<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-12T02:58:57.346256+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3e5b599d-fb53-494c-b30b-b18d0fc1705f/export</id>
    <title>3e5b599d-fb53-494c-b30b-b18d0fc1705f</title>
    <updated>2026-10-12T02:58:57.374626+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3e5b599d-fb53-494c-b30b-b18d0fc1705f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "seen", "source": "https://t.me/Intel_Encyclopedia/1673", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435 React Native \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432\n\n\u2014\n\nSummary:\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 JFrog \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 React Native. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-11953 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442 @react-native-community/cli-server-api, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS - 9.8 \u0431\u0430\u043b\u043b\u043e\u0432,...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-06 12:37 | Author: Vulner Queen\n\n#native #general_cyber_news #react\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-populyarnom-module-react-native-ugrozhaet-sistemam-razrabotchikov_16041", "creation_timestamp": "2026-09-09T05:00:16.412119Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3e5b599d-fb53-494c-b30b-b18d0fc1705f/export"/>
    <published>2026-09-09T05:00:16.412119+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08e8070c-f3f0-4aa6-b82a-5c0593c663fc/export</id>
    <title>08e8070c-f3f0-4aa6-b82a-5c0593c663fc</title>
    <updated>2026-10-12T02:58:57.377517+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08e8070c-f3f0-4aa6-b82a-5c0593c663fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "exploited", "source": "https://t.me/CyberDispatch/667", "content": "Researchers detect active exploitation of a critical React Native CLI flaw.\n\nCVE-2025-11953 allows unauthenticated OS command execution on exposed Metro dev servers, with attacks deploying PowerShell and a Rust payload.", "creation_timestamp": "2026-08-31T00:00:12.417806Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08e8070c-f3f0-4aa6-b82a-5c0593c663fc/export"/>
    <published>2026-08-31T00:00:12.417806+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2def045d-37eb-43c2-b6f9-d9df1f953cf8/export</id>
    <title>2def045d-37eb-43c2-b6f9-d9df1f953cf8</title>
    <updated>2026-10-12T02:58:57.377642+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2def045d-37eb-43c2-b6f9-d9df1f953cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "seen", "source": "https://t.me/CyberDispatch/667", "content": "Researchers detect active exploitation of a critical React Native CLI flaw.\n\nCVE-2025-11953 allows unauthenticated OS command execution on exposed Metro dev servers, with attacks deploying PowerShell and a Rust payload.", "creation_timestamp": "2026-08-29T20:00:22.298604Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2def045d-37eb-43c2-b6f9-d9df1f953cf8/export"/>
    <published>2026-08-29T20:00:22.298604+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0e90fdc9-7e20-4ce0-b3d3-01dcbaba99f3/export</id>
    <title>0e90fdc9-7e20-4ce0-b3d3-01dcbaba99f3</title>
    <updated>2026-10-12T02:58:57.377716+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0e90fdc9-7e20-4ce0-b3d3-01dcbaba99f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "exploited", "source": "Telegram/bQaE4Tl1jMB0Pw8QHsNBTvvLYUlr6qr9J3dwxMpZjxQW", "content": "", "creation_timestamp": "2026-08-19T23:00:04.015404Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0e90fdc9-7e20-4ce0-b3d3-01dcbaba99f3/export"/>
    <published>2026-08-19T23:00:04.015404+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/72e5d402-871d-41e3-9681-decda3e4dc54/export</id>
    <title>72e5d402-871d-41e3-9681-decda3e4dc54</title>
    <updated>2026-10-12T02:58:57.377784+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "72e5d402-871d-41e3-9681-decda3e4dc54", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "content": "", "creation_timestamp": "2026-06-23T14:03:44.180814Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/72e5d402-871d-41e3-9681-decda3e4dc54/export"/>
    <published>2026-06-23T14:03:44.180814+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/36f22021-2277-4b7a-8790-36c051be6c00/export</id>
    <title>36f22021-2277-4b7a-8790-36c051be6c00</title>
    <updated>2026-10-12T02:58:57.377857+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "36f22021-2277-4b7a-8790-36c051be6c00", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6720f93b-4076-471b-9cab-57d269d19001", "content": "", "creation_timestamp": "2026-06-19T12:45:18.211561Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/36f22021-2277-4b7a-8790-36c051be6c00/export"/>
    <published>2026-06-19T12:45:18.211561+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/631483c2-d8e2-46cf-9f1a-dc101ed16121/export</id>
    <title>631483c2-d8e2-46cf-9f1a-dc101ed16121</title>
    <updated>2026-10-12T02:58:57.377921+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "631483c2-d8e2-46cf-9f1a-dc101ed16121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "seen", "source": "MISP/d277e10b-ad25-4081-a3b6-165ec062d019", "content": "", "creation_timestamp": "2026-05-26T07:46:09.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/631483c2-d8e2-46cf-9f1a-dc101ed16121/export"/>
    <published>2026-05-26T07:46:09+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4eb89a05-3fee-47e4-98c9-423e81b22bce/export</id>
    <title>4eb89a05-3fee-47e4-98c9-423e81b22bce</title>
    <updated>2026-10-12T02:58:57.377998+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4eb89a05-3fee-47e4-98c9-423e81b22bce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11954", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mmceunctqq2r", "content": "CVE-2025-11954 - CSRF in Sitemio's WISECP\nCVE ID : CVE-2025-11954\n \n Published : May 20, 2026, 1:16 p.m. | 3\u00a0hours, 5\u00a0minutes ago\n \n Description : Cross-Site request forgery (CSRF) vulnerability in Sitemio Information Technologies Trade Ltd. Co. WISECP allows Cross Site Reques...", "creation_timestamp": "2026-05-20T16:58:42.636924Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4eb89a05-3fee-47e4-98c9-423e81b22bce/export"/>
    <published>2026-05-20T16:58:42.636924+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/454adb5f-bf94-434e-88db-e2893ab88059/export</id>
    <title>454adb5f-bf94-434e-88db-e2893ab88059</title>
    <updated>2026-10-12T02:58:57.378072+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "454adb5f-bf94-434e-88db-e2893ab88059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11954", "type": "seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mmc5tu6waw2v", "content": "WISECP\uff0820022026\u307e\u3067\uff09\u306bCSRF\u8106\u5f31\u6027\u3002\u653b\u6483\u8005\u306f\u30e6\u30fc\u30b6\u30fc\u306b\u306a\u308a\u3059\u307e\u3057\u3001\u610f\u56f3\u3057\u306a\u3044\u64cd\u4f5c\u3092\u5b9f\u884c\u3055\u305b\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3002\nCVE-2025-11954 CVSS 8.0 | HIGH", "creation_timestamp": "2026-05-20T14:53:00.205650Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/454adb5f-bf94-434e-88db-e2893ab88059/export"/>
    <published>2026-05-20T14:53:00.205650+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/135706c1-105f-4079-896c-cff2c36afe49/export</id>
    <title>135706c1-105f-4079-896c-cff2c36afe49</title>
    <updated>2026-10-12T02:58:57.378142+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "135706c1-105f-4079-896c-cff2c36afe49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-11953", "type": "seen", "source": "https://bsky.app/profile/hackmag.com/post/3miilwa4xct2k", "content": "", "creation_timestamp": "2026-04-02T06:40:04.622295Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/135706c1-105f-4079-896c-cff2c36afe49/export"/>
    <published>2026-04-02T06:40:04.622295+00:00</published>
  </entry>
</feed>
