https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 07 Jun 2026 08:10:36 +0000 https://vulnerability.circl.lu/sighting/c92f0855-4817-4424-a112-9bdb85548ede/export {"uuid": "c92f0855-4817-4424-a112-9bdb85548ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31135\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7.\n\ud83d\udccf Published: 2025-04-01T22:03:09.405Z\n\ud83d\udccf Modified: 2025-04-01T22:03:09.405Z\n\ud83d\udd17 References:\n1. https://github.com/phires/go-guerrilla/security/advisories/GHSA-c2c3-pqw5-5p7c\n2. https://github.com/phires/go-guerrilla/commit/7673947f2d5204a135d7ae0b7f80759e548abee6", "creation_timestamp": "2025-04-01T22:32:44.000000Z"} {"uuid": "c92f0855-4817-4424-a112-9bdb85548ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31135\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7.\n\ud83d\udccf Published: 2025-04-01T22:03:09.405Z\n\ud83d\udccf Modified: 2025-04-01T22:03:09.405Z\n\ud83d\udd17 References:\n1. https://github.com/phires/go-guerrilla/security/advisories/GHSA-c2c3-pqw5-5p7c\n2. https://github.com/phires/go-guerrilla/commit/7673947f2d5204a135d7ae0b7f80759e548abee6", "creation_timestamp": "2025-04-01T22:32:44.000000Z"} https://vulnerability.circl.lu/sighting/c92f0855-4817-4424-a112-9bdb85548ede/export Tue, 01 Apr 2025 22:32:44 +0000 https://vulnerability.circl.lu/sighting/b95a4601-1fba-47ae-aefe-076331e9951e/export {"uuid": "b95a4601-1fba-47ae-aefe-076331e9951e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31135", "type": "seen", "source": "https://t.me/cvedetector/21826", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-31135 - Go-Guerrilla SMTP Daemon Reverse Proxy IP Spoofing Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-31135 \nPublished : April 1, 2025, 10:15 p.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T02:26:40.000000Z"} {"uuid": "b95a4601-1fba-47ae-aefe-076331e9951e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31135", "type": "seen", "source": "https://t.me/cvedetector/21826", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-31135 - Go-Guerrilla SMTP Daemon Reverse Proxy IP Spoofing Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-31135 \nPublished : April 1, 2025, 10:15 p.m. | 1\u00a0hour, 30\u00a0minutes ago \nDescription : Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"02 Apr 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-02T02:26:40.000000Z"} https://vulnerability.circl.lu/sighting/b95a4601-1fba-47ae-aefe-076331e9951e/export Wed, 02 Apr 2025 02:26:40 +0000