<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 08 Oct 2026 02:31:30 +0000</lastBuildDate>
    <item>
      <title>7e06c1ff-c211-44e6-a7da-774ea80b343b</title>
      <link>https://vulnerability.circl.lu/sighting/7e06c1ff-c211-44e6-a7da-774ea80b343b/export</link>
      <description>{"uuid": "7e06c1ff-c211-44e6-a7da-774ea80b343b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}</description>
      <content:encoded>{"uuid": "7e06c1ff-c211-44e6-a7da-774ea80b343b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7e06c1ff-c211-44e6-a7da-774ea80b343b/export</guid>
      <pubDate>Tue, 19 Aug 2025 18:29:28 +0000</pubDate>
    </item>
    <item>
      <title>fe84c7c7-d0f6-4da6-95fa-7b1cf049abbe</title>
      <link>https://vulnerability.circl.lu/sighting/fe84c7c7-d0f6-4da6-95fa-7b1cf049abbe/export</link>
      <description>{"uuid": "fe84c7c7-d0f6-4da6-95fa-7b1cf049abbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "Telegram/v7YHZFa_V2M_LD66W6E_bQC64cm1CdvwdicdpBTZJmZn3zVR", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}</description>
      <content:encoded>{"uuid": "fe84c7c7-d0f6-4da6-95fa-7b1cf049abbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "Telegram/v7YHZFa_V2M_LD66W6E_bQC64cm1CdvwdicdpBTZJmZn3zVR", "content": "", "creation_timestamp": "2025-03-02T11:47:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fe84c7c7-d0f6-4da6-95fa-7b1cf049abbe/export</guid>
      <pubDate>Sun, 02 Mar 2025 11:47:00 +0000</pubDate>
    </item>
    <item>
      <title>1ce25b35-eac6-4282-8c3d-f58a04301c4d</title>
      <link>https://vulnerability.circl.lu/sighting/1ce25b35-eac6-4282-8c3d-f58a04301c4d/export</link>
      <description>{"uuid": "1ce25b35-eac6-4282-8c3d-f58a04301c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "https://t.me/cvedetector/19241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1800 - D-Link DAR-7000 HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1800 \nPublished : March 1, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T20:02:20.000000Z"}</description>
      <content:encoded>{"uuid": "1ce25b35-eac6-4282-8c3d-f58a04301c4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "seen", "source": "https://t.me/cvedetector/19241", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1800 - D-Link DAR-7000 HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1800 \nPublished : March 1, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T20:02:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1ce25b35-eac6-4282-8c3d-f58a04301c4d/export</guid>
      <pubDate>Sat, 01 Mar 2025 20:02:20 +0000</pubDate>
    </item>
    <item>
      <title>6d7814db-b63f-4e78-8e2b-3f03dbda2a17</title>
      <link>https://vulnerability.circl.lu/sighting/6d7814db-b63f-4e78-8e2b-3f03dbda2a17/export</link>
      <description>{"uuid": "6d7814db-b63f-4e78-8e2b-3f03dbda2a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1800\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-01T18:00:05.956Z\n\ud83d\udccf Modified: 2025-03-01T18:00:05.956Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298030\n2. https://vuldb.com/?ctiid.298030\n3. https://vuldb.com/?submit.502971\n4. https://github.com/sjwszt/CVE/blob/main/CVE_1.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-03-01T18:31:57.000000Z"}</description>
      <content:encoded>{"uuid": "6d7814db-b63f-4e78-8e2b-3f03dbda2a17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1800", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6079", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1800\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.\n\ud83d\udccf Published: 2025-03-01T18:00:05.956Z\n\ud83d\udccf Modified: 2025-03-01T18:00:05.956Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298030\n2. https://vuldb.com/?ctiid.298030\n3. https://vuldb.com/?submit.502971\n4. https://github.com/sjwszt/CVE/blob/main/CVE_1.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-03-01T18:31:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6d7814db-b63f-4e78-8e2b-3f03dbda2a17/export</guid>
      <pubDate>Sat, 01 Mar 2025 18:31:57 +0000</pubDate>
    </item>
  </channel>
</rss>
