https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 11:34:05 +0000 https://vulnerability.circl.lu/sighting/9768feb3-4ff1-45a4-ba71-9de34b1c9ba4/export {"uuid": "9768feb3-4ff1-45a4-ba71-9de34b1c9ba4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2636", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f2bc947d-8fb2-4ddc-9288-0036759254ab", "content": "", "creation_timestamp": "2026-09-12T11:00:29.849151Z"} {"uuid": "9768feb3-4ff1-45a4-ba71-9de34b1c9ba4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2636", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f2bc947d-8fb2-4ddc-9288-0036759254ab", "content": "", "creation_timestamp": "2026-09-12T11:00:29.849151Z"} https://vulnerability.circl.lu/sighting/9768feb3-4ff1-45a4-ba71-9de34b1c9ba4/export Sat, 12 Sep 2026 11:00:29 +0000 https://vulnerability.circl.lu/sighting/9839323f-33cf-4674-8aab-667f2ae5069f/export {"uuid": "9839323f-33cf-4674-8aab-667f2ae5069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26382", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2859", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e iSTAR Configuration Utility \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e iSTAR Configuration Utility \u043e\u0442 Sensormatic Electronics, \u0433\u0434\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14502 \u0438 CVE-2025-26382, \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c 24 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-21 13:13 | Author: Vulner Queen\n\n#istar #configuration #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-po-istar-configuration-utility-ugrozhaet-sistemam-fizicheskoy-bezopasnosti_16496", "creation_timestamp": "2026-09-10T00:00:46.497305Z"} {"uuid": "9839323f-33cf-4674-8aab-667f2ae5069f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26382", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2859", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e iSTAR Configuration Utility \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e iSTAR Configuration Utility \u043e\u0442 Sensormatic Electronics, \u0433\u0434\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14502 \u0438 CVE-2025-26382, \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c 24 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-21 13:13 | Author: Vulner Queen\n\n#istar #configuration #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-po-istar-configuration-utility-ugrozhaet-sistemam-fizicheskoy-bezopasnosti_16496", "creation_timestamp": "2026-09-10T00:00:46.497305Z"} https://vulnerability.circl.lu/sighting/9839323f-33cf-4674-8aab-667f2ae5069f/export Thu, 10 Sep 2026 00:00:46 +0000 https://vulnerability.circl.lu/sighting/cb08affa-adb5-4b9b-8db2-a6ae4a9a1207/export {"uuid": "cb08affa-adb5-4b9b-8db2-a6ae4a9a1207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26382", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2859", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e iSTAR Configuration Utility \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e iSTAR Configuration Utility \u043e\u0442 Sensormatic Electronics, \u0433\u0434\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14502 \u0438 CVE-2025-26382, \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c 24 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-21 13:13 | Author: Vulner Queen\n\n#istar #configuration #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-po-istar-configuration-utility-ugrozhaet-sistemam-fizicheskoy-bezopasnosti_16496", "creation_timestamp": "2026-09-09T05:00:08.954420Z"} {"uuid": "cb08affa-adb5-4b9b-8db2-a6ae4a9a1207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26382", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2859", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e iSTAR Configuration Utility \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\u2014\n\nSummary:\n\u0412 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\u0445 \u0437\u0430\u0449\u0438\u0442\u044b \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u0420\u0435\u0447\u044c \u0438\u0434\u0435\u0442 \u043e iSTAR Configuration Utility \u043e\u0442 Sensormatic Electronics, \u0433\u0434\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u0441\u0442\u0435\u043a\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b BDU:2025-14502 \u0438 CVE-2025-26382, \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c 24 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-21 13:13 | Author: Vulner Queen\n\n#istar #configuration #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-po-istar-configuration-utility-ugrozhaet-sistemam-fizicheskoy-bezopasnosti_16496", "creation_timestamp": "2026-09-09T05:00:08.954420Z"} https://vulnerability.circl.lu/sighting/cb08affa-adb5-4b9b-8db2-a6ae4a9a1207/export Wed, 09 Sep 2026 05:00:08 +0000 https://vulnerability.circl.lu/sighting/aec09103-d7d7-4013-ac32-4686679e31c1/export {"uuid": "aec09103-d7d7-4013-ac32-4686679e31c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2611", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution (RCE) vulnerability\\n in ICTBroadcast. The vulnerability exists in the way session cookies are handled\\n and processed, allowing an attacker to inject arbitrary system commands.\", \"disclosure_date\": \"2025-03-19\", \"fullname\": \"exploit/linux/http/ictbroadcast_unauth_cookie\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"ICTBroadcast Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ictbroadcast_unauth_cookie\", \"references\": [\"URL-https://www.ictbroadcast.com/\", \"CVE-2025-2611\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.529661Z"} {"uuid": "aec09103-d7d7-4013-ac32-4686679e31c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2611", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated remote code execution (RCE) vulnerability\\n in ICTBroadcast. The vulnerability exists in the way session cookies are handled\\n and processed, allowing an attacker to inject arbitrary system commands.\", \"disclosure_date\": \"2025-03-19\", \"fullname\": \"exploit/linux/http/ictbroadcast_unauth_cookie\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"ICTBroadcast Unauthenticated Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/ictbroadcast_unauth_cookie.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/ictbroadcast_unauth_cookie\", \"references\": [\"URL-https://www.ictbroadcast.com/\", \"CVE-2025-2611\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:38.529661Z"} https://vulnerability.circl.lu/sighting/aec09103-d7d7-4013-ac32-4686679e31c1/export Tue, 08 Sep 2026 06:48:38 +0000 https://vulnerability.circl.lu/sighting/9e7eb19d-4230-4418-bfc7-89457b31cb3b/export {"uuid": "9e7eb19d-4230-4418-bfc7-89457b31cb3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26794", "type": "published-proof-of-concept", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "content": "", "creation_timestamp": "2026-09-07T01:00:25.615657Z"} {"uuid": "9e7eb19d-4230-4418-bfc7-89457b31cb3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26794", "type": "published-proof-of-concept", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "content": "", "creation_timestamp": "2026-09-07T01:00:25.615657Z"} https://vulnerability.circl.lu/sighting/9e7eb19d-4230-4418-bfc7-89457b31cb3b/export Mon, 07 Sep 2026 01:00:25 +0000 https://vulnerability.circl.lu/sighting/2a4d01d2-912c-45c8-a452-f35285707f2e/export {"uuid": "2a4d01d2-912c-45c8-a452-f35285707f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26794", "type": "seen", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "content": "", "creation_timestamp": "2026-09-06T08:00:05.228817Z"} {"uuid": "2a4d01d2-912c-45c8-a452-f35285707f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26794", "type": "seen", "source": "Telegram/szyQ0EKV_UVNdmkffaO0C1PUabx9T7Nbdd_Nvq3q85HonyM", "content": "", "creation_timestamp": "2026-09-06T08:00:05.228817Z"} https://vulnerability.circl.lu/sighting/2a4d01d2-912c-45c8-a452-f35285707f2e/export Sun, 06 Sep 2026 08:00:05 +0000 https://vulnerability.circl.lu/sighting/8c42e211-b845-4c34-916a-e69af8fbef0a/export {"uuid": "8c42e211-b845-4c34-916a-e69af8fbef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165847", "content": "Behind CVE-2025\u201326206: What I Found, How I Found It, and Why It Matters.\nhttps://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:58.649688Z"} {"uuid": "8c42e211-b845-4c34-916a-e69af8fbef0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165847", "content": "Behind CVE-2025\u201326206: What I Found, How I Found It, and Why It Matters.\nhttps://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:58.649688Z"} https://vulnerability.circl.lu/sighting/8c42e211-b845-4c34-916a-e69af8fbef0a/export Fri, 04 Sep 2026 00:00:58 +0000 https://vulnerability.circl.lu/sighting/7e8728b8-b23a-45d5-958d-d2ccf1a1c4ef/export {"uuid": "7e8728b8-b23a-45d5-958d-d2ccf1a1c4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165849", "content": "At 16, I discovered CVE-2025\u201326206, a critical Cross-Site Request Forgery (CSRF) vulnerability that let attackers escalate privileges in\u2026Continue reading on Medium \u00bb (https://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:58.608449Z"} {"uuid": "7e8728b8-b23a-45d5-958d-d2ccf1a1c4ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165849", "content": "At 16, I discovered CVE-2025\u201326206, a critical Cross-Site Request Forgery (CSRF) vulnerability that let attackers escalate privileges in\u2026Continue reading on Medium \u00bb (https://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:58.608449Z"} https://vulnerability.circl.lu/sighting/7e8728b8-b23a-45d5-958d-d2ccf1a1c4ef/export Fri, 04 Sep 2026 00:00:58 +0000 https://vulnerability.circl.lu/sighting/d87e262c-6f66-481e-9821-1f0ba3e005f3/export {"uuid": "d87e262c-6f66-481e-9821-1f0ba3e005f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165847", "content": "Behind CVE-2025\u201326206: What I Found, How I Found It, and Why It Matters.\nhttps://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T07:00:04.259980Z"} {"uuid": "d87e262c-6f66-481e-9821-1f0ba3e005f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165847", "content": "Behind CVE-2025\u201326206: What I Found, How I Found It, and Why It Matters.\nhttps://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T07:00:04.259980Z"} https://vulnerability.circl.lu/sighting/d87e262c-6f66-481e-9821-1f0ba3e005f3/export Thu, 03 Sep 2026 07:00:04 +0000 https://vulnerability.circl.lu/sighting/349ad2d9-8bd0-4b2e-bf68-c9faaa330ca0/export {"uuid": "349ad2d9-8bd0-4b2e-bf68-c9faaa330ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165849", "content": "At 16, I discovered CVE-2025\u201326206, a critical Cross-Site Request Forgery (CSRF) vulnerability that let attackers escalate privileges in\u2026Continue reading on Medium \u00bb (https://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T07:00:04.202504Z"} {"uuid": "349ad2d9-8bd0-4b2e-bf68-c9faaa330ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-26206", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/165849", "content": "At 16, I discovered CVE-2025\u201326206, a critical Cross-Site Request Forgery (CSRF) vulnerability that let attackers escalate privileges in\u2026Continue reading on Medium \u00bb (https://medium.com/@xibhi/behind-cve-2025-26206-what-i-found-how-i-found-it-and-why-it-matters-dc37cd05e784?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T07:00:04.202504Z"} https://vulnerability.circl.lu/sighting/349ad2d9-8bd0-4b2e-bf68-c9faaa330ca0/export Thu, 03 Sep 2026 07:00:04 +0000