https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 18:36:28 +0000 https://vulnerability.circl.lu/sighting/dc4b17c6-fda8-4870-a3a4-a04c1b817a07/export {"uuid": "dc4b17c6-fda8-4870-a3a4-a04c1b817a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-14733", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-arbitrary-code-execution-watchguard-fireware-os-patch-immediately", "content": "", "creation_timestamp": "2026-09-17T12:45:02.355674Z"} {"uuid": "dc4b17c6-fda8-4870-a3a4-a04c1b817a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-14733", "type": "seen", "source": "https://ccb.belgium.be/advisories/warning-arbitrary-code-execution-watchguard-fireware-os-patch-immediately", "content": "", "creation_timestamp": "2026-09-17T12:45:02.355674Z"} https://vulnerability.circl.lu/sighting/dc4b17c6-fda8-4870-a3a4-a04c1b817a07/export Thu, 17 Sep 2026 12:45:02 +0000 https://vulnerability.circl.lu/sighting/64ee54d0-c568-4fbc-86f0-bbb79ced6332/export {"uuid": "64ee54d0-c568-4fbc-86f0-bbb79ced6332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14174", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvmhyiedzn2f", "content": "CVE-2025-14174 is trending. Hype score 21, currently #1 on cvemon.\n\nOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-14174", "creation_timestamp": "2026-09-16T06:07:54.756113Z"} {"uuid": "64ee54d0-c568-4fbc-86f0-bbb79ced6332", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14174", "type": "seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mvmhyiedzn2f", "content": "CVE-2025-14174 is trending. Hype score 21, currently #1 on cvemon.\n\nOut of bounds memory access in ANGLE in Google Chrome on Mac prior to 143.0.7499.110 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-14174", "creation_timestamp": "2026-09-16T06:07:54.756113Z"} https://vulnerability.circl.lu/sighting/64ee54d0-c568-4fbc-86f0-bbb79ced6332/export Wed, 16 Sep 2026 06:07:54 +0000 https://vulnerability.circl.lu/sighting/e9b5f092-901e-4375-ae97-b0f80b7fd36a/export {"uuid": "e9b5f092-901e-4375-ae97-b0f80b7fd36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14659", "type": "published-proof-of-concept", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-15T00:00:27.196113Z"} {"uuid": "e9b5f092-901e-4375-ae97-b0f80b7fd36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14659", "type": "published-proof-of-concept", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-15T00:00:27.196113Z"} https://vulnerability.circl.lu/sighting/e9b5f092-901e-4375-ae97-b0f80b7fd36a/export Tue, 15 Sep 2026 00:00:27 +0000 https://vulnerability.circl.lu/sighting/51f94f90-b655-4bcc-9341-41f6b7574032/export {"uuid": "51f94f90-b655-4bcc-9341-41f6b7574032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-14871", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:45:53.828003Z"} {"uuid": "51f94f90-b655-4bcc-9341-41f6b7574032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-14871", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuudet/haavoittuvuus-2026-25", "content": "", "creation_timestamp": "2026-09-14T07:45:53.828003Z"} https://vulnerability.circl.lu/sighting/51f94f90-b655-4bcc-9341-41f6b7574032/export Mon, 14 Sep 2026 07:45:53 +0000 https://vulnerability.circl.lu/sighting/1a48f9bc-b409-4c48-b514-f4db56a86a0e/export {"uuid": "1a48f9bc-b409-4c48-b514-f4db56a86a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-14871", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:08.707116Z"} {"uuid": "1a48f9bc-b409-4c48-b514-f4db56a86a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-14871", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities_20260914", "content": "", "creation_timestamp": "2026-09-14T07:45:08.707116Z"} https://vulnerability.circl.lu/sighting/1a48f9bc-b409-4c48-b514-f4db56a86a0e/export Mon, 14 Sep 2026 07:45:08 +0000 https://vulnerability.circl.lu/sighting/c1cfd7ae-93a8-456d-9cf3-0905dc1ba5fe/export {"uuid": "c1cfd7ae-93a8-456d-9cf3-0905dc1ba5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14659", "type": "seen", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-14T03:00:07.769088Z"} {"uuid": "c1cfd7ae-93a8-456d-9cf3-0905dc1ba5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14659", "type": "seen", "source": "Telegram/uk9yoRqcZiLOpAGjv24UEoeHuOZU_BlMWygh7B7a0pT6RpM", "content": "", "creation_timestamp": "2026-09-14T03:00:07.769088Z"} https://vulnerability.circl.lu/sighting/c1cfd7ae-93a8-456d-9cf3-0905dc1ba5fe/export Mon, 14 Sep 2026 03:00:07 +0000 https://vulnerability.circl.lu/sighting/d186200b-9b7e-4734-ae4e-75d3cc41cc7e/export {"uuid": "d186200b-9b7e-4734-ae4e-75d3cc41cc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14174", "type": "published-proof-of-concept", "source": "Telegram/L6LhPmAiVnzPIxbC6XDxhnzuEJnxq92MQ83MRD2-qIGhIyE", "content": "", "creation_timestamp": "2026-09-14T00:00:09.978960Z"} {"uuid": "d186200b-9b7e-4734-ae4e-75d3cc41cc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14174", "type": "published-proof-of-concept", "source": "Telegram/L6LhPmAiVnzPIxbC6XDxhnzuEJnxq92MQ83MRD2-qIGhIyE", "content": "", "creation_timestamp": "2026-09-14T00:00:09.978960Z"} https://vulnerability.circl.lu/sighting/d186200b-9b7e-4734-ae4e-75d3cc41cc7e/export Mon, 14 Sep 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/2a09fcc6-b85d-4bac-b1e0-42ff6de466f9/export {"uuid": "2a09fcc6-b85d-4bac-b1e0-42ff6de466f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14174", "type": "published-proof-of-concept", "source": "Telegram/L6LhPmAiVnzPIxbC6XDxhnzuEJnxq92MQ83MRD2-qIGhIyE", "content": "", "creation_timestamp": "2026-09-13T22:00:08.724705Z"} {"uuid": "2a09fcc6-b85d-4bac-b1e0-42ff6de466f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14174", "type": "published-proof-of-concept", "source": "Telegram/L6LhPmAiVnzPIxbC6XDxhnzuEJnxq92MQ83MRD2-qIGhIyE", "content": "", "creation_timestamp": "2026-09-13T22:00:08.724705Z"} https://vulnerability.circl.lu/sighting/2a09fcc6-b85d-4bac-b1e0-42ff6de466f9/export Sun, 13 Sep 2026 22:00:08 +0000 https://vulnerability.circl.lu/sighting/f9228650-2b23-495c-9660-a29b12df7841/export {"uuid": "f9228650-2b23-495c-9660-a29b12df7841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14341", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:37.541610Z"} {"uuid": "f9228650-2b23-495c-9660-a29b12df7841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14341", "type": "seen", "source": "https://t.me/shimiscyberworld/1280", "content": "\ud83d\udee1\ufe0f SCW \u2502 Daily Vulnerability Digest\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83d\udcc5 2026-05-07\n\n\ud83d\udcca 32 vulnerabilities detected today \u2014 8 \ud83d\udd34 Critical, 24 \ud83d\udd34 High\n\n\ud83d\udd34 CRITICAL\n \u2022 CVE-2026-6508 (9.8) \u2014 CVE-2026-6508: Liderahenk Origin Validation Error Allows\u2026\n \u2022 CVE-2026-7414 (9.8) \u2014 Yarbo Firmware v2.3.9 Critical Hardcoded Credential\u2026\n \u2022 CVE-2026-7415 (9.8) \u2014 CVE-2026-7415: Yarbo Robot Firmware Exposes Sensitive Data\u2026\n \u2022 CVE-2026-37709 (9.8) \u2014 Snipe-IT CVE-2026-37709: Critical RCE via Insecure\u2026\n \u2022 CVE-2026-5791 (9.6) \u2014 DivvyDrive Critical CSRF Vulnerability: CVE-2026-5791 Poses\u2026\n \u2022 CVE-2026-41589 (9.6) \u2014 CVE-2026-41589: Critical Path Traversal in Wish SSH Server\u2026\n \u2022 CVE-2026-6795 (9.6) \u2014 DivvyDrive Open Redirect Vulnerability CVE-2026-6795 Rated\u2026\n \u2022 CVE-2026-41902 (9.1) \u2014 CVE-2026-41902: FreeScout Invite Hash Vulnerability Allows\u2026\n\n\ud83d\udd34 HIGH\n \u2022 CVE-2026-3953 (8.8) \u2014 CVE-2026-3953: Gosoft Proticaret E-Commerce XSS\u2026\n \u2022 CVE-2026-5784 (8.8) \u2014 DivvyDrive Stored XSS Vulnerability (CVE-2026-5784) Poses\u2026\n \u2022 CVE-2026-6002 (8.8) \u2014 DivvyDrive XSS Vulnerability (CVE-2026-6002) Poses High Risk\n \u2022 CVE-2026-42215 (8.8) \u2014 CVE-2026-42215: GitPython Arbitrary Command Execution\u2026\n \u2022 CVE-2026-41505 (8.7) \u2014 CVE-2026-41505: RELATE Courseware Package Suffers\u2026\n \u2022 CVE-2025-14341 (8.3) \u2014 CVE-2025-14341: DivvyDrive Vulnerability Allows Excessive\u2026\n \u2022 CVE-2026-41490 (8.3) \u2014 Dagster Orchestration Platform Vulnerable to SQL Injection\u2026\n \u2022 CVE-2026-41422 (8.3) \u2014 Daptin Headless CMS SQLi Puts Data at High Risk\n \u2022 CVE-2026-42284 (8.1) \u2014 CVE-2026-42284: GitPython Vulnerability Allows Remote Code\u2026\n \u2022 CVE-2026-42214 (7.8) \u2014 NotepadNext CVE-2026-42214: Arbitrary Command Execution via\u2026\n \u2026 and 14 more\n\n\ud83d\udcd6 View all vulnerabilities \u2192\n\n\ud83c\udfaf Need SIEM rules for these threats?\nGenerate detection rules for Splunk, Sentinel, QRadar & more \u2014 tailored per breach\nOpen /detect in Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:37.541610Z"} https://vulnerability.circl.lu/sighting/f9228650-2b23-495c-9660-a29b12df7841/export Sun, 13 Sep 2026 00:00:37 +0000 https://vulnerability.circl.lu/sighting/85415c07-c17d-4912-bec7-07d49d340918/export {"uuid": "85415c07-c17d-4912-bec7-07d49d340918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14320", "type": "seen", "source": "https://t.me/shimiscyberworld/1165", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2025-14320 \u2014 CVSS 9.8\nCVE-2025-14320: Critical XSS in Tegsoft Online Support Application\n\nCVE-2025-14320 \u2014 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Com\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2025-14320 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.431797Z"} {"uuid": "85415c07-c17d-4912-bec7-07d49d340918", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14320", "type": "seen", "source": "https://t.me/shimiscyberworld/1165", "content": "\ud83d\udee1\ufe0f SCW \u2502 Critical Vulnerability\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\n\u26a0\ufe0f CVE-2025-14320 \u2014 CVSS 9.8\nCVE-2025-14320: Critical XSS in Tegsoft Online Support Application\n\nCVE-2025-14320 \u2014 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Tegsoft Management and Information Services Trade Limited Com\n\n\ud83d\udd34 Critical \u00b7 2 ATT&CK techniques mapped\n\n#cve #critical #high_severity\n\n\ud83d\udcd6 Full analysis + IOCs \u2192\n\ud83c\udfaf Type /detect cve-2025-14320 in the bot\nOpen Intel Bot \u2192\n\n\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\n\ud83c\udf10 @shimiscyberworld \u00b7 shimiscyberworld.com", "creation_timestamp": "2026-09-13T00:00:09.431797Z"} https://vulnerability.circl.lu/sighting/85415c07-c17d-4912-bec7-07d49d340918/export Sun, 13 Sep 2026 00:00:09 +0000