https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 18 Jul 2026 11:13:16 +0000 https://vulnerability.circl.lu/sighting/85263180-4909-4244-be86-e8bfe4dbc3cd/export {"uuid": "85263180-4909-4244-be86-e8bfe4dbc3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/167", "content": "https://github.com/ShielderSec/poc/tree/main/CVE-2023-33466", "creation_timestamp": "2026-07-18T01:00:14.424601Z"} {"uuid": "85263180-4909-4244-be86-e8bfe4dbc3cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/167", "content": "https://github.com/ShielderSec/poc/tree/main/CVE-2023-33466", "creation_timestamp": "2026-07-18T01:00:14.424601Z"} https://vulnerability.circl.lu/sighting/85263180-4909-4244-be86-e8bfe4dbc3cd/export Sat, 18 Jul 2026 01:00:14 +0000 https://vulnerability.circl.lu/sighting/b063c95c-2a06-4cf2-b137-918210d1ed48/export {"uuid": "b063c95c-2a06-4cf2-b137-918210d1ed48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "seen", "source": "https://t.me/cyberwarehouse/167", "content": "https://github.com/ShielderSec/poc/tree/main/CVE-2023-33466", "creation_timestamp": "2026-07-17T12:00:09.527717Z"} {"uuid": "b063c95c-2a06-4cf2-b137-918210d1ed48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "seen", "source": "https://t.me/cyberwarehouse/167", "content": "https://github.com/ShielderSec/poc/tree/main/CVE-2023-33466", "creation_timestamp": "2026-07-17T12:00:09.527717Z"} https://vulnerability.circl.lu/sighting/b063c95c-2a06-4cf2-b137-918210d1ed48/export Fri, 17 Jul 2026 12:00:09 +0000 https://vulnerability.circl.lu/sighting/8a974d30-0e6d-42cf-b040-101b32962ef5/export {"uuid": "8a974d30-0e6d-42cf-b040-101b32962ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpz5ozzmpd2v", "content": "\ud83d\udccc CVE-2023-33466 - Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deplo... https://www.cyberhub.blog/cves/CVE-2023-33466", "creation_timestamp": "2026-07-06T22:37:07.266278Z"} {"uuid": "8a974d30-0e6d-42cf-b040-101b32962ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpz5ozzmpd2v", "content": "\ud83d\udccc CVE-2023-33466 - Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deplo... https://www.cyberhub.blog/cves/CVE-2023-33466", "creation_timestamp": "2026-07-06T22:37:07.266278Z"} https://vulnerability.circl.lu/sighting/8a974d30-0e6d-42cf-b040-101b32962ef5/export Mon, 06 Jul 2026 22:37:07 +0000 https://vulnerability.circl.lu/sighting/28b68790-fe16-46e5-940a-b36f71642521/export {"uuid": "28b68790-fe16-46e5-940a-b36f71642521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33461", "type": "seen", "source": "https://t.me/arpsyndicate/2939", "content": "#ExploitObserverAlert\n\nCVE-2023-33461\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2023-33461. iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.\n\nFIRST-EPSS: 0.000440000\nNVD-IS: 3.6\nNVD-ES: 1.8", "creation_timestamp": "2024-01-19T16:35:26.000000Z"} {"uuid": "28b68790-fe16-46e5-940a-b36f71642521", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33461", "type": "seen", "source": "https://t.me/arpsyndicate/2939", "content": "#ExploitObserverAlert\n\nCVE-2023-33461\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2023-33461. iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return.\n\nFIRST-EPSS: 0.000440000\nNVD-IS: 3.6\nNVD-ES: 1.8", "creation_timestamp": "2024-01-19T16:35:26.000000Z"} https://vulnerability.circl.lu/sighting/28b68790-fe16-46e5-940a-b36f71642521/export Fri, 19 Jan 2024 16:35:26 +0000 https://vulnerability.circl.lu/sighting/4d14f9f5-ae46-41af-9d7a-92bd74e7b82f/export {"uuid": "4d14f9f5-ae46-41af-9d7a-92bd74e7b82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "seen", "source": "https://t.me/arpsyndicate/876", "content": "#ExploitObserverAlert\n\nCVE-2023-33466\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2023-33466. Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).\n\nFIRST-EPSS: 0.001290000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-02T01:49:47.000000Z"} {"uuid": "4d14f9f5-ae46-41af-9d7a-92bd74e7b82f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "seen", "source": "https://t.me/arpsyndicate/876", "content": "#ExploitObserverAlert\n\nCVE-2023-33466\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2023-33466. Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).\n\nFIRST-EPSS: 0.001290000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-02T01:49:47.000000Z"} https://vulnerability.circl.lu/sighting/4d14f9f5-ae46-41af-9d7a-92bd74e7b82f/export Sat, 02 Dec 2023 01:49:47 +0000 https://vulnerability.circl.lu/sighting/ba7c015d-47ab-4771-aeee-bd5816929377/export {"uuid": "ba7c015d-47ab-4771-aeee-bd5816929377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "published-proof-of-concept", "source": "https://t.me/cKure/12040", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2023-33466 - Exploiting Healthcare Servers with Polyglot Files.\n\nhttps://www.shielder.com/blog/2023/10/cve-2023-33466-exploiting-healthcare-servers-with-polyglot-files/", "creation_timestamp": "2023-11-29T22:26:03.000000Z"} {"uuid": "ba7c015d-47ab-4771-aeee-bd5816929377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "published-proof-of-concept", "source": "https://t.me/cKure/12040", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2023-33466 - Exploiting Healthcare Servers with Polyglot Files.\n\nhttps://www.shielder.com/blog/2023/10/cve-2023-33466-exploiting-healthcare-servers-with-polyglot-files/", "creation_timestamp": "2023-11-29T22:26:03.000000Z"} https://vulnerability.circl.lu/sighting/ba7c015d-47ab-4771-aeee-bd5816929377/export Wed, 29 Nov 2023 22:26:03 +0000 https://vulnerability.circl.lu/sighting/41cb041b-3cec-4d02-9265-d516252bd005/export {"uuid": "41cb041b-3cec-4d02-9265-d516252bd005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/381", "content": "Top Security News for 25/10/2023\n\nCVE-2023-33466 - Exploiting Healthcare Servers with Polyglot Files\nhttps://www.reddit.com/r/netsec/comments/17f9yci/cve202333466_exploiting_healthcare_servers_with/ \n\n[Crypto] Why authenticated encryption and MAC is so important\nhttps://www.reddit.com/r/netsec/comments/17fg28x/crypto_why_authenticated_encryption_and_mac_is_so/ \n\nEx-NSA Employee Pleads Guilty to Leaking Classified Data to Russia\nhttps://thehackernews.com/2023/10/ex-nsa-employee-pleads-guilty-to.html \n\nAI vs. human deceit: Unravelling the new age of phishing tactics\nhttps://securityintelligence.com/posts/ai-vs-human-deceit-unravelling-new-age-phishing-tactics/ \n\nISC StormCast for Wednesday, October 25th, 2023\nhttps://isc.sans.edu/podcastdetail/8716 \n\nMake API Management Less Scary for Your Organization\nhttps://thehackernews.com/2023/10/make-api-management-less-scary-for-your.html \n\nTwo new things to worry about: how long it takes to read the fine print, and bed bug disinformation.\nhttps://thecyberwire.com/podcasts/daily-podcast/1933/notes \n\nGoogle Chrome wants to hide your IP address\nhttps://www.malwarebytes.com/blog/news/2023/10/google-wants-to-introduce-ip-protection-feature-for-chrome \n\nAmazon adds passkeys so you can sign in without a pesky password\nhttps://malware.news/t/amazon-adds-passkeys-so-you-can-sign-in-without-a-pesky-password/74898#post_1 \n\nNow Android and Windows devices aren't safe from Flipper Zero either\nhttps://malware.news/t/now-android-and-windows-devices-arent-safe-from-flipper-zero-either/74897#post_1 \n\n \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-10-25T07:00:06.000000Z"} {"uuid": "41cb041b-3cec-4d02-9265-d516252bd005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33466", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/381", "content": "Top Security News for 25/10/2023\n\nCVE-2023-33466 - Exploiting Healthcare Servers with Polyglot Files\nhttps://www.reddit.com/r/netsec/comments/17f9yci/cve202333466_exploiting_healthcare_servers_with/ \n\n[Crypto] Why authenticated encryption and MAC is so important\nhttps://www.reddit.com/r/netsec/comments/17fg28x/crypto_why_authenticated_encryption_and_mac_is_so/ \n\nEx-NSA Employee Pleads Guilty to Leaking Classified Data to Russia\nhttps://thehackernews.com/2023/10/ex-nsa-employee-pleads-guilty-to.html \n\nAI vs. human deceit: Unravelling the new age of phishing tactics\nhttps://securityintelligence.com/posts/ai-vs-human-deceit-unravelling-new-age-phishing-tactics/ \n\nISC StormCast for Wednesday, October 25th, 2023\nhttps://isc.sans.edu/podcastdetail/8716 \n\nMake API Management Less Scary for Your Organization\nhttps://thehackernews.com/2023/10/make-api-management-less-scary-for-your.html \n\nTwo new things to worry about: how long it takes to read the fine print, and bed bug disinformation.\nhttps://thecyberwire.com/podcasts/daily-podcast/1933/notes \n\nGoogle Chrome wants to hide your IP address\nhttps://www.malwarebytes.com/blog/news/2023/10/google-wants-to-introduce-ip-protection-feature-for-chrome \n\nAmazon adds passkeys so you can sign in without a pesky password\nhttps://malware.news/t/amazon-adds-passkeys-so-you-can-sign-in-without-a-pesky-password/74898#post_1 \n\nNow Android and Windows devices aren't safe from Flipper Zero either\nhttps://malware.news/t/now-android-and-windows-devices-arent-safe-from-flipper-zero-either/74897#post_1 \n\n \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-10-25T07:00:06.000000Z"} https://vulnerability.circl.lu/sighting/41cb041b-3cec-4d02-9265-d516252bd005/export Wed, 25 Oct 2023 07:00:06 +0000 https://vulnerability.circl.lu/sighting/de451139-d4c8-4f6f-a357-e7ab0c21b669/export {"uuid": "de451139-d4c8-4f6f-a357-e7ab0c21b669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33468", "type": "seen", "source": "https://t.me/cibsecurity/68142", "content": "\u203c CVE-2023-33468 \u203c\n\nKramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T00:15:11.000000Z"} {"uuid": "de451139-d4c8-4f6f-a357-e7ab0c21b669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33468", "type": "seen", "source": "https://t.me/cibsecurity/68142", "content": "\u203c CVE-2023-33468 \u203c\n\nKramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 exhibit a vulnerability that enables remote manipulation of the device. This vulnerability involves extracting the connection confirmation code remotely, bypassing the need to obtain it directly from the physical screen.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T00:15:11.000000Z"} https://vulnerability.circl.lu/sighting/de451139-d4c8-4f6f-a357-e7ab0c21b669/export Thu, 10 Aug 2023 00:15:11 +0000 https://vulnerability.circl.lu/sighting/a1a32e30-76a5-4da9-a350-0c713c2bb5ba/export {"uuid": "a1a32e30-76a5-4da9-a350-0c713c2bb5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33469", "type": "seen", "source": "https://t.me/cibsecurity/68140", "content": "\u203c CVE-2023-33469 \u203c\n\nIn instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T00:15:09.000000Z"} {"uuid": "a1a32e30-76a5-4da9-a350-0c713c2bb5ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33469", "type": "seen", "source": "https://t.me/cibsecurity/68140", "content": "\u203c CVE-2023-33469 \u203c\n\nIn instances where the screen is visible and remote mouse connection is enabled, KramerAV VIA Connect (2) and VIA Go (2) devices with a version prior to 4.0.1.1326 can be exploited to achieve local code execution at the root level.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T00:15:09.000000Z"} https://vulnerability.circl.lu/sighting/a1a32e30-76a5-4da9-a350-0c713c2bb5ba/export Thu, 10 Aug 2023 00:15:09 +0000 https://vulnerability.circl.lu/sighting/d964623c-c2c7-4480-9ee0-b0bd052c2299/export {"uuid": "d964623c-c2c7-4480-9ee0-b0bd052c2299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3346", "type": "seen", "source": "https://t.me/cibsecurity/67632", "content": "\u203c CVE-2023-3346 \u203c\n\nBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-03T12:39:58.000000Z"} {"uuid": "d964623c-c2c7-4480-9ee0-b0bd052c2299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3346", "type": "seen", "source": "https://t.me/cibsecurity/67632", "content": "\u203c CVE-2023-3346 \u203c\n\nBuffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in MITSUBSHI CNC Series allows a remote unauthenticated attacker to cause Denial of Service (DoS) condition and execute arbitrary code on the product by sending specially crafted packets. In addition, system reset is required for recovery.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-03T12:39:58.000000Z"} https://vulnerability.circl.lu/sighting/d964623c-c2c7-4480-9ee0-b0bd052c2299/export Thu, 03 Aug 2023 12:39:58 +0000