https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 07 Jun 2026 11:10:29 +0000 https://vulnerability.circl.lu/sighting/ca2094ba-40ad-49f2-8d00-a28f2144cc57/export {"uuid": "ca2094ba-40ad-49f2-8d00-a28f2144cc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "seen", "source": "https://t.me/cibsecurity/69368", "content": "\u203c CVE-2023-40890 \u203c\n\nA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-29T20:17:47.000000Z"} {"uuid": "ca2094ba-40ad-49f2-8d00-a28f2144cc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "seen", "source": "https://t.me/cibsecurity/69368", "content": "\u203c CVE-2023-40890 \u203c\n\nA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-29T20:17:47.000000Z"} https://vulnerability.circl.lu/sighting/ca2094ba-40ad-49f2-8d00-a28f2144cc57/export Tue, 29 Aug 2023 20:17:47 +0000 https://vulnerability.circl.lu/sighting/0d96c53e-3da2-4b34-9ae5-eded032339d8/export {"uuid": "0d96c53e-3da2-4b34-9ae5-eded032339d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-40890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\ud83d\udccf Published: 2023-08-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T13:48:02.663Z\n\ud83d\udd17 References:\n1. https://hackmd.io/%40cspl/H1PxPAUnn\n2. https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/", "creation_timestamp": "2025-07-01T14:11:19.000000Z"} {"uuid": "0d96c53e-3da2-4b34-9ae5-eded032339d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-40890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\ud83d\udccf Published: 2023-08-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T13:48:02.663Z\n\ud83d\udd17 References:\n1. https://hackmd.io/%40cspl/H1PxPAUnn\n2. https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/", "creation_timestamp": "2025-07-01T14:11:19.000000Z"} https://vulnerability.circl.lu/sighting/0d96c53e-3da2-4b34-9ae5-eded032339d8/export Tue, 01 Jul 2025 14:11:19 +0000