<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 14 Jun 2026 23:45:55 +0000</lastBuildDate>
    <item>
      <title>e412ae9b-2af1-4e32-bdb0-533d550a6dd3</title>
      <link>https://vulnerability.circl.lu/sighting/e412ae9b-2af1-4e32-bdb0-533d550a6dd3/export</link>
      <description>{"uuid": "e412ae9b-2af1-4e32-bdb0-533d550a6dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "published-proof-of-concept", "source": "https://t.me/reconshell/408", "content": "CVE-2020-17523 Apache Shiro authentication bypass analysis\n\n#InfoSec #CyberSecurity #Shiro #ApacheShiro #CVE-2020-17523 #Vulnerability\n#VulnerabilityAnalysis\n\nhttps://upurl.me/wj7w7", "creation_timestamp": "2021-02-05T17:20:22.000000Z"}</description>
      <content:encoded>{"uuid": "e412ae9b-2af1-4e32-bdb0-533d550a6dd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "published-proof-of-concept", "source": "https://t.me/reconshell/408", "content": "CVE-2020-17523 Apache Shiro authentication bypass analysis\n\n#InfoSec #CyberSecurity #Shiro #ApacheShiro #CVE-2020-17523 #Vulnerability\n#VulnerabilityAnalysis\n\nhttps://upurl.me/wj7w7", "creation_timestamp": "2021-02-05T17:20:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e412ae9b-2af1-4e32-bdb0-533d550a6dd3/export</guid>
      <pubDate>Fri, 05 Feb 2021 17:20:22 +0000</pubDate>
    </item>
    <item>
      <title>959c5520-10f7-4c42-8d5b-f9304fef24f9</title>
      <link>https://vulnerability.circl.lu/sighting/959c5520-10f7-4c42-8d5b-f9304fef24f9/export</link>
      <description>{"uuid": "959c5520-10f7-4c42-8d5b-f9304fef24f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "seen", "source": "https://t.me/reconshell/695", "content": "CVE-2020-17523\n\nApache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.\n\nhttps://cve.reconshell.com/cve/CVE-2020-17523", "creation_timestamp": "2021-04-25T08:04:48.000000Z"}</description>
      <content:encoded>{"uuid": "959c5520-10f7-4c42-8d5b-f9304fef24f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "seen", "source": "https://t.me/reconshell/695", "content": "CVE-2020-17523\n\nApache Shiro before 1.7.1, when using Apache Shiro with Spring, a specially crafted HTTP request may cause an authentication bypass.\n\nhttps://cve.reconshell.com/cve/CVE-2020-17523", "creation_timestamp": "2021-04-25T08:04:48.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/959c5520-10f7-4c42-8d5b-f9304fef24f9/export</guid>
      <pubDate>Sun, 25 Apr 2021 08:04:48 +0000</pubDate>
    </item>
    <item>
      <title>95e8e2e0-1e90-4874-b0e2-5a08f773db3e</title>
      <link>https://vulnerability.circl.lu/sighting/95e8e2e0-1e90-4874-b0e2-5a08f773db3e/export</link>
      <description>{"uuid": "95e8e2e0-1e90-4874-b0e2-5a08f773db3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/15", "content": "CVE-2020-17523 Apache Shiro pathMatches \u8eab\u4efd\u8a8d\u8b49\u7e5e\u904e\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-17523_Apache_Shiro_pathMatches_%E8%BA%AB%E4%BB%BD%E8%AA%8D%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T06:42:55.000000Z"}</description>
      <content:encoded>{"uuid": "95e8e2e0-1e90-4874-b0e2-5a08f773db3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/15", "content": "CVE-2020-17523 Apache Shiro pathMatches \u8eab\u4efd\u8a8d\u8b49\u7e5e\u904e\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2020-17523_Apache_Shiro_pathMatches_%E8%BA%AB%E4%BB%BD%E8%AA%8D%E8%AD%89%E7%B9%9E%E9%81%8E%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-09-21T06:42:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/95e8e2e0-1e90-4874-b0e2-5a08f773db3e/export</guid>
      <pubDate>Tue, 21 Sep 2021 06:42:55 +0000</pubDate>
    </item>
    <item>
      <title>bea49b55-210f-4aac-a6a6-3143550b4c0a</title>
      <link>https://vulnerability.circl.lu/sighting/bea49b55-210f-4aac-a6a6-3143550b4c0a/export</link>
      <description>{"uuid": "bea49b55-210f-4aac-a6a6-3143550b4c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2650", "content": "#exploit\nCVE-2020-17523:\nApache Shiro pathMatches Authentication Bypass\n\ncondition: Shiro with Spring\n\n/admin/[space] \n/admin/%20\n\nPoC:\ncurl -v http://[Vimtim]/admin/%20/\nhttps://github.com/jweny/shiro-cve-2020-17523", "creation_timestamp": "2022-01-09T19:07:40.000000Z"}</description>
      <content:encoded>{"uuid": "bea49b55-210f-4aac-a6a6-3143550b4c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2650", "content": "#exploit\nCVE-2020-17523:\nApache Shiro pathMatches Authentication Bypass\n\ncondition: Shiro with Spring\n\n/admin/[space] \n/admin/%20\n\nPoC:\ncurl -v http://[Vimtim]/admin/%20/\nhttps://github.com/jweny/shiro-cve-2020-17523", "creation_timestamp": "2022-01-09T19:07:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bea49b55-210f-4aac-a6a6-3143550b4c0a/export</guid>
      <pubDate>Sun, 09 Jan 2022 19:07:40 +0000</pubDate>
    </item>
    <item>
      <title>2ee14a09-acf0-4aea-9fff-b8be69ca526c</title>
      <link>https://vulnerability.circl.lu/sighting/2ee14a09-acf0-4aea-9fff-b8be69ca526c/export</link>
      <description>{"uuid": "2ee14a09-acf0-4aea-9fff-b8be69ca526c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid &amp;lt;=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "creation_timestamp": "2024-05-22T06:15:17.000000Z"}</description>
      <content:encoded>{"uuid": "2ee14a09-acf0-4aea-9fff-b8be69ca526c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-17523", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/2661", "content": "#Analytics\n10 most exploited vulnerabilities of the week (feb 1-7)\nCVE-2020-1350 - Exploit SIGRed/Windows DNS Server RCE\nhttps://t.me/cybersecuritytechnologies/1422\nCVE-2021-3156 - Heap-Based Buffer Overflow in Sudo\nhttps://t.me/cybersecuritytechnologies/2577\nCVE-2020-7961 - Arbitrary code execution via JSONWS\nhttps://t.me/cybersecuritytechnologies/869\nCVE-2021-25646 - Apache Druid &amp;lt;=0.20.1 RCE\nhttps://t.me/cybersecuritytechnologies/2639\nCVE-2020-27932 - A type confusion in MacOS 10.15.7\nhttps://t.me/cybersecuritytechnologies/2383\nCVE-2019-9041 - ZzzCMS RCE\nhttps://mobile.twitter.com/i/web/status/1357931580098899970\nCVE-2021-22122 - XSS vulnerability in FortiWeb\nhttps://vulmon.com/vulnerabilitydetails?qid=CVE-2021-22122\nCVE-2019-5127 - A cmd injection in YouPHPTube Encoder\nhttps://mobile.twitter.com/i/web/status/1357546718821142528\nCVE-2020-17523 - Apache Shiro pathMatches Auth. Bypass\nhttps://t.me/cybersecuritytechnologies/2650", "creation_timestamp": "2024-05-22T06:15:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2ee14a09-acf0-4aea-9fff-b8be69ca526c/export</guid>
      <pubDate>Wed, 22 May 2024 06:15:17 +0000</pubDate>
    </item>
  </channel>
</rss>
