<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 26 Aug 2026 11:23:51 +0000</lastBuildDate>
    <item>
      <title>371d7a9d-d1ed-4bd2-ab60-9277d592707d</title>
      <link>https://vulnerability.circl.lu/sighting/371d7a9d-d1ed-4bd2-ab60-9277d592707d/export</link>
      <description>{"uuid": "371d7a9d-d1ed-4bd2-ab60-9277d592707d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28899", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m56dsv7znt2n", "content": "", "creation_timestamp": "2025-11-09T05:11:16.813291Z"}</description>
      <content:encoded>{"uuid": "371d7a9d-d1ed-4bd2-ab60-9277d592707d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28899", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m56dsv7znt2n", "content": "", "creation_timestamp": "2025-11-09T05:11:16.813291Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/371d7a9d-d1ed-4bd2-ab60-9277d592707d/export</guid>
      <pubDate>Sun, 09 Nov 2025 05:11:16 +0000</pubDate>
    </item>
    <item>
      <title>6f025d4f-ba0d-458e-9c50-50ecef818bfb</title>
      <link>https://vulnerability.circl.lu/sighting/6f025d4f-ba0d-458e-9c50-50ecef818bfb/export</link>
      <description>{"uuid": "6f025d4f-ba0d-458e-9c50-50ecef818bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lygjaehkrt27", "content": "", "creation_timestamp": "2025-09-09T20:03:37.347380Z"}</description>
      <content:encoded>{"uuid": "6f025d4f-ba0d-458e-9c50-50ecef818bfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lygjaehkrt27", "content": "", "creation_timestamp": "2025-09-09T20:03:37.347380Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6f025d4f-ba0d-458e-9c50-50ecef818bfb/export</guid>
      <pubDate>Tue, 09 Sep 2025 20:03:37 +0000</pubDate>
    </item>
    <item>
      <title>0d8b2680-8171-4fe3-9442-a22f1790fa4c</title>
      <link>https://vulnerability.circl.lu/sighting/0d8b2680-8171-4fe3-9442-a22f1790fa4c/export</link>
      <description>{"uuid": "0d8b2680-8171-4fe3-9442-a22f1790fa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-252-09", "content": "", "creation_timestamp": "2025-09-09T10:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "0d8b2680-8171-4fe3-9442-a22f1790fa4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-252-09", "content": "", "creation_timestamp": "2025-09-09T10:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0d8b2680-8171-4fe3-9442-a22f1790fa4c/export</guid>
      <pubDate>Tue, 09 Sep 2025 10:00:00 +0000</pubDate>
    </item>
    <item>
      <title>118759ef-2bc4-43d0-8bb4-0d80b6641714</title>
      <link>https://vulnerability.circl.lu/sighting/118759ef-2bc4-43d0-8bb4-0d80b6641714/export</link>
      <description>{"uuid": "118759ef-2bc4-43d0-8bb4-0d80b6641714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-02", "content": "", "creation_timestamp": "2025-06-05T10:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "118759ef-2bc4-43d0-8bb4-0d80b6641714", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28895", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-155-02", "content": "", "creation_timestamp": "2025-06-05T10:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/118759ef-2bc4-43d0-8bb4-0d80b6641714/export</guid>
      <pubDate>Thu, 05 Jun 2025 10:00:00 +0000</pubDate>
    </item>
    <item>
      <title>6bbef907-f88b-4b59-a436-74ceb2a6bac0</title>
      <link>https://vulnerability.circl.lu/sighting/6bbef907-f88b-4b59-a436-74ceb2a6bac0/export</link>
      <description>{"uuid": "6bbef907-f88b-4b59-a436-74ceb2a6bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28899", "type": "seen", "source": "https://t.me/cibsecurity/24965", "content": "\u203c CVE-2020-28899 \u203c\n\nThe Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T19:30:02.000000Z"}</description>
      <content:encoded>{"uuid": "6bbef907-f88b-4b59-a436-74ceb2a6bac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28899", "type": "seen", "source": "https://t.me/cibsecurity/24965", "content": "\u203c CVE-2020-28899 \u203c\n\nThe Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-03-16T19:30:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6bbef907-f88b-4b59-a436-74ceb2a6bac0/export</guid>
      <pubDate>Tue, 16 Mar 2021 19:30:02 +0000</pubDate>
    </item>
    <item>
      <title>990a06bf-c65f-43e7-b101-21bca176ee59</title>
      <link>https://vulnerability.circl.lu/sighting/990a06bf-c65f-43e7-b101-21bca176ee59/export</link>
      <description>{"uuid": "990a06bf-c65f-43e7-b101-21bca176ee59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28896", "type": "seen", "source": "https://t.me/cibsecurity/16737", "content": "\u203c CVE-2020-28896 \u203c\n\nMutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-23T22:46:06.000000Z"}</description>
      <content:encoded>{"uuid": "990a06bf-c65f-43e7-b101-21bca176ee59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-28896", "type": "seen", "source": "https://t.me/cibsecurity/16737", "content": "\u203c CVE-2020-28896 \u203c\n\nMutt before 2.0.2 and NeoMutt before 2020-11-20 did not ensure that $ssl_force_tls was processed if an IMAP server's initial server response was invalid. The connection was not properly closed, and the code could continue attempting to authenticate. This could result in authentication credentials being exposed on an unencrypted connection, or to a machine-in-the-middle.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-23T22:46:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/990a06bf-c65f-43e7-b101-21bca176ee59/export</guid>
      <pubDate>Mon, 23 Nov 2020 22:46:06 +0000</pubDate>
    </item>
  </channel>
</rss>
