https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 10:42:28 +0000 https://vulnerability.circl.lu/sighting/52c7f24e-c15d-44ab-97ef-040eb51c9f48/export {"uuid": "52c7f24e-c15d-44ab-97ef-040eb51c9f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:07.939206Z"} {"uuid": "52c7f24e-c15d-44ab-97ef-040eb51c9f48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-13)", "content": "", "creation_timestamp": "2026-09-14T10:00:07.939206Z"} https://vulnerability.circl.lu/sighting/52c7f24e-c15d-44ab-97ef-040eb51c9f48/export Mon, 14 Sep 2026 10:00:07 +0000 https://vulnerability.circl.lu/sighting/01cfec88-55e2-4f45-b207-5041c80bee18/export {"uuid": "01cfec88-55e2-4f45-b207-5041c80bee18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6934", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/14", "content": "https://github.com/MejbanKadir/CVE-2025-6934-PoC\n\nCVE-2025-6934 Exploit Tool\n#github #exploit", "creation_timestamp": "2026-09-14T00:00:10.481604Z"} {"uuid": "01cfec88-55e2-4f45-b207-5041c80bee18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6934", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/14", "content": "https://github.com/MejbanKadir/CVE-2025-6934-PoC\n\nCVE-2025-6934 Exploit Tool\n#github #exploit", "creation_timestamp": "2026-09-14T00:00:10.481604Z"} https://vulnerability.circl.lu/sighting/01cfec88-55e2-4f45-b207-5041c80bee18/export Mon, 14 Sep 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/8d9b6bf2-1ff4-4312-aa78-e500bc797a8a/export {"uuid": "8d9b6bf2-1ff4-4312-aa78-e500bc797a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6934", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/14", "content": "https://github.com/MejbanKadir/CVE-2025-6934-PoC\n\nCVE-2025-6934 Exploit Tool\n#github #exploit", "creation_timestamp": "2026-09-13T20:00:04.475166Z"} {"uuid": "8d9b6bf2-1ff4-4312-aa78-e500bc797a8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6934", "type": "published-proof-of-concept", "source": "https://t.me/CYPERMRED/14", "content": "https://github.com/MejbanKadir/CVE-2025-6934-PoC\n\nCVE-2025-6934 Exploit Tool\n#github #exploit", "creation_timestamp": "2026-09-13T20:00:04.475166Z"} https://vulnerability.circl.lu/sighting/8d9b6bf2-1ff4-4312-aa78-e500bc797a8a/export Sun, 13 Sep 2026 20:00:04 +0000 https://vulnerability.circl.lu/sighting/7ca5e1d4-709d-4b6e-b55d-5e4dfaa99efc/export {"uuid": "7ca5e1d4-709d-4b6e-b55d-5e4dfaa99efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:11.407899Z"} {"uuid": "7ca5e1d4-709d-4b6e-b55d-5e4dfaa99efc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:11.407899Z"} https://vulnerability.circl.lu/sighting/7ca5e1d4-709d-4b6e-b55d-5e4dfaa99efc/export Thu, 10 Sep 2026 10:00:11 +0000 https://vulnerability.circl.lu/sighting/d4bd175d-371b-4035-9531-438424479369/export {"uuid": "d4bd175d-371b-4035-9531-438424479369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:07.871860Z"} {"uuid": "d4bd175d-371b-4035-9531-438424479369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:07.871860Z"} https://vulnerability.circl.lu/sighting/d4bd175d-371b-4035-9531-438424479369/export Wed, 09 Sep 2026 10:00:07 +0000 https://vulnerability.circl.lu/sighting/51275cbf-0899-4ff1-826d-d709dd0fc135/export {"uuid": "51275cbf-0899-4ff1-826d-d709dd0fc135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:00:06.710922Z"} {"uuid": "51275cbf-0899-4ff1-826d-d709dd0fc135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69200", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:00:06.710922Z"} https://vulnerability.circl.lu/sighting/51275cbf-0899-4ff1-826d-d709dd0fc135/export Tue, 08 Sep 2026 10:00:06 +0000 https://vulnerability.circl.lu/sighting/d6c6bae2-b328-4147-b239-96511e7c5ca0/export {"uuid": "d6c6bae2-b328-4147-b239-96511e7c5ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.rb", "content": "{\"aliases\": [], \"arch\": \"python, cmd, x64\", \"author\": [\"Gabriel Gomes\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Server-Side Template Injection (SSTI) vulnerability\\n in Tactical RMM versions prior to 1.4.0 (CVE-2025-69516).\\n\\n The reporting template preview endpoint passes user-controlled Jinja2 template\\n content to Environment.from_string() without sandboxing, allowing arbitrary\\n Python code execution on the server.\\n\\n Valid credentials are required. The module authenticates to obtain a Knox API\\n token, then delivers a Jinja2 SSTI payload through the template preview\\n functionality to achieve OS command execution.\\n\\n The vulnerability was silently patched in version 1.4.0 by switching from\\n jinja2.Environment to jinja2.sandbox.SandboxedEnvironment.\", \"disclosure_date\": \"2026-01-29\", \"fullname\": \"exploit/linux/http/tacticalrmm_ssti_rce_cve_2025_69516\", \"is_install_path\": true, \"mod_time\": \"2026-03-05 14:01:12 +0000\", \"name\": \"Tactical RMM Jinja2 SSTI Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.rb\", \"platform\": \"Linux,Python,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/tacticalrmm_ssti_rce_cve_2025_69516\", \"references\": [\"CVE-2025-69516\", \"URL-https://github.com/amidaware/tacticalrmm\", \"URL-https://github.com/NtGabrielGomes/CVE-2025-69516\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Python\", \"Unix/Linux Command\", \"Linux x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.711865Z"} {"uuid": "d6c6bae2-b328-4147-b239-96511e7c5ca0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69516", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.rb", "content": "{\"aliases\": [], \"arch\": \"python, cmd, x64\", \"author\": [\"Gabriel Gomes\", \"Valentin Lobstein \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Server-Side Template Injection (SSTI) vulnerability\\n in Tactical RMM versions prior to 1.4.0 (CVE-2025-69516).\\n\\n The reporting template preview endpoint passes user-controlled Jinja2 template\\n content to Environment.from_string() without sandboxing, allowing arbitrary\\n Python code execution on the server.\\n\\n Valid credentials are required. The module authenticates to obtain a Knox API\\n token, then delivers a Jinja2 SSTI payload through the template preview\\n functionality to achieve OS command execution.\\n\\n The vulnerability was silently patched in version 1.4.0 by switching from\\n jinja2.Environment to jinja2.sandbox.SandboxedEnvironment.\", \"disclosure_date\": \"2026-01-29\", \"fullname\": \"exploit/linux/http/tacticalrmm_ssti_rce_cve_2025_69516\", \"is_install_path\": true, \"mod_time\": \"2026-03-05 14:01:12 +0000\", \"name\": \"Tactical RMM Jinja2 SSTI Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/tacticalrmm_ssti_rce_cve_2025_69516.rb\", \"platform\": \"Linux,Python,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/tacticalrmm_ssti_rce_cve_2025_69516\", \"references\": [\"CVE-2025-69516\", \"URL-https://github.com/amidaware/tacticalrmm\", \"URL-https://github.com/NtGabrielGomes/CVE-2025-69516\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Python\", \"Unix/Linux Command\", \"Linux x64\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:57.711865Z"} https://vulnerability.circl.lu/sighting/d6c6bae2-b328-4147-b239-96511e7c5ca0/export Tue, 08 Sep 2026 06:48:57 +0000 https://vulnerability.circl.lu/sighting/228b3db4-97b3-4e14-a8ca-b2ccdb210357/export {"uuid": "228b3db4-97b3-4e14-a8ca-b2ccdb210357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69720", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:51.682557Z"} {"uuid": "228b3db4-97b3-4e14-a8ca-b2ccdb210357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69720", "type": "published-proof-of-concept", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-08T00:00:51.682557Z"} https://vulnerability.circl.lu/sighting/228b3db4-97b3-4e14-a8ca-b2ccdb210357/export Tue, 08 Sep 2026 00:00:51 +0000 https://vulnerability.circl.lu/sighting/ecb8afba-4af3-41da-86b9-4aed686e5d52/export {"uuid": "ecb8afba-4af3-41da-86b9-4aed686e5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69720", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.201891Z"} {"uuid": "ecb8afba-4af3-41da-86b9-4aed686e5d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69720", "type": "seen", "source": "Telegram/hZmD1B52vHq6fSvKEDWDKrOWX_CbgCpeltfI-CsbFj8gh80", "content": "", "creation_timestamp": "2026-09-07T08:00:05.201891Z"} https://vulnerability.circl.lu/sighting/ecb8afba-4af3-41da-86b9-4aed686e5d52/export Mon, 07 Sep 2026 08:00:05 +0000 https://vulnerability.circl.lu/sighting/d67ef2ad-4aba-4f96-91c5-435949b56bd0/export {"uuid": "d67ef2ad-4aba-4f96-91c5-435949b56bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69212", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/14835", "content": "CVE-2025-69212-for-myself \u2013 kitploit.com\n\nSat, 22 Aug 2026 17:08:12", "creation_timestamp": "2026-09-05T01:00:21.533961Z"} {"uuid": "d67ef2ad-4aba-4f96-91c5-435949b56bd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-69212", "type": "published-proof-of-concept", "source": "https://t.me/MalaysiaHacktivistz/14835", "content": "CVE-2025-69212-for-myself \u2013 kitploit.com\n\nSat, 22 Aug 2026 17:08:12", "creation_timestamp": "2026-09-05T01:00:21.533961Z"} https://vulnerability.circl.lu/sighting/d67ef2ad-4aba-4f96-91c5-435949b56bd0/export Sat, 05 Sep 2026 01:00:21 +0000