<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-15T18:47:48.890106+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c1e7d5f-d7b3-4a74-b29f-8d96c91c1cc1/export</id>
    <title>4c1e7d5f-d7b3-4a74-b29f-8d96c91c1cc1</title>
    <updated>2026-09-15T18:47:48.920230+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c1e7d5f-d7b3-4a74-b29f-8d96c91c1cc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11324", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2018", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Tenda AC18: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430\n\n\u2014\n\nSummary:\n\u0412 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0411\u0430\u043d\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043d\u043e\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Tenda AC18. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 BDU:2025-13671 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 CVE-2025-11324 \u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0432\u0441\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0446\u0435\u043d\u043a\u0438 CVSS. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SetValue(), \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 /goform/setNotUpgrade \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-10 07:40 | Author: Vulner Queen\n\n#tenda #ac18 #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-marshrutizatorah-tenda-ac18-ugroza-otkaza-v-obsluzhivanii-cherez-perepolnenie-bufera_16153", "creation_timestamp": "2026-09-10T00:00:36.089099Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c1e7d5f-d7b3-4a74-b29f-8d96c91c1cc1/export"/>
    <published>2026-09-10T00:00:36.089099+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8880e2dd-a6c2-49cf-a0b5-9024a8ea9d55/export</id>
    <title>8880e2dd-a6c2-49cf-a0b5-9024a8ea9d55</title>
    <updated>2026-09-15T18:47:48.922783+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8880e2dd-a6c2-49cf-a0b5-9024a8ea9d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11324", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/2018", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 Tenda AC18: \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430\n\n\u2014\n\nSummary:\n\u0412 \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0411\u0430\u043d\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043d\u043e\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b Tenda AC18. \u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 BDU:2025-13671 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043c\u0435\u0436\u0434\u0443\u043d\u0430\u0440\u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0443 CVE-2025-11324 \u0438 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0437\u0443\u0435\u0442\u0441\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0432\u0441\u0435\u043c \u0432\u0435\u0440\u0441\u0438\u044f\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0446\u0435\u043d\u043a\u0438 CVSS. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 SetValue(), \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0439 \u043f\u043e \u0430\u0434\u0440\u0435\u0441\u0443 /goform/setNotUpgrade \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-10 07:40 | Author: Vulner Queen\n\n#tenda #ac18 #general_cyber_news\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-marshrutizatorah-tenda-ac18-ugroza-otkaza-v-obsluzhivanii-cherez-perepolnenie-bufera_16153", "creation_timestamp": "2026-09-09T05:00:15.533750Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8880e2dd-a6c2-49cf-a0b5-9024a8ea9d55/export"/>
    <published>2026-09-09T05:00:15.533750+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b7dddfe5-6e12-421b-87ab-c3a080c2f418/export</id>
    <title>b7dddfe5-6e12-421b-87ab-c3a080c2f418</title>
    <updated>2026-09-15T18:47:48.922887+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b7dddfe5-6e12-421b-87ab-c3a080c2f418", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11323", "type": "published-proof-of-concept", "source": "Telegram/4pwzrJnceRLyEgpbd6VO8VdJVifSdOcVQ4b7TmcAbl02Blg", "content": "", "creation_timestamp": "2026-01-08T17:13:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b7dddfe5-6e12-421b-87ab-c3a080c2f418/export"/>
    <published>2026-01-08T17:13:19+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/473b2297-13ac-4fdb-bc4a-bfe15c158a2b/export</id>
    <title>473b2297-13ac-4fdb-bc4a-bfe15c158a2b</title>
    <updated>2026-09-15T18:47:48.922963+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "473b2297-13ac-4fdb-bc4a-bfe15c158a2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11328", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115327577399848313", "content": "", "creation_timestamp": "2025-10-06T13:59:37.939374Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/473b2297-13ac-4fdb-bc4a-bfe15c158a2b/export"/>
    <published>2025-10-06T13:59:37.939374+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8e5dfdb5-08d9-4db1-a830-7d4b1eb12bf9/export</id>
    <title>8e5dfdb5-08d9-4db1-a830-7d4b1eb12bf9</title>
    <updated>2026-09-15T18:47:48.923031+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8e5dfdb5-08d9-4db1-a830-7d4b1eb12bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11327", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115327577399848313", "content": "", "creation_timestamp": "2025-10-06T13:59:37.862023Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8e5dfdb5-08d9-4db1-a830-7d4b1eb12bf9/export"/>
    <published>2025-10-06T13:59:37.862023+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9385a7e4-d11d-43c6-a485-583875dd03eb/export</id>
    <title>9385a7e4-d11d-43c6-a485-583875dd03eb</title>
    <updated>2026-09-15T18:47:48.923094+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9385a7e4-d11d-43c6-a485-583875dd03eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11326", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115327577399848313", "content": "", "creation_timestamp": "2025-10-06T13:59:37.759728Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9385a7e4-d11d-43c6-a485-583875dd03eb/export"/>
    <published>2025-10-06T13:59:37.759728+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/28bec834-1ff5-44aa-8b92-e560d720b215/export</id>
    <title>28bec834-1ff5-44aa-8b92-e560d720b215</title>
    <updated>2026-09-15T18:47:48.923159+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "28bec834-1ff5-44aa-8b92-e560d720b215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11329", "type": "seen", "source": "https://gist.github.com/Darkcrai86/90f4cd3e966808a45334aee9d594708c", "content": "", "creation_timestamp": "2025-10-06T11:24:33.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/28bec834-1ff5-44aa-8b92-e560d720b215/export"/>
    <published>2025-10-06T11:24:33+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a61ed5ae-68c6-4acc-879a-eae41dc52228/export</id>
    <title>a61ed5ae-68c6-4acc-879a-eae41dc52228</title>
    <updated>2026-09-15T18:47:48.923231+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a61ed5ae-68c6-4acc-879a-eae41dc52228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-11325", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m2j3x6hid326", "content": "", "creation_timestamp": "2025-10-06T07:34:13.446097Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a61ed5ae-68c6-4acc-879a-eae41dc52228/export"/>
    <published>2025-10-06T07:34:13.446097+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2366a5f7-456b-4be0-9423-4dbc4fef9f18/export</id>
    <title>2366a5f7-456b-4be0-9423-4dbc4fef9f18</title>
    <updated>2026-09-15T18:47:48.923298+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2366a5f7-456b-4be0-9423-4dbc4fef9f18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1132", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2366a5f7-456b-4be0-9423-4dbc4fef9f18/export"/>
    <published>2025-08-25T13:32:05+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/761b077d-1d60-4fb4-86ae-68f2e7358f5c/export</id>
    <title>761b077d-1d60-4fb4-86ae-68f2e7358f5c</title>
    <updated>2026-09-15T18:47:48.923364+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "761b077d-1d60-4fb4-86ae-68f2e7358f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1132", "type": "seen", "source": "https://t.me/warmakerz/1093", "content": "\ud83d\udea8 Critical Security Vulnerability\n\ud83d\udfe2 CVE-2025-1132\n\ud83d\udfe2 CVE-2025-1133\n\ud83d\udfe2 CVE-2025-1134\n\ud83d\udfe2 CVE-2025-1135\n\ud83d\udd34 CVSS Score: 9.3, 9.3, 9.3, 9.3\n\u267e Published Date: 25/02/19\n\u26a0\ufe0f Details: A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the DonatedItemEditor functionality. The CurrentFundraiser parameter is directly concatenated into an SQL query without sufficient sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion. Please note that this vulnerability requires Administrator privileges.\n\n\u27a1\ufe0f\u27a1\ufe0f  @WarmakerZ  \u2b05\ufe0f\u2b05\ufe0f", "creation_timestamp": "2025-02-20T07:00:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/761b077d-1d60-4fb4-86ae-68f2e7358f5c/export"/>
    <published>2025-02-20T07:00:36+00:00</published>
  </entry>
</feed>
