https://vulnerability.circl.lu/sightings/feed 2026-10-04T14:15:36.259665+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/0ddf1259-200f-4c64-970c-2587ece9acc1/export 2026-10-04T14:15:36.285196+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0ddf1259-200f-4c64-970c-2587ece9acc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "published-proof-of-concept", "source": "https://t.me/cissp/1993", "content": "1. DNS Vulnerabilities and the Cloud\nhttps://unit42.paloaltonetworks.com/dns-vulnerabilities\n\n2. Operation SignSight: Supply\u2011chain \ud83e\udd2aattack against a certification authority in Southeast Asia\nhttps://www.welivesecurity.com/2020/12/17/operation-signsight-supply-chain-attack-southeast-asia\n\n1. Automation for internal Windows Penetrationtest/AD-Security\nhttps://github.com/S3cur3Th1sSh1t/WinPwn\n\n2. A Visual Studio Code Extension agent for Mythic C2\nhttps://github.com/MythicAgents/venus\n]-> Harvis to automate C2 Infrastructure\nhttps://github.com/thiagomayllart/Harvis\n\n1. SearchDimension search hijackers: An overview of developments\nhttps://blog.malwarebytes.com/adware/2020/12/searchdimension-search-hijackers\n\n2. AutoHotKey Credential Stealer\nhttps://www.trendmicro.com/en_us/research/20/l/stealth-credential-stealer-targets-us-canadian-bank-customers.html\n\n3. New Golang Worm Drops XMRig Miner on Servers\nhttps://www.intezer.com/blog/research/new-golang-worm-drops-xmrig-miner-on-servers/?fbclid=IwAR3eFiHCNoqr5mc2UAOcm8nocjUOjZn0cpcAiSoYmn__JtJfBbjqUUT1OwQ\n\n4.A detailed analysis of Derusbi DLL Backdoor\nhttps://cybergeeks.tech/analyzing-apt19-malware-using-a-step-by-step-method\n\n5.Ransomware-Reports\nhttps://github.com/d4rk-d4nph3/Ransomware-Reports\n\n\n1. Account Takeover (ATO) and Email verification bypass\nhttps://medium.com/@karthiksoft007/account-takeover-ato-and-email-verification-bypass-in-2mins-5a6c8cb692a7\n\n2. Troubleshooting Empire and PoshC2_Python HTTPS Connections\nhttps://www.attackdebris.com/?p=515\n\nDeep Dive into Site Isolation\nPart 1:\nhttps://microsoftedge.github.io/edgevr/posts/deep-dive-into-site-isolation-part-1\nPart 2:\nhttps://microsoftedge.github.io/edgevr/posts/deep-dive-into-site-isolation-part-2\n\nGoogle Docs Vulnerability (PoC)\nhttps://savebreach.com/stealing-private-documents-through-a-google-docs-bug\n\nCVE-2020-10148 (local file disclosure PoC for SolarWinds Orion aka door to SuperNova)\nhttps://gist.github.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965\n\nUndocumented user account in Zyxel USG/USG FLEX, ATP, VPN, ZyWALL (CVE-2020-29583)\nhttps://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html\nPoC:\nUsername: zyfwp\nPassword: PrOw!aN_fXp\n\nExamining CVE-2020-27932 on macOS 10.15.7\nhttps://worthdoingbadly.com/specialreply\nPoC:\nhttps://gist.github.com/zhuowei/861fd8878397d9696303259f40cb01b3", "creation_timestamp": "2026-09-11T22:00:05.359458Z"} 2026-09-11T22:00:05.359458+00:00 https://vulnerability.circl.lu/sighting/02b035a1-a936-4402-813a-e458f9807c35/export 2026-10-04T14:15:36.287923+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "02b035a1-a936-4402-813a-e458f9807c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "https://t.me/cissp/1993", "content": "1. DNS Vulnerabilities and the Cloud\nhttps://unit42.paloaltonetworks.com/dns-vulnerabilities\n\n2. Operation SignSight: Supply\u2011chain \ud83e\udd2aattack against a certification authority in Southeast Asia\nhttps://www.welivesecurity.com/2020/12/17/operation-signsight-supply-chain-attack-southeast-asia\n\n1. Automation for internal Windows Penetrationtest/AD-Security\nhttps://github.com/S3cur3Th1sSh1t/WinPwn\n\n2. A Visual Studio Code Extension agent for Mythic C2\nhttps://github.com/MythicAgents/venus\n]-> Harvis to automate C2 Infrastructure\nhttps://github.com/thiagomayllart/Harvis\n\n1. SearchDimension search hijackers: An overview of developments\nhttps://blog.malwarebytes.com/adware/2020/12/searchdimension-search-hijackers\n\n2. AutoHotKey Credential Stealer\nhttps://www.trendmicro.com/en_us/research/20/l/stealth-credential-stealer-targets-us-canadian-bank-customers.html\n\n3. New Golang Worm Drops XMRig Miner on Servers\nhttps://www.intezer.com/blog/research/new-golang-worm-drops-xmrig-miner-on-servers/?fbclid=IwAR3eFiHCNoqr5mc2UAOcm8nocjUOjZn0cpcAiSoYmn__JtJfBbjqUUT1OwQ\n\n4.A detailed analysis of Derusbi DLL Backdoor\nhttps://cybergeeks.tech/analyzing-apt19-malware-using-a-step-by-step-method\n\n5.Ransomware-Reports\nhttps://github.com/d4rk-d4nph3/Ransomware-Reports\n\n\n1. Account Takeover (ATO) and Email verification bypass\nhttps://medium.com/@karthiksoft007/account-takeover-ato-and-email-verification-bypass-in-2mins-5a6c8cb692a7\n\n2. Troubleshooting Empire and PoshC2_Python HTTPS Connections\nhttps://www.attackdebris.com/?p=515\n\nDeep Dive into Site Isolation\nPart 1:\nhttps://microsoftedge.github.io/edgevr/posts/deep-dive-into-site-isolation-part-1\nPart 2:\nhttps://microsoftedge.github.io/edgevr/posts/deep-dive-into-site-isolation-part-2\n\nGoogle Docs Vulnerability (PoC)\nhttps://savebreach.com/stealing-private-documents-through-a-google-docs-bug\n\nCVE-2020-10148 (local file disclosure PoC for SolarWinds Orion aka door to SuperNova)\nhttps://gist.github.com/0xsha/75616ef6f24067c4fb5b320c5dfa4965\n\nUndocumented user account in Zyxel USG/USG FLEX, ATP, VPN, ZyWALL (CVE-2020-29583)\nhttps://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html\nPoC:\nUsername: zyfwp\nPassword: PrOw!aN_fXp\n\nExamining CVE-2020-27932 on macOS 10.15.7\nhttps://worthdoingbadly.com/specialreply\nPoC:\nhttps://gist.github.com/zhuowei/861fd8878397d9696303259f40cb01b3", "creation_timestamp": "2026-09-01T17:01:08.639778Z"} 2026-09-01T17:01:08.639778+00:00 https://vulnerability.circl.lu/sighting/79593685-36bc-480c-866a-555f5e650703/export 2026-10-04T14:15:36.288093+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "79593685-36bc-480c-866a-555f5e650703", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mtbd77f7532v", "content": "\ud83e\udd16 CISA KEV adds 5 exploited CVEs: Yealink SSRF->RCE (CVE-2021-27561), Zoho ManageEngine auth bypass (CVE-2021-40539), Zyxel hard-coded creds (CVE-2020-29583).\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-27561", "creation_timestamp": "2026-08-17T08:52:31.584920Z"} 2026-08-17T08:52:31.584920+00:00 https://vulnerability.circl.lu/sighting/9162f8cc-4838-47e7-a95b-b22a7f276f76/export 2026-10-04T14:15:36.288209+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "9162f8cc-4838-47e7-a95b-b22a7f276f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mpvcjqe4mx2c", "content": "\ud83e\udd16 CVE-2020-29583 added to CISA KEV: Zyxel firewalls have hard-coded credentials in undocumented account \"zyfwp\". Active exploitation confirmed.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-29583", "creation_timestamp": "2026-07-05T09:53:00.459171Z"} 2026-07-05T09:53:00.459171+00:00 https://vulnerability.circl.lu/sighting/6e416c9b-aa75-4781-a463-ec2bab8bcd5d/export 2026-10-04T14:15:36.288311+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6e416c9b-aa75-4781-a463-ec2bab8bcd5d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/33c4ef18-0ea7-4140-8822-6feca6ba7bbd", "content": "", "creation_timestamp": "2026-06-23T14:04:26.393127Z"} 2026-06-23T14:04:26.393127+00:00 https://vulnerability.circl.lu/sighting/dff1f92f-dc8a-4be6-a026-12a82fc89979/export 2026-10-04T14:15:36.288407+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dff1f92f-dc8a-4be6-a026-12a82fc89979", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0a901a8d-0e35-4129-bdd3-8cddfc9a063c", "content": "", "creation_timestamp": "2026-06-19T12:48:02.117440Z"} 2026-06-19T12:48:02.117440+00:00 https://vulnerability.circl.lu/sighting/9d7f9306-94af-495a-8a50-d68c5dcae15d/export 2026-10-04T14:15:36.288498+00:00 Cédric Bonhomme https://cvepremium.circl.lu/user/cedric {"uuid": "9d7f9306-94af-495a-8a50-d68c5dcae15d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2020-29583", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/819b768f-8bd5-4199-9f62-1920e0a260b2", "content": "", "creation_timestamp": "2026-02-02T12:29:08.326201Z"} 2026-02-02T12:29:08.326201+00:00 https://vulnerability.circl.lu/sighting/d2da0286-e541-4267-bca2-b829c55c328e/export 2026-10-04T14:15:36.289411+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d2da0286-e541-4267-bca2-b829c55c328e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:09:48.000000Z"} 2025-02-23T02:09:48+00:00 https://vulnerability.circl.lu/sighting/02609509-6f61-4977-964d-638a35ae0c21/export 2026-10-04T14:15:36.289515+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "02609509-6f61-4977-964d-638a35ae0c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2605", "content": "#Analytics\nTop 10 Most Used Vulnerabilities of the Month (january 1-31)\nCVE-2021-3156:\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-16875:\nhttps://t.me/cybersecuritytechnologies/1751\nCVE-2020-29583:\nhttps://t.me/cybersecuritytechnologies/2386\nCVE-2021-2109:\nhttps://t.me/cybersecuritytechnologies/2540\nCVE-2020-17519:\nhttps://t.me/cybersecuritytechnologies/2473\nCVE-2020-25684/25685/25686:\nhttps://t.me/cybersecuritytechnologies/2534\nCVE-2021-3011:\nhttps://t.me/cybersecuritytechnologies/2447", "creation_timestamp": "2025-01-04T20:01:45.000000Z"} 2025-01-04T20:01:45+00:00 https://vulnerability.circl.lu/sighting/34331b48-1462-44af-b396-69028459b2db/export 2026-10-04T14:15:36.289626+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "34331b48-1462-44af-b396-69028459b2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-29583", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2970885", "content": "", "creation_timestamp": "2024-12-24T20:21:15.216941Z"} 2024-12-24T20:21:15.216941+00:00