<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 13 Aug 2026 07:33:44 +0000</lastBuildDate>
    <item>
      <title>863fc831-cb2a-4f91-a161-74cedb1d5a62</title>
      <link>https://vulnerability.circl.lu/sighting/863fc831-cb2a-4f91-a161-74cedb1d5a62/export</link>
      <description>{"uuid": "863fc831-cb2a-4f91-a161-74cedb1d5a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-08-05T00:00:57.516599Z"}</description>
      <content:encoded>{"uuid": "863fc831-cb2a-4f91-a161-74cedb1d5a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-08-05T00:00:57.516599Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/863fc831-cb2a-4f91-a161-74cedb1d5a62/export</guid>
      <pubDate>Wed, 05 Aug 2026 00:00:57 +0000</pubDate>
    </item>
    <item>
      <title>836b30ae-46ec-4ca8-a790-23f9aa5180e8</title>
      <link>https://vulnerability.circl.lu/sighting/836b30ae-46ec-4ca8-a790-23f9aa5180e8/export</link>
      <description>{"uuid": "836b30ae-46ec-4ca8-a790-23f9aa5180e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-08-04T03:00:05.426857Z"}</description>
      <content:encoded>{"uuid": "836b30ae-46ec-4ca8-a790-23f9aa5180e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-08-04T03:00:05.426857Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/836b30ae-46ec-4ca8-a790-23f9aa5180e8/export</guid>
      <pubDate>Tue, 04 Aug 2026 03:00:05 +0000</pubDate>
    </item>
    <item>
      <title>42da1e99-d564-4c0c-9c8b-d0ddcba3e3da</title>
      <link>https://vulnerability.circl.lu/sighting/42da1e99-d564-4c0c-9c8b-d0ddcba3e3da/export</link>
      <description>{"uuid": "42da1e99-d564-4c0c-9c8b-d0ddcba3e3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-07-30T00:03:05.129975Z"}</description>
      <content:encoded>{"uuid": "42da1e99-d564-4c0c-9c8b-d0ddcba3e3da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-07-30T00:03:05.129975Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/42da1e99-d564-4c0c-9c8b-d0ddcba3e3da/export</guid>
      <pubDate>Thu, 30 Jul 2026 00:03:05 +0000</pubDate>
    </item>
    <item>
      <title>6aafa103-9d16-4f8a-9b85-898f5cfdc08c</title>
      <link>https://vulnerability.circl.lu/sighting/6aafa103-9d16-4f8a-9b85-898f5cfdc08c/export</link>
      <description>{"uuid": "6aafa103-9d16-4f8a-9b85-898f5cfdc08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-07-29T12:03:19.387939Z"}</description>
      <content:encoded>{"uuid": "6aafa103-9d16-4f8a-9b85-898f5cfdc08c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "https://t.me/sysadm_in_up/1688", "content": "AndoryuBot \u2013 New Botnet Campaign Targets Ruckus Wireless Admin Remote Code Execution Vulnerability (CVE-2023-25717)\n\nhttps://www.fortinet.com/blog/threat-research/andoryubot-new-botnet-campaign-targets-ruckus-wireless-admin-remote-code-execution-vulnerability-cve-2023-25717", "creation_timestamp": "2026-07-29T12:03:19.387939Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6aafa103-9d16-4f8a-9b85-898f5cfdc08c/export</guid>
      <pubDate>Wed, 29 Jul 2026 12:03:19 +0000</pubDate>
    </item>
    <item>
      <title>95bebf4e-db9b-444f-ae81-4727229d679c</title>
      <link>https://vulnerability.circl.lu/sighting/95bebf4e-db9b-444f-ae81-4727229d679c/export</link>
      <description>{"uuid": "95bebf4e-db9b-444f-ae81-4727229d679c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97a1ede4-827c-45ea-81af-e18a23edc706", "content": "", "creation_timestamp": "2026-06-30T09:42:47.379991Z"}</description>
      <content:encoded>{"uuid": "95bebf4e-db9b-444f-ae81-4727229d679c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97a1ede4-827c-45ea-81af-e18a23edc706", "content": "", "creation_timestamp": "2026-06-30T09:42:47.379991Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/95bebf4e-db9b-444f-ae81-4727229d679c/export</guid>
      <pubDate>Tue, 30 Jun 2026 09:42:47 +0000</pubDate>
    </item>
    <item>
      <title>0ee270a7-1e06-4fa4-b438-e3904078ba2a</title>
      <link>https://vulnerability.circl.lu/sighting/0ee270a7-1e06-4fa4-b438-e3904078ba2a/export</link>
      <description>{"uuid": "0ee270a7-1e06-4fa4-b438-e3904078ba2a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8240934f-cdb1-43f6-a6ac-2c4d8728f0d4", "content": "", "creation_timestamp": "2026-06-23T14:05:40.648658Z"}</description>
      <content:encoded>{"uuid": "0ee270a7-1e06-4fa4-b438-e3904078ba2a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8240934f-cdb1-43f6-a6ac-2c4d8728f0d4", "content": "", "creation_timestamp": "2026-06-23T14:05:40.648658Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0ee270a7-1e06-4fa4-b438-e3904078ba2a/export</guid>
      <pubDate>Tue, 23 Jun 2026 14:05:40 +0000</pubDate>
    </item>
    <item>
      <title>8b1a4029-f780-47bd-8aeb-14b0522b12e5</title>
      <link>https://vulnerability.circl.lu/sighting/8b1a4029-f780-47bd-8aeb-14b0522b12e5/export</link>
      <description>{"uuid": "8b1a4029-f780-47bd-8aeb-14b0522b12e5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2cf15d3-6470-4140-84d3-53fb5035e010", "content": "", "creation_timestamp": "2026-06-19T12:46:55.082598Z"}</description>
      <content:encoded>{"uuid": "8b1a4029-f780-47bd-8aeb-14b0522b12e5", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2cf15d3-6470-4140-84d3-53fb5035e010", "content": "", "creation_timestamp": "2026-06-19T12:46:55.082598Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8b1a4029-f780-47bd-8aeb-14b0522b12e5/export</guid>
      <pubDate>Fri, 19 Jun 2026 12:46:55 +0000</pubDate>
    </item>
    <item>
      <title>94b4123d-3913-4f58-87c9-bbc7c2cf25b5</title>
      <link>https://vulnerability.circl.lu/sighting/94b4123d-3913-4f58-87c9-bbc7c2cf25b5/export</link>
      <description>{"uuid": "94b4123d-3913-4f58-87c9-bbc7c2cf25b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6af0b57b-a0d7-4c26-b727-ba346fff2936", "content": "", "creation_timestamp": "2026-02-02T12:26:59.039469Z"}</description>
      <content:encoded>{"uuid": "94b4123d-3913-4f58-87c9-bbc7c2cf25b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2023-25717", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6af0b57b-a0d7-4c26-b727-ba346fff2936", "content": "", "creation_timestamp": "2026-02-02T12:26:59.039469Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/94b4123d-3913-4f58-87c9-bbc7c2cf25b5/export</guid>
      <pubDate>Mon, 02 Feb 2026 12:26:59 +0000</pubDate>
    </item>
    <item>
      <title>2f66b3fd-faee-4ca6-948e-b4a5ffb0defa</title>
      <link>https://vulnerability.circl.lu/sighting/2f66b3fd-faee-4ca6-948e-b4a5ffb0defa/export</link>
      <description>{"uuid": "2f66b3fd-faee-4ca6-948e-b4a5ffb0defa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:58.000000Z"}</description>
      <content:encoded>{"uuid": "2f66b3fd-faee-4ca6-948e-b4a5ffb0defa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25717", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:58.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2f66b3fd-faee-4ca6-948e-b4a5ffb0defa/export</guid>
      <pubDate>Sun, 31 Aug 2025 03:12:58 +0000</pubDate>
    </item>
    <item>
      <title>35620325-94d2-41eb-a851-21727329d03b</title>
      <link>https://vulnerability.circl.lu/sighting/35620325-94d2-41eb-a851-21727329d03b/export</link>
      <description>{"uuid": "35620325-94d2-41eb-a851-21727329d03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25719\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers' installations).\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T21:07:15.640Z\n\ud83d\udd17 References:\n1. https://www.connectwise.com\n2. https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/\n3. https://www.huntress.com/blog/clearing-the-air-overblown-claims-of-vulnerabilities-exploits-severity\n4. https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures\n5. https://m.youtube.com/watch?v=fbNVUgmstSc&amp;amp;pp=0gcJCf0Ao7VqN5tD", "creation_timestamp": "2025-06-18T21:40:39.000000Z"}</description>
      <content:encoded>{"uuid": "35620325-94d2-41eb-a851-21727329d03b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-25719", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-25719\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ConnectWise Control before 22.9.10032 (formerly known as ScreenConnect) fails to validate user-supplied parameters such as the Bin/ConnectWiseControl.Client.exe h parameter. This results in reflected data and injection of malicious code into a downloaded executable. The executable can be used to execute malicious queries or as a denial-of-service vector. NOTE: this CVE Record is only about the parameters, such as the h parameter (this CVE Record is not about the separate issue of signed executable files that are supposed to have unique configurations across customers' installations).\n\ud83d\udccf Published: 2023-02-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-18T21:07:15.640Z\n\ud83d\udd17 References:\n1. https://www.connectwise.com\n2. https://cybir.com/2022/cve/hijacking-connectwise-control-and-ddos/\n3. https://www.huntress.com/blog/clearing-the-air-overblown-claims-of-vulnerabilities-exploits-severity\n4. https://www.connectwise.com/blog/cybersecurity/the-importance-of-responsible-security-disclosures\n5. https://m.youtube.com/watch?v=fbNVUgmstSc&amp;amp;pp=0gcJCf0Ao7VqN5tD", "creation_timestamp": "2025-06-18T21:40:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35620325-94d2-41eb-a851-21727329d03b/export</guid>
      <pubDate>Wed, 18 Jun 2025 21:40:39 +0000</pubDate>
    </item>
  </channel>
</rss>
