https://vulnerability.circl.lu/sightings/feed 2026-08-12T20:21:36.378598+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/d25bc388-af5a-4c98-9d06-26529bee75f9/export 2026-08-12T20:21:36.403483+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d25bc388-af5a-4c98-9d06-26529bee75f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45142", "type": "seen", "source": "https://t.me/cyberwarehouse/476", "content": "\u0418\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412\u0441\u0435\u0433\u043e 705 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043d\u0438\u0445 498 \u0432 Linux Kernel. \u0421 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u0443 11 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430:\n\n\ud83d\udd3b \u0412 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u043c \u0442\u043e\u043f\u0435 RCE\u00a0- OpenSSH \"regreSSHion\" (CVE-2024-6387) \u0441\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0430 GitHub. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0444\u0435\u0439\u043a\u0438 (\u2757\ufe0f). \u0417\u0434\u0435\u0441\u044c \u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE - OpenSSH (CVE-2024-6409), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\ud83d\udd3b \u0412 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u0435\u0441\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 PoC-\u0438 \u0434\u043b\u044f DoS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Suricata (CVE-2024-38536) \u0438 QEMU (CVE-2024-3567).\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0411\u0414\u0423, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f:\n\n\ud83d\udd38 AuthBypass - RADIUS Protocol (CVE-2024-3596), \u0435\u0451 \u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0438 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c MSPT\n\ud83d\udd38 Security Feature Bypass - Exim (CVE-2024-39929) - \u043e\u0431\u0445\u043e\u0434 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043f\u043e mime_filename, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 Nextcloud (CVE-2024-22403) - \u0432\u0435\u0447\u043d\u044b\u0435 OAuth \u043a\u043e\u0434\u044b\n\ud83d\udd38 DoS - OpenTelemetry (CVE-2023-45142)\n\ud83d\udd38 Memory Corruption - 7-Zip (CVE-2023-52168)\n\n\ud83d\uddd2 \u041e\u0442\u0447\u0451\u0442 Vulristics \u043f\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c\u0443 Linux Patch Wednesday\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #regreSSHion", "creation_timestamp": "2026-07-27T00:00:22.237605Z"} 2026-07-27T00:00:22.237605+00:00 https://vulnerability.circl.lu/sighting/cb390ace-69c9-468b-833c-b8f9456a79bf/export 2026-08-12T20:21:36.405468+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "cb390ace-69c9-468b-833c-b8f9456a79bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45142", "type": "seen", "source": "https://t.me/cyberwarehouse/476", "content": "\u0418\u044e\u043b\u044c\u0441\u043a\u0438\u0439 Linux Patch Wednesday. \u0412\u0441\u0435\u0433\u043e 705 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0438\u0437 \u043d\u0438\u0445 498 \u0432 Linux Kernel. \u0421 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0432\u0436\u0438\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442, \u0443 11 \u0435\u0441\u0442\u044c \u043f\u0440\u0438\u0437\u043d\u0430\u043a \u043d\u0430\u043b\u0438\u0447\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430:\n\n\ud83d\udd3b \u0412 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u043e\u043c \u0442\u043e\u043f\u0435 RCE\u00a0- OpenSSH \"regreSSHion\" (CVE-2024-6387) \u0441\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e\u043c \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043d\u0430 GitHub. \u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0444\u0435\u0439\u043a\u0438 (\u2757\ufe0f). \u0417\u0434\u0435\u0441\u044c \u0436\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443 \u043f\u043e\u0445\u043e\u0436\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c RCE - OpenSSH (CVE-2024-6409), \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432 \u043f\u043e\u043a\u0430 \u043d\u0435\u0442.\n\ud83d\udd3b \u0412 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u0435\u0441\u0442\u044c \u0441\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 PoC-\u0438 \u0434\u043b\u044f DoS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Suricata (CVE-2024-38536) \u0438 QEMU (CVE-2024-3567).\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0411\u0414\u0423, \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f:\n\n\ud83d\udd38 AuthBypass - RADIUS Protocol (CVE-2024-3596), \u0435\u0451 \u0444\u0438\u043a\u0441\u0438\u043b\u0438 \u0438 \u0432 \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c MSPT\n\ud83d\udd38 Security Feature Bypass - Exim (CVE-2024-39929) - \u043e\u0431\u0445\u043e\u0434 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043e\u043a \u043f\u043e mime_filename, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 Nextcloud (CVE-2024-22403) - \u0432\u0435\u0447\u043d\u044b\u0435 OAuth \u043a\u043e\u0434\u044b\n\ud83d\udd38 DoS - OpenTelemetry (CVE-2023-45142)\n\ud83d\udd38 Memory Corruption - 7-Zip (CVE-2023-52168)\n\n\ud83d\uddd2 \u041e\u0442\u0447\u0451\u0442 Vulristics \u043f\u043e \u0438\u044e\u043b\u044c\u0441\u043a\u043e\u043c\u0443 Linux Patch Wednesday\n\n@avleonovrus #LinuxPatchWednesday #Vulristics #Linux #regreSSHion", "creation_timestamp": "2026-07-26T02:00:19.833962Z"} 2026-07-26T02:00:19.833962+00:00 https://vulnerability.circl.lu/sighting/93c62843-bf15-4b3a-9795-506a6d81a4b1/export 2026-08-12T20:21:36.405695+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "93c62843-bf15-4b3a-9795-506a6d81a4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45142", "type": "seen", "source": "https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af", "content": "", "creation_timestamp": "2025-01-28T13:36:28.000000Z"} 2025-01-28T13:36:28+00:00 https://vulnerability.circl.lu/sighting/764e2d50-22c0-43a2-9d7a-e1cba2d805c9/export 2026-08-12T20:21:36.405863+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "764e2d50-22c0-43a2-9d7a-e1cba2d805c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45146", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9214", "content": "#exploit\n1. CVE-2023-32439:\nApple WebKit Type Confusion Vulnerability\nhttps://www.ai.moda/en/blog/cve-2023-32439\n\n2. CVE-2023-4415:\nRuijie Network RG-EW1200G Login Bypass\nhttps://github.com/thedarknessdied/Ruijie_RG-EW1200G_login_bypass-CVE-2023-4415\n\n3. CVE-2023-45146:\nUnsafe deserialization in XXL-RPC\nhttps://securitylab.github.com/advisories/GHSL-2023-052_XXL-RPC", "creation_timestamp": "2024-11-17T13:15:56.000000Z"} 2024-11-17T13:15:56+00:00 https://vulnerability.circl.lu/sighting/1a1afd08-cca6-40fa-acac-8be19d5a0486/export 2026-08-12T20:21:36.406027+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1a1afd08-cca6-40fa-acac-8be19d5a0486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45143", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"} 2024-11-14T12:00:00+00:00 https://vulnerability.circl.lu/sighting/1c853d51-4cd2-4f64-b923-bb7807add26f/export 2026-08-12T20:21:36.406212+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "1c853d51-4cd2-4f64-b923-bb7807add26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45146", "type": "seen", "source": "https://t.me/Rootsec_2/1387", "content": "#exploit\n1. CVE-2023-32439:\nApple WebKit Type Confusion Vulnerability\nhttps://www.ai.moda/en/blog/cve-2023-32439\n\n2. CVE-2023-4415:\nRuijie Network RG-EW1200G Login Bypass\nhttps://github.com/thedarknessdied/Ruijie_RG-EW1200G_login_bypass-CVE-2023-4415\n\n3. CVE-2023-45146:\nUnsafe deserialization in XXL-RPC\nhttps://securitylab.github.com/advisories/GHSL-2023-052_XXL-RPC", "creation_timestamp": "2024-08-16T08:33:58.000000Z"} 2024-08-16T08:33:58+00:00 https://vulnerability.circl.lu/sighting/c86f46e7-6a68-4873-8f1f-53676f5954fe/export 2026-08-12T20:21:36.406404+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "c86f46e7-6a68-4873-8f1f-53676f5954fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45145", "type": "seen", "source": "https://t.me/ctinow/181139", "content": "https://ift.tt/PAKZQkt\nCVE-2023-45145 | Oracle Communications Fraud Monitor 5.0/5.1 Infrastructure exposure of resource", "creation_timestamp": "2024-02-08T03:41:27.000000Z"} 2024-02-08T03:41:27+00:00 https://vulnerability.circl.lu/sighting/ff19a4c5-f393-4310-89bb-f55edbe13773/export 2026-08-12T20:21:36.406582+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "ff19a4c5-f393-4310-89bb-f55edbe13773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45145", "type": "seen", "source": "https://t.me/ctinow/181114", "content": "https://ift.tt/Va9dviL\nCVE-2023-45145 | Oracle Communications Cloud Native Core Network Repository Function Install/Upgrade unknown vulnerability", "creation_timestamp": "2024-02-08T03:02:10.000000Z"} 2024-02-08T03:02:10+00:00 https://vulnerability.circl.lu/sighting/6049d31c-8b29-428b-adb3-206fabb3c432/export 2026-08-12T20:21:36.406747+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6049d31c-8b29-428b-adb3-206fabb3c432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45145", "type": "seen", "source": "https://t.me/cibsecurity/72542", "content": "\u203c CVE-2023-45145 \u203c\n\nRedis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T00:33:58.000000Z"} 2023-10-19T00:33:58+00:00 https://vulnerability.circl.lu/sighting/951a5e1b-eced-49b7-ab7e-4d9abdc676b5/export 2026-08-12T20:21:36.406922+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "951a5e1b-eced-49b7-ab7e-4d9abdc676b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-45149", "type": "seen", "source": "https://t.me/cibsecurity/72359", "content": "\u203c CVE-2023-45149 \u203c\n\nNextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public talk conversation passwords can be bypassed, as there was an endpoint validating the conversation password without registering bruteforce attempts. It is recommended that the Nextcloud Talk app is upgraded to 15.0.8, 16.0.6 or 17.1.1. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:27.000000Z"} 2023-10-17T00:32:27+00:00