https://vulnerability.circl.lu/sightings/feed 2026-09-17T19:02:33.786477+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fc622fa3-ffed-4371-aad2-b6ce8ce0447d/export 2026-09-17T19:02:33.797254+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fc622fa3-ffed-4371-aad2-b6ce8ce0447d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "published-proof-of-concept", "source": "Telegram/S_xvhEYkSfwY-06pFLtOx1--AsX0A_rgUo_9aHBHntliw8A", "content": "", "creation_timestamp": "2026-09-10T00:00:45.138446Z"} 2026-09-10T00:00:45.138446+00:00 https://vulnerability.circl.lu/sighting/ad0770f4-8c8b-4873-b455-ee1ae9cb72b6/export 2026-09-17T19:02:33.798634+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ad0770f4-8c8b-4873-b455-ee1ae9cb72b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "seen", "source": "Telegram/S_xvhEYkSfwY-06pFLtOx1--AsX0A_rgUo_9aHBHntliw8A", "content": "", "creation_timestamp": "2026-09-09T10:00:05.940663Z"} 2026-09-09T10:00:05.940663+00:00 https://vulnerability.circl.lu/sighting/d19db142-3968-4c10-ab94-9268cad8e577/export 2026-09-17T19:02:33.798729+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d19db142-3968-4c10-ab94-9268cad8e577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "published-proof-of-concept", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "content": "", "creation_timestamp": "2026-09-03T00:00:54.352292Z"} 2026-09-03T00:00:54.352292+00:00 https://vulnerability.circl.lu/sighting/d0bcaca5-4462-4553-87dc-72d74f49547c/export 2026-09-17T19:02:33.798813+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d0bcaca5-4462-4553-87dc-72d74f49547c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "seen", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "content": "", "creation_timestamp": "2026-09-02T01:00:12.256151Z"} 2026-09-02T01:00:12.256151+00:00 https://vulnerability.circl.lu/sighting/d6b8d48a-9046-4cc5-aa8e-68d8b1ab9abd/export 2026-09-17T19:02:33.798890+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d6b8d48a-9046-4cc5-aa8e-68d8b1ab9abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "exploited", "source": "https://t.me/CyberDispatch/520", "content": "CISA confirms active exploitation of a Gogs flaw now added to the KEV list.\n\nCVE-2025-8110 (CVSS 8.7) abuses symlink handling to write outside repositories, enabling code execution. Around 700 exposed instances are already compromised.", "creation_timestamp": "2026-08-31T00:00:10.778296Z"} 2026-08-31T00:00:10.778296+00:00 https://vulnerability.circl.lu/sighting/7a1a283e-18d9-4721-8a97-86a0851edd30/export 2026-09-17T19:02:33.798967+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7a1a283e-18d9-4721-8a97-86a0851edd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "seen", "source": "https://t.me/CyberDispatch/520", "content": "CISA confirms active exploitation of a Gogs flaw now added to the KEV list.\n\nCVE-2025-8110 (CVSS 8.7) abuses symlink handling to write outside repositories, enabling code execution. Around 700 exposed instances are already compromised.", "creation_timestamp": "2026-08-30T00:00:49.187786Z"} 2026-08-30T00:00:49.187786+00:00 https://vulnerability.circl.lu/sighting/ede06fef-8f89-45e6-89b8-bee203fd1e0f/export 2026-09-17T19:02:33.799046+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ede06fef-8f89-45e6-89b8-bee203fd1e0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "seen", "source": "https://t.me/CyberDispatch/520", "content": "CISA confirms active exploitation of a Gogs flaw now added to the KEV list.\n\nCVE-2025-8110 (CVSS 8.7) abuses symlink handling to write outside repositories, enabling code execution. Around 700 exposed instances are already compromised.", "creation_timestamp": "2026-08-29T20:00:23.602570Z"} 2026-08-29T20:00:23.602570+00:00 https://vulnerability.circl.lu/sighting/50155044-62fa-4b6b-83ed-d8f24c427deb/export 2026-09-17T19:02:33.799134+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "50155044-62fa-4b6b-83ed-d8f24c427deb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "published-proof-of-concept", "source": "https://t.me/cve0day/460", "content": "CVE-2025-8110\n\nImproper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.", "creation_timestamp": "2026-08-28T00:00:37.749394Z"} 2026-08-28T00:00:37.749394+00:00 https://vulnerability.circl.lu/sighting/8e5016c5-a740-412d-8090-09fbc63d1742/export 2026-09-17T19:02:33.799202+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8e5016c5-a740-412d-8090-09fbc63d1742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "seen", "source": "https://t.me/cve0day/460", "content": "CVE-2025-8110\n\nImproper Symbolic link handling in the PutContents API in Gogs allows Local Execution of Code.", "creation_timestamp": "2026-08-27T15:00:05.853622Z"} 2026-08-27T15:00:05.853622+00:00 https://vulnerability.circl.lu/sighting/04890313-878e-4f3f-8d1c-d89d3120884e/export 2026-09-17T19:02:33.799272+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "04890313-878e-4f3f-8d1c-d89d3120884e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8110", "type": "exploited", "source": "https://t.me/CyberDispatch/230", "content": "700+ Gogs servers hacked \u2014 no patch yet.\n\nNew flaw (CVE-2025-8110) lets attackers overwrite files and run code through symbolic links, bypassing last year\u2019s fix.\n\nWiz found Supershell malware \u2014 often used by Chinese groups \u2014 on many hacked servers.", "creation_timestamp": "2026-08-20T00:00:09.518281Z"} 2026-08-20T00:00:09.518281+00:00