https://vulnerability.circl.lu/sightings/feed 2026-08-23T08:04:30.285740+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/720aca33-1d72-4bba-a4c1-57fb5c780619/export 2026-08-23T08:04:30.306938+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "720aca33-1d72-4bba-a4c1-57fb5c780619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29056", "type": "seen", "source": "https://t.me/cibsecurity/16834", "content": "\u203c CVE-2020-29056 \u203c\n\nAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. One can escape from a shell and acquire root privileges by leveraging the TFTP download configuration.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-25T00:47:17.000000Z"} 2020-11-25T00:47:17+00:00 https://vulnerability.circl.lu/sighting/b648d710-8f4a-4a8c-87af-f5fee785f293/export 2026-08-23T08:04:30.308849+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b648d710-8f4a-4a8c-87af-f5fee785f293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29055", "type": "seen", "source": "https://t.me/cibsecurity/16832", "content": "\u203c CVE-2020-29055 \u203c\n\nAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. By default, the appliance can be managed remotely only with HTTP, telnet, and SNMP. It doesn't support SSL/TLS for HTTP or SSH. An attacker can intercept passwords sent in cleartext and conduct man-in-the-middle attacks on the management of the appliance.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-25T00:47:14.000000Z"} 2020-11-25T00:47:14+00:00 https://vulnerability.circl.lu/sighting/e727c336-28c5-40f2-af02-1d9bf773c958/export 2026-08-23T08:04:30.308989+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e727c336-28c5-40f2-af02-1d9bf773c958", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29054", "type": "seen", "source": "https://t.me/cibsecurity/16830", "content": "\u203c CVE-2020-29054 \u203c\n\nAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can use \"show system infor\" to discover cleartext TELNET credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-25T00:47:12.000000Z"} 2020-11-25T00:47:12+00:00 https://vulnerability.circl.lu/sighting/37fbfbc3-ab34-4be6-89ab-161be017fae0/export 2026-08-23T08:04:30.309094+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "37fbfbc3-ab34-4be6-89ab-161be017fae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29059", "type": "seen", "source": "https://t.me/cibsecurity/16829", "content": "\u203c CVE-2020-29059 \u203c\n\nAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. There is a default panger123 password for the suma123 account for certain old firmware.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-25T00:47:11.000000Z"} 2020-11-25T00:47:11+00:00 https://vulnerability.circl.lu/sighting/828a5887-dadb-4163-bddc-dbccee485b38/export 2026-08-23T08:04:30.309199+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "828a5887-dadb-4163-bddc-dbccee485b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29057", "type": "seen", "source": "https://t.me/cibsecurity/16823", "content": "\u203c CVE-2020-29057 \u203c\n\nAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. It allows remote attackers to cause a denial of service (reboot) by sending random bytes to the telnet server on port 23, aka a \"shawarma\" attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-25T00:47:05.000000Z"} 2020-11-25T00:47:05+00:00 https://vulnerability.circl.lu/sighting/5b93e49b-b5e0-46ec-8a97-8bcf7863a8cd/export 2026-08-23T08:04:30.309301+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5b93e49b-b5e0-46ec-8a97-8bcf7863a8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29058", "type": "seen", "source": "https://t.me/cibsecurity/16822", "content": "\u203c CVE-2020-29058 \u203c\n\nAn issue was discovered on CDATA 72408A, 9008A, 9016A, 92408A, 92416A, 9288, 97016, 97024P, 97028P, 97042P, 97084P, 97168P, FD1002S, FD1104, FD1104B, FD1104S, FD1104SN, FD1108S, FD1204S-R2, FD1204SN, FD1204SN-R2, FD1208S-R2, FD1216S-R1, FD1608GS, FD1608SN, FD1616GS, FD1616SN, and FD8000 devices. Attackers can discover cleartext web-server credentials via certain /opt/lighttpd/web/cgi/ requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-25T00:47:03.000000Z"} 2020-11-25T00:47:03+00:00 https://vulnerability.circl.lu/sighting/546e0cfe-8e48-4f6c-a4e7-05684a39f5b6/export 2026-08-23T08:04:30.309407+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "546e0cfe-8e48-4f6c-a4e7-05684a39f5b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29053", "type": "seen", "source": "https://t.me/cibsecurity/16811", "content": "\u203c CVE-2020-29053 \u203c\n\nHRSALE 2.0.0 allows XSS via the admin/project/projects_calendar set_date parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T22:47:01.000000Z"} 2020-11-24T22:47:01+00:00