https://vulnerability.circl.lu/sightings/feed 2026-09-17T22:13:45.405712+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fc46bc60-85dd-4b7b-8161-3edef6253a7a/export 2026-09-17T22:13:45.435666+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc46bc60-85dd-4b7b-8161-3edef6253a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29357", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:07.734849Z"} 2026-09-13T10:00:07.734849+00:00 https://vulnerability.circl.lu/sighting/597c52ee-1c19-4354-8624-e619ca9bc001/export 2026-09-17T22:13:45.437486+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "597c52ee-1c19-4354-8624-e619ca9bc001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29552", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6806", "content": "exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-11T00:00:57.061233Z"} 2026-09-11T00:00:57.061233+00:00 https://vulnerability.circl.lu/sighting/65194da3-be0a-4c13-8112-f7b0f577de7b/export 2026-09-17T22:13:45.437629+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "65194da3-be0a-4c13-8112-f7b0f577de7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29552", "type": "seen", "source": "https://t.me/cissp/6799", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.05", "creation_timestamp": "2026-09-11T00:00:56.577718Z"} 2026-09-11T00:00:56.577718+00:00 https://vulnerability.circl.lu/sighting/cde8f142-f6f6-4da1-b5be-3c7ec038fe1c/export 2026-09-17T22:13:45.437737+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cde8f142-f6f6-4da1-b5be-3c7ec038fe1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29199", "type": "seen", "source": "https://t.me/cissp/6774", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.30", "creation_timestamp": "2026-09-11T00:00:56.492741Z"} 2026-09-11T00:00:56.492741+00:00 https://vulnerability.circl.lu/sighting/01955f95-8c01-4f20-bce5-89a8cc01f168/export 2026-09-17T22:13:45.437839+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "01955f95-8c01-4f20-bce5-89a8cc01f168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29552", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6806", "content": "exploit\n1. CVE-2023-29552:\nAmplifying SLP Traffic\nhttps://www.bitsight.com/blog/new-high-severity-vulnerability-cve-2023-29552-discovered-service-location-protocol-slp\n\n2. Telegram: RCE via WebView\nhttps://davtur19.medium.com/telegram-bug-bounties-rce-privacy-issues-and-more-b1f06a641c1b\n\n3. CVE-2022-29804:\nA directory traversal vulnerability hidden in the Go language standard library\nhttps://tttang.com/archive/1884\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-10T01:00:04.680793Z"} 2026-09-10T01:00:04.680793+00:00 https://vulnerability.circl.lu/sighting/193212c4-b554-4d23-aabf-01cd6883f830/export 2026-09-17T22:13:45.437941+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "193212c4-b554-4d23-aabf-01cd6883f830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29552", "type": "seen", "source": "https://t.me/cissp/6799", "content": "\ud83d\udd25 New SLP protocol vulnerability (CVE-2023-29552) could be weaponized for massive DoS amplification attacks with an amplification factor of up to 2,200.\n\nLearn more: https://thehackernews.com/2023/04/new-slp-vulnerability-could-let.html\n\nMore than 2,000 global organizations and 54,000 SLP instances are said to be affected.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.05", "creation_timestamp": "2026-09-10T01:00:04.220790Z"} 2026-09-10T01:00:04.220790+00:00 https://vulnerability.circl.lu/sighting/4e516aef-cf0d-4473-b39d-338174e21ccf/export 2026-09-17T22:13:45.438044+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4e516aef-cf0d-4473-b39d-338174e21ccf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29199", "type": "seen", "source": "https://t.me/cissp/6774", "content": "Two critical flaws (CVE-2023-29199 / CVE-2023-30547) have been discovered in vm2 JavaScript library that could allow attackers to break out of sandbox protections, potentially leading to RCE attacks.\n\nRead details: https://thehackernews.com/2023/04/critical-flaws-in-vm2-javascript.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.30", "creation_timestamp": "2026-09-10T01:00:04.127694Z"} 2026-09-10T01:00:04.127694+00:00 https://vulnerability.circl.lu/sighting/aa42d85d-3978-472f-aae2-3ff17ff0a806/export 2026-09-17T22:13:45.438142+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "aa42d85d-3978-472f-aae2-3ff17ff0a806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29032", "type": "seen", "source": "https://t.me/cissp/7041", "content": "Multiple critical flaws in Apache OpenMeetings, a web conferencing solution, exposed admin accounts to control and malicious code execution. \n\u2705 CVE-2023-28936 \n\u2705 CVE-2023-29032 \n\u2705 CVE-2023-29246 \nRead details: https://thehackernews.com/2023/07/apache-openmeetings-web-conferencing.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.04.29", "creation_timestamp": "2026-09-10T00:00:10.674334Z"} 2026-09-10T00:00:10.674334+00:00 https://vulnerability.circl.lu/sighting/d19c02e2-6614-495e-89af-3cdd01cd5306/export 2026-09-17T22:13:45.438254+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d19c02e2-6614-495e-89af-3cdd01cd5306", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29246", "type": "seen", "source": "https://t.me/cissp/7041", "content": "Multiple critical flaws in Apache OpenMeetings, a web conferencing solution, exposed admin accounts to control and malicious code execution. \n\u2705 CVE-2023-28936 \n\u2705 CVE-2023-29032 \n\u2705 CVE-2023-29246 \nRead details: https://thehackernews.com/2023/07/apache-openmeetings-web-conferencing.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1402.04.29", "creation_timestamp": "2026-09-10T00:00:10.628161Z"} 2026-09-10T00:00:10.628161+00:00 https://vulnerability.circl.lu/sighting/4892c515-6188-4d11-9343-69dec8fe8415/export 2026-09-17T22:13:45.438357+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4892c515-6188-4d11-9343-69dec8fe8415", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-29336", "type": "seen", "source": "https://t.me/cissp/6841", "content": "\ud83d\udd25 It's official: Twitter is finally taking a step towards privacy by rolling out support for\ud83d\udd12encrypted direct \ud83d\udce8 messages! \nLearn more: https://thehackernews.com/2023/05/twitter-finally-rolling-out-encrypted.html \nBut it's only available for verified users and their affiliates for now.\n\n\ud83d\udd12 Microsoft's May 2023 Patch Tuesday includes fixes for 38 security vulnerabilities, including a zero-day bug under active exploitation. \nThe bug (CVE-2023-29336) can grant SYSTEM privileges to attackers. \nDetails: https://thehackernews.com/2023/05/microsofts-may-patch-tuesday-fixes-38.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.21", "creation_timestamp": "2026-09-10T00:00:09.160077Z"} 2026-09-10T00:00:09.160077+00:00