<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-04T08:08:46.319804+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43bd9f3f-8abb-4c18-99ba-e5fede496c24/export</id>
    <title>43bd9f3f-8abb-4c18-99ba-e5fede496c24</title>
    <updated>2026-09-04T08:08:46.334431+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43bd9f3f-8abb-4c18-99ba-e5fede496c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-CCX2-W2R4-X649", "type": "seen", "source": "https://t.me/cissp/1946", "content": "1.Hacking HTTP CORS from inside out -\na theory to practice approach\nhttps://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528\n\n2.Vulnerabilities in Linux Bluetooth Allow , Zero-Click Attacks-BleedingTooth- CVE-2020-12351\nHeap-Based Type Confusion in L2CAP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n\n3.CVE-2020-12352\nBadChoice - Stack-Based Information Leak in A2MP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n\n4.CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649\n\n5.Amazon Kindle - iOS App Reverse Engineering for eBooks Leaking\", 2020.\nhttps://abjurato.github.io/stories/kindleEbooks.html", "creation_timestamp": "2026-09-02T01:04:59.047614Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43bd9f3f-8abb-4c18-99ba-e5fede496c24/export"/>
    <published>2026-09-02T01:04:59.047614+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/efe9708e-838e-4e21-bb6c-ed4e38f79b31/export</id>
    <title>efe9708e-838e-4e21-bb6c-ed4e38f79b31</title>
    <updated>2026-09-04T08:08:46.337588+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "efe9708e-838e-4e21-bb6c-ed4e38f79b31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-CCX2-W2R4-X649", "type": "seen", "source": "https://t.me/cissp/1946", "content": "1.Hacking HTTP CORS from inside out -\na theory to practice approach\nhttps://medium.com/bugbountywriteup/hacking-http-cors-from-inside-out-512cb125c528\n\n2.Vulnerabilities in Linux Bluetooth Allow , Zero-Click Attacks-BleedingTooth- CVE-2020-12351\nHeap-Based Type Confusion in L2CAP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n\n3.CVE-2020-12352\nBadChoice - Stack-Based Information Leak in A2MP (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n\n4.CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser (PoC):\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649\n\n5.Amazon Kindle - iOS App Reverse Engineering for eBooks Leaking\", 2020.\nhttps://abjurato.github.io/stories/kindleEbooks.html", "creation_timestamp": "2026-09-01T17:01:09.220246Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/efe9708e-838e-4e21-bb6c-ed4e38f79b31/export"/>
    <published>2026-09-01T17:01:09.220246+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4eb9afe8-2db2-4d98-afab-da0619882fe0/export</id>
    <title>4eb9afe8-2db2-4d98-afab-da0619882fe0</title>
    <updated>2026-09-04T08:08:46.337761+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4eb9afe8-2db2-4d98-afab-da0619882fe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-CCX2-W2R4-X649", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/1918", "content": "#WLAN_Security\nBleedingTooth:\nVulnerabilities in Linux Bluetooth Allow 0-Click Attacks:\n1. CVE-2020-12351.\nHeap-Based Type Confusion in L2CAP:\nhttps://github.com/google/security-research/security/advisories/GHSA-h637-c88j-47wq\n2. CVE-2020-12352.\nBadChoice - Stack-Based Infoleak in A2MP:\nhttps://github.com/google/security-research/security/advisories/GHSA-7mh3-gq28-gfrq\n3. CVE-2020-24490.\nHeap-Based Buffer Overflow in HCI event packet parser:\nhttps://github.com/google/security-research/security/advisories/GHSA-ccx2-w2r4-x649", "creation_timestamp": "2024-07-19T19:59:44.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4eb9afe8-2db2-4d98-afab-da0619882fe0/export"/>
    <published>2024-07-19T19:59:44+00:00</published>
  </entry>
</feed>
