<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T20:09:37.625397+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f3ffa993-8f24-4b63-b4ca-892205decfe1/export</id>
    <title>f3ffa993-8f24-4b63-b4ca-892205decfe1</title>
    <updated>2026-09-14T20:09:37.652728+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f3ffa993-8f24-4b63-b4ca-892205decfe1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/3051", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw\n\n\u2014\n\nSummary:\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a \u201cmissing authentication for critical [\u2026]\nThe post CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw appeared first on...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-22 12:50 | Author: Divya\n\n#cisa #vulnerabilities__exploits #issues\n\nhttps://gbhackers.com/cisa-issues-warning-as-hackers-target-oracle-identity-manager-rce-flaw/", "creation_timestamp": "2026-09-10T00:00:46.767606Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f3ffa993-8f24-4b63-b4ca-892205decfe1/export"/>
    <published>2026-09-10T00:00:46.767606+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/37961a24-ba2f-437c-b371-8602e3488b3e/export</id>
    <title>37961a24-ba2f-437c-b371-8602e3488b3e</title>
    <updated>2026-09-14T20:09:37.654307+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "37961a24-ba2f-437c-b371-8602e3488b3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2850", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nOracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\n\n\u2014\n\nSummary:\nSearchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-20 16:51\n\n#vulnerabilities__exploits #identity #oracle\n\nhttps://isc.sans.edu/diary/rss/32506", "creation_timestamp": "2026-09-10T00:00:46.247315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/37961a24-ba2f-437c-b371-8602e3488b3e/export"/>
    <published>2026-09-10T00:00:46.247315+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2b4ea27e-53cb-47c5-91ad-9fd0e2315207/export</id>
    <title>2b4ea27e-53cb-47c5-91ad-9fd0e2315207</title>
    <updated>2026-09-14T20:09:37.654455+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2b4ea27e-53cb-47c5-91ad-9fd0e2315207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2850", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nOracle Identity Manager Exploit Observation from September (CVE-2025-61757), (Thu, Nov 20th)\n\n\u2014\n\nSummary:\nSearchlight Cyber today released a blog detailing CVE-2025-61757, a vulnerability they reported to Oracle. Oracle released a patch for the vulnerability as part of its October Critical Patch Update, which was released on October 21st.\n\n\u2014\n\nSource: SANS Internet Storm Center, InfoCON: green\nPublished: 2025-11-20 16:51\n\n#vulnerabilities__exploits #identity #oracle\n\nhttps://isc.sans.edu/diary/rss/32506", "creation_timestamp": "2026-09-09T05:00:09.125780Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2b4ea27e-53cb-47c5-91ad-9fd0e2315207/export"/>
    <published>2026-09-09T05:00:09.125780+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/131c9f36-432d-4103-8ebf-24720fff2d4e/export</id>
    <title>131c9f36-432d-4103-8ebf-24720fff2d4e</title>
    <updated>2026-09-14T20:09:37.654604+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "131c9f36-432d-4103-8ebf-24720fff2d4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/3051", "content": "\u2728 Vulnerabilities &amp;amp; Exploits \u2728\n\nCISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw\n\n\u2014\n\nSummary:\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new Oracle vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning that attackers are already exploiting it in real-world attacks. The bug, tracked as CVE-2025-61757, affects Oracle Identity Manager, part of Oracle Fusion Middleware. The flaw is rated as a \u201cmissing authentication for critical [\u2026]\nThe post CISA Issues Warning as Hackers Target Oracle Identity Manager RCE Flaw appeared first on...\n\n\u2014\n\nSource: GBHackers Security | #1 Globally Trusted Cyber Security News Platform\nPublished: 2025-11-22 12:50 | Author: Divya\n\n#cisa #vulnerabilities__exploits #issues\n\nhttps://gbhackers.com/cisa-issues-warning-as-hackers-target-oracle-identity-manager-rce-flaw/", "creation_timestamp": "2026-09-09T05:00:08.703098Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/131c9f36-432d-4103-8ebf-24720fff2d4e/export"/>
    <published>2026-09-09T05:00:08.703098+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e903701e-700c-4a3d-836c-120f5ee2225d/export</id>
    <title>e903701e-700c-4a3d-836c-120f5ee2225d</title>
    <updated>2026-09-14T20:09:37.654726+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e903701e-700c-4a3d-836c-120f5ee2225d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "published-proof-of-concept", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-31T00:00:40.022560Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e903701e-700c-4a3d-836c-120f5ee2225d/export"/>
    <published>2026-08-31T00:00:40.022560+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7de07a3e-cff0-41dd-9e29-1aca823c81aa/export</id>
    <title>7de07a3e-cff0-41dd-9e29-1aca823c81aa</title>
    <updated>2026-09-14T20:09:37.654832+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7de07a3e-cff0-41dd-9e29-1aca823c81aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-30T00:00:27.466389Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7de07a3e-cff0-41dd-9e29-1aca823c81aa/export"/>
    <published>2026-08-30T00:00:27.466389+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09f7c91a-b47d-4b36-9882-eeb6be2413c6/export</id>
    <title>09f7c91a-b47d-4b36-9882-eeb6be2413c6</title>
    <updated>2026-09-14T20:09:37.654934+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "09f7c91a-b47d-4b36-9882-eeb6be2413c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "Telegram/EPECfWsuM-c4t4TOzI-5L7oV30YbkQAiF7UZVptSiNCSMQA", "content": "", "creation_timestamp": "2026-08-29T23:00:19.129132Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09f7c91a-b47d-4b36-9882-eeb6be2413c6/export"/>
    <published>2026-08-29T23:00:19.129132+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34302d40-efb5-4d58-8cf2-9bd642443ada/export</id>
    <title>34302d40-efb5-4d58-8cf2-9bd642443ada</title>
    <updated>2026-09-14T20:09:37.655046+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "34302d40-efb5-4d58-8cf2-9bd642443ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/CyberDispatch/18", "content": "CVE-2025-61757 is a pre-authentication RCE vulnerability in Oracle Identity Manager, discovered and disclosed by Searchlight Cyber analysts Adam Kues and Shubham Shahflaw.", "creation_timestamp": "2026-08-21T00:00:19.996670Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34302d40-efb5-4d58-8cf2-9bd642443ada/export"/>
    <published>2026-08-21T00:00:19.996670+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88dd9bbf-8f1b-4df9-899e-128347244f80/export</id>
    <title>88dd9bbf-8f1b-4df9-899e-128347244f80</title>
    <updated>2026-09-14T20:09:37.655151+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88dd9bbf-8f1b-4df9-899e-128347244f80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "exploited", "source": "https://t.me/CyberDispatch/8", "content": "CISA warns Oracle Identity Manager flaw (CVE-2025-61757) is under active attack.\n\nHackers can run code without login by adding ?WSDL or ;.wadl to URLs \u2014 a tiny trick that opens locked systems.\n\nExploited since August. Patch by Dec 12.", "creation_timestamp": "2026-08-21T00:00:19.957229Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88dd9bbf-8f1b-4df9-899e-128347244f80/export"/>
    <published>2026-08-21T00:00:19.957229+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/965f7afb-374b-4487-a3c7-cff5e6c1c49f/export</id>
    <title>965f7afb-374b-4487-a3c7-cff5e6c1c49f</title>
    <updated>2026-09-14T20:09:37.655265+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "965f7afb-374b-4487-a3c7-cff5e6c1c49f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-61757", "type": "seen", "source": "https://t.me/CyberDispatch/8", "content": "CISA warns Oracle Identity Manager flaw (CVE-2025-61757) is under active attack.\n\nHackers can run code without login by adding ?WSDL or ;.wadl to URLs \u2014 a tiny trick that opens locked systems.\n\nExploited since August. Patch by Dec 12.", "creation_timestamp": "2026-08-20T00:00:27.805362Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/965f7afb-374b-4487-a3c7-cff5e6c1c49f/export"/>
    <published>2026-08-20T00:00:27.805362+00:00</published>
  </entry>
</feed>
