execution Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-29659 \nPublished : April 21, 2025, 3:16 p.m. | 26\u00a0minutes ago \nDescription : Yi IOT XY-3820 6.0.24.10 is vulnerable to Remote Command Execution via the \"cmd_listen\" function located in the \"cmd\" binary. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"21 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-21T18:09:12.000000Z"} 2025-04-21T18:09:12+00:00 https://vulnerability.circl.lu/sighting/246e1091-d690-4d35-b11e-b4d9b21c5fd2/export 2026-05-09T14:35:53.055048+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "246e1091-d690-4d35-b11e-b4d9b21c5fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29659", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lndvf3fydx2d", "content": "", "creation_timestamp": "2025-04-21T19:25:53.154831Z"} 2025-04-21T19:25:53.154831+00:00 https://vulnerability.circl.lu/sighting/18f7393a-75cb-4810-9b3a-afa2fce38baa/export 2026-05-09T14:35:53.052102+00:00 Automation user http://cve.circl.lu/user/automation {"uuid": "18f7393a-75cb-4810-9b3a-afa2fce38baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29651", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-29651\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability exists in the TP-Link M7650 4G LTE Mobile Wi-Fi Router Firmware Version: 1.0.7 Build 170623 Rel.1022n, allowing an unauthenticated attacker to inject malicious SQL statements via the username and password fields. NOTE: this is disputed because the issue can only be reproduced on a supplier-provided emulator, where access control is intentionally absent for ease of functional testing.\n\ud83d\udccf Published: 2025-04-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-23T23:40:51.389Z\n\ud83d\udd17 References:\n1. https://github.com/TheVeteran1/Vulnerability-Research/blob/main/CVE-2025-29651", "creation_timestamp": "2025-04-24T00:05:19.000000Z"} 2025-04-24T00:05:19+00:00