<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-02T23:12:45.924301+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/09c21aa3-236c-4899-9234-7f0ec591ff87/export</id>
    <title>09c21aa3-236c-4899-9234-7f0ec591ff87</title>
    <updated>2026-09-02T23:12:45.952679+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "09c21aa3-236c-4899-9234-7f0ec591ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2254", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff &amp;amp; IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-02T01:04:29.790885Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/09c21aa3-236c-4899-9234-7f0ec591ff87/export"/>
    <published>2026-09-02T01:04:29.790885+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4f7e2b10-cd0a-4d9b-b384-a8fb1b515313/export</id>
    <title>4f7e2b10-cd0a-4d9b-b384-a8fb1b515313</title>
    <updated>2026-09-02T23:12:45.956001+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4f7e2b10-cd0a-4d9b-b384-a8fb1b515313", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22545", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff &amp;amp; IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-02T01:04:29.413645Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4f7e2b10-cd0a-4d9b-b384-a8fb1b515313/export"/>
    <published>2026-09-02T01:04:29.413645+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/997740c9-3607-494e-bc86-163fc7672aa1/export</id>
    <title>997740c9-3607-494e-bc86-163fc7672aa1</title>
    <updated>2026-09-02T23:12:45.956156+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "997740c9-3607-494e-bc86-163fc7672aa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-2254", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff &amp;amp; IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-01T17:00:42.726272Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/997740c9-3607-494e-bc86-163fc7672aa1/export"/>
    <published>2026-09-01T17:00:42.726272+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d9fe483c-bc0a-43e6-b755-bed947cbb434/export</id>
    <title>d9fe483c-bc0a-43e6-b755-bed947cbb434</title>
    <updated>2026-09-02T23:12:45.956260+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d9fe483c-bc0a-43e6-b755-bed947cbb434", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22545", "type": "seen", "source": "https://t.me/cissp/4032", "content": "exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff &amp;amp; IDA Pro\nhttps://jhftss.github.io/CVE-2021-2254\n\nMalware analysis\n1. Trickbot Leads Up to Fake 1Password Installation\nhttps://thedfirreport.com/2021/08/16/trickbot-leads-up-to-fake-1password-installation\n2. Danabot Distributed Through Malspam\nhttps://isc.sans.edu/forums/diary/Example+of+Danabot+distributed+through+malspam/27744\n\nRed Team Tactics\n1. Learn the access control model of Windows security from mimikatz\ud83d\udc4d\ud83c\udffd\nhttps://paper.seebug.org/1672\n2. ProxyShell POC Exploit : Exchange Server RCE\ud83d\ude2c\n(ACL Bypass+EoP+Arbitrary File Write)\nhttps://github.com/ktecv2000/ProxyShell\n\nOffensive security\n1. Active Directory Exploitation Cheat Sheet\ud83d\ude2c\nhttps://github.com/S1ckB0y1337/Active-Directory-Exploitation-Cheat-Sheet#active-directory-exploitation-cheat-sheet\n2. Cobalt Strike User-Defined Reflective Loader written in Assembly/C for advanced evasion capabilities\nhttps://github.com/boku7/CobaltStrikeReflectiveLoader", "creation_timestamp": "2026-09-01T17:00:42.579784Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d9fe483c-bc0a-43e6-b755-bed947cbb434/export"/>
    <published>2026-09-01T17:00:42.579784+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7747f46c-ff41-4ff8-9def-09fca44ea9e0/export</id>
    <title>7747f46c-ff41-4ff8-9def-09fca44ea9e0</title>
    <updated>2026-09-02T23:12:45.956358+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7747f46c-ff41-4ff8-9def-09fca44ea9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-22545", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4079", "content": "#exploit\n1.  CVE-2021-31184:\nInformation disclosure in Microsoft Windows\nInfrared Data Association (IrDA)\nhttps://github.com/waleedassar/CVE-2021-31184\n2.  CVE-2021-22545:\nA CVE from BinDiff &amp;amp; IDA Pro\nhttps://jhftss.github.io/CVE-2021-22545", "creation_timestamp": "2021-08-16T11:57:28.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7747f46c-ff41-4ff8-9def-09fca44ea9e0/export"/>
    <published>2021-08-16T11:57:28+00:00</published>
  </entry>
</feed>
