<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-23T21:19:20.894407+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/231d279b-c9cf-451b-a3a5-7e9d6f9e20e1/export</id>
    <title>231d279b-c9cf-451b-a3a5-7e9d6f9e20e1</title>
    <updated>2026-07-23T21:19:20.913295+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "231d279b-c9cf-451b-a3a5-7e9d6f9e20e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://bsky.app/profile/toxy4ny.bsky.social/post/3mre5ysz2tc2a", "content": "Thursday\u2019s fuck up - This Time - again Windows - CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis: medium.com/@jehadbudagg...\n\nPoC: github.com/redteamfortr... #windows #driver #BYOVD #redteam #poc", "creation_timestamp": "2026-07-23T15:07:26.315370Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/231d279b-c9cf-451b-a3a5-7e9d6f9e20e1/export"/>
    <published>2026-07-23T15:07:26.315370+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/730ba6c4-cb8c-40d7-a752-9b94452fcb2c/export</id>
    <title>730ba6c4-cb8c-40d7-a752-9b94452fcb2c</title>
    <updated>2026-07-23T21:19:20.916294+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "730ba6c4-cb8c-40d7-a752-9b94452fcb2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/394", "content": "CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis", "creation_timestamp": "2026-07-22T00:00:34.672804Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/730ba6c4-cb8c-40d7-a752-9b94452fcb2c/export"/>
    <published>2026-07-22T00:00:34.672804+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e057afa-714e-4447-b264-78dc54aea91c/export</id>
    <title>8e057afa-714e-4447-b264-78dc54aea91c</title>
    <updated>2026-07-23T21:19:20.916627+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e057afa-714e-4447-b264-78dc54aea91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/394", "content": "CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis", "creation_timestamp": "2026-07-21T00:00:10.646984Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e057afa-714e-4447-b264-78dc54aea91c/export"/>
    <published>2026-07-21T00:00:10.646984+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7c160a49-b1e3-472c-87f1-f96999f3c209/export</id>
    <title>7c160a49-b1e3-472c-87f1-f96999f3c209</title>
    <updated>2026-07-23T21:19:20.916885+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7c160a49-b1e3-472c-87f1-f96999f3c209", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-36425", "type": "seen", "source": "https://t.me/P0x3k_1N73LL1G3NC3/394", "content": "CVE-2026-36425 aka Arbitrary Process termination (BYOVD)\n\nCVE-2026-36425 OPSWAT AppRemover (ardrv.sys) improper access control advisory \n\nAnalysis", "creation_timestamp": "2026-07-20T21:00:05.154001Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7c160a49-b1e3-472c-87f1-f96999f3c209/export"/>
    <published>2026-07-20T21:00:05.154001+00:00</published>
  </entry>
</feed>
