https://vulnerability.circl.lu/sightings/feed 2026-07-02T22:18:34.670878+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/2544db86-89af-450d-99d8-335870e69e75/export 2026-07-02T22:18:34.695147+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2544db86-89af-450d-99d8-335870e69e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40677", "type": "seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3maijfmdoa52m", "content": "", "creation_timestamp": "2025-12-21T10:33:25.998753Z"} 2025-12-21T10:33:25.998753+00:00 https://vulnerability.circl.lu/sighting/328ce706-93b9-485c-9ef6-c13bf0bc4682/export 2026-07-02T22:18:34.696904+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "328ce706-93b9-485c-9ef6-c13bf0bc4682", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40677", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ma7kpnsmh42r", "content": "", "creation_timestamp": "2025-12-17T21:03:02.586587Z"} 2025-12-17T21:03:02.586587+00:00 https://vulnerability.circl.lu/sighting/51de4a76-a46e-4ce0-a17a-0fc3fec2178d/export 2026-07-02T22:18:34.697029+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "51de4a76-a46e-4ce0-a17a-0fc3fec2178d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40677", "type": "published-proof-of-concept", "source": "Telegram/5Vt8EpwjyHdujDgjdkJ-lTFzdb-CXmUsrvvwGaWPGRhGGIg", "content": "", "creation_timestamp": "2025-09-22T15:00:06.000000Z"} 2025-09-22T15:00:06+00:00 https://vulnerability.circl.lu/sighting/c9745d91-16f1-4ab3-885c-bfb6645d5e1a/export 2026-07-02T22:18:34.697132+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c9745d91-16f1-4ab3-885c-bfb6645d5e1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40677", "type": "published-proof-of-concept", "source": "Telegram/4KH4fvgPREtz_kMSkNg2r16pvMbYZGydJXtUGpYRnrWI7_8", "content": "", "creation_timestamp": "2025-09-22T11:00:07.000000Z"} 2025-09-22T11:00:07+00:00 https://vulnerability.circl.lu/sighting/b39ea026-2b95-4ee3-94cc-c3cfa65eb5dc/export 2026-07-02T22:18:34.697232+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b39ea026-2b95-4ee3-94cc-c3cfa65eb5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40677", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/52616", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSummar Employee Portal Prior to 3.98.0 Authenticated SQL Injection - CVE-2025-40677\nURL\uff1ahttps://github.com/PeterGabaldon/CVE-2025-40677\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-22T08:06:36.000000Z"} 2025-09-22T08:06:36+00:00 https://vulnerability.circl.lu/sighting/6a38694f-1780-4748-ab8d-f845829f56ac/export 2026-07-02T22:18:34.697323+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6a38694f-1780-4748-ab8d-f845829f56ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40677", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lz4hcikiby2c", "content": "", "creation_timestamp": "2025-09-18T13:27:35.217042Z"} 2025-09-18T13:27:35.217042+00:00 https://vulnerability.circl.lu/sighting/6a8ee01a-0008-4a3b-ab06-6b7b5e0e3927/export 2026-07-02T22:18:34.697405+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6a8ee01a-0008-4a3b-ab06-6b7b5e0e3927", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40674", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-40674\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Reflected Cross-Site Scripting (XSS) in osCommerce v4. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the name of any parameter in /watch/en/about-us. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.\n\ud83d\udccf Published: 2025-06-17T08:50:17.363Z\n\ud83d\udccf Modified: 2025-06-17T08:50:17.363Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/reflected-cross-site-scripting-xss-oscommerce", "creation_timestamp": "2025-06-17T09:41:30.000000Z"} 2025-06-17T09:41:30+00:00 https://vulnerability.circl.lu/sighting/1ee0af05-adb7-48ef-8f67-afc236627b2e/export 2026-07-02T22:18:34.697491+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1ee0af05-adb7-48ef-8f67-afc236627b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40670", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr6pvtlda52k", "content": "", "creation_timestamp": "2025-06-09T15:45:20.801986Z"} 2025-06-09T15:45:20.801986+00:00 https://vulnerability.circl.lu/sighting/6fcca6c2-3f55-40ae-a498-486456e1923c/export 2026-07-02T22:18:34.697603+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6fcca6c2-3f55-40ae-a498-486456e1923c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40670", "type": "published-proof-of-concept", "source": "Telegram/AvRPE1FYyApk1Jln3Af0piOZ09oDjaUbhCE1oirCL83hBqc", "content": "", "creation_timestamp": "2025-06-09T13:02:03.000000Z"} 2025-06-09T13:02:03+00:00 https://vulnerability.circl.lu/sighting/c4969e9b-c706-4369-9f13-c9be818aaa23/export 2026-07-02T22:18:34.697702+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c4969e9b-c706-4369-9f13-c9be818aaa23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-40675", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr6ap5pvp22e", "content": "", "creation_timestamp": "2025-06-09T11:13:10.433000Z"} 2025-06-09T11:13:10.433000+00:00