<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-12T08:19:17.081933+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fa103c41-7739-4394-9007-2706f85af9be/export</id>
    <title>fa103c41-7739-4394-9007-2706f85af9be</title>
    <updated>2026-06-12T08:19:17.442812+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fa103c41-7739-4394-9007-2706f85af9be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-8420", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvpabkhg7f2m", "content": "", "creation_timestamp": "2025-08-06T03:01:37.107941Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fa103c41-7739-4394-9007-2706f85af9be/export"/>
    <published>2025-08-06T03:01:37.107941+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f1292e18-1197-49a4-b3cb-ad7448f370ab/export</id>
    <title>f1292e18-1197-49a4-b3cb-ad7448f370ab</title>
    <updated>2026-06-12T08:19:17.442581+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f1292e18-1197-49a4-b3cb-ad7448f370ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8420", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvpiiiwcnd2k", "content": "", "creation_timestamp": "2025-08-06T05:28:39.236317Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f1292e18-1197-49a4-b3cb-ad7448f370ab/export"/>
    <published>2025-08-06T05:28:39.236317+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/21105dc8-b91b-4006-82f6-5709c6567af3/export</id>
    <title>21105dc8-b91b-4006-82f6-5709c6567af3</title>
    <updated>2026-06-12T08:19:17.439074+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "21105dc8-b91b-4006-82f6-5709c6567af3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-8420", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/62", "content": "{VIP} CVE-2025-8420\nRequest a Quote Form \u2264 \u2013 Unauthenticated Limited RCE\n\nAllows unauthenticated attaks to excte certain PHP functions on the server without credn. Parameters cannot be passed to these functions, but it can still reveal sensitive information such as phpinfo() output.\n\nExample:\n_SERVER[\"HTTP_HOST\"] \n_SERVER[\"HTTP_USER_AGENT\"]\n_SERVER[\"SERVER_ADDR\"]\n_SERVER[\"SERVER_PORT\"]\n_SERVER[\"REMOTE_ADDR\"]\n_SERVER[\"DOCUMENT_ROOT\"]\n\nThis exp installed in the VIP.", "creation_timestamp": "2025-08-11T01:48:32.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/21105dc8-b91b-4006-82f6-5709c6567af3/export"/>
    <published>2025-08-11T01:48:32+00:00</published>
  </entry>
</feed>
