https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 16 Jun 2026 04:13:36 +0000 https://vulnerability.circl.lu/sighting/d648b853-3f87-42db-8915-1318e10d1d34/export {"uuid": "d648b853-3f87-42db-8915-1318e10d1d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22330", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3b7tbgb27", "content": "", "creation_timestamp": "2025-01-09T16:16:53.343879Z"} {"uuid": "d648b853-3f87-42db-8915-1318e10d1d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22330", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3b7tbgb27", "content": "", "creation_timestamp": "2025-01-09T16:16:53.343879Z"} https://vulnerability.circl.lu/sighting/d648b853-3f87-42db-8915-1318e10d1d34/export Thu, 09 Jan 2025 16:16:53 +0000 https://vulnerability.circl.lu/sighting/7363e9b1-ab26-4b61-8bc7-c21681a444b1/export {"uuid": "7363e9b1-ab26-4b61-8bc7-c21681a444b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3bcg4jb2k", "content": "", "creation_timestamp": "2025-01-09T16:16:56.069049Z"} {"uuid": "7363e9b1-ab26-4b61-8bc7-c21681a444b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfd3bcg4jb2k", "content": "", "creation_timestamp": "2025-01-09T16:16:56.069049Z"} https://vulnerability.circl.lu/sighting/7363e9b1-ab26-4b61-8bc7-c21681a444b1/export Thu, 09 Jan 2025 16:16:56 +0000 https://vulnerability.circl.lu/sighting/f0d87cb0-c5c8-4b88-a5f0-9c78af86b07a/export {"uuid": "f0d87cb0-c5c8-4b88-a5f0-9c78af86b07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22337", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdturv42f", "content": "", "creation_timestamp": "2025-01-13T14:15:30.038793Z"} {"uuid": "f0d87cb0-c5c8-4b88-a5f0-9c78af86b07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22337", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfmwdturv42f", "content": "", "creation_timestamp": "2025-01-13T14:15:30.038793Z"} https://vulnerability.circl.lu/sighting/f0d87cb0-c5c8-4b88-a5f0-9c78af86b07a/export Mon, 13 Jan 2025 14:15:30 +0000 https://vulnerability.circl.lu/sighting/6c442fa2-53cf-43fa-8e81-54d42b48dd56/export {"uuid": "6c442fa2-53cf-43fa-8e81-54d42b48dd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22337", "type": "seen", "source": "https://t.me/cvedetector/15147", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-22337 - Infosoft Consultant WooCommerce Order Audit Log Cross-site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-22337 \nPublished : Jan. 13, 2025, 2:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infosoft Consultant Order Audit Log for WooCommerce allows Reflected XSS.This issue affects Order Audit Log for WooCommerce: from n/a through 2.0. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"13 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T16:14:22.000000Z"} {"uuid": "6c442fa2-53cf-43fa-8e81-54d42b48dd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22337", "type": "seen", "source": "https://t.me/cvedetector/15147", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2025-22337 - Infosoft Consultant WooCommerce Order Audit Log Cross-site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2025-22337 \nPublished : Jan. 13, 2025, 2:15 p.m. | 38\u00a0minutes ago \nDescription : Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Infosoft Consultant Order Audit Log for WooCommerce allows Reflected XSS.This issue affects Order Audit Log for WooCommerce: from n/a through 2.0. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"13 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T16:14:22.000000Z"} https://vulnerability.circl.lu/sighting/6c442fa2-53cf-43fa-8e81-54d42b48dd56/export Mon, 13 Jan 2025 16:14:22 +0000 https://vulnerability.circl.lu/sighting/cd1750cc-5695-4c35-9ef8-3aa94a38b5aa/export {"uuid": "cd1750cc-5695-4c35-9ef8-3aa94a38b5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22332", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgznz4p5c22p", "content": "", "creation_timestamp": "2025-01-31T09:16:08.549559Z"} {"uuid": "cd1750cc-5695-4c35-9ef8-3aa94a38b5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-22332", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgznz4p5c22p", "content": "", "creation_timestamp": "2025-01-31T09:16:08.549559Z"} https://vulnerability.circl.lu/sighting/cd1750cc-5695-4c35-9ef8-3aa94a38b5aa/export Fri, 31 Jan 2025 09:16:08 +0000 https://vulnerability.circl.lu/sighting/70a20ed8-0259-4875-bd72-e776441b47ee/export {"uuid": "70a20ed8-0259-4875-bd72-e776441b47ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-127/", "content": "", "creation_timestamp": "2025-03-11T04:00:00.000000Z"} {"uuid": "70a20ed8-0259-4875-bd72-e776441b47ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-127/", "content": "", "creation_timestamp": "2025-03-11T04:00:00.000000Z"} https://vulnerability.circl.lu/sighting/70a20ed8-0259-4875-bd72-e776441b47ee/export Tue, 11 Mar 2025 04:00:00 +0000 https://vulnerability.circl.lu/sighting/4286ebb6-ebaa-4f6e-8f78-0a8652ecf0c0/export {"uuid": "4286ebb6-ebaa-4f6e-8f78-0a8652ecf0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2233\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the Hub Local API service, which listens on TCP port 8766 by default. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25615.\n\ud83d\udccf Published: 2025-03-11T22:30:44.003Z\n\ud83d\udccf Modified: 2025-03-11T22:30:44.003Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-127/", "creation_timestamp": "2025-03-11T22:39:49.000000Z"} {"uuid": "4286ebb6-ebaa-4f6e-8f78-0a8652ecf0c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2233\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Samsung SmartThings Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Samsung SmartThings. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the Hub Local API service, which listens on TCP port 8766 by default. The issue results from the lack of proper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-25615.\n\ud83d\udccf Published: 2025-03-11T22:30:44.003Z\n\ud83d\udccf Modified: 2025-03-11T22:30:44.003Z\n\ud83d\udd17 References:\n1. https://www.zerodayinitiative.com/advisories/ZDI-25-127/", "creation_timestamp": "2025-03-11T22:39:49.000000Z"} https://vulnerability.circl.lu/sighting/4286ebb6-ebaa-4f6e-8f78-0a8652ecf0c0/export Tue, 11 Mar 2025 22:39:49 +0000 https://vulnerability.circl.lu/sighting/f217e6a0-9631-4b70-aba9-06951d3416a3/export {"uuid": "f217e6a0-9631-4b70-aba9-06951d3416a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114146531014823076", "content": "", "creation_timestamp": "2025-03-12T00:03:59.496717Z"} {"uuid": "f217e6a0-9631-4b70-aba9-06951d3416a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114146531014823076", "content": "", "creation_timestamp": "2025-03-12T00:03:59.496717Z"} https://vulnerability.circl.lu/sighting/f217e6a0-9631-4b70-aba9-06951d3416a3/export Wed, 12 Mar 2025 00:03:59 +0000 https://vulnerability.circl.lu/sighting/10317a6d-0463-40c0-919a-d42b5e7d2670/export {"uuid": "10317a6d-0463-40c0-919a-d42b5e7d2670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "published-proof-of-concept", "source": "Telegram/jugsekZTROByY-lots9MBC6qUmVXrKpGjzxGk9sSuKN2Djo", "content": "", "creation_timestamp": "2025-03-12T16:00:08.000000Z"} {"uuid": "10317a6d-0463-40c0-919a-d42b5e7d2670", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "published-proof-of-concept", "source": "Telegram/jugsekZTROByY-lots9MBC6qUmVXrKpGjzxGk9sSuKN2Djo", "content": "", "creation_timestamp": "2025-03-12T16:00:08.000000Z"} https://vulnerability.circl.lu/sighting/10317a6d-0463-40c0-919a-d42b5e7d2670/export Wed, 12 Mar 2025 16:00:08 +0000 https://vulnerability.circl.lu/sighting/a3a36883-498d-4e49-8f6d-85a2f3f1e841/export {"uuid": "a3a36883-498d-4e49-8f6d-85a2f3f1e841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150716712602119", "content": "", "creation_timestamp": "2025-03-12T17:48:28.785459Z"} {"uuid": "a3a36883-498d-4e49-8f6d-85a2f3f1e841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-2233", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150716712602119", "content": "", "creation_timestamp": "2025-03-12T17:48:28.785459Z"} https://vulnerability.circl.lu/sighting/a3a36883-498d-4e49-8f6d-85a2f3f1e841/export Wed, 12 Mar 2025 17:48:28 +0000