https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 16:54:16 +0000 https://vulnerability.circl.lu/sighting/87b1ca31-29bf-4f5b-99a5-8995dc120671/export {"uuid": "87b1ca31-29bf-4f5b-99a5-8995dc120671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:12.290010Z"} {"uuid": "87b1ca31-29bf-4f5b-99a5-8995dc120671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:12.290010Z"} https://vulnerability.circl.lu/sighting/87b1ca31-29bf-4f5b-99a5-8995dc120671/export Thu, 17 Sep 2026 10:15:12 +0000 https://vulnerability.circl.lu/sighting/d71b94ed-41c5-43ec-8fc4-bea105eb0814/export {"uuid": "d71b94ed-41c5-43ec-8fc4-bea105eb0814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:09.238073Z"} {"uuid": "d71b94ed-41c5-43ec-8fc4-bea105eb0814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:09.238073Z"} https://vulnerability.circl.lu/sighting/d71b94ed-41c5-43ec-8fc4-bea105eb0814/export Sun, 13 Sep 2026 10:15:09 +0000 https://vulnerability.circl.lu/sighting/c560b65b-0aa0-4126-99cd-96a7cdba372a/export {"uuid": "c560b65b-0aa0-4126-99cd-96a7cdba372a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Outpost24\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module leverages an authentication bypass in CrushFTP 11 < 11.3.1 and 10 < 10.8.4. Attackers\\n with knowledge of a valid username can provide a crafted S3 authentication header to the CrushFTP web API\\n to authenticate as that user without valid credentials. When successfully executed, the exploit will\\n output working session cookies for the target user account.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/gather/crushftp_authbypass_cve_2025_2825\", \"is_install_path\": true, \"mod_time\": \"2025-04-03 10:24:46 +0000\", \"name\": \"CrushFTP AWS4-HMAC Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/crushftp_authbypass_cve_2025_2825\", \"references\": [\"CVE-2025-2825\", \"URL-https://attackerkb.com/topics/k0EgiL9Psz/cve-2025-2825/rapid7-analysis\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:12.982697Z"} {"uuid": "c560b65b-0aa0-4126-99cd-96a7cdba372a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Outpost24\", \"remmons-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module leverages an authentication bypass in CrushFTP 11 < 11.3.1 and 10 < 10.8.4. Attackers\\n with knowledge of a valid username can provide a crafted S3 authentication header to the CrushFTP web API\\n to authenticate as that user without valid credentials. When successfully executed, the exploit will\\n output working session cookies for the target user account.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/gather/crushftp_authbypass_cve_2025_2825\", \"is_install_path\": true, \"mod_time\": \"2025-04-03 10:24:46 +0000\", \"name\": \"CrushFTP AWS4-HMAC Authentication Bypass\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/crushftp_authbypass_cve_2025_2825.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"gather/crushftp_authbypass_cve_2025_2825\", \"references\": [\"CVE-2025-2825\", \"URL-https://attackerkb.com/topics/k0EgiL9Psz/cve-2025-2825/rapid7-analysis\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:12.982697Z"} https://vulnerability.circl.lu/sighting/c560b65b-0aa0-4126-99cd-96a7cdba372a/export Tue, 08 Sep 2026 06:47:12 +0000 https://vulnerability.circl.lu/sighting/15e72356-bab3-46ab-9935-b477e52e414e/export {"uuid": "15e72356-bab3-46ab-9935-b477e52e414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:09.614833Z"} {"uuid": "15e72356-bab3-46ab-9935-b477e52e414e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-06)", "content": "", "creation_timestamp": "2026-09-07T10:15:09.614833Z"} https://vulnerability.circl.lu/sighting/15e72356-bab3-46ab-9935-b477e52e414e/export Mon, 07 Sep 2026 10:15:09 +0000 https://vulnerability.circl.lu/sighting/83259ece-f326-4782-97e8-280bf076a60c/export {"uuid": "83259ece-f326-4782-97e8-280bf076a60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:08.673163Z"} {"uuid": "83259ece-f326-4782-97e8-280bf076a60c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:08.673163Z"} https://vulnerability.circl.lu/sighting/83259ece-f326-4782-97e8-280bf076a60c/export Sun, 06 Sep 2026 10:15:08 +0000 https://vulnerability.circl.lu/sighting/64280ce4-a912-4c83-84aa-d51ca5344603/export {"uuid": "64280ce4-a912-4c83-84aa-d51ca5344603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:12.654794Z"} {"uuid": "64280ce4-a912-4c83-84aa-d51ca5344603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-03)", "content": "", "creation_timestamp": "2026-09-04T10:15:12.654794Z"} https://vulnerability.circl.lu/sighting/64280ce4-a912-4c83-84aa-d51ca5344603/export Fri, 04 Sep 2026 10:15:12 +0000 https://vulnerability.circl.lu/sighting/7bc8e936-143b-48b1-ae9b-3f73e588f9c9/export {"uuid": "7bc8e936-143b-48b1-ae9b-3f73e588f9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:08.275121Z"} {"uuid": "7bc8e936-143b-48b1-ae9b-3f73e588f9c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:08.275121Z"} https://vulnerability.circl.lu/sighting/7bc8e936-143b-48b1-ae9b-3f73e588f9c9/export Wed, 02 Sep 2026 10:15:08 +0000 https://vulnerability.circl.lu/sighting/0f6d8d7f-886b-48ce-a60c-cce1731928c9/export {"uuid": "0f6d8d7f-886b-48ce-a60c-cce1731928c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:08.180676Z"} {"uuid": "0f6d8d7f-886b-48ce-a60c-cce1731928c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-31)", "content": "", "creation_timestamp": "2026-09-01T10:15:08.180676Z"} https://vulnerability.circl.lu/sighting/0f6d8d7f-886b-48ce-a60c-cce1731928c9/export Tue, 01 Sep 2026 10:15:08 +0000 https://vulnerability.circl.lu/sighting/c6a98af9-3cc0-49ef-a2c1-08359b4cc223/export {"uuid": "c6a98af9-3cc0-49ef-a2c1-08359b4cc223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:08.037099Z"} {"uuid": "c6a98af9-3cc0-49ef-a2c1-08359b4cc223", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2825", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:08.037099Z"} https://vulnerability.circl.lu/sighting/c6a98af9-3cc0-49ef-a2c1-08359b4cc223/export Sun, 30 Aug 2026 10:15:08 +0000 https://vulnerability.circl.lu/sighting/aa2bd009-4a6f-46b4-89d9-7cdf0786900e/export {"uuid": "aa2bd009-4a6f-46b4-89d9-7cdf0786900e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://t.me/xhqcankao/18527", "content": "\u673a\u5668\u4eba\u5236\u9020\u5546\u5b87\u6811\u79d1\u6280\u5728\u4ea7\u54c1\u4e2d\u7559\u6709\u540e\u95e8\n\n\u4e24\u540d\u5b89\u5168\u7814\u7a76\u4eba\u5458\u53d1\u73b0\uff0c\u676d\u5dde\u5b87\u6811\u79d1\u6280\u6709\u9650\u516c\u53f8\u5728\u5176\u6d41\u884c\u7684 Go1\u673a\u5668\u72d7\u4e0a\u9884\u88c5\u4e86\u4e00\u4e2a\u660e\u663e\u7684\u540e\u95e8\uff0c\u8be5\u540e\u95e8\u5141\u8bb8\u4efb\u4f55\u4eba\u76d1\u89c6\u5168\u7403\u7684\u5ba2\u6237\u3002\u65b0\u7684\u901a\u7528\u6f0f\u6d1e\u62ab\u9732\u5217\u8868\u786e\u8ba4\u8be5\u95ee\u9898\u5c5e\u4e8e\u4e25\u91cd\u6f0f\u6d1e\uff0c\u6b63\u5f0f\u7f16\u76ee CVE-2025-2894\u3002\u4efb\u4f55\u53d1\u73b0\u8be5\u516c\u5f00 web API \u7684\u4eba\u90fd\u53ef\u4ee5\u770b\u5230 Go1\u673a\u5668\u72d7\u7684\u4f4d\u7f6e\u3002\u5982\u679c\u673a\u5668\u72d7\u5904\u4e8e\u5728\u7ebf\u72b6\u6001\uff0c\u4ed6\u4eec\u751a\u81f3\u65e0\u9700\u767b\u5f55\u5373\u53ef\u67e5\u770b\u673a\u5668\u72d7\u5b9e\u65f6\u6444\u50cf\u5934\u753b\u9762\u3002\u5982\u679c\u673a\u5668\u72d7\u7684\u9ed8\u8ba4 Raspberry Pi \u51ed\u8bc1\u6ca1\u6709\u66f4\u6539\uff0c\u653b\u51fb\u8005\u4e5f\u53ef\u4ee5\u4f7f\u7528\u8fd9\u4e9b\u51ed\u8bc1\u5b8c\u5168\u63a7\u5236\u673a\u5668\u72d7\u3002\u7814\u7a76\u5458\u8868\u793a\uff0c\u4ed6\u4eec\u65e0\u6cd5\u660e\u786e\u65ad\u5b9a\u5b87\u6811\u79d1\u6280\u662f\u5426\u6709\u610f\u521b\u5efa\u76d1\u63a7\u540e\u95e8\uff0c\u6216\u8005\u8fd9\u4ec5\u4ec5\u662f\u201c\u67b6\u6784\u6df7\u4e71\uff0c\u7f16\u7a0b\u4e0d\u89c4\u8303\u201d\u6240\u81f4\u3002\n\n\u2014\u2014 Axios", "creation_timestamp": "2026-08-29T00:00:32.260661Z"} {"uuid": "aa2bd009-4a6f-46b4-89d9-7cdf0786900e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2894", "type": "seen", "source": "https://t.me/xhqcankao/18527", "content": "\u673a\u5668\u4eba\u5236\u9020\u5546\u5b87\u6811\u79d1\u6280\u5728\u4ea7\u54c1\u4e2d\u7559\u6709\u540e\u95e8\n\n\u4e24\u540d\u5b89\u5168\u7814\u7a76\u4eba\u5458\u53d1\u73b0\uff0c\u676d\u5dde\u5b87\u6811\u79d1\u6280\u6709\u9650\u516c\u53f8\u5728\u5176\u6d41\u884c\u7684 Go1\u673a\u5668\u72d7\u4e0a\u9884\u88c5\u4e86\u4e00\u4e2a\u660e\u663e\u7684\u540e\u95e8\uff0c\u8be5\u540e\u95e8\u5141\u8bb8\u4efb\u4f55\u4eba\u76d1\u89c6\u5168\u7403\u7684\u5ba2\u6237\u3002\u65b0\u7684\u901a\u7528\u6f0f\u6d1e\u62ab\u9732\u5217\u8868\u786e\u8ba4\u8be5\u95ee\u9898\u5c5e\u4e8e\u4e25\u91cd\u6f0f\u6d1e\uff0c\u6b63\u5f0f\u7f16\u76ee CVE-2025-2894\u3002\u4efb\u4f55\u53d1\u73b0\u8be5\u516c\u5f00 web API \u7684\u4eba\u90fd\u53ef\u4ee5\u770b\u5230 Go1\u673a\u5668\u72d7\u7684\u4f4d\u7f6e\u3002\u5982\u679c\u673a\u5668\u72d7\u5904\u4e8e\u5728\u7ebf\u72b6\u6001\uff0c\u4ed6\u4eec\u751a\u81f3\u65e0\u9700\u767b\u5f55\u5373\u53ef\u67e5\u770b\u673a\u5668\u72d7\u5b9e\u65f6\u6444\u50cf\u5934\u753b\u9762\u3002\u5982\u679c\u673a\u5668\u72d7\u7684\u9ed8\u8ba4 Raspberry Pi \u51ed\u8bc1\u6ca1\u6709\u66f4\u6539\uff0c\u653b\u51fb\u8005\u4e5f\u53ef\u4ee5\u4f7f\u7528\u8fd9\u4e9b\u51ed\u8bc1\u5b8c\u5168\u63a7\u5236\u673a\u5668\u72d7\u3002\u7814\u7a76\u5458\u8868\u793a\uff0c\u4ed6\u4eec\u65e0\u6cd5\u660e\u786e\u65ad\u5b9a\u5b87\u6811\u79d1\u6280\u662f\u5426\u6709\u610f\u521b\u5efa\u76d1\u63a7\u540e\u95e8\uff0c\u6216\u8005\u8fd9\u4ec5\u4ec5\u662f\u201c\u67b6\u6784\u6df7\u4e71\uff0c\u7f16\u7a0b\u4e0d\u89c4\u8303\u201d\u6240\u81f4\u3002\n\n\u2014\u2014 Axios", "creation_timestamp": "2026-08-29T00:00:32.260661Z"} https://vulnerability.circl.lu/sighting/aa2bd009-4a6f-46b4-89d9-7cdf0786900e/export Sat, 29 Aug 2026 00:00:32 +0000