<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-06T16:46:46.187392+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/26fe7657-cfb2-43be-b3c2-ee34f838de50/export</id>
    <title>26fe7657-cfb2-43be-b3c2-ee34f838de50</title>
    <updated>2026-06-06T16:46:46.513521+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "26fe7657-cfb2-43be-b3c2-ee34f838de50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44795", "type": "seen", "source": "https://t.me/cibsecurity/36378", "content": "\u203c CVE-2021-44795 \u203c\n\nSingle Connect does not perform an authorization check when using the \"sc-assigned-credential-ui\" module. A remote attacker could exploit this vulnerability to modify users permissions. The exploitation of this vulnerability might allow a remote attacker to delete permissions from other users without authenticating.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:34.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/26fe7657-cfb2-43be-b3c2-ee34f838de50/export"/>
    <published>2022-01-27T16:20:34+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/797cfd43-734d-48f2-bfc7-e2cdcd0d32e4/export</id>
    <title>797cfd43-734d-48f2-bfc7-e2cdcd0d32e4</title>
    <updated>2026-06-06T16:46:46.513472+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "797cfd43-734d-48f2-bfc7-e2cdcd0d32e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44794", "type": "seen", "source": "https://t.me/cibsecurity/36380", "content": "\u203c CVE-2021-44794 \u203c\n\nSingle Connect does not perform an authorization check when using the \"sc-diagnostic-ui\" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:36.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/797cfd43-734d-48f2-bfc7-e2cdcd0d32e4/export"/>
    <published>2022-01-27T16:20:36+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/6cff2154-2df0-42d0-863f-68ddcd7715c4/export</id>
    <title>6cff2154-2df0-42d0-863f-68ddcd7715c4</title>
    <updated>2026-06-06T16:46:46.513420+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "6cff2154-2df0-42d0-863f-68ddcd7715c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44793", "type": "seen", "source": "https://t.me/cibsecurity/36382", "content": "\u203c CVE-2021-44793 \u203c\n\nSingle Connect does not perform an authorization check when using the sc-reports-ui\" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information including the database credentials. Since the database runs with high privileges it is possible to execute commands with the attained credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:38.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/6cff2154-2df0-42d0-863f-68ddcd7715c4/export"/>
    <published>2022-01-27T16:20:38+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/bf73d4f4-e5e2-44b0-b65c-20d4d5344750/export</id>
    <title>bf73d4f4-e5e2-44b0-b65c-20d4d5344750</title>
    <updated>2026-06-06T16:46:46.513371+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "bf73d4f4-e5e2-44b0-b65c-20d4d5344750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44792", "type": "seen", "source": "https://t.me/cibsecurity/36383", "content": "\u203c CVE-2021-44792 \u203c\n\nSingle Connect does not perform an authorization check when using the \"log-monitor\" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:39.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/bf73d4f4-e5e2-44b0-b65c-20d4d5344750/export"/>
    <published>2022-01-27T16:20:39+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/3ca3dd5b-0f34-4348-b7f3-fbb62fa95224/export</id>
    <title>3ca3dd5b-0f34-4348-b7f3-fbb62fa95224</title>
    <updated>2026-06-06T16:46:46.513321+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "3ca3dd5b-0f34-4348-b7f3-fbb62fa95224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "Telegram/EGF3NmaXYAGdUVCW6ZNHpq65TpVvAZPt5jTlYHUdXoaBYbM", "content": "", "creation_timestamp": "2022-03-04T19:45:45.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/3ca3dd5b-0f34-4348-b7f3-fbb62fa95224/export"/>
    <published>2022-03-04T19:45:45+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/70474f9d-fcdb-4dab-af58-c4bfdb6c6940/export</id>
    <title>70474f9d-fcdb-4dab-af58-c4bfdb6c6940</title>
    <updated>2026-06-06T16:46:46.513268+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "70474f9d-fcdb-4dab-af58-c4bfdb6c6940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44791", "type": "seen", "source": "https://t.me/cibsecurity/45773", "content": "\u203c CVE-2021-44791 \u203c\n\nIn Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-07T22:15:44.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/70474f9d-fcdb-4dab-af58-c4bfdb6c6940/export"/>
    <published>2022-07-07T22:15:44+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/a312336e-b87f-4bab-812e-eb999ee20b38/export</id>
    <title>a312336e-b87f-4bab-812e-eb999ee20b38</title>
    <updated>2026-06-06T16:46:46.513213+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "a312336e-b87f-4bab-812e-eb999ee20b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51193", "content": "", "creation_timestamp": "2023-04-01T00:00:00.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/a312336e-b87f-4bab-812e-eb999ee20b38/export"/>
    <published>2023-04-01T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/0dee57d8-0201-414f-8bd8-d7e4d6fd4557/export</id>
    <title>0dee57d8-0201-414f-8bd8-d7e4d6fd4557</title>
    <updated>2026-06-06T16:46:46.513136+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "0dee57d8-0201-414f-8bd8-d7e4d6fd4557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "https://t.me/arpsyndicate/1472", "content": "#ExploitObserverAlert\n\nCVE-2021-44790\n\nDESCRIPTION: Exploit Observer has 39 entries related to CVE-2021-44790. A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.\n\nFIRST-EPSS: 0.060470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-06T00:09:00.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/0dee57d8-0201-414f-8bd8-d7e4d6fd4557/export"/>
    <published>2023-12-06T00:09:00+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/fe954e85-6ad5-412e-a118-d4491dbb8b79/export</id>
    <title>fe954e85-6ad5-412e-a118-d4491dbb8b79</title>
    <updated>2026-06-06T16:46:46.512512+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "fe954e85-6ad5-412e-a118-d4491dbb8b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/fe954e85-6ad5-412e-a118-d4491dbb8b79/export"/>
    <published>2024-10-15T10:14:15+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/0eff1347-eeec-4300-b2e5-2aa30a7dd30a/export</id>
    <title>0eff1347-eeec-4300-b2e5-2aa30a7dd30a</title>
    <updated>2026-06-06T16:46:46.511409+00:00</updated>
    <author>
      <name>sync_user</name>
      <uri>https://db.gcve.eu/user/sync_user</uri>
    </author>
    <content>{"uuid": "0eff1347-eeec-4300-b2e5-2aa30a7dd30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-4479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndkmh7dlw27", "content": "", "creation_timestamp": "2026-06-02T21:39:21.326905Z"}</content>
    <link href="https://db.gcve.eu/sighting/0eff1347-eeec-4300-b2e5-2aa30a7dd30a/export"/>
    <published>2026-06-02T21:39:21.326905+00:00</published>
  </entry>
</feed>
