https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 14 Jul 2026 03:06:55 +0000 https://vulnerability.circl.lu/sighting/b1592601-39a8-41bf-9569-2dbd5151dca8/export {"uuid": "b1592601-39a8-41bf-9569-2dbd5151dca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwi4lx4yml2t", "content": "", "creation_timestamp": "2025-08-16T00:32:23.627487Z"} {"uuid": "b1592601-39a8-41bf-9569-2dbd5151dca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44201", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwi4lx4yml2t", "content": "", "creation_timestamp": "2025-08-16T00:32:23.627487Z"} https://vulnerability.circl.lu/sighting/b1592601-39a8-41bf-9569-2dbd5151dca8/export Sat, 16 Aug 2025 00:32:23 +0000 https://vulnerability.circl.lu/sighting/abb0e9a7-fce5-45a0-963a-543036a21136/export {"uuid": "abb0e9a7-fce5-45a0-963a-543036a21136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44206", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44206\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:R)\n\ud83d\udd39 Description: Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site Scripting (XSS) which allows a remote authenticated attacker with access to the Broadcast (Person) functionality to execute arbitrary code.\n\ud83d\udccf Published: 2025-06-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-25T16:21:24.234Z\n\ud83d\udd17 References:\n1. https://hexagon.com/products/hxgn-oncall-dispatch/\n2. https://github.com/yuxuannn/cve-details/blob/main/CVE-2025-44206.md", "creation_timestamp": "2025-06-25T16:47:38.000000Z"} {"uuid": "abb0e9a7-fce5-45a0-963a-543036a21136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44206", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44206\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:R)\n\ud83d\udd39 Description: Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable to Cross Site Scripting (XSS) which allows a remote authenticated attacker with access to the Broadcast (Person) functionality to execute arbitrary code.\n\ud83d\udccf Published: 2025-06-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-25T16:21:24.234Z\n\ud83d\udd17 References:\n1. https://hexagon.com/products/hxgn-oncall-dispatch/\n2. https://github.com/yuxuannn/cve-details/blob/main/CVE-2025-44206.md", "creation_timestamp": "2025-06-25T16:47:38.000000Z"} https://vulnerability.circl.lu/sighting/abb0e9a7-fce5-45a0-963a-543036a21136/export Wed, 25 Jun 2025 16:47:38 +0000 https://vulnerability.circl.lu/sighting/99fdfbbd-0461-46cf-aa61-7c2c9aa1f1ae/export {"uuid": "99fdfbbd-0461-46cf-aa61-7c2c9aa1f1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls2uiu2no52m", "content": "", "creation_timestamp": "2025-06-20T20:22:06.790876Z"} {"uuid": "99fdfbbd-0461-46cf-aa61-7c2c9aa1f1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls2uiu2no52m", "content": "", "creation_timestamp": "2025-06-20T20:22:06.790876Z"} https://vulnerability.circl.lu/sighting/99fdfbbd-0461-46cf-aa61-7c2c9aa1f1ae/export Fri, 20 Jun 2025 20:22:06 +0000 https://vulnerability.circl.lu/sighting/38f1b4f3-6bdf-495e-8748-d93d7075c85e/export {"uuid": "38f1b4f3-6bdf-495e-8748-d93d7075c85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44203\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, the attack results in a Denial of Service (DoS), preventing the administrator from logging in even with the correct credentials.\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T15:37:01.267Z\n\ud83d\udd17 References:\n1. https://www.hoteldruid.com/\n2. https://github.com/IvanT7D3/CVE-2025-44203/tree/main", "creation_timestamp": "2025-06-20T15:44:15.000000Z"} {"uuid": "38f1b4f3-6bdf-495e-8748-d93d7075c85e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18977", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-44203\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In HotelDruid 3.0.7, an unauthenticated attacker can exploit verbose SQL error messages on creadb.php before the 'create database' button is pressed. By sending malformed POST requests to this endpoint, the attacker may obtain the administrator username, password hash, and salt. In some cases, the attack results in a Denial of Service (DoS), preventing the administrator from logging in even with the correct credentials.\n\ud83d\udccf Published: 2025-06-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-06-20T15:37:01.267Z\n\ud83d\udd17 References:\n1. https://www.hoteldruid.com/\n2. https://github.com/IvanT7D3/CVE-2025-44203/tree/main", "creation_timestamp": "2025-06-20T15:44:15.000000Z"} https://vulnerability.circl.lu/sighting/38f1b4f3-6bdf-495e-8748-d93d7075c85e/export Fri, 20 Jun 2025 15:44:15 +0000 https://vulnerability.circl.lu/sighting/c47dd868-4bbe-4c43-88fe-093d044c57cb/export {"uuid": "c47dd868-4bbe-4c43-88fe-093d044c57cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "Telegram/dAy6HTzA5ImDlEhsqhRyCbj7LJDkpc8q7Xczm_pSmSLblNc", "content": "", "creation_timestamp": "2025-06-19T03:00:09.000000Z"} {"uuid": "c47dd868-4bbe-4c43-88fe-093d044c57cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "Telegram/dAy6HTzA5ImDlEhsqhRyCbj7LJDkpc8q7Xczm_pSmSLblNc", "content": "", "creation_timestamp": "2025-06-19T03:00:09.000000Z"} https://vulnerability.circl.lu/sighting/c47dd868-4bbe-4c43-88fe-093d044c57cb/export Thu, 19 Jun 2025 03:00:09 +0000 https://vulnerability.circl.lu/sighting/acd23b83-04b7-4a9c-aa8e-ceb92297a393/export {"uuid": "acd23b83-04b7-4a9c-aa8e-ceb92297a393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "Telegram/3DLF0Mv42zDQ9z6gIgLfJqznkdRPaQmP3DioJ9Oj28FPPS0", "content": "", "creation_timestamp": "2025-06-19T03:00:07.000000Z"} {"uuid": "acd23b83-04b7-4a9c-aa8e-ceb92297a393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "Telegram/3DLF0Mv42zDQ9z6gIgLfJqznkdRPaQmP3DioJ9Oj28FPPS0", "content": "", "creation_timestamp": "2025-06-19T03:00:07.000000Z"} https://vulnerability.circl.lu/sighting/acd23b83-04b7-4a9c-aa8e-ceb92297a393/export Thu, 19 Jun 2025 03:00:07 +0000 https://vulnerability.circl.lu/sighting/be3226fd-66ea-4693-8c5d-81f1f653defc/export {"uuid": "be3226fd-66ea-4693-8c5d-81f1f653defc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/40989", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-44203 - HotelDruid 3.0.0/3.0.7 - Sensitive Information Disclosure, DoS\nURL\uff1ahttps://github.com/IvanT7D3/CVE-2025-44203\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-18T19:07:34.000000Z"} {"uuid": "be3226fd-66ea-4693-8c5d-81f1f653defc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-44203", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/40989", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-44203 - HotelDruid 3.0.0/3.0.7 - Sensitive Information Disclosure, DoS\nURL\uff1ahttps://github.com/IvanT7D3/CVE-2025-44203\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-18T19:07:34.000000Z"} https://vulnerability.circl.lu/sighting/be3226fd-66ea-4693-8c5d-81f1f653defc/export Wed, 18 Jun 2025 19:07:34 +0000 https://vulnerability.circl.lu/sighting/cac445c7-3667-4548-8c78-93bc51852112/export {"uuid": "cac445c7-3667-4548-8c78-93bc51852112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsxgnirt2", "content": "", "creation_timestamp": "2025-06-03T09:27:29.954346Z"} {"uuid": "cac445c7-3667-4548-8c78-93bc51852112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-4420", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxsxgnirt2", "content": "", "creation_timestamp": "2025-06-03T09:27:29.954346Z"} https://vulnerability.circl.lu/sighting/cac445c7-3667-4548-8c78-93bc51852112/export Tue, 03 Jun 2025 09:27:29 +0000