<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-01T21:05:21.219746+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22a93a00-c148-491e-aa95-ef55516107aa/export</id>
    <title>22a93a00-c148-491e-aa95-ef55516107aa</title>
    <updated>2026-07-01T21:05:21.242093+00:00</updated>
    <author>
      <name>Cédric Bonhomme</name>
      <uri>https://cve.circl.lu/user/cedric</uri>
    </author>
    <content>{"uuid": "22a93a00-c148-491e-aa95-ef55516107aa", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5757d14e-556b-4263-bd50-84cc2929bc7f", "content": "", "creation_timestamp": "2026-06-30T11:54:41.680893Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22a93a00-c148-491e-aa95-ef55516107aa/export"/>
    <published>2026-06-30T11:54:41.680893+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7068b206-beb9-463f-ae8f-4d38c3b95eca/export</id>
    <title>7068b206-beb9-463f-ae8f-4d38c3b95eca</title>
    <updated>2026-07-01T21:05:21.244401+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7068b206-beb9-463f-ae8f-4d38c3b95eca", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f95d5f58-01e6-4068-8315-1e5bc32a0fd2", "content": "", "creation_timestamp": "2026-06-23T14:06:09.139191Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7068b206-beb9-463f-ae8f-4d38c3b95eca/export"/>
    <published>2026-06-23T14:06:09.139191+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/064887bd-e4df-4959-95bb-d34457c2f54a/export</id>
    <title>064887bd-e4df-4959-95bb-d34457c2f54a</title>
    <updated>2026-07-01T21:05:21.245999+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "064887bd-e4df-4959-95bb-d34457c2f54a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/064887bd-e4df-4959-95bb-d34457c2f54a/export"/>
    <published>2025-03-17T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b325de5c-ccd4-4217-b59a-85f4c4f13e6a/export</id>
    <title>b325de5c-ccd4-4217-b59a-85f4c4f13e6a</title>
    <updated>2026-07-01T21:05:21.246187+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b325de5c-ccd4-4217-b59a-85f4c4f13e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodqzbx425", "content": "", "creation_timestamp": "2025-02-19T21:02:37.895931Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b325de5c-ccd4-4217-b59a-85f4c4f13e6a/export"/>
    <published>2025-02-19T21:02:37.895931+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2e1645b3-7d5d-4256-9733-14ab88eb0f8d/export</id>
    <title>2e1645b3-7d5d-4256-9733-14ab88eb0f8d</title>
    <updated>2026-07-01T21:05:21.246348+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2e1645b3-7d5d-4256-9733-14ab88eb0f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12209", "type": "seen", "source": "https://t.me/suboxone_chatroom/1577", "content": "#exploit\n1. A Practical Guide to PrintNightmare in 2024 (updated\u00a0Oct 5)\nhttps://itm4n.github.io/printnightmare-exploitation\n]-&amp;gt; PnP bypass\n\n2. CVE-2024-12209:\nWP Umbrella Unauthenticated LFI\nhttps://github.com/Nxploited/CVE-2024-12209\n\n3. CVE-2024-30085:\nWindows 11 23H2 EoP\nhttps://ssd-disclosure.com/ssd-advisory-cldflt-heap-based-overflow-pe", "creation_timestamp": "2025-01-27T07:07:44.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2e1645b3-7d5d-4256-9733-14ab88eb0f8d/export"/>
    <published>2025-01-27T07:07:44+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/27f66dc7-18df-4713-acdf-8ac74ea84522/export</id>
    <title>27f66dc7-18df-4713-acdf-8ac74ea84522</title>
    <updated>2026-07-01T21:05:21.246498+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "27f66dc7-18df-4713-acdf-8ac74ea84522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://t.me/cvedetector/15691", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-12203 - \"WordPress RSS Icon Widget Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-12203 \nPublished : Jan. 17, 2025, 7:15 a.m. | 42\u00a0minutes ago \nDescription : The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-17T09:16:02.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/27f66dc7-18df-4713-acdf-8ac74ea84522/export"/>
    <published>2025-01-17T09:16:02+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/498b53e1-f57e-4812-b86c-4957bdfea131/export</id>
    <title>498b53e1-f57e-4812-b86c-4957bdfea131</title>
    <updated>2026-07-01T21:05:21.246679+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "498b53e1-f57e-4812-b86c-4957bdfea131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-12203\n\ud83d\udd39 Description: The RSS Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018link_color\u2019 parameter in all versions up to, and including, 5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\ud83d\udccf Published: 2025-01-17T07:01:29.571Z\n\ud83d\udccf Modified: 2025-01-17T07:01:29.571Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/fbd8fec7-c95a-4c03-ac0d-894a54906863?source=cve\n2. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L83\n3. https://plugins.trac.wordpress.org/browser/rss-icon-widget/trunk/rss-icon-widget.php#L195", "creation_timestamp": "2025-01-17T07:56:35.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/498b53e1-f57e-4812-b86c-4957bdfea131/export"/>
    <published>2025-01-17T07:56:35+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f01d54e8-1688-46f5-b3a0-9f84cb5b852a/export</id>
    <title>f01d54e8-1688-46f5-b3a0-9f84cb5b852a</title>
    <updated>2026-07-01T21:05:21.246851+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f01d54e8-1688-46f5-b3a0-9f84cb5b852a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfwc2dmrth2e", "content": "", "creation_timestamp": "2025-01-17T07:38:55.781464Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f01d54e8-1688-46f5-b3a0-9f84cb5b852a/export"/>
    <published>2025-01-17T07:38:55.781464+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/de6826cb-b0df-486b-bca1-83168930f01d/export</id>
    <title>de6826cb-b0df-486b-bca1-83168930f01d</title>
    <updated>2026-07-01T21:05:21.246994+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "de6826cb-b0df-486b-bca1-83168930f01d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfwaqy4j4e2b", "content": "", "creation_timestamp": "2025-01-17T07:15:46.381671Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/de6826cb-b0df-486b-bca1-83168930f01d/export"/>
    <published>2025-01-17T07:15:46.381671+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e81772fe-f7a6-4bb4-b1f9-c34300051047/export</id>
    <title>e81772fe-f7a6-4bb4-b1f9-c34300051047</title>
    <updated>2026-07-01T21:05:21.247137+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e81772fe-f7a6-4bb4-b1f9-c34300051047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-12203", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113842412560283053", "content": "", "creation_timestamp": "2025-01-17T07:02:40.154540Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e81772fe-f7a6-4bb4-b1f9-c34300051047/export"/>
    <published>2025-01-17T07:02:40.154540+00:00</published>
  </entry>
</feed>
