<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 13:08:13 +0000</lastBuildDate>
    <item>
      <title>562e690e-2580-4dd5-9e5e-3909c2798f45</title>
      <link>https://vulnerability.circl.lu/sighting/562e690e-2580-4dd5-9e5e-3909c2798f45/export</link>
      <description>{"uuid": "562e690e-2580-4dd5-9e5e-3909c2798f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-11T00:00:42.388381Z"}</description>
      <content:encoded>{"uuid": "562e690e-2580-4dd5-9e5e-3909c2798f45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-11T00:00:42.388381Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/562e690e-2580-4dd5-9e5e-3909c2798f45/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:42 +0000</pubDate>
    </item>
    <item>
      <title>3c06df63-9e0b-4a27-a696-2aae596ccd94</title>
      <link>https://vulnerability.circl.lu/sighting/3c06df63-9e0b-4a27-a696-2aae596ccd94/export</link>
      <description>{"uuid": "3c06df63-9e0b-4a27-a696-2aae596ccd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-10T11:00:04.371787Z"}</description>
      <content:encoded>{"uuid": "3c06df63-9e0b-4a27-a696-2aae596ccd94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-10T11:00:04.371787Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c06df63-9e0b-4a27-a696-2aae596ccd94/export</guid>
      <pubDate>Thu, 10 Sep 2026 11:00:04 +0000</pubDate>
    </item>
    <item>
      <title>f4715508-4b8b-4fc6-8cea-af87d1db13ed</title>
      <link>https://vulnerability.circl.lu/sighting/f4715508-4b8b-4fc6-8cea-af87d1db13ed/export</link>
      <description>{"uuid": "f4715508-4b8b-4fc6-8cea-af87d1db13ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0818", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_007_killbill.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Solar Eclipse \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This is an exploit for a previously undisclosed\\n          vulnerability in the bit string decoding code in the\\n          Microsoft ASN.1 library. This vulnerability is not related\\n          to the bit string vulnerability described in eEye advisory\\n          AD20040210-2. Both vulnerabilities were fixed in the\\n          MS04-007 patch.  Windows 2000 SP4 Rollup 1 also patches this\\n          vulnerability.\\n\\n          You are only allowed one attempt with this vulnerability. If\\n          the payload fails to execute, the LSASS system service will\\n          crash and the target system will automatically reboot itself\\n          in 60 seconds. If the payload succeeds, the system will no\\n          longer be able to process authentication requests, denying\\n          all attempts to login through SMB or at the console. A\\n          reboot is required to restore proper functioning of an\\n          exploited system.\\n\\n          This exploit has been successfully tested with the win32/*/reverse_tcp\\n          payloads, however a few problems were encountered when using the\\n          equivalent bind payloads. Your mileage may vary.\", \"disclosure_date\": \"2004-02-10\", \"fullname\": \"exploit/windows/smb/ms04_007_killbill\", \"is_install_path\": true, \"mod_time\": \"2025-06-25 09:25:53 +0000\", \"name\": \"MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"kill-bill\"], \"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-os-restarts\", \"crash-service-down\"]}, \"path\": \"/modules/exploits/windows/smb/ms04_007_killbill.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 100, \"ref_name\": \"windows/smb/ms04_007_killbill\", \"references\": [\"CVE-2003-0818\", \"OSVDB-3902\", \"BID-9633\", \"MSB-MS04-007\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Windows 2000 SP2-SP4 + Windows XP SP0-SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:31.569605Z"}</description>
      <content:encoded>{"uuid": "f4715508-4b8b-4fc6-8cea-af87d1db13ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0818", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms04_007_killbill.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Solar Eclipse \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This is an exploit for a previously undisclosed\\n          vulnerability in the bit string decoding code in the\\n          Microsoft ASN.1 library. This vulnerability is not related\\n          to the bit string vulnerability described in eEye advisory\\n          AD20040210-2. Both vulnerabilities were fixed in the\\n          MS04-007 patch.  Windows 2000 SP4 Rollup 1 also patches this\\n          vulnerability.\\n\\n          You are only allowed one attempt with this vulnerability. If\\n          the payload fails to execute, the LSASS system service will\\n          crash and the target system will automatically reboot itself\\n          in 60 seconds. If the payload succeeds, the system will no\\n          longer be able to process authentication requests, denying\\n          all attempts to login through SMB or at the console. A\\n          reboot is required to restore proper functioning of an\\n          exploited system.\\n\\n          This exploit has been successfully tested with the win32/*/reverse_tcp\\n          payloads, however a few problems were encountered when using the\\n          equivalent bind payloads. Your mileage may vary.\", \"disclosure_date\": \"2004-02-10\", \"fullname\": \"exploit/windows/smb/ms04_007_killbill\", \"is_install_path\": true, \"mod_time\": \"2025-06-25 09:25:53 +0000\", \"name\": \"MS04-007 Microsoft ASN.1 Library Bitstring Heap Overflow\", \"needs_cleanup\": null, \"notes\": {\"AKA\": [\"kill-bill\"], \"Reliability\": [\"unreliable-session\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-os-restarts\", \"crash-service-down\"]}, \"path\": \"/modules/exploits/windows/smb/ms04_007_killbill.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 100, \"ref_name\": \"windows/smb/ms04_007_killbill\", \"references\": [\"CVE-2003-0818\", \"OSVDB-3902\", \"BID-9633\", \"MSB-MS04-007\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Windows 2000 SP2-SP4 + Windows XP SP0-SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:31.569605Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4715508-4b8b-4fc6-8cea-af87d1db13ed/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:52:31 +0000</pubDate>
    </item>
    <item>
      <title>db2c1502-dd83-42af-8b01-3affd729def6</title>
      <link>https://vulnerability.circl.lu/sighting/db2c1502-dd83-42af-8b01-3affd729def6/export</link>
      <description>{"uuid": "db2c1502-dd83-42af-8b01-3affd729def6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0812", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms03_049_netapi.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the NetApi32 NetAddAlternateComputerName\\n          function using the Workstation service in Windows XP.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/smb/ms03_049_netapi\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS03-049 Microsoft Workstation Service NetAddAlternateComputerName Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/smb/ms03_049_netapi.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/smb/ms03_049_netapi\", \"references\": [\"CVE-2003-0812\", \"OSVDB-11461\", \"BID-9011\", \"MSB-MS03-049\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Windows XP SP0/SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:31.470623Z"}</description>
      <content:encoded>{"uuid": "db2c1502-dd83-42af-8b01-3affd729def6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2003-0812", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/smb/ms03_049_netapi.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [139, 445], \"autofilter_services\": [\"netbios-ssn\", \"microsoft-ds\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack buffer overflow in the NetApi32 NetAddAlternateComputerName\\n          function using the Workstation service in Windows XP.\", \"disclosure_date\": \"2003-11-11\", \"fullname\": \"exploit/windows/smb/ms03_049_netapi\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS03-049 Microsoft Workstation Service NetAddAlternateComputerName Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/smb/ms03_049_netapi.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"windows/smb/ms03_049_netapi\", \"references\": [\"CVE-2003-0812\", \"OSVDB-11461\", \"BID-9011\", \"MSB-MS03-049\"], \"rport\": 445, \"session_types\": false, \"targets\": [\"Windows XP SP0/SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:31.470623Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/db2c1502-dd83-42af-8b01-3affd729def6/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:52:31 +0000</pubDate>
    </item>
    <item>
      <title>9a3d441e-57b6-4258-8553-5b37316166fd</title>
      <link>https://vulnerability.circl.lu/sighting/9a3d441e-57b6-4258-8553-5b37316166fd/export</link>
      <description>{"uuid": "9a3d441e-57b6-4258-8553-5b37316166fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms13_071_theme.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Eduardo Prado\", \"juan vazquez \", \"Matthew Hall \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows\\n          2003. The vulnerability exists in the handling of the Screen Saver path, in the [boot]\\n          section. An arbitrary path can be used as screen saver, including a remote SMB resource,\\n          which allows for remote code execution when a malicious .theme file is opened, and the\\n          \\\"Screen Saver\\\" tab is viewed. The code execution is also triggered if the victim installs\\n          the malicious theme and stays away from the computer, when Windows tries to display the\\n          screensaver.\", \"disclosure_date\": \"2013-09-10\", \"fullname\": \"exploit/windows/fileformat/ms13_071_theme\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms13_071_theme.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/fileformat/ms13_071_theme\", \"references\": [\"CVE-2013-0810\", \"OSVDB-97136\", \"MSB-MS13-071\", \"BID-62176\", \"URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1040\", \"URL-https://www.rapid7.com/blog/post/2013/09/25/change-the-theme-get-a-shell\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP3 / Windows 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:28.445880Z"}</description>
      <content:encoded>{"uuid": "9a3d441e-57b6-4258-8553-5b37316166fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0810", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/ms13_071_theme.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Eduardo Prado\", \"juan vazquez \", \"Matthew Hall \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability mainly affecting Microsoft Windows XP and Windows\\n          2003. The vulnerability exists in the handling of the Screen Saver path, in the [boot]\\n          section. An arbitrary path can be used as screen saver, including a remote SMB resource,\\n          which allows for remote code execution when a malicious .theme file is opened, and the\\n          \\\"Screen Saver\\\" tab is viewed. The code execution is also triggered if the victim installs\\n          the malicious theme and stays away from the computer, when Windows tries to display the\\n          screensaver.\", \"disclosure_date\": \"2013-09-10\", \"fullname\": \"exploit/windows/fileformat/ms13_071_theme\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS13-071 Microsoft Windows Theme File Handling Arbitrary Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/fileformat/ms13_071_theme.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/fileformat/ms13_071_theme\", \"references\": [\"CVE-2013-0810\", \"OSVDB-97136\", \"MSB-MS13-071\", \"BID-62176\", \"URL-http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1040\", \"URL-https://www.rapid7.com/blog/post/2013/09/25/change-the-theme-get-a-shell\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP3 / Windows 2003 SP2\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:28.445880Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a3d441e-57b6-4258-8553-5b37316166fd/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:51:28 +0000</pubDate>
    </item>
    <item>
      <title>6048b0b9-2570-47ff-966c-814b10e4fe5e</title>
      <link>https://vulnerability.circl.lu/sighting/6048b0b9-2570-47ff-966c-814b10e4fe5e/export</link>
      <description>{"uuid": "6048b0b9-2570-47ff-966c-814b10e4fe5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Unknown\", \"Marius Mlynski\", \"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module gains remote code execution on Firefox 35-36 by abusing a\\n          privilege escalation bug in resource:// URIs. PDF.js is used to exploit\\n          the bug. This exploit requires the user to click anywhere on the page to\\n          trigger the vulnerability.\", \"disclosure_date\": \"2015-03-31\", \"fullname\": \"exploit/multi/browser/firefox_pdfjs_privilege_escalation\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox PDF.js Privileged Javascript Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/browser/firefox_pdfjs_privilege_escalation\", \"references\": [\"CVE-2015-0816\", \"CVE-2015-0802\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.571521Z"}</description>
      <content:encoded>{"uuid": "6048b0b9-2570-47ff-966c-814b10e4fe5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0816", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Unknown\", \"Marius Mlynski\", \"joev \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module gains remote code execution on Firefox 35-36 by abusing a\\n          privilege escalation bug in resource:// URIs. PDF.js is used to exploit\\n          the bug. This exploit requires the user to click anywhere on the page to\\n          trigger the vulnerability.\", \"disclosure_date\": \"2015-03-31\", \"fullname\": \"exploit/multi/browser/firefox_pdfjs_privilege_escalation\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox PDF.js Privileged Javascript Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_pdfjs_privilege_escalation.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"multi/browser/firefox_pdfjs_privilege_escalation\", \"references\": [\"CVE-2015-0816\", \"CVE-2015-0802\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:35.571521Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6048b0b9-2570-47ff-966c-814b10e4fe5e/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:49:35 +0000</pubDate>
    </item>
    <item>
      <title>dae75d8f-0cde-4cc0-b852-2e370fdcccc0</title>
      <link>https://vulnerability.circl.lu/sighting/dae75d8f-0cde-4cc0-b852-2e370fdcccc0/export</link>
      <description>{"uuid": "dae75d8f-0cde-4cc0-b852-2e370fdcccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0815", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2009_002.rb", "content": "{\"actions\": [{\"description\": \"Download arbitrary file\", \"name\": \"Download\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"spinbad \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a file disclosure vulnerability in the jumpUrl mechanism of\\n          Typo3. This flaw can be used to read any file that the web server user account has\\n          access to.\", \"disclosure_date\": \"2009-02-10\", \"fullname\": \"auxiliary/admin/http/typo3_sa_2009_002\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"Typo3 sa-2009-002 File Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/typo3_sa_2009_002.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/typo3_sa_2009_002\", \"references\": [\"OSVDB-52048\", \"CVE-2009-0815\", \"URL-http://web.archive.org/web/20090212165636/http://secunia.com:80/advisories/33829/\", \"EDB-8038\", \"URL-http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:50.767485Z"}</description>
      <content:encoded>{"uuid": "dae75d8f-0cde-4cc0-b852-2e370fdcccc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0815", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/typo3_sa_2009_002.rb", "content": "{\"actions\": [{\"description\": \"Download arbitrary file\", \"name\": \"Download\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"spinbad \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a file disclosure vulnerability in the jumpUrl mechanism of\\n          Typo3. This flaw can be used to read any file that the web server user account has\\n          access to.\", \"disclosure_date\": \"2009-02-10\", \"fullname\": \"auxiliary/admin/http/typo3_sa_2009_002\", \"is_install_path\": true, \"mod_time\": \"2025-05-16 01:16:37 +0000\", \"name\": \"Typo3 sa-2009-002 File Disclosure\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/admin/http/typo3_sa_2009_002.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/http/typo3_sa_2009_002\", \"references\": [\"OSVDB-52048\", \"CVE-2009-0815\", \"URL-http://web.archive.org/web/20090212165636/http://secunia.com:80/advisories/33829/\", \"EDB-8038\", \"URL-http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-002/\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:50.767485Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dae75d8f-0cde-4cc0-b852-2e370fdcccc0/export</guid>
      <pubDate>Tue, 08 Sep 2026 06:46:50 +0000</pubDate>
    </item>
    <item>
      <title>9db2c381-9501-4433-97b0-117507895cfa</title>
      <link>https://vulnerability.circl.lu/sighting/9db2c381-9501-4433-97b0-117507895cfa/export</link>
      <description>{"uuid": "9db2c381-9501-4433-97b0-117507895cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-04T00:00:11.839157Z"}</description>
      <content:encoded>{"uuid": "9db2c381-9501-4433-97b0-117507895cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-04T00:00:11.839157Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9db2c381-9501-4433-97b0-117507895cfa/export</guid>
      <pubDate>Fri, 04 Sep 2026 00:00:11 +0000</pubDate>
    </item>
    <item>
      <title>8a5a3fc8-84e9-443c-bb53-afd8997b32c1</title>
      <link>https://vulnerability.circl.lu/sighting/8a5a3fc8-84e9-443c-bb53-afd8997b32c1/export</link>
      <description>{"uuid": "8a5a3fc8-84e9-443c-bb53-afd8997b32c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-03T21:00:18.167426Z"}</description>
      <content:encoded>{"uuid": "8a5a3fc8-84e9-443c-bb53-afd8997b32c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2015-0813", "type": "seen", "source": "https://t.me/hacking_Attack/133664", "content": "fuzzer' is, but real users are more likely to be interested in whether a tool has found something useful. We do not have anyone at OUSPG running tests or even developing Radamsa full-time, but we obviously do make occasional test-runs, both to assess the usefulness of the tool, and to help improve robustness of the target programs. For the test-runs we try to select programs that are mature, useful to us, widely used, and, preferably, open source and/or tend to process data from outside sources. The list below has some CVEs we know of that have been found by using Radamsa. Some of the results are from our own test runs, and some have been kindly provided by CERT-FI from their tests and other users. As usual, please note that CVE:s should be read as 'product X is now more robust (against Y)'.    CVE program credit     CVE-2007-3641 libarchive OUSPG   CVE-2007-3644 libarchive OUSPG   CVE-2007-3645 libarchive OUSPG   CVE-2008-1372 bzip2 OUSPG   CVE-2008-1387 ClamAV OUSPG   CVE-2008-1412 F-Secure OUSPG   CVE-2008-1837 ClamAV OUSPG   CVE-2008-6536 7-zip OUSPG   CVE-2008-6903 Sophos Anti-Virus OUSPG   CVE-2010-0001 Gzip integer underflow in unlzw   CVE-2010-0192 Acroread OUSPG   CVE-2010-1205 libpng OUSPG   CVE-2010-1410 Webkit OUSPG   CVE-2010-1415 Webkit OUSPG   CVE-2010-1793 Webkit OUSPG   CVE-2010-2065 libtiff found by CERT-FI   CVE-2010-2443 libtiff found by CERT-FI   CVE-2010-2597 libtiff found by CERT-FI   CVE-2010-2482 libtiff found by CERT-FI   CVE-2011-0522 VLC found by Harry Sintonen   CVE-2011-0181 Apple ImageIO found by Harry Sintonen   CVE-2011-0198 Apple Type Services found by Harry Sintonen   CVE-2011-0205 Apple ImageIO found by Harry Sintonen   CVE-2011-0201 Apple CoreFoundation found by Harry Sintonen   CVE-2011-1276 Excel found by Nicolas Gr\u00e9goire of Agarri   CVE-2011-1186 Chrome OUSPG   CVE-2011-1434 Chrome OUSPG   CVE-2011-2348 Chrome OUSPG   CVE-2011-2804 Chrome/pdf OUSPG   CVE-2011-2830 Chrome/pdf OUSPG   CVE-2011-2839 Chrome/pdf OUSPG   CVE-2011-2861 Chrome/pdf OUSPG   CVE-2011-3146 librsvg found by Sauli Pahlman   CVE-2011-3654 Mozilla Firefox OUSPG   CVE-2011-3892 Theora OUSPG   CVE-2011-3893 Chrome OUSPG   CVE-2011-3895 FFmpeg OUSPG   CVE-2011-3957 Chrome OUSPG   CVE-2011-3959 Chrome OUSPG   CVE-2011-3960 Chrome OUSPG   CVE-2011-3962 Chrome OUSPG   CVE-2011-3966 Chrome OUSPG   CVE-2011-3970 libxslt OUSPG   CVE-2012-0449 Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-0469 Mozilla Firefox OUSPG   CVE-2012-0470 Mozilla Firefox OUSPG   CVE-2012-0457 Mozilla Firefox OUSPG   CVE-2012-2825 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2849 Chrome/GIF OUSPG   CVE-2012-3972 Mozilla Firefox found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-1525 Acrobat Reader found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2871 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-2870 libxslt found by Nicolas Gr\u00e9goire of Agarri   CVE-2012-4922 tor found by the Tor project   CVE-2012-5108 Chrome OUSPG via NodeFuzz   CVE-2012-2887 Chrome OUSPG via NodeFuzz   CVE-2012-5120 Chrome OUSPG via NodeFuzz   CVE-2012-5121 Chrome OUSPG via NodeFuzz   CVE-2012-5145 Chrome OUSPG via NodeFuzz   CVE-2012-4186 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4187 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4188 Mozilla Firefox OUSPG via NodeFuzz   CVE-2012-4202 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-0744 Mozilla Firefox OUSPG via NodeFuzz   CVE-2013-1691 Mozilla Firefox OUSPG   CVE-2013-1708 Mozilla Firefox OUSPG   CVE-2013-4082 Wireshark found by cons0ul   CVE-2013-1732 Mozilla Firefox OUSPG   CVE-2014-0526 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3669 PHP    CVE-2014-3668 PHP    CVE-2014-8449 Adobe Reader X/XI Pedro Ribeiro (pedrib@gmail.com)   CVE-2014-3707 cURL Symeon Paraschoudis   CVE-2014-7933 Chrome OUSPG   CVE-2015-0797 Mozilla Firefox OUSPG   CVE-2015-0813 Mozilla Firefox OUSPG   CVE-2015-1220 Chrome OUSPG   CVE-2015-1224 Chrome OUSPG", "creation_timestamp": "2026-09-03T21:00:18.167426Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8a5a3fc8-84e9-443c-bb53-afd8997b32c1/export</guid>
      <pubDate>Thu, 03 Sep 2026 21:00:18 +0000</pubDate>
    </item>
    <item>
      <title>7f632031-6821-4776-bff4-677b79c28221</title>
      <link>https://vulnerability.circl.lu/sighting/7f632031-6821-4776-bff4-677b79c28221/export</link>
      <description>{"uuid": "7f632031-6821-4776-bff4-677b79c28221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-02T01:04:14.276118Z"}</description>
      <content:encoded>{"uuid": "7f632031-6821-4776-bff4-677b79c28221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0811", "type": "seen", "source": "https://t.me/cissp/5521", "content": "A new vulnerability (CVE-2022-0811) in the CRI-O engine, dubbed \u201ccr8escape,\u201d could allow attackers to escape Kubernetes containers and gain root access. \n\nRead details: https://thehackernews.com/2022/03/new-vulnerability-in-cri-o-engine-lets.html", "creation_timestamp": "2026-09-02T01:04:14.276118Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7f632031-6821-4776-bff4-677b79c28221/export</guid>
      <pubDate>Wed, 02 Sep 2026 01:04:14 +0000</pubDate>
    </item>
  </channel>
</rss>
