<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 20 Jun 2026 22:38:38 +0000</lastBuildDate>
    <item>
      <title>c7dbebe4-3835-4d9f-8760-7bdc1f832ab2</title>
      <link>https://vulnerability.circl.lu/sighting/c7dbebe4-3835-4d9f-8760-7bdc1f832ab2/export</link>
      <description>{"uuid": "c7dbebe4-3835-4d9f-8760-7bdc1f832ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50124", "type": "seen", "source": "https://t.me/ctinow/176112", "content": "https://ift.tt/t7JvSw1\nCVE-2023-50124 | Flient Smart Door Lock 1.0 Debug Interface default credentials", "creation_timestamp": "2024-01-30T17:47:01.000000Z"}</description>
      <content:encoded>{"uuid": "c7dbebe4-3835-4d9f-8760-7bdc1f832ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50124", "type": "seen", "source": "https://t.me/ctinow/176112", "content": "https://ift.tt/t7JvSw1\nCVE-2023-50124 | Flient Smart Door Lock 1.0 Debug Interface default credentials", "creation_timestamp": "2024-01-30T17:47:01.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c7dbebe4-3835-4d9f-8760-7bdc1f832ab2/export</guid>
      <pubDate>Tue, 30 Jan 2024 17:47:01 +0000</pubDate>
    </item>
    <item>
      <title>4d891b3e-f14c-4f06-82fa-36e799229280</title>
      <link>https://vulnerability.circl.lu/sighting/4d891b3e-f14c-4f06-82fa-36e799229280/export</link>
      <description>{"uuid": "4d891b3e-f14c-4f06-82fa-36e799229280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/ctinow/176113", "content": "https://ift.tt/hH1mutG\nCVE-2023-50127 | Hozard Alarm System 1.0 SMS improper authentication", "creation_timestamp": "2024-01-30T17:47:03.000000Z"}</description>
      <content:encoded>{"uuid": "4d891b3e-f14c-4f06-82fa-36e799229280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/ctinow/176113", "content": "https://ift.tt/hH1mutG\nCVE-2023-50127 | Hozard Alarm System 1.0 SMS improper authentication", "creation_timestamp": "2024-01-30T17:47:03.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4d891b3e-f14c-4f06-82fa-36e799229280/export</guid>
      <pubDate>Tue, 30 Jan 2024 17:47:03 +0000</pubDate>
    </item>
    <item>
      <title>4062c28a-f47d-47fa-885d-8385219db2c1</title>
      <link>https://vulnerability.circl.lu/sighting/4062c28a-f47d-47fa-885d-8385219db2c1/export</link>
      <description>{"uuid": "4062c28a-f47d-47fa-885d-8385219db2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50126", "type": "seen", "source": "https://t.me/ctinow/176114", "content": "https://ift.tt/jl3iUG8\nCVE-2023-50126 | Hozard Alarm System 1.0 missing encryption", "creation_timestamp": "2024-01-30T17:47:04.000000Z"}</description>
      <content:encoded>{"uuid": "4062c28a-f47d-47fa-885d-8385219db2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50126", "type": "seen", "source": "https://t.me/ctinow/176114", "content": "https://ift.tt/jl3iUG8\nCVE-2023-50126 | Hozard Alarm System 1.0 missing encryption", "creation_timestamp": "2024-01-30T17:47:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4062c28a-f47d-47fa-885d-8385219db2c1/export</guid>
      <pubDate>Tue, 30 Jan 2024 17:47:04 +0000</pubDate>
    </item>
    <item>
      <title>9bb734d6-6b7a-4e24-b69d-d173554a6217</title>
      <link>https://vulnerability.circl.lu/sighting/9bb734d6-6b7a-4e24-b69d-d173554a6217/export</link>
      <description>{"uuid": "9bb734d6-6b7a-4e24-b69d-d173554a6217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/ctinow/176115", "content": "https://ift.tt/IeQ7lih\nCVE-2023-50125 | Hozard Alarm System 1.0 state issue", "creation_timestamp": "2024-01-30T17:47:05.000000Z"}</description>
      <content:encoded>{"uuid": "9bb734d6-6b7a-4e24-b69d-d173554a6217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/ctinow/176115", "content": "https://ift.tt/IeQ7lih\nCVE-2023-50125 | Hozard Alarm System 1.0 state issue", "creation_timestamp": "2024-01-30T17:47:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9bb734d6-6b7a-4e24-b69d-d173554a6217/export</guid>
      <pubDate>Tue, 30 Jan 2024 17:47:05 +0000</pubDate>
    </item>
    <item>
      <title>1b53024f-f452-4253-9916-1a82545a68cf</title>
      <link>https://vulnerability.circl.lu/sighting/1b53024f-f452-4253-9916-1a82545a68cf/export</link>
      <description>{"uuid": "1b53024f-f452-4253-9916-1a82545a68cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.\n\ud83d\udccf Published: 2024-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T15:58:50.895Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2698", "creation_timestamp": "2025-06-17T16:41:29.000000Z"}</description>
      <content:encoded>{"uuid": "1b53024f-f452-4253-9916-1a82545a68cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.\n\ud83d\udccf Published: 2024-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-17T15:58:50.895Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2698", "creation_timestamp": "2025-06-17T16:41:29.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b53024f-f452-4253-9916-1a82545a68cf/export</guid>
      <pubDate>Tue, 17 Jun 2025 16:41:29 +0000</pubDate>
    </item>
    <item>
      <title>4b13d731-245b-47ca-8138-91e47572b01e</title>
      <link>https://vulnerability.circl.lu/sighting/4b13d731-245b-47ca-8138-91e47572b01e/export</link>
      <description>{"uuid": "4b13d731-245b-47ca-8138-91e47572b01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50129", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18993", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50129\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:16:49.870Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:51.000000Z"}</description>
      <content:encoded>{"uuid": "4b13d731-245b-47ca-8138-91e47572b01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50129", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18993", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50129\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Missing encryption in the NFC tags of the Flient Smart Door Lock v1.0 allows attackers to create a cloned tag via brief physical proximity to the original tags, which results in an attacker gaining access to the perimeter.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:16:49.870Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:51.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4b13d731-245b-47ca-8138-91e47572b01e/export</guid>
      <pubDate>Fri, 20 Jun 2025 16:44:51 +0000</pubDate>
    </item>
    <item>
      <title>3086b8c8-fb2c-4ca0-81bd-43f1549be80c</title>
      <link>https://vulnerability.circl.lu/sighting/3086b8c8-fb2c-4ca0-81bd-43f1549be80c/export</link>
      <description>{"uuid": "3086b8c8-fb2c-4ca0-81bd-43f1549be80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50128", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50128\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:16:01.119Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices\n2. http://hozard.com", "creation_timestamp": "2025-06-20T16:44:52.000000Z"}</description>
      <content:encoded>{"uuid": "3086b8c8-fb2c-4ca0-81bd-43f1549be80c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50128", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50128\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The remote keyless system of the Hozard alarm system (alarmsystemen) v1.0 sends an identical radio frequency signal for each request, which results in an attacker being able to conduct replay attacks to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:16:01.119Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices\n2. http://hozard.com", "creation_timestamp": "2025-06-20T16:44:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3086b8c8-fb2c-4ca0-81bd-43f1549be80c/export</guid>
      <pubDate>Fri, 20 Jun 2025 16:44:52 +0000</pubDate>
    </item>
    <item>
      <title>35780051-8f70-459b-b757-487b91a95ed4</title>
      <link>https://vulnerability.circl.lu/sighting/35780051-8f70-459b-b757-487b91a95ed4/export</link>
      <description>{"uuid": "35780051-8f70-459b-b757-487b91a95ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Hozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionality are accepted from random phone numbers, which allows an attacker to bring the alarm system to a disarmed state from any given phone number.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:15:07.271Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:53.000000Z"}</description>
      <content:encoded>{"uuid": "35780051-8f70-459b-b757-487b91a95ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50127", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Hozard alarm system (Alarmsysteem) v1.0 is vulnerable to Improper Authentication. Commands sent via the SMS functionality are accepted from random phone numbers, which allows an attacker to bring the alarm system to a disarmed state from any given phone number.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:15:07.271Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/35780051-8f70-459b-b757-487b91a95ed4/export</guid>
      <pubDate>Fri, 20 Jun 2025 16:44:53 +0000</pubDate>
    </item>
    <item>
      <title>ca83da20-5f6b-4014-81f7-1fa15a09085b</title>
      <link>https://vulnerability.circl.lu/sighting/ca83da20-5f6b-4014-81f7-1fa15a09085b/export</link>
      <description>{"uuid": "ca83da20-5f6b-4014-81f7-1fa15a09085b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:14:10.202Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:55.000000Z"}</description>
      <content:encoded>{"uuid": "ca83da20-5f6b-4014-81f7-1fa15a09085b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50125", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A default engineer password set on the Hozard alarm system (Alarmsysteem) v1.0 allows an attacker to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:14:10.202Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ca83da20-5f6b-4014-81f7-1fa15a09085b/export</guid>
      <pubDate>Fri, 20 Jun 2025 16:44:55 +0000</pubDate>
    </item>
    <item>
      <title>8d41eb06-fba6-46a7-950c-3a8c5ad98b46</title>
      <link>https://vulnerability.circl.lu/sighting/8d41eb06-fba6-46a7-950c-3a8c5ad98b46/export</link>
      <description>{"uuid": "8d41eb06-fba6-46a7-950c-3a8c5ad98b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50123", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This could allow an attacker to perform a brute force on the SMS authentication, to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:13:24.396Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:59.000000Z"}</description>
      <content:encoded>{"uuid": "8d41eb06-fba6-46a7-950c-3a8c5ad98b46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-50123", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-50123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The number of attempts to bring the Hozard Alarm system (alarmsystemen) v1.0 to a disarmed state is not limited. This could allow an attacker to perform a brute force on the SMS authentication, to bring the alarm system to a disarmed state.\n\ud83d\udccf Published: 2024-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T16:13:24.396Z\n\ud83d\udd17 References:\n1. https://www.secura.com/services/iot/consumer-products/security-concerns-in-popular-smart-home-devices", "creation_timestamp": "2025-06-20T16:44:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d41eb06-fba6-46a7-950c-3a8c5ad98b46/export</guid>
      <pubDate>Fri, 20 Jun 2025 16:44:59 +0000</pubDate>
    </item>
  </channel>
</rss>
