<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 11:06:42 +0000</lastBuildDate>
    <item>
      <title>e0407f36-6b58-46fe-9e62-e96674d658e0</title>
      <link>https://vulnerability.circl.lu/sighting/e0407f36-6b58-46fe-9e62-e96674d658e0/export</link>
      <description>{"uuid": "e0407f36-6b58-46fe-9e62-e96674d658e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/CyberDispatch/1288", "content": "A ShowDoc flaw (CVSS 9.4) is now under active exploitation.\n\nCVE-2025-0520 lets attackers upload web shells via unauthenticated file upload \u2192 full server control. First attacks seen via a U.S. honeypot; ~2,000 instances remain exposed, mostly in China.", "creation_timestamp": "2026-08-31T00:00:26.641925Z"}</description>
      <content:encoded>{"uuid": "e0407f36-6b58-46fe-9e62-e96674d658e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/CyberDispatch/1288", "content": "A ShowDoc flaw (CVSS 9.4) is now under active exploitation.\n\nCVE-2025-0520 lets attackers upload web shells via unauthenticated file upload \u2192 full server control. First attacks seen via a U.S. honeypot; ~2,000 instances remain exposed, mostly in China.", "creation_timestamp": "2026-08-31T00:00:26.641925Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e0407f36-6b58-46fe-9e62-e96674d658e0/export</guid>
      <pubDate>Mon, 31 Aug 2026 00:00:26 +0000</pubDate>
    </item>
    <item>
      <title>bf8eaec9-24bb-4151-aedc-fb368af1f048</title>
      <link>https://vulnerability.circl.lu/sighting/bf8eaec9-24bb-4151-aedc-fb368af1f048/export</link>
      <description>{"uuid": "bf8eaec9-24bb-4151-aedc-fb368af1f048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://t.me/CyberDispatch/1288", "content": "A ShowDoc flaw (CVSS 9.4) is now under active exploitation.\n\nCVE-2025-0520 lets attackers upload web shells via unauthenticated file upload \u2192 full server control. First attacks seen via a U.S. honeypot; ~2,000 instances remain exposed, mostly in China.", "creation_timestamp": "2026-08-30T00:00:43.554138Z"}</description>
      <content:encoded>{"uuid": "bf8eaec9-24bb-4151-aedc-fb368af1f048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://t.me/CyberDispatch/1288", "content": "A ShowDoc flaw (CVSS 9.4) is now under active exploitation.\n\nCVE-2025-0520 lets attackers upload web shells via unauthenticated file upload \u2192 full server control. First attacks seen via a U.S. honeypot; ~2,000 instances remain exposed, mostly in China.", "creation_timestamp": "2026-08-30T00:00:43.554138Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bf8eaec9-24bb-4151-aedc-fb368af1f048/export</guid>
      <pubDate>Sun, 30 Aug 2026 00:00:43 +0000</pubDate>
    </item>
    <item>
      <title>317ac804-2fac-4a62-9113-fc3cb2318e04</title>
      <link>https://vulnerability.circl.lu/sighting/317ac804-2fac-4a62-9113-fc3cb2318e04/export</link>
      <description>{"uuid": "317ac804-2fac-4a62-9113-fc3cb2318e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://t.me/CyberDispatch/1288", "content": "A ShowDoc flaw (CVSS 9.4) is now under active exploitation.\n\nCVE-2025-0520 lets attackers upload web shells via unauthenticated file upload \u2192 full server control. First attacks seen via a U.S. honeypot; ~2,000 instances remain exposed, mostly in China.", "creation_timestamp": "2026-08-29T20:00:17.834379Z"}</description>
      <content:encoded>{"uuid": "317ac804-2fac-4a62-9113-fc3cb2318e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://t.me/CyberDispatch/1288", "content": "A ShowDoc flaw (CVSS 9.4) is now under active exploitation.\n\nCVE-2025-0520 lets attackers upload web shells via unauthenticated file upload \u2192 full server control. First attacks seen via a U.S. honeypot; ~2,000 instances remain exposed, mostly in China.", "creation_timestamp": "2026-08-29T20:00:17.834379Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/317ac804-2fac-4a62-9113-fc3cb2318e04/export</guid>
      <pubDate>Sat, 29 Aug 2026 20:00:17 +0000</pubDate>
    </item>
    <item>
      <title>be910a4f-9694-48a9-8169-588ad130e613</title>
      <link>https://vulnerability.circl.lu/sighting/be910a4f-9694-48a9-8169-588ad130e613/export</link>
      <description>{"uuid": "be910a4f-9694-48a9-8169-588ad130e613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mtk34d77ot2s", "content": "A critical vulnerability in ShowDoc, CVE-2025-0520, with a CVSS score of 9.4 is being actively exploited on unpatched servers, posing a significant risk\n\nRead more", "creation_timestamp": "2026-08-20T20:21:42.214098Z"}</description>
      <content:encoded>{"uuid": "be910a4f-9694-48a9-8169-588ad130e613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://bsky.app/profile/giuliosistilli.bsky.social/post/3mtk34d77ot2s", "content": "A critical vulnerability in ShowDoc, CVE-2025-0520, with a CVSS score of 9.4 is being actively exploited on unpatched servers, posing a significant risk\n\nRead more", "creation_timestamp": "2026-08-20T20:21:42.214098Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/be910a4f-9694-48a9-8169-588ad130e613/export</guid>
      <pubDate>Thu, 20 Aug 2026 20:21:42 +0000</pubDate>
    </item>
    <item>
      <title>b33fb52d-d7c4-4a3f-854a-18fb03fefc3b</title>
      <link>https://vulnerability.circl.lu/sighting/b33fb52d-d7c4-4a3f-854a-18fb03fefc3b/export</link>
      <description>{"uuid": "b33fb52d-d7c4-4a3f-854a-18fb03fefc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41921", "content": "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers\n\nA critical security vulnerability\u00a0impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the\u00a0wild.\nThe vulnerability in question\u00a0is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score of 9.4\u00a0out of\u00a010.0.\nIt relates to a case of unrestricted file upload that stems from improper validation of\nhttps://thehackernews.com/2026/04/showdoc-rce-flaw-cve-2025-0520-actively.html", "creation_timestamp": "2026-08-19T00:00:08.971550Z"}</description>
      <content:encoded>{"uuid": "b33fb52d-d7c4-4a3f-854a-18fb03fefc3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/VulnerabilityNews/41921", "content": "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers\n\nA critical security vulnerability\u00a0impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the\u00a0wild.\nThe vulnerability in question\u00a0is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score of 9.4\u00a0out of\u00a010.0.\nIt relates to a case of unrestricted file upload that stems from improper validation of\nhttps://thehackernews.com/2026/04/showdoc-rce-flaw-cve-2025-0520-actively.html", "creation_timestamp": "2026-08-19T00:00:08.971550Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b33fb52d-d7c4-4a3f-854a-18fb03fefc3b/export</guid>
      <pubDate>Wed, 19 Aug 2026 00:00:08 +0000</pubDate>
    </item>
    <item>
      <title>5f11e0d4-af39-48ca-a986-f4cae7a77261</title>
      <link>https://vulnerability.circl.lu/sighting/5f11e0d4-af39-48ca-a986-f4cae7a77261/export</link>
      <description>{"uuid": "5f11e0d4-af39-48ca-a986-f4cae7a77261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://t.me/VulnerabilityNews/41921", "content": "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers\n\nA critical security vulnerability\u00a0impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the\u00a0wild.\nThe vulnerability in question\u00a0is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score of 9.4\u00a0out of\u00a010.0.\nIt relates to a case of unrestricted file upload that stems from improper validation of\nhttps://thehackernews.com/2026/04/showdoc-rce-flaw-cve-2025-0520-actively.html", "creation_timestamp": "2026-08-18T19:00:04.905791Z"}</description>
      <content:encoded>{"uuid": "5f11e0d4-af39-48ca-a986-f4cae7a77261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "seen", "source": "https://t.me/VulnerabilityNews/41921", "content": "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers\n\nA critical security vulnerability\u00a0impacting ShowDoc, a document management and collaboration service popular in China, has come under active exploitation in the\u00a0wild.\nThe vulnerability in question\u00a0is CVE-2025-0520 (aka CNVD-2020-26585), which carries a CVSS score of 9.4\u00a0out of\u00a010.0.\nIt relates to a case of unrestricted file upload that stems from improper validation of\nhttps://thehackernews.com/2026/04/showdoc-rce-flaw-cve-2025-0520-actively.html", "creation_timestamp": "2026-08-18T19:00:04.905791Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5f11e0d4-af39-48ca-a986-f4cae7a77261/export</guid>
      <pubDate>Tue, 18 Aug 2026 19:00:04 +0000</pubDate>
    </item>
    <item>
      <title>7f707b4d-282f-40c7-a83a-9e9810501906</title>
      <link>https://vulnerability.circl.lu/sighting/7f707b4d-282f-40c7-a83a-9e9810501906/export</link>
      <description>{"uuid": "7f707b4d-282f-40c7-a83a-9e9810501906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-0520.yaml", "content": "", "creation_timestamp": "2026-08-17T06:00:09.729526Z"}</description>
      <content:encoded>{"uuid": "7f707b4d-282f-40c7-a83a-9e9810501906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-0520.yaml", "content": "", "creation_timestamp": "2026-08-17T06:00:09.729526Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7f707b4d-282f-40c7-a83a-9e9810501906/export</guid>
      <pubDate>Mon, 17 Aug 2026 06:00:09 +0000</pubDate>
    </item>
    <item>
      <title>fbfed21c-91a1-4803-9152-8011c8d93587</title>
      <link>https://vulnerability.circl.lu/sighting/fbfed21c-91a1-4803-9152-8011c8d93587/export</link>
      <description>{"uuid": "fbfed21c-91a1-4803-9152-8011c8d93587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20858", "content": "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers \u2013 thehackernews.com\n\nTue, 14 Apr 2026 13:50:00", "creation_timestamp": "2026-07-20T00:00:21.167209Z"}</description>
      <content:encoded>{"uuid": "fbfed21c-91a1-4803-9152-8011c8d93587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/MalaysiaHacktivistz/20858", "content": "ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers \u2013 thehackernews.com\n\nTue, 14 Apr 2026 13:50:00", "creation_timestamp": "2026-07-20T00:00:21.167209Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fbfed21c-91a1-4803-9152-8011c8d93587/export</guid>
      <pubDate>Mon, 20 Jul 2026 00:00:21 +0000</pubDate>
    </item>
    <item>
      <title>23ba9946-f7a2-45ed-8359-e8833ca18855</title>
      <link>https://vulnerability.circl.lu/sighting/23ba9946-f7a2-45ed-8359-e8833ca18855/export</link>
      <description>{"uuid": "23ba9946-f7a2-45ed-8359-e8833ca18855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/critical_bug/1727", "content": "\ud83d\udc36 hacker voice: WHO LET THE SHELLS OUT? \ud83d\udd34\n\n\ud83d\udd25 CVE-2025-0520: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 ShowDoc \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f\n\nCVSS: 9.4 Critical | \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\nShowDoc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u0444\u0430\u0439\u043b \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 web shell \u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 2.8.7.\n\n\ud83d\udea8 \u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n\u2014 \u043a\u0440\u0430\u0436\u0430 .env, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432\n\u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1. \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ShowDoc\n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 PHP web shell\n4. \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0435\u0441\u043b\u0438 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u043d\u0430\u0440\u0443\u0436\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435.\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su\n\n#ShowDoc #CVE #RCE #WebShell #CyberSecurity #Infosec #criticalbug", "creation_timestamp": "2026-07-20T00:00:07.548928Z"}</description>
      <content:encoded>{"uuid": "23ba9946-f7a2-45ed-8359-e8833ca18855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "exploited", "source": "https://t.me/critical_bug/1727", "content": "\ud83d\udc36 hacker voice: WHO LET THE SHELLS OUT? \ud83d\udd34\n\n\ud83d\udd25 CVE-2025-0520: \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE \u0432 ShowDoc \u0443\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f\n\nCVSS: 9.4 Critical | \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f\n\nShowDoc \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u0444\u0430\u0439\u043b \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f. \u0414\u0430\u043b\u044c\u0448\u0435 \u2014 web shell \u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 2.8.7.\n\n\ud83d\udea8 \u0427\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e?\n\u2014 \u0437\u0430\u0445\u0432\u0430\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\n\u2014 \u043a\u0440\u0430\u0436\u0430 .env, \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432\n\u2014 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432\n\n\ud83d\udee1 \u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c?\n1. \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ShowDoc\n2. \u0417\u0430\u043a\u0440\u044b\u0442\u044c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\n3. \u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 PHP web shell\n4. \u0421\u043c\u0435\u043d\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0435\u0441\u043b\u0438 \u0438\u043d\u0441\u0442\u0430\u043d\u0441 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0441\u043d\u0430\u0440\u0443\u0436\u0438\n\n\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u2014 \u0432 PDF \u043d\u0438\u0436\u0435.\n\n\ud83d\udc8e VIP-\u0432\u0435\u0440\u0441\u0438\u044f \u043a\u0430\u043d\u0430\u043b\u0430: https://vip.eh.su\n\n#ShowDoc #CVE #RCE #WebShell #CyberSecurity #Infosec #criticalbug", "creation_timestamp": "2026-07-20T00:00:07.548928Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/23ba9946-f7a2-45ed-8359-e8833ca18855/export</guid>
      <pubDate>Mon, 20 Jul 2026 00:00:07 +0000</pubDate>
    </item>
    <item>
      <title>2e0d828b-b7ef-4529-9e8f-947d15588ac5</title>
      <link>https://vulnerability.circl.lu/sighting/2e0d828b-b7ef-4529-9e8f-947d15588ac5/export</link>
      <description>{"uuid": "2e0d828b-b7ef-4529-9e8f-947d15588ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1728", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2025-0520 \u0432 PDF", "creation_timestamp": "2026-07-20T00:00:07.503002Z"}</description>
      <content:encoded>{"uuid": "2e0d828b-b7ef-4529-9e8f-947d15588ac5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0520", "type": "published-proof-of-concept", "source": "https://t.me/critical_bug/1728", "content": "\ud83d\udcc4 \u041f\u043e\u043b\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 CVE-2025-0520 \u0432 PDF", "creation_timestamp": "2026-07-20T00:00:07.503002Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2e0d828b-b7ef-4529-9e8f-947d15588ac5/export</guid>
      <pubDate>Mon, 20 Jul 2026 00:00:07 +0000</pubDate>
    </item>
  </channel>
</rss>
