<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T01:13:38.326920+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3836521a-1757-42f8-a6f5-ac35595a48e0/export</id>
    <title>3836521a-1757-42f8-a6f5-ac35595a48e0</title>
    <updated>2026-10-10T01:13:38.345097+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3836521a-1757-42f8-a6f5-ac35595a48e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "published-proof-of-concept", "source": "https://t.me/HackingTeamGrupoOfficial/43502", "content": "EventLogin \u2014 CVE-2025-29969\n\nA flaw in the MS-EVEN protocol. Low-privileged users can write arbitrary files to a remote machine, effectively bypassing the need for an administrator account for remote file writes\n\n\ud83d\udd17 Source: \nhttps://github.com/SafeBreach-Labs/EventLogin-CVE-2025-29969\n\n\ud83d\udd17 Research:\nhttps://www.safebreach.com/blog/safebreach_labs_discovers_cve-2025-29969/\n\n#ad #windows #eventlog #rpc", "creation_timestamp": "2026-09-03T00:00:46.899590Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3836521a-1757-42f8-a6f5-ac35595a48e0/export"/>
    <published>2026-09-03T00:00:46.899590+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/192df7fc-bccb-4c52-b72c-49e4c1a0f662/export</id>
    <title>192df7fc-bccb-4c52-b72c-49e4c1a0f662</title>
    <updated>2026-10-10T01:13:38.347706+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "192df7fc-bccb-4c52-b72c-49e4c1a0f662", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://t.me/HackingTeamGrupoOfficial/43502", "content": "EventLogin \u2014 CVE-2025-29969\n\nA flaw in the MS-EVEN protocol. Low-privileged users can write arbitrary files to a remote machine, effectively bypassing the need for an administrator account for remote file writes\n\n\ud83d\udd17 Source: \nhttps://github.com/SafeBreach-Labs/EventLogin-CVE-2025-29969\n\n\ud83d\udd17 Research:\nhttps://www.safebreach.com/blog/safebreach_labs_discovers_cve-2025-29969/\n\n#ad #windows #eventlog #rpc", "creation_timestamp": "2026-09-02T06:00:15.771896Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/192df7fc-bccb-4c52-b72c-49e4c1a0f662/export"/>
    <published>2026-09-02T06:00:15.771896+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ef184441-e013-4e9a-89f6-177322bdd856/export</id>
    <title>ef184441-e013-4e9a-89f6-177322bdd856</title>
    <updated>2026-10-10T01:13:38.348045+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ef184441-e013-4e9a-89f6-177322bdd856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/infosecbot.bsky.social/post/3mrutwtkftv2i", "content": "When I saw the CVE-2025-29969 fix (by \n@safebreach\n), I knew there was more to it. It's not as critical as it seems, but it was fun trying to find a way to still exploit this EventLog RPC endpoint\n\n\ud83d\udd01 RT @HackAndDo | reposted by @HackingLZ\nhttps://x.com/HackAndDo/status/2082839830707269811", "creation_timestamp": "2026-07-30T16:22:15.682646Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ef184441-e013-4e9a-89f6-177322bdd856/export"/>
    <published>2026-07-30T16:22:15.682646+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18954d59-223f-487d-8e14-7db281abdaf6/export</id>
    <title>18954d59-223f-487d-8e14-7db281abdaf6</title>
    <updated>2026-10-10T01:13:38.348325+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18954d59-223f-487d-8e14-7db281abdaf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://t.me/proxy_bar/3157", "content": "CVE-2025-29969 EventLogin\n*\n\u0414\u044b\u0440\u043a\u0430 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 MS-EVEN.\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u0443\u044e \u043c\u0430\u0448\u0438\u043d\u0443, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\nExploitation", "creation_timestamp": "2026-07-20T19:00:07.885895Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18954d59-223f-487d-8e14-7db281abdaf6/export"/>
    <published>2026-07-20T19:00:07.885895+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/002b8727-17c4-4272-8175-41c0d2e20223/export</id>
    <title>002b8727-17c4-4272-8175-41c0d2e20223</title>
    <updated>2026-10-10T01:13:38.348549+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "002b8727-17c4-4272-8175-41c0d2e20223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "published-proof-of-concept", "source": "Telegram/pPAZ8wXA8vH6MRSBmBOnia7CtKIzDGIvt__8Gq7G6sfmpzwm", "content": "", "creation_timestamp": "2026-07-20T16:00:05.285357Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/002b8727-17c4-4272-8175-41c0d2e20223/export"/>
    <published>2026-07-20T16:00:05.285357+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/efe515b5-3dfa-4670-ae23-2891cb4c7e3b/export</id>
    <title>efe515b5-3dfa-4670-ae23-2891cb4c7e3b</title>
    <updated>2026-10-10T01:13:38.348686+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "efe515b5-3dfa-4670-ae23-2891cb4c7e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/co11ateral.bsky.social/post/3mfepsfvh622s", "content": "", "creation_timestamp": "2026-02-21T13:23:42.693743Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/efe515b5-3dfa-4670-ae23-2891cb4c7e3b/export"/>
    <published>2026-02-21T13:23:42.693743+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/736bc051-fdc1-4b9e-aac9-f26829be53c5/export</id>
    <title>736bc051-fdc1-4b9e-aac9-f26829be53c5</title>
    <updated>2026-10-10T01:13:38.348759+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "736bc051-fdc1-4b9e-aac9-f26829be53c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3mfe3qx5q5x2c", "content": "", "creation_timestamp": "2026-02-21T07:24:32.936562Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/736bc051-fdc1-4b9e-aac9-f26829be53c5/export"/>
    <published>2026-02-21T07:24:32.936562+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9744854a-d782-4025-bedf-a5c69a9843eb/export</id>
    <title>9744854a-d782-4025-bedf-a5c69a9843eb</title>
    <updated>2026-10-10T01:13:38.348847+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9744854a-d782-4025-bedf-a5c69a9843eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3mfcrf5y5wp2i", "content": "", "creation_timestamp": "2026-02-20T18:46:20.733827Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9744854a-d782-4025-bedf-a5c69a9843eb/export"/>
    <published>2026-02-20T18:46:20.733827+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7dd03465-543e-4804-bf60-235cac78306d/export</id>
    <title>7dd03465-543e-4804-bf60-235cac78306d</title>
    <updated>2026-10-10T01:13:38.348918+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7dd03465-543e-4804-bf60-235cac78306d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3mfc3g3kpxa2d", "content": "", "creation_timestamp": "2026-02-20T12:13:09.384991Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7dd03465-543e-4804-bf60-235cac78306d/export"/>
    <published>2026-02-20T12:13:09.384991+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/18de3c78-fbb4-4317-8286-b889cfa4f691/export</id>
    <title>18de3c78-fbb4-4317-8286-b889cfa4f691</title>
    <updated>2026-10-10T01:13:38.348991+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "18de3c78-fbb4-4317-8286-b889cfa4f691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-29969", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mfbgbrtltf2d", "content": "", "creation_timestamp": "2026-02-20T05:54:57.431940Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/18de3c78-fbb4-4317-8286-b889cfa4f691/export"/>
    <published>2026-02-20T05:54:57.431940+00:00</published>
  </entry>
</feed>
