<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 28 Jun 2026 17:02:58 +0000</lastBuildDate>
    <item>
      <title>b4fcaf03-62ba-44d8-8171-d505230a6002</title>
      <link>https://vulnerability.circl.lu/sighting/b4fcaf03-62ba-44d8-8171-d505230a6002/export</link>
      <description>{"uuid": "b4fcaf03-62ba-44d8-8171-d505230a6002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19170", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6485\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-22T17:00:16.977Z\n\ud83d\udccf Modified: 2025-06-22T17:00:16.977Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.313593\n2. https://vuldb.com/?ctiid.313593\n3. https://vuldb.com/?submit.600727\n4. https://github.com/wudipjq/my_vuln/blob/main/totolink3/vuln_34/34.md\n5. https://www.totolink.net/", "creation_timestamp": "2025-06-22T17:48:43.000000Z"}</description>
      <content:encoded>{"uuid": "b4fcaf03-62ba-44d8-8171-d505230a6002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19170", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6485\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability was found in TOTOLINK A3002R 1.1.1-B20200824.0128. It has been classified as critical. This affects the function formWlSiteSurvey of the file /boafrm/formWlSiteSurvey. The manipulation of the argument wlanif leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-06-22T17:00:16.977Z\n\ud83d\udccf Modified: 2025-06-22T17:00:16.977Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.313593\n2. https://vuldb.com/?ctiid.313593\n3. https://vuldb.com/?submit.600727\n4. https://github.com/wudipjq/my_vuln/blob/main/totolink3/vuln_34/34.md\n5. https://www.totolink.net/", "creation_timestamp": "2025-06-22T17:48:43.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4fcaf03-62ba-44d8-8171-d505230a6002/export</guid>
      <pubDate>Sun, 22 Jun 2025 17:48:43 +0000</pubDate>
    </item>
    <item>
      <title>538520a4-3975-4c87-b9e2-3b7a1b822964</title>
      <link>https://vulnerability.circl.lu/sighting/538520a4-3975-4c87-b9e2-3b7a1b822964/export</link>
      <description>{"uuid": "538520a4-3975-4c87-b9e2-3b7a1b822964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls7nwqp5fy2v", "content": "", "creation_timestamp": "2025-06-22T18:07:55.278214Z"}</description>
      <content:encoded>{"uuid": "538520a4-3975-4c87-b9e2-3b7a1b822964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ls7nwqp5fy2v", "content": "", "creation_timestamp": "2025-06-22T18:07:55.278214Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/538520a4-3975-4c87-b9e2-3b7a1b822964/export</guid>
      <pubDate>Sun, 22 Jun 2025 18:07:55 +0000</pubDate>
    </item>
    <item>
      <title>1283dc6f-6bc5-4a57-8114-fad397afe0fe</title>
      <link>https://vulnerability.circl.lu/sighting/1283dc6f-6bc5-4a57-8114-fad397afe0fe/export</link>
      <description>{"uuid": "1283dc6f-6bc5-4a57-8114-fad397afe0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxpujyq2h", "content": "", "creation_timestamp": "2026-01-23T21:03:05.011338Z"}</description>
      <content:encoded>{"uuid": "1283dc6f-6bc5-4a57-8114-fad397afe0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3md4lxpujyq2h", "content": "", "creation_timestamp": "2026-01-23T21:03:05.011338Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1283dc6f-6bc5-4a57-8114-fad397afe0fe/export</guid>
      <pubDate>Fri, 23 Jan 2026 21:03:05 +0000</pubDate>
    </item>
    <item>
      <title>3b2e55c0-68b5-4207-834e-f1d7733b7459</title>
      <link>https://vulnerability.circl.lu/sighting/3b2e55c0-68b5-4207-834e-f1d7733b7459/export</link>
      <description>{"uuid": "3b2e55c0-68b5-4207-834e-f1d7733b7459", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db4600d6-daf0-46ae-9cba-7928031bbe17", "content": "", "creation_timestamp": "2026-06-23T14:03:59.225327Z"}</description>
      <content:encoded>{"uuid": "3b2e55c0-68b5-4207-834e-f1d7733b7459", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6485", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db4600d6-daf0-46ae-9cba-7928031bbe17", "content": "", "creation_timestamp": "2026-06-23T14:03:59.225327Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3b2e55c0-68b5-4207-834e-f1d7733b7459/export</guid>
      <pubDate>Tue, 23 Jun 2026 14:03:59 +0000</pubDate>
    </item>
  </channel>
</rss>
