<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 11:33:10 +0000</lastBuildDate>
    <item>
      <title>5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e</title>
      <link>https://vulnerability.circl.lu/sighting/5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e/export</link>
      <description>{"uuid": "5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:17.053906Z"}</description>
      <content:encoded>{"uuid": "5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:17.053906Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5f543ff5-fa4f-4e2e-98c1-8b39b0325d2e/export</guid>
      <pubDate>Wed, 16 Sep 2026 10:15:17 +0000</pubDate>
    </item>
    <item>
      <title>58a3c18b-b184-463b-897f-9899607d0f3c</title>
      <link>https://vulnerability.circl.lu/sighting/58a3c18b-b184-463b-897f-9899607d0f3c/export</link>
      <description>{"uuid": "58a3c18b-b184-463b-897f-9899607d0f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1326", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-15T00:00:23.689741Z"}</description>
      <content:encoded>{"uuid": "58a3c18b-b184-463b-897f-9899607d0f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1326", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-15T00:00:23.689741Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/58a3c18b-b184-463b-897f-9899607d0f3c/export</guid>
      <pubDate>Tue, 15 Sep 2026 00:00:23 +0000</pubDate>
    </item>
    <item>
      <title>c8be363f-6c9f-435a-8ca9-28ed31f72601</title>
      <link>https://vulnerability.circl.lu/sighting/c8be363f-6c9f-435a-8ca9-28ed31f72601/export</link>
      <description>{"uuid": "c8be363f-6c9f-435a-8ca9-28ed31f72601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1326", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-14T03:00:11.806796Z"}</description>
      <content:encoded>{"uuid": "c8be363f-6c9f-435a-8ca9-28ed31f72601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1326", "type": "seen", "source": "Telegram/ZDsKk6umJ3OlCagGo0wD54oo8d8XbKXnBjolAPHYcDQ0RXY", "content": "", "creation_timestamp": "2026-09-14T03:00:11.806796Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8be363f-6c9f-435a-8ca9-28ed31f72601/export</guid>
      <pubDate>Mon, 14 Sep 2026 03:00:11 +0000</pubDate>
    </item>
    <item>
      <title>75bd2023-626e-424b-a252-a6f3b4edf852</title>
      <link>https://vulnerability.circl.lu/sighting/75bd2023-626e-424b-a252-a6f3b4edf852/export</link>
      <description>{"uuid": "75bd2023-626e-424b-a252-a6f3b4edf852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-11T00:00:56.843066Z"}</description>
      <content:encoded>{"uuid": "75bd2023-626e-424b-a252-a6f3b4edf852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-11T00:00:56.843066Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/75bd2023-626e-424b-a252-a6f3b4edf852/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:56 +0000</pubDate>
    </item>
    <item>
      <title>99a95474-bd89-4d1c-bcff-2e92ae989044</title>
      <link>https://vulnerability.circl.lu/sighting/99a95474-bd89-4d1c-bcff-2e92ae989044/export</link>
      <description>{"uuid": "99a95474-bd89-4d1c-bcff-2e92ae989044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-10T01:00:04.461681Z"}</description>
      <content:encoded>{"uuid": "99a95474-bd89-4d1c-bcff-2e92ae989044", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6802", "content": "exploit\n1. CVE-2023-21987, CVE-2023-21991:\nOracle VirtualBox (Core) Vulnerabilities\nhttps://qriousec.github.io/post/vbox-pwn2own-2023\n\n2. CVE-2023-1389:\nTP-Link Archer/Qrious Security - WAN-side entry\nhttps://www.zerodayinitiative.com/blog/2023/4/21/tp-link-wan-side-vulnerability-cve-2023-1389-added-to-the-mirai-botnet-arsenal\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.08", "creation_timestamp": "2026-09-10T01:00:04.461681Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/99a95474-bd89-4d1c-bcff-2e92ae989044/export</guid>
      <pubDate>Thu, 10 Sep 2026 01:00:04 +0000</pubDate>
    </item>
    <item>
      <title>03410c10-54eb-4a66-91e1-b4dd6450d79a</title>
      <link>https://vulnerability.circl.lu/sighting/03410c10-54eb-4a66-91e1-b4dd6450d79a/export</link>
      <description>{"uuid": "03410c10-54eb-4a66-91e1-b4dd6450d79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "https://t.me/cissp/6818", "content": "Heads up, everyone! \n\nCISA has issued an advisory warning of active exploitation of three known vulnerabilities, including CVE-2023-1389 (TP-Link Archer AX-21), CVE-2021-45046 (Apache Log4j2) and CVE-2023-21839 (Oracle WebLogic). \nDetails: https://thehackernews.com/2023/05/active-exploitation-of-tp-link-apache.html\n\nCritical flaw affecting ME RTU remote terminal units!  \nCISA has issued an advisory about the security vulnerability tracked as CVE-2023-2131, which has received the highest severity rating of 10.0 on the CVSS scoring system. \nDetails: https://thehackernews.com/2023/05/cisa-issues-advisory-on-critical-rce.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.13", "creation_timestamp": "2026-09-10T00:00:07.379593Z"}</description>
      <content:encoded>{"uuid": "03410c10-54eb-4a66-91e1-b4dd6450d79a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "https://t.me/cissp/6818", "content": "Heads up, everyone! \n\nCISA has issued an advisory warning of active exploitation of three known vulnerabilities, including CVE-2023-1389 (TP-Link Archer AX-21), CVE-2021-45046 (Apache Log4j2) and CVE-2023-21839 (Oracle WebLogic). \nDetails: https://thehackernews.com/2023/05/active-exploitation-of-tp-link-apache.html\n\nCritical flaw affecting ME RTU remote terminal units!  \nCISA has issued an advisory about the security vulnerability tracked as CVE-2023-2131, which has received the highest severity rating of 10.0 on the CVSS scoring system. \nDetails: https://thehackernews.com/2023/05/cisa-issues-advisory-on-critical-rce.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.13", "creation_timestamp": "2026-09-10T00:00:07.379593Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/03410c10-54eb-4a66-91e1-b4dd6450d79a/export</guid>
      <pubDate>Thu, 10 Sep 2026 00:00:07 +0000</pubDate>
    </item>
    <item>
      <title>aea4a9db-eb19-42a2-98da-686b5c80f3ab</title>
      <link>https://vulnerability.circl.lu/sighting/aea4a9db-eb19-42a2-98da-686b5c80f3ab/export</link>
      <description>{"uuid": "aea4a9db-eb19-42a2-98da-686b5c80f3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/784", "content": "\u041d\u043e\u0432\u043e\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u0435 \u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u041f\u041e ! \u041c\u043e\u0449\u043d\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 Condi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link Archer AX21, \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044f \u0438\u0445 \u0432 \u043c\u0430\u0448\u0438\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\nhttps://www.fortinet.com/blog/threat-research/condi-ddos-botnet-spreads-via-tp-links-cve-2023-1389", "creation_timestamp": "2026-09-09T00:00:10.356213Z"}</description>
      <content:encoded>{"uuid": "aea4a9db-eb19-42a2-98da-686b5c80f3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/784", "content": "\u041d\u043e\u0432\u043e\u0435 \u043e\u043f\u043e\u0432\u0435\u0449\u0435\u043d\u0438\u0435 \u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u043c \u041f\u041e ! \u041c\u043e\u0449\u043d\u044b\u0439 \u0431\u043e\u0442\u043d\u0435\u0442 Condi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Wi-Fi-\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link Archer AX21, \u043f\u0440\u0435\u0432\u0440\u0430\u0449\u0430\u044f \u0438\u0445 \u0432 \u043c\u0430\u0448\u0438\u043d\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f DDoS-\u0430\u0442\u0430\u043a.\n\nhttps://www.fortinet.com/blog/threat-research/condi-ddos-botnet-spreads-via-tp-links-cve-2023-1389", "creation_timestamp": "2026-09-09T00:00:10.356213Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/aea4a9db-eb19-42a2-98da-686b5c80f3ab/export</guid>
      <pubDate>Wed, 09 Sep 2026 00:00:10 +0000</pubDate>
    </item>
    <item>
      <title>ec9300ce-3fab-4029-b6e4-00fe6398bc8c</title>
      <link>https://vulnerability.circl.lu/sighting/ec9300ce-3fab-4029-b6e4-00fe6398bc8c/export</link>
      <description>{"uuid": "ec9300ce-3fab-4029-b6e4-00fe6398bc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:10.605056Z"}</description>
      <content:encoded>{"uuid": "ec9300ce-3fab-4029-b6e4-00fe6398bc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:10.605056Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ec9300ce-3fab-4029-b6e4-00fe6398bc8c/export</guid>
      <pubDate>Mon, 07 Sep 2026 10:15:10 +0000</pubDate>
    </item>
    <item>
      <title>3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3</title>
      <link>https://vulnerability.circl.lu/sighting/3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3/export</link>
      <description>{"uuid": "3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:12.000650Z"}</description>
      <content:encoded>{"uuid": "3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:12.000650Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3c37d9f4-82e0-4ce4-ae3d-12d5d137f4c3/export</guid>
      <pubDate>Sun, 06 Sep 2026 10:15:12 +0000</pubDate>
    </item>
    <item>
      <title>e7f533c4-06e2-4d2a-9699-80dd1a96d1fb</title>
      <link>https://vulnerability.circl.lu/sighting/e7f533c4-06e2-4d2a-9699-80dd1a96d1fb/export</link>
      <description>{"uuid": "e7f533c4-06e2-4d2a-9699-80dd1a96d1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:10.848738Z"}</description>
      <content:encoded>{"uuid": "e7f533c4-06e2-4d2a-9699-80dd1a96d1fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-1389", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:10.848738Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7f533c4-06e2-4d2a-9699-80dd1a96d1fb/export</guid>
      <pubDate>Wed, 02 Sep 2026 10:15:10 +0000</pubDate>
    </item>
  </channel>
</rss>
