<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 17 Aug 2026 13:31:30 +0000</lastBuildDate>
    <item>
      <title>93adfa4c-d358-4ba6-b325-b5e8806c0188</title>
      <link>https://vulnerability.circl.lu/sighting/93adfa4c-d358-4ba6-b325-b5e8806c0188/export</link>
      <description>{"uuid": "93adfa4c-d358-4ba6-b325-b5e8806c0188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:00:05.330900Z"}</description>
      <content:encoded>{"uuid": "93adfa4c-d358-4ba6-b325-b5e8806c0188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:00:05.330900Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/93adfa4c-d358-4ba6-b325-b5e8806c0188/export</guid>
      <pubDate>Wed, 12 Aug 2026 10:00:05 +0000</pubDate>
    </item>
    <item>
      <title>d24303d5-0656-421b-9553-c08359fac471</title>
      <link>https://vulnerability.circl.lu/sighting/d24303d5-0656-421b-9553-c08359fac471/export</link>
      <description>{"uuid": "d24303d5-0656-421b-9553-c08359fac471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:00:09.516574Z"}</description>
      <content:encoded>{"uuid": "d24303d5-0656-421b-9553-c08359fac471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-03)", "content": "", "creation_timestamp": "2026-08-04T10:00:09.516574Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d24303d5-0656-421b-9553-c08359fac471/export</guid>
      <pubDate>Tue, 04 Aug 2026 10:00:09 +0000</pubDate>
    </item>
    <item>
      <title>54ae4a39-f76a-4f61-aba2-9b8df22d614a</title>
      <link>https://vulnerability.circl.lu/sighting/54ae4a39-f76a-4f61-aba2-9b8df22d614a/export</link>
      <description>{"uuid": "54ae4a39-f76a-4f61-aba2-9b8df22d614a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T11:25:54.500803Z"}</description>
      <content:encoded>{"uuid": "54ae4a39-f76a-4f61-aba2-9b8df22d614a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T11:25:54.500803Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/54ae4a39-f76a-4f61-aba2-9b8df22d614a/export</guid>
      <pubDate>Mon, 03 Aug 2026 11:25:54 +0000</pubDate>
    </item>
    <item>
      <title>0846ecc2-deae-491e-8912-07f90c459ac0</title>
      <link>https://vulnerability.circl.lu/sighting/0846ecc2-deae-491e-8912-07f90c459ac0/export</link>
      <description>{"uuid": "0846ecc2-deae-491e-8912-07f90c459ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:00:08.477621Z"}</description>
      <content:encoded>{"uuid": "0846ecc2-deae-491e-8912-07f90c459ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:00:08.477621Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0846ecc2-deae-491e-8912-07f90c459ac0/export</guid>
      <pubDate>Fri, 31 Jul 2026 10:00:08 +0000</pubDate>
    </item>
    <item>
      <title>ac4f9b48-6bdc-40ec-a58a-72b428aa3a3f</title>
      <link>https://vulnerability.circl.lu/sighting/ac4f9b48-6bdc-40ec-a58a-72b428aa3a3f/export</link>
      <description>{"uuid": "ac4f9b48-6bdc-40ec-a58a-72b428aa3a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34067", "type": "seen", "source": "https://t.me/GhostPrincess/27642", "content": "Hackers Exploit Israel Camera Vulnerabilities to Surveil\n\nMultiple hacking groups have been targeting internet-connected surveillance cameras across Israel and other Middle Eastern countries since the war began on February 28.\n\nThe countries targeted in these digital intrusions\u2014Israel, Qatar, Bahrain, Kuwait, the UAE, Cyprus, and Lebanon\u2014are the same ones that have witnessed significant missile activity linked to hackers as part of an ongoing operation targeting Israel.\n\nCompromised servers contained live CCTV feeds from Jerusalem, allowing the groups to surveil Tel Aviv, Haifa, and Jerusalem.\n\nThis recent camera targeting by several hackers serves as an early indicator of potential follow-on\n\nThe exploited vulnerabilities include:\n\n\u00b7 An improper authentication vulnerability in Hikvision IP camera firmware (CVE-2017-7921)\n\u00b7 A command injection vulnerability in the Hikvision web server component (CVE-2021-36260)\n\u00b7 An OS command injection vulnerability in the Hikvision Intercom Broadcasting System (CVE-2023-6895)\n\u00b7 An unauthenticated remote code execution vulnerability in the Hikvision Integrated Security Management Platform (CVE-2025-34067)\n\u00b7 An authentication bypass vulnerability in multiple Dahua products (CVE-2021-33044)\n\n@TheGhostITM", "creation_timestamp": "2026-07-15T00:00:05.192677Z"}</description>
      <content:encoded>{"uuid": "ac4f9b48-6bdc-40ec-a58a-72b428aa3a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34067", "type": "seen", "source": "https://t.me/GhostPrincess/27642", "content": "Hackers Exploit Israel Camera Vulnerabilities to Surveil\n\nMultiple hacking groups have been targeting internet-connected surveillance cameras across Israel and other Middle Eastern countries since the war began on February 28.\n\nThe countries targeted in these digital intrusions\u2014Israel, Qatar, Bahrain, Kuwait, the UAE, Cyprus, and Lebanon\u2014are the same ones that have witnessed significant missile activity linked to hackers as part of an ongoing operation targeting Israel.\n\nCompromised servers contained live CCTV feeds from Jerusalem, allowing the groups to surveil Tel Aviv, Haifa, and Jerusalem.\n\nThis recent camera targeting by several hackers serves as an early indicator of potential follow-on\n\nThe exploited vulnerabilities include:\n\n\u00b7 An improper authentication vulnerability in Hikvision IP camera firmware (CVE-2017-7921)\n\u00b7 A command injection vulnerability in the Hikvision web server component (CVE-2021-36260)\n\u00b7 An OS command injection vulnerability in the Hikvision Intercom Broadcasting System (CVE-2023-6895)\n\u00b7 An unauthenticated remote code execution vulnerability in the Hikvision Integrated Security Management Platform (CVE-2025-34067)\n\u00b7 An authentication bypass vulnerability in multiple Dahua products (CVE-2021-33044)\n\n@TheGhostITM", "creation_timestamp": "2026-07-15T00:00:05.192677Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ac4f9b48-6bdc-40ec-a58a-72b428aa3a3f/export</guid>
      <pubDate>Wed, 15 Jul 2026 00:00:05 +0000</pubDate>
    </item>
    <item>
      <title>97c6c7c4-7c14-4243-9521-90868b564922</title>
      <link>https://vulnerability.circl.lu/sighting/97c6c7c4-7c14-4243-9521-90868b564922/export</link>
      <description>{"uuid": "97c6c7c4-7c14-4243-9521-90868b564922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34067", "type": "seen", "source": "https://t.me/GhostPrincess/27642", "content": "Hackers Exploit Israel Camera Vulnerabilities to Surveil\n\nMultiple hacking groups have been targeting internet-connected surveillance cameras across Israel and other Middle Eastern countries since the war began on February 28.\n\nThe countries targeted in these digital intrusions\u2014Israel, Qatar, Bahrain, Kuwait, the UAE, Cyprus, and Lebanon\u2014are the same ones that have witnessed significant missile activity linked to hackers as part of an ongoing operation targeting Israel.\n\nCompromised servers contained live CCTV feeds from Jerusalem, allowing the groups to surveil Tel Aviv, Haifa, and Jerusalem.\n\nThis recent camera targeting by several hackers serves as an early indicator of potential follow-on\n\nThe exploited vulnerabilities include:\n\n\u00b7 An improper authentication vulnerability in Hikvision IP camera firmware (CVE-2017-7921)\n\u00b7 A command injection vulnerability in the Hikvision web server component (CVE-2021-36260)\n\u00b7 An OS command injection vulnerability in the Hikvision Intercom Broadcasting System (CVE-2023-6895)\n\u00b7 An unauthenticated remote code execution vulnerability in the Hikvision Integrated Security Management Platform (CVE-2025-34067)\n\u00b7 An authentication bypass vulnerability in multiple Dahua products (CVE-2021-33044)\n\n@TheGhostITM", "creation_timestamp": "2026-07-14T23:00:03.986759Z"}</description>
      <content:encoded>{"uuid": "97c6c7c4-7c14-4243-9521-90868b564922", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34067", "type": "seen", "source": "https://t.me/GhostPrincess/27642", "content": "Hackers Exploit Israel Camera Vulnerabilities to Surveil\n\nMultiple hacking groups have been targeting internet-connected surveillance cameras across Israel and other Middle Eastern countries since the war began on February 28.\n\nThe countries targeted in these digital intrusions\u2014Israel, Qatar, Bahrain, Kuwait, the UAE, Cyprus, and Lebanon\u2014are the same ones that have witnessed significant missile activity linked to hackers as part of an ongoing operation targeting Israel.\n\nCompromised servers contained live CCTV feeds from Jerusalem, allowing the groups to surveil Tel Aviv, Haifa, and Jerusalem.\n\nThis recent camera targeting by several hackers serves as an early indicator of potential follow-on\n\nThe exploited vulnerabilities include:\n\n\u00b7 An improper authentication vulnerability in Hikvision IP camera firmware (CVE-2017-7921)\n\u00b7 A command injection vulnerability in the Hikvision web server component (CVE-2021-36260)\n\u00b7 An OS command injection vulnerability in the Hikvision Intercom Broadcasting System (CVE-2023-6895)\n\u00b7 An unauthenticated remote code execution vulnerability in the Hikvision Integrated Security Management Platform (CVE-2025-34067)\n\u00b7 An authentication bypass vulnerability in multiple Dahua products (CVE-2021-33044)\n\n@TheGhostITM", "creation_timestamp": "2026-07-14T23:00:03.986759Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/97c6c7c4-7c14-4243-9521-90868b564922/export</guid>
      <pubDate>Tue, 14 Jul 2026 23:00:03 +0000</pubDate>
    </item>
    <item>
      <title>7481d849-b692-4318-a323-af1716f60155</title>
      <link>https://vulnerability.circl.lu/sighting/7481d849-b692-4318-a323-af1716f60155/export</link>
      <description>{"uuid": "7481d849-b692-4318-a323-af1716f60155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:00:14.150284Z"}</description>
      <content:encoded>{"uuid": "7481d849-b692-4318-a323-af1716f60155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-04)", "content": "", "creation_timestamp": "2026-07-05T10:00:14.150284Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7481d849-b692-4318-a323-af1716f60155/export</guid>
      <pubDate>Sun, 05 Jul 2026 10:00:14 +0000</pubDate>
    </item>
    <item>
      <title>9adb13f1-ebb8-4dff-85c4-a74b5aee7041</title>
      <link>https://vulnerability.circl.lu/sighting/9adb13f1-ebb8-4dff-85c4-a74b5aee7041/export</link>
      <description>{"uuid": "9adb13f1-ebb8-4dff-85c4-a74b5aee7041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:04.846589Z"}</description>
      <content:encoded>{"uuid": "9adb13f1-ebb8-4dff-85c4-a74b5aee7041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-34068", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-29)", "content": "", "creation_timestamp": "2026-06-30T10:00:04.846589Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9adb13f1-ebb8-4dff-85c4-a74b5aee7041/export</guid>
      <pubDate>Tue, 30 Jun 2026 10:00:04 +0000</pubDate>
    </item>
    <item>
      <title>541c78a3-a141-48d3-9efb-bea458f93b27</title>
      <link>https://vulnerability.circl.lu/sighting/541c78a3-a141-48d3-9efb-bea458f93b27/export</link>
      <description>{"uuid": "541c78a3-a141-48d3-9efb-bea458f93b27", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-34068", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5560b2f-215e-4178-9e4e-fe15b3560df5", "content": "", "creation_timestamp": "2026-06-30T09:23:40.373381Z"}</description>
      <content:encoded>{"uuid": "541c78a3-a141-48d3-9efb-bea458f93b27", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-34068", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e5560b2f-215e-4178-9e4e-fe15b3560df5", "content": "", "creation_timestamp": "2026-06-30T09:23:40.373381Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/541c78a3-a141-48d3-9efb-bea458f93b27/export</guid>
      <pubDate>Tue, 30 Jun 2026 09:23:40 +0000</pubDate>
    </item>
    <item>
      <title>cbd67f43-868f-4e0c-b0f9-8d217c61b9d9</title>
      <link>https://vulnerability.circl.lu/sighting/cbd67f43-868f-4e0c-b0f9-8d217c61b9d9/export</link>
      <description>{"uuid": "cbd67f43-868f-4e0c-b0f9-8d217c61b9d9", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-34067", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/86ff8674-0191-4ea3-b995-b4132387320a", "content": "", "creation_timestamp": "2026-06-30T09:23:29.654194Z"}</description>
      <content:encoded>{"uuid": "cbd67f43-868f-4e0c-b0f9-8d217c61b9d9", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-34067", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/86ff8674-0191-4ea3-b995-b4132387320a", "content": "", "creation_timestamp": "2026-06-30T09:23:29.654194Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cbd67f43-868f-4e0c-b0f9-8d217c61b9d9/export</guid>
      <pubDate>Tue, 30 Jun 2026 09:23:29 +0000</pubDate>
    </item>
  </channel>
</rss>
