https://vulnerability.circl.lu/sightings/feed 2026-09-17T19:43:28.687970+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/64fee26b-ce9b-4170-952f-95a3318b085b/export 2026-09-17T19:43:28.860352+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "64fee26b-ce9b-4170-952f-95a3318b085b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20362", "type": "exploited", "source": "https://t.me/Daw_alfada_Information_Security/281", "content": "\u26a0\ufe0f \u062a\u062d\u0630\u064a\u0631 \u0639\u0627\u0644\u0645\u064a: \u062b\u063a\u0631\u062a\u0627\u0646 \u062e\u0637\u064a\u0631\u062a\u0627\u0646 \u062a\u0647\u062f\u062f \u0623\u0643\u062b\u0631 \u0645\u0646 49,000 \u062c\u0647\u0627\u0632 Cisco Firewall!\n\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u062a\u064a\u0646 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 Cisco ASA \u0648FTD \u062a\u064f\u0633\u062a\u063a\u0644 \u062d\u0627\u0644\u064a\u064b\u0627 \u0641\u064a \u0647\u062c\u0645\u0627\u062a \u0646\u0634\u0637\u0629 \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645. \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0645\u062a\u0648\u0641\u0631\u0629\u060c \u0644\u0643\u0646 \u0622\u0644\u0627\u0641 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0644\u0627 \u062a\u0632\u0627\u0644 \u063a\u064a\u0631 \u0645\u062d\u0645\u064a\u0629.\n\n\ud83e\udde8 \u0627\u0644\u062b\u063a\u0631\u0627\u062a:\n1. CVE-2025-20333 \n \ud83d\udd13 \u0625\u0630\u0627 \u0643\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0645\u0644\u0643 \u0628\u064a\u0627\u0646\u0627\u062a VPN\u060c \u064a\u0645\u0643\u0646\u0647 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0643\u0627\u0645\u0644\u0629 (root). \n \ud83c\udfaf \u0627\u0644\u0646\u062a\u064a\u062c\u0629: \u0633\u064a\u0637\u0631\u0629 \u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n2. CVE-2025-20362 \n \ud83d\udeaa \u064a\u062a\u064a\u062d \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u0627\u062c\u0647\u0627\u062a VPN \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062f\u0648\u0646 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644. \n \ud83d\udca3 \u0639\u0646\u062f \u0627\u0644\u062c\u0645\u0639 \u0628\u064a\u0646 \u0627\u0644\u062b\u063a\u0631\u062a\u064a\u0646: \u0627\u062e\u062a\u0631\u0627\u0642 \u0643\u0627\u0645\u0644 \u0628\u062f\u0648\u0646 \u0628\u064a\u0627\u0646\u0627\u062a \u062f\u062e\u0648\u0644!\n\n\ud83d\udcca \u0623\u0631\u0642\u0627\u0645 \u0633\u0631\u064a\u0639\u0629:\n\ud83c\udf0d 48,800 \u062c\u0647\u0627\u0632 \u0645\u062a\u0623\u062b\u0631 \u0639\u0627\u0644\u0645\u064a\u064b\u0627 \n\ud83c\uddfa\ud83c\uddf8 19,000 \u0645\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 \n\ud83c\uddf3\ud83c\uddf1 817 \u062c\u0647\u0627\u0632\u064b\u0627 \u0641\u064a \u0647\u0648\u0644\u0646\u062f\u0627 \n\n\u062a\u062d\u0630\u064a\u0631 \u0631\u0633\u0645\u064a\n\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0648\u0637\u0646\u064a \u0644\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0627\u0644\u0647\u0648\u0644\u0646\u062f\u064a (NCSC) \u0634\u062f\u062f \u0639\u0644\u0649 \u0636\u0631\u0648\u0631\u0629 \n\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0641\u0648\u0631\u064a \u0644\u062a\u0641\u0627\u062f\u064a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n\n\u0641\u0631\u064a\u0642 Daw Alfada", "creation_timestamp": "2026-09-15T00:00:20.395710Z"} 2026-09-15T00:00:20.395710+00:00 https://vulnerability.circl.lu/sighting/97e34e63-4dfa-4cd0-a97e-e116eb6b0314/export 2026-09-17T19:43:28.863285+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "97e34e63-4dfa-4cd0-a97e-e116eb6b0314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20333", "type": "exploited", "source": "https://t.me/Daw_alfada_Information_Security/281", "content": "\u26a0\ufe0f \u062a\u062d\u0630\u064a\u0631 \u0639\u0627\u0644\u0645\u064a: \u062b\u063a\u0631\u062a\u0627\u0646 \u062e\u0637\u064a\u0631\u062a\u0627\u0646 \u062a\u0647\u062f\u062f \u0623\u0643\u062b\u0631 \u0645\u0646 49,000 \u062c\u0647\u0627\u0632 Cisco Firewall!\n\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u062a\u064a\u0646 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 Cisco ASA \u0648FTD \u062a\u064f\u0633\u062a\u063a\u0644 \u062d\u0627\u0644\u064a\u064b\u0627 \u0641\u064a \u0647\u062c\u0645\u0627\u062a \u0646\u0634\u0637\u0629 \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645. \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0645\u062a\u0648\u0641\u0631\u0629\u060c \u0644\u0643\u0646 \u0622\u0644\u0627\u0641 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0644\u0627 \u062a\u0632\u0627\u0644 \u063a\u064a\u0631 \u0645\u062d\u0645\u064a\u0629.\n\n\ud83e\udde8 \u0627\u0644\u062b\u063a\u0631\u0627\u062a:\n1. CVE-2025-20333 \n \ud83d\udd13 \u0625\u0630\u0627 \u0643\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0645\u0644\u0643 \u0628\u064a\u0627\u0646\u0627\u062a VPN\u060c \u064a\u0645\u0643\u0646\u0647 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0643\u0627\u0645\u0644\u0629 (root). \n \ud83c\udfaf \u0627\u0644\u0646\u062a\u064a\u062c\u0629: \u0633\u064a\u0637\u0631\u0629 \u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n2. CVE-2025-20362 \n \ud83d\udeaa \u064a\u062a\u064a\u062d \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u0627\u062c\u0647\u0627\u062a VPN \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062f\u0648\u0646 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644. \n \ud83d\udca3 \u0639\u0646\u062f \u0627\u0644\u062c\u0645\u0639 \u0628\u064a\u0646 \u0627\u0644\u062b\u063a\u0631\u062a\u064a\u0646: \u0627\u062e\u062a\u0631\u0627\u0642 \u0643\u0627\u0645\u0644 \u0628\u062f\u0648\u0646 \u0628\u064a\u0627\u0646\u0627\u062a \u062f\u062e\u0648\u0644!\n\n\ud83d\udcca \u0623\u0631\u0642\u0627\u0645 \u0633\u0631\u064a\u0639\u0629:\n\ud83c\udf0d 48,800 \u062c\u0647\u0627\u0632 \u0645\u062a\u0623\u062b\u0631 \u0639\u0627\u0644\u0645\u064a\u064b\u0627 \n\ud83c\uddfa\ud83c\uddf8 19,000 \u0645\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 \n\ud83c\uddf3\ud83c\uddf1 817 \u062c\u0647\u0627\u0632\u064b\u0627 \u0641\u064a \u0647\u0648\u0644\u0646\u062f\u0627 \n\n\u062a\u062d\u0630\u064a\u0631 \u0631\u0633\u0645\u064a\n\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0648\u0637\u0646\u064a \u0644\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0627\u0644\u0647\u0648\u0644\u0646\u062f\u064a (NCSC) \u0634\u062f\u062f \u0639\u0644\u0649 \u0636\u0631\u0648\u0631\u0629 \n\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0641\u0648\u0631\u064a \u0644\u062a\u0641\u0627\u062f\u064a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n\n\u0641\u0631\u064a\u0642 Daw Alfada", "creation_timestamp": "2026-09-15T00:00:20.355874Z"} 2026-09-15T00:00:20.355874+00:00 https://vulnerability.circl.lu/sighting/cd806507-c440-425f-a4a6-d364d9503e5a/export 2026-09-17T19:43:28.863438+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "cd806507-c440-425f-a4a6-d364d9503e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20362", "type": "seen", "source": "https://t.me/Daw_alfada_Information_Security/281", "content": "\u26a0\ufe0f \u062a\u062d\u0630\u064a\u0631 \u0639\u0627\u0644\u0645\u064a: \u062b\u063a\u0631\u062a\u0627\u0646 \u062e\u0637\u064a\u0631\u062a\u0627\u0646 \u062a\u0647\u062f\u062f \u0623\u0643\u062b\u0631 \u0645\u0646 49,000 \u062c\u0647\u0627\u0632 Cisco Firewall!\n\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u062a\u064a\u0646 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 Cisco ASA \u0648FTD \u062a\u064f\u0633\u062a\u063a\u0644 \u062d\u0627\u0644\u064a\u064b\u0627 \u0641\u064a \u0647\u062c\u0645\u0627\u062a \u0646\u0634\u0637\u0629 \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645. \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0645\u062a\u0648\u0641\u0631\u0629\u060c \u0644\u0643\u0646 \u0622\u0644\u0627\u0641 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0644\u0627 \u062a\u0632\u0627\u0644 \u063a\u064a\u0631 \u0645\u062d\u0645\u064a\u0629.\n\n\ud83e\udde8 \u0627\u0644\u062b\u063a\u0631\u0627\u062a:\n1. CVE-2025-20333 \n \ud83d\udd13 \u0625\u0630\u0627 \u0643\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0645\u0644\u0643 \u0628\u064a\u0627\u0646\u0627\u062a VPN\u060c \u064a\u0645\u0643\u0646\u0647 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0643\u0627\u0645\u0644\u0629 (root). \n \ud83c\udfaf \u0627\u0644\u0646\u062a\u064a\u062c\u0629: \u0633\u064a\u0637\u0631\u0629 \u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n2. CVE-2025-20362 \n \ud83d\udeaa \u064a\u062a\u064a\u062d \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u0627\u062c\u0647\u0627\u062a VPN \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062f\u0648\u0646 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644. \n \ud83d\udca3 \u0639\u0646\u062f \u0627\u0644\u062c\u0645\u0639 \u0628\u064a\u0646 \u0627\u0644\u062b\u063a\u0631\u062a\u064a\u0646: \u0627\u062e\u062a\u0631\u0627\u0642 \u0643\u0627\u0645\u0644 \u0628\u062f\u0648\u0646 \u0628\u064a\u0627\u0646\u0627\u062a \u062f\u062e\u0648\u0644!\n\n\ud83d\udcca \u0623\u0631\u0642\u0627\u0645 \u0633\u0631\u064a\u0639\u0629:\n\ud83c\udf0d 48,800 \u062c\u0647\u0627\u0632 \u0645\u062a\u0623\u062b\u0631 \u0639\u0627\u0644\u0645\u064a\u064b\u0627 \n\ud83c\uddfa\ud83c\uddf8 19,000 \u0645\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 \n\ud83c\uddf3\ud83c\uddf1 817 \u062c\u0647\u0627\u0632\u064b\u0627 \u0641\u064a \u0647\u0648\u0644\u0646\u062f\u0627 \n\n\u062a\u062d\u0630\u064a\u0631 \u0631\u0633\u0645\u064a\n\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0648\u0637\u0646\u064a \u0644\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0627\u0644\u0647\u0648\u0644\u0646\u062f\u064a (NCSC) \u0634\u062f\u062f \u0639\u0644\u0649 \u0636\u0631\u0648\u0631\u0629 \n\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0641\u0648\u0631\u064a \u0644\u062a\u0641\u0627\u062f\u064a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n\n\u0641\u0631\u064a\u0642 Daw Alfada", "creation_timestamp": "2026-09-14T15:00:03.389735Z"} 2026-09-14T15:00:03.389735+00:00 https://vulnerability.circl.lu/sighting/e1869eb1-9f7a-4948-863f-89c2ccc24cec/export 2026-09-17T19:43:28.863560+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e1869eb1-9f7a-4948-863f-89c2ccc24cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20333", "type": "seen", "source": "https://t.me/Daw_alfada_Information_Security/281", "content": "\u26a0\ufe0f \u062a\u062d\u0630\u064a\u0631 \u0639\u0627\u0644\u0645\u064a: \u062b\u063a\u0631\u062a\u0627\u0646 \u062e\u0637\u064a\u0631\u062a\u0627\u0646 \u062a\u0647\u062f\u062f \u0623\u0643\u062b\u0631 \u0645\u0646 49,000 \u062c\u0647\u0627\u0632 Cisco Firewall!\n\n\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u062a\u064a\u0646 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 Cisco ASA \u0648FTD \u062a\u064f\u0633\u062a\u063a\u0644 \u062d\u0627\u0644\u064a\u064b\u0627 \u0641\u064a \u0647\u062c\u0645\u0627\u062a \u0646\u0634\u0637\u0629 \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645. \u0627\u0644\u062a\u062d\u062f\u064a\u062b\u0627\u062a \u0645\u062a\u0648\u0641\u0631\u0629\u060c \u0644\u0643\u0646 \u0622\u0644\u0627\u0641 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0644\u0627 \u062a\u0632\u0627\u0644 \u063a\u064a\u0631 \u0645\u062d\u0645\u064a\u0629.\n\n\ud83e\udde8 \u0627\u0644\u062b\u063a\u0631\u0627\u062a:\n1. CVE-2025-20333 \n \ud83d\udd13 \u0625\u0630\u0627 \u0643\u0627\u0646 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u0645\u0644\u0643 \u0628\u064a\u0627\u0646\u0627\u062a VPN\u060c \u064a\u0645\u0643\u0646\u0647 \u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0628\u0635\u0644\u0627\u062d\u064a\u0627\u062a \u0643\u0627\u0645\u0644\u0629 (root). \n \ud83c\udfaf \u0627\u0644\u0646\u062a\u064a\u062c\u0629: \u0633\u064a\u0637\u0631\u0629 \u0643\u0627\u0645\u0644\u0629 \u0639\u0644\u0649 \u0627\u0644\u062c\u0647\u0627\u0632.\n\n2. CVE-2025-20362 \n \ud83d\udeaa \u064a\u062a\u064a\u062d \u0627\u0644\u0648\u0635\u0648\u0644 \u0625\u0644\u0649 \u0648\u0627\u062c\u0647\u0627\u062a VPN \u0639\u0646 \u0628\u064f\u0639\u062f \u0628\u062f\u0648\u0646 \u062a\u0633\u062c\u064a\u0644 \u062f\u062e\u0648\u0644. \n \ud83d\udca3 \u0639\u0646\u062f \u0627\u0644\u062c\u0645\u0639 \u0628\u064a\u0646 \u0627\u0644\u062b\u063a\u0631\u062a\u064a\u0646: \u0627\u062e\u062a\u0631\u0627\u0642 \u0643\u0627\u0645\u0644 \u0628\u062f\u0648\u0646 \u0628\u064a\u0627\u0646\u0627\u062a \u062f\u062e\u0648\u0644!\n\n\ud83d\udcca \u0623\u0631\u0642\u0627\u0645 \u0633\u0631\u064a\u0639\u0629:\n\ud83c\udf0d 48,800 \u062c\u0647\u0627\u0632 \u0645\u062a\u0623\u062b\u0631 \u0639\u0627\u0644\u0645\u064a\u064b\u0627 \n\ud83c\uddfa\ud83c\uddf8 19,000 \u0645\u0646\u0647\u0627 \u0641\u064a \u0627\u0644\u0648\u0644\u0627\u064a\u0627\u062a \u0627\u0644\u0645\u062a\u062d\u062f\u0629 \n\ud83c\uddf3\ud83c\uddf1 817 \u062c\u0647\u0627\u0632\u064b\u0627 \u0641\u064a \u0647\u0648\u0644\u0646\u062f\u0627 \n\n\u062a\u062d\u0630\u064a\u0631 \u0631\u0633\u0645\u064a\n\u0644\u0645\u0631\u0643\u0632 \u0627\u0644\u0648\u0637\u0646\u064a \u0644\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0627\u0644\u0647\u0648\u0644\u0646\u062f\u064a (NCSC) \u0634\u062f\u062f \u0639\u0644\u0649 \u0636\u0631\u0648\u0631\u0629 \n\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0627\u0644\u0641\u0648\u0631\u064a \u0644\u062a\u0641\u0627\u062f\u064a \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644.\n\n\u0641\u0631\u064a\u0642 Daw Alfada", "creation_timestamp": "2026-09-14T15:00:03.316153Z"} 2026-09-14T15:00:03.316153+00:00 https://vulnerability.circl.lu/sighting/2d3eb898-aa52-4cae-96b7-3c6da6fd3f02/export 2026-09-17T19:43:28.863669+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2d3eb898-aa52-4cae-96b7-3c6da6fd3f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20701", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mv6bawyjom2g", "content": "\ud83d\udce2 CVE-2025-20701 : Les \u00e9couteurs Skullcandy Dime 3 vuln\u00e9rables au d\u00e9tournement Bluetooth\n\nLe 9 septembre 2026, BleepingComputer relaie un avis du CERT/CC de l'Universit\u00e9 Carnegie Mellon concernant une vuln\u00e9rabilit\u00e9\u2026\n\n\ud83d\udfe1 v\u00e9rification factuelle moyenne\n#Bluetooth #SkullcandyDime3 #Cyberveille", "creation_timestamp": "2026-09-10T14:30:05.934404Z"} 2026-09-10T14:30:05.934404+00:00 https://vulnerability.circl.lu/sighting/2348b515-85f3-4988-abcf-52a983eaa8c7/export 2026-09-17T19:43:28.863773+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2348b515-85f3-4988-abcf-52a983eaa8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20362", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:23.426015Z"} 2026-09-10T10:15:23.426015+00:00 https://vulnerability.circl.lu/sighting/8c1ebe50-dedc-4938-98d7-efb7fcd643d7/export 2026-09-17T19:43:28.863871+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8c1ebe50-dedc-4938-98d7-efb7fcd643d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20701", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3mv5abrwufy2o", "content": "Skullcandy Dime 3 earbuds (CVE-2025-20701) accept Bluetooth pairing from any nearby device with no PIN or prompt, letting an attacker hijack audio and pull live mic audio. Skullcandy fixed it in firmware 1.0.0.30, but no update path exists for existing units, so vulnerable buds stay vulnerable.", "creation_timestamp": "2026-09-10T04:42:34.576777Z"} 2026-09-10T04:42:34.576777+00:00 https://vulnerability.circl.lu/sighting/bfa50d80-811f-47a4-8606-9e8457404626/export 2026-09-17T19:43:28.863970+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "bfa50d80-811f-47a4-8606-9e8457404626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20393", "type": "exploited", "source": "https://t.me/cissp/7849", "content": "1. WARNING: CVE-2025-20393 is rated 10.0, with no patch available.\n\nCisco confirmed active exploitation of an AsyncOS zero-day by a China-linked APT. The flaw allows root-level command execution on affected email security appliances and enables attackers to establish persistence.\nDetails and mitigations:\n https://lnkd.in/dKZ5aRc2\n\n2. A critical ASUS Live Update vulnerability is now on CISA\u2019s exploited list.\n\nCVSS 9.3, supply chain based, and tied to ShadowHammer, it embedded malicious code in signed updates for carefully chosen devices.\nhttps://lnkd.in/dzW-DxTC\n\n3. HPE patched a CRITICAL CVSS 10.0 flaw in OneView that allows unauthenticated remote code execution.\n\nAll versions before 11.00 are affected, with hotfixes for 5.20\u201310.20.No active exploits reported, but patching is urgent. Details here\n https://lnkd.in/ddGsRZtm\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.12.19\n\nhttps://www.linkedin.com/posts/alirezaghahrood_cisco-warns-of-active-attacks-exploiting-activity-7407599988215635968-3iGW", "creation_timestamp": "2026-09-10T00:00:55.766062Z"} 2026-09-10T00:00:55.766062+00:00 https://vulnerability.circl.lu/sighting/e9ec765e-2b78-4c20-b148-4d953c28e606/export 2026-09-17T19:43:28.864071+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e9ec765e-2b78-4c20-b148-4d953c28e606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20352", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7834", "content": "#Analytics\n#ThreatResearch\nAn analytical review of the main cybersecurity events for the 2025\n\n\u0632\u0646\u062f\u06af\u06cc \u062f\u06cc\u0648\u0627\u0646\u0647\u200c\u0648\u0627\u0631!\n\u0647\u0627\u0644\u0648\u0648\u06cc\u0646 \u06a9\u0647 \u0646\u0632\u062f\u06cc\u06a9 \u0648 \u200c\u0631\u062f \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0646\u06cc\u0627 \u0627\u0646\u06af\u0627\u0631 \u0686\u0647\u0631\u0647\u200c\u06cc \u0648\u0627\u0642\u0639\u06cc\u200c\u062a\u0631\u0634 \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f\u2026 \u0634\u062e\u0635\u06cc\u062a\u200c\u0647\u0627 \u0647\u0631 \u0631\u0648\u0632 \u0639\u062c\u06cc\u0628\u200c\u062a\u0631\u061b \u0622\u062f\u0645\u200c\u0647\u0627 \u0647\u0631 \u0644\u062d\u0638\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647\u200c\u062a\u0631.\n\u062f\u06cc\u0648\u0627\u0646\u06af\u06cc\u061f \u06cc\u0627 \u0648\u0627\u0642\u0639\u06cc\u062a\u06cc \u06a9\u0647 \u062c\u0631\u0623\u062a \u062f\u06cc\u062f\u0646\u0634 \u0631\u0627 \u0646\u062f\u0627\u0631\u06cc\u0645\u061f \n\n\u0639\u0631\u0635\u0647\u200c \u0639\u0631\u0636\u0647\ud83d\ude42 \u0646\u0627\u062f\u0627\u0646\u06cc \u0648 \u062a\u0648\u0647\u0645 \u062f\u0627\u0646\u0627\u06cc\u06cc \u0627\u0633\u062a\n\u0647\u0631 \u0631\u0648\u0632 \u0627\u06cc\u0646 \u062f\u0627\u0633\u062a\u0627\u0646\u2026\u062f\u0627\u0631\u06a9 \u0648 \u0639\u0645\u06cc\u0642 \u200c\u062a\u0631\n\u0627\u0645\u0627 \u0647\u0645\u0627\u0647\u0646\u06af \u0628\u0627 \u062a\u0646\u067e\u0648\u0634 \u0645\u062f \u0631\u0648\u0632! \u062a\u0645 \u062a\u0645 \u0639\u0648\u0627\u0645!!!\n\u0639\u062c\u06cc\u0628\u200c\u0628\u0648\u062f\u0646 \u062a\u0631\u0633\u0646\u0627\u06a9 \u0646\u06cc\u0633\u062a\u061b\n\u062a\u0631\u0633\u0646\u0627\u06a9 \u0622\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631\u06af\u0632 \u2026 !\n\n\u0648 \u0627\u06af\u0631 \u0634\u0645\u0633 \u062a\u0628\u0631\u06cc\u0632\u06cc \u0628\u0627\u062f\u0647\u200c\u0627\u06cc \u0628\u0631 \u062c\u0627\u0645\u0645 \u0646\u0647\u062f\u060c\n\u0645\u0633\u062a \u06a9\u0647 \u0634\u0648\u0645\u2026\n\u0628\u06cc\u200c\u067e\u0631\u0648\u0627\u060c \u0633\u062a\u0648\u0646 \u06a9\u06cc\u0648\u0627\u0646 \u0631\u0627 \u2026! \n\n\u0628\u06af\u0630\u0631\u06cc\u0645\u061b \n\n1.Operation Zero Disco: \nAttackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits, Cisco 9400, 9300, and legacy 3750G series devices are affected. A detailed analysis of the vulnerability (CVE-2017-3881) and PoC were published on our channel in 2018. Second exploited vulnerability (CVE-2025-20352) - Stack-based BoF. This vulnerability affects all versions of SNMP. Restrict SNMP access via ACLs and CoPP to management hosts only, switch to using only SNMPv3 with authPriv mode, stop using standard communities in v1/v2c, update IOS and IOS XE to builds with the fix, and configure monitoring of sysDescr sysUpTime and activity on port UDP/161. Disable telnet..\nCVE-2025-20352 SNMP Exposure Check (onesixtyone + parser).\n\n2.Framework BIOS Backdoor:\nThe mm command impleneted in Framework BIOS shells can be used to compromise a device pre-boot (BombShell). The attack surface \u201cbelow\u201d the operating system, encompassing firmware, bootloaders, and hardware components, presents a ripe target for threat actors. Implement proper configuration management and maintain up-to-date revocation lists. Follow the principle \"signed doesn't mean safe\"... .\n\n3 Fewer Weights, More Problems: \nA Practical Attack on LLM Pruning, Modern LLM pruning methods can be maliciously exploited... The most read post of the week on our channel.\n\n4. F5 BIG-IP Compromise:\nThere was no publication on this topic on our channel, since we have repeatedly drawn the attention of readers to the existing VERY serious problems with this equipment, publishing detailed PoC exploits on the channel in 2024 (CVE-2024-45844) and 2025 (CVE-2025-20029).\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.11.04\n\nhttps://www.linkedin.com/posts/alirezaghahrood_analytics-threatresearch-activity-7391560156158971904-XBpT", "creation_timestamp": "2026-09-10T00:00:55.678316Z"} 2026-09-10T00:00:55.678316+00:00 https://vulnerability.circl.lu/sighting/103ee9ef-f418-4263-a824-d168e21f77ce/export 2026-09-17T19:43:28.864193+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "103ee9ef-f418-4263-a824-d168e21f77ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-20029", "type": "published-proof-of-concept", "source": "https://t.me/cissp/7834", "content": "#Analytics\n#ThreatResearch\nAn analytical review of the main cybersecurity events for the 2025\n\n\u0632\u0646\u062f\u06af\u06cc \u062f\u06cc\u0648\u0627\u0646\u0647\u200c\u0648\u0627\u0631!\n\u0647\u0627\u0644\u0648\u0648\u06cc\u0646 \u06a9\u0647 \u0646\u0632\u062f\u06cc\u06a9 \u0648 \u200c\u0631\u062f \u0645\u06cc\u200c\u0634\u0648\u062f\u060c \u062f\u0646\u06cc\u0627 \u0627\u0646\u06af\u0627\u0631 \u0686\u0647\u0631\u0647\u200c\u06cc \u0648\u0627\u0642\u0639\u06cc\u200c\u062a\u0631\u0634 \u0631\u0627 \u0646\u0634\u0627\u0646 \u0645\u06cc\u200c\u062f\u0647\u062f\u2026 \u0634\u062e\u0635\u06cc\u062a\u200c\u0647\u0627 \u0647\u0631 \u0631\u0648\u0632 \u0639\u062c\u06cc\u0628\u200c\u062a\u0631\u061b \u0622\u062f\u0645\u200c\u0647\u0627 \u0647\u0631 \u0644\u062d\u0638\u0647 \u0646\u0627\u0634\u0646\u0627\u062e\u062a\u0647\u200c\u062a\u0631.\n\u062f\u06cc\u0648\u0627\u0646\u06af\u06cc\u061f \u06cc\u0627 \u0648\u0627\u0642\u0639\u06cc\u062a\u06cc \u06a9\u0647 \u062c\u0631\u0623\u062a \u062f\u06cc\u062f\u0646\u0634 \u0631\u0627 \u0646\u062f\u0627\u0631\u06cc\u0645\u061f \n\n\u0639\u0631\u0635\u0647\u200c \u0639\u0631\u0636\u0647\ud83d\ude42 \u0646\u0627\u062f\u0627\u0646\u06cc \u0648 \u062a\u0648\u0647\u0645 \u062f\u0627\u0646\u0627\u06cc\u06cc \u0627\u0633\u062a\n\u0647\u0631 \u0631\u0648\u0632 \u0627\u06cc\u0646 \u062f\u0627\u0633\u062a\u0627\u0646\u2026\u062f\u0627\u0631\u06a9 \u0648 \u0639\u0645\u06cc\u0642 \u200c\u062a\u0631\n\u0627\u0645\u0627 \u0647\u0645\u0627\u0647\u0646\u06af \u0628\u0627 \u062a\u0646\u067e\u0648\u0634 \u0645\u062f \u0631\u0648\u0632! \u062a\u0645 \u062a\u0645 \u0639\u0648\u0627\u0645!!!\n\u0639\u062c\u06cc\u0628\u200c\u0628\u0648\u062f\u0646 \u062a\u0631\u0633\u0646\u0627\u06a9 \u0646\u06cc\u0633\u062a\u061b\n\u062a\u0631\u0633\u0646\u0627\u06a9 \u0622\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631\u06af\u0632 \u2026 !\n\n\u0648 \u0627\u06af\u0631 \u0634\u0645\u0633 \u062a\u0628\u0631\u06cc\u0632\u06cc \u0628\u0627\u062f\u0647\u200c\u0627\u06cc \u0628\u0631 \u062c\u0627\u0645\u0645 \u0646\u0647\u062f\u060c\n\u0645\u0633\u062a \u06a9\u0647 \u0634\u0648\u0645\u2026\n\u0628\u06cc\u200c\u067e\u0631\u0648\u0627\u060c \u0633\u062a\u0648\u0646 \u06a9\u06cc\u0648\u0627\u0646 \u0631\u0627 \u2026! \n\n\u0628\u06af\u0630\u0631\u06cc\u0645\u061b \n\n1.Operation Zero Disco: \nAttackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits, Cisco 9400, 9300, and legacy 3750G series devices are affected. A detailed analysis of the vulnerability (CVE-2017-3881) and PoC were published on our channel in 2018. Second exploited vulnerability (CVE-2025-20352) - Stack-based BoF. This vulnerability affects all versions of SNMP. Restrict SNMP access via ACLs and CoPP to management hosts only, switch to using only SNMPv3 with authPriv mode, stop using standard communities in v1/v2c, update IOS and IOS XE to builds with the fix, and configure monitoring of sysDescr sysUpTime and activity on port UDP/161. Disable telnet..\nCVE-2025-20352 SNMP Exposure Check (onesixtyone + parser).\n\n2.Framework BIOS Backdoor:\nThe mm command impleneted in Framework BIOS shells can be used to compromise a device pre-boot (BombShell). The attack surface \u201cbelow\u201d the operating system, encompassing firmware, bootloaders, and hardware components, presents a ripe target for threat actors. Implement proper configuration management and maintain up-to-date revocation lists. Follow the principle \"signed doesn't mean safe\"... .\n\n3 Fewer Weights, More Problems: \nA Practical Attack on LLM Pruning, Modern LLM pruning methods can be maliciously exploited... The most read post of the week on our channel.\n\n4. F5 BIG-IP Compromise:\nThere was no publication on this topic on our channel, since we have repeatedly drawn the attention of readers to the existing VERY serious problems with this equipment, publishing detailed PoC exploits on the channel in 2024 (CVE-2024-45844) and 2025 (CVE-2025-20029).\n\n\u2014 CISO as a Service \u2014\n| Strategic Cyber Defense & GRC\nResilient Through Knowledge\n2025.11.04\n\nhttps://www.linkedin.com/posts/alirezaghahrood_analytics-threatresearch-activity-7391560156158971904-XBpT", "creation_timestamp": "2026-09-10T00:00:55.588231Z"} 2026-09-10T00:00:55.588231+00:00