https://db.gcve.eu/sightings/feed 2026-07-22T23:09:52.325075+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/c5a355d3-d52c-4806-b912-7b9ee5027fdc/export 2026-07-22T23:09:52.344963+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "c5a355d3-d52c-4806-b912-7b9ee5027fdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28374", "type": "seen", "source": "https://t.me/cibsecurity/22094", "content": "\u203c CVE-2021-3139 \u203c\n\nIn Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-13T19:25:33.000000Z"} 2021-01-13T19:25:33+00:00 https://db.gcve.eu/sighting/f25d3c35-b42f-4980-a6cd-ac1fa83fe4d3/export 2026-07-22T23:09:52.348197+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "f25d3c35-b42f-4980-a6cd-ac1fa83fe4d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28374", "type": "seen", "source": "https://t.me/cibsecurity/22072", "content": "\u203c CVE-2020-28374 \u203c\n\nIn drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. The attacker gains control over file access because I/O operations are proxied via an attacker-selected backstore.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-13T07:47:34.000000Z"} 2021-01-13T07:47:34+00:00 https://db.gcve.eu/sighting/9f453672-0f79-4e51-a776-ea89d4f800d9/export 2026-07-22T23:09:52.348527+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "9f453672-0f79-4e51-a776-ea89d4f800d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28373", "type": "seen", "source": "https://t.me/cibsecurity/16057", "content": "\u203c CVE-2020-28373 \u203c\n\nupnpd on certain NETGEAR devices allows remote (LAN) attackers to execute arbitrary code via a stack-based buffer overflow. This affects R6400v2 V1.0.4.102_10.0.75, R6400 V1.0.1.62_1.0.41, R7000P V1.3.2.126_10.1.66, XR300 V1.0.3.50_10.3.36, R8000 V1.0.4.62, R8300 V1.0.2.136, R8500 V1.0.2.136, R7300DST V1.0.0.74, R7850 V1.0.5.64, R7900 V1.0.4.30, RAX20 V1.0.2.64, RAX80 V1.0.3.102, and R6250 V1.0.4.44.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T00:55:47.000000Z"} 2020-11-10T00:55:47+00:00 https://db.gcve.eu/sighting/2d1ac2e9-efb0-42f6-a361-f3ff0b0b9e7a/export 2026-07-22T23:09:52.348765+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "2d1ac2e9-efb0-42f6-a361-f3ff0b0b9e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28371", "type": "seen", "source": "https://t.me/cibsecurity/16056", "content": "\u203c CVE-2020-28371 \u203c\n\n** UNSUPPORTED WHEN ASSIGNED ** An issue was discovered in ReadyTalk Avian 1.2.0 before 2020-10-27. The FileOutputStream.write() method in FileOutputStream.java has a boundary check to prevent out-of-bounds memory read/write operations. However, an integer overflow leads to bypassing this check and achieving the out-of-bounds access. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T00:55:46.000000Z"} 2020-11-10T00:55:46+00:00