<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-17T13:07:12.702315+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cb607399-4c26-4460-af77-33f1682cb4c3/export</id>
    <title>cb607399-4c26-4460-af77-33f1682cb4c3</title>
    <updated>2026-06-17T13:07:12.862260+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cb607399-4c26-4460-af77-33f1682cb4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48997", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpzkhwltri2", "content": "", "creation_timestamp": "2025-06-03T19:28:38.134322Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cb607399-4c26-4460-af77-33f1682cb4c3/export"/>
    <published>2025-06-03T19:28:38.134322+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/33af7b4d-e459-4921-9813-c2b831b2bedf/export</id>
    <title>33af7b4d-e459-4921-9813-c2b831b2bedf</title>
    <updated>2026-06-17T13:07:12.862160+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "33af7b4d-e459-4921-9813-c2b831b2bedf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48998", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpzkiekknm2", "content": "", "creation_timestamp": "2025-06-03T19:28:38.852542Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/33af7b4d-e459-4921-9813-c2b831b2bedf/export"/>
    <published>2025-06-03T19:28:38.852542+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/348fd4e7-c4a6-482f-96b4-a497c40caa92/export</id>
    <title>348fd4e7-c4a6-482f-96b4-a497c40caa92</title>
    <updated>2026-06-17T13:07:12.862059+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "348fd4e7-c4a6-482f-96b4-a497c40caa92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48998", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqq7inqymq2p", "content": "", "creation_timestamp": "2025-06-03T21:14:22.353662Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/348fd4e7-c4a6-482f-96b4-a497c40caa92/export"/>
    <published>2025-06-03T21:14:22.353662+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/570576ea-c85b-4318-958a-4aa35b9bb4b8/export</id>
    <title>570576ea-c85b-4318-958a-4aa35b9bb4b8</title>
    <updated>2026-06-17T13:07:12.861959+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "570576ea-c85b-4318-958a-4aa35b9bb4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48997", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqqbc66d4e2j", "content": "", "creation_timestamp": "2025-06-03T21:46:32.175411Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/570576ea-c85b-4318-958a-4aa35b9bb4b8/export"/>
    <published>2025-06-03T21:46:32.175411+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bea4164d-b386-4187-b15b-b11dbb9d609c/export</id>
    <title>bea4164d-b386-4187-b15b-b11dbb9d609c</title>
    <updated>2026-06-17T13:07:12.861857+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bea4164d-b386-4187-b15b-b11dbb9d609c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48999", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqqkl2lmpn2q", "content": "", "creation_timestamp": "2025-06-04T00:32:34.250430Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bea4164d-b386-4187-b15b-b11dbb9d609c/export"/>
    <published>2025-06-04T00:32:34.250430+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0dfde8b0-46bc-488e-b883-ba921baca668/export</id>
    <title>0dfde8b0-46bc-488e-b883-ba921baca668</title>
    <updated>2026-06-17T13:07:12.861749+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0dfde8b0-46bc-488e-b883-ba921baca668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48997", "type": "seen", "source": "https://bsky.app/profile/andrewnez.mastodon.social.ap.brid.gy/post/3lrauylp3wxs2", "content": "", "creation_timestamp": "2025-06-10T12:22:27.802973Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0dfde8b0-46bc-488e-b883-ba921baca668/export"/>
    <published>2025-06-10T12:22:27.802973+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2ed71c66-e4a9-4847-8657-6bf39b4c97e9/export</id>
    <title>2ed71c66-e4a9-4847-8657-6bf39b4c97e9</title>
    <updated>2026-06-17T13:07:12.861622+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2ed71c66-e4a9-4847-8657-6bf39b4c97e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48992", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18549", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48992\n\ud83d\udd25 CVSS Score: 5.2 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:P)\n\ud83d\udd39 Description: Group-Office is an enterprise customer relationship management and groupware tool. Prior to versions 6.8.123 and 25.0.27, a stored and blind cross-site scripting (XSS) vulnerability exists in the Name Field of the user profile. A malicious attacker can change their name to a javascript payload, which is executed when a user adds the malicious user to their Synchronization &amp;gt; Address books. This issue has been patched in versions  6.8.123 and 25.0.27.\n\ud83d\udccf Published: 2025-06-16T22:17:28.511Z\n\ud83d\udccf Modified: 2025-06-16T22:17:28.511Z\n\ud83d\udd17 References:\n1. https://github.com/Intermesh/groupoffice/security/advisories/GHSA-j35g-q5mc-jwgp\n2. https://github.com/Intermesh/groupoffice/commit/2e3695db9cdef1da7a9d754ff4d98f49f6924e2d", "creation_timestamp": "2025-06-16T22:40:43.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2ed71c66-e4a9-4847-8657-6bf39b4c97e9/export"/>
    <published>2025-06-16T22:40:43+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/adea3507-970b-4758-9880-cc0dfd1c6b5d/export</id>
    <title>adea3507-970b-4758-9880-cc0dfd1c6b5d</title>
    <updated>2026-06-17T13:07:12.861491+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "adea3507-970b-4758-9880-cc0dfd1c6b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48993", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrrki5y7up2o", "content": "", "creation_timestamp": "2025-06-17T03:28:48.333273Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/adea3507-970b-4758-9880-cc0dfd1c6b5d/export"/>
    <published>2025-06-17T03:28:48.333273+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1ff3ce5e-5c72-4464-a141-d208ee690ae1/export</id>
    <title>1ff3ce5e-5c72-4464-a141-d208ee690ae1</title>
    <updated>2026-06-17T13:07:12.861305+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1ff3ce5e-5c72-4464-a141-d208ee690ae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48991", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-48991\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a vulnerability present in Tuleap Community Edition prior to version 16.8.99.1748845907 and Tuleap Enterprise Edition prior to versions 16.8-3 and 16.7-5 to trick victims into changing the canned responses. Tuleap Community Edition 16.8.99.1748845907, Tuleap Enterprise Edition 16.8-3, and Tuleap Enterprise Edition 16.7-5 contain a fix for the vulnerability.\n\ud83d\udccf Published: 2025-06-25T14:07:47.416Z\n\ud83d\udccf Modified: 2025-06-25T14:16:19.378Z\n\ud83d\udd17 References:\n1. https://github.com/Enalean/tuleap/security/advisories/GHSA-px9r-875r-w534\n2. https://github.com/Enalean/tuleap/commit/cbf9b2a38e33dfd755dc2ccf074126b598a78274\n3. https://tuleap.net/plugins/git/tuleap/tuleap/stable?a=commit&amp;amp;h=cbf9b2a38e33dfd755dc2ccf074126b598a78274\n4. https://tuleap.net/plugins/tracker/?aid=43326", "creation_timestamp": "2025-06-25T14:51:35.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1ff3ce5e-5c72-4464-a141-d208ee690ae1/export"/>
    <published>2025-06-25T14:51:35+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2c27f241-81f4-4818-ad5a-c3f68eff54ee/export</id>
    <title>2c27f241-81f4-4818-ad5a-c3f68eff54ee</title>
    <updated>2026-06-17T13:07:12.858083+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2c27f241-81f4-4818-ad5a-c3f68eff54ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-48991", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsh33cyagc2r", "content": "", "creation_timestamp": "2025-06-25T16:51:45.454893Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2c27f241-81f4-4818-ad5a-c3f68eff54ee/export"/>
    <published>2025-06-25T16:51:45.454893+00:00</published>
  </entry>
</feed>
