<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-28T12:08:12.667052+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/18739b74-e652-4b68-9144-d8e912a2bc58/export</id>
    <title>18739b74-e652-4b68-9144-d8e912a2bc58</title>
    <updated>2026-05-28T12:08:12.917347+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "18739b74-e652-4b68-9144-d8e912a2bc58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "https://t.me/thehackernews/3838", "content": "Apache SuperSet users, beware! \n \nA critical update has been released to patch two new vulnerabilities (CVE-2023-39265 &amp;amp; CVE-2023-37941) that could expose your servers to remote code execution attacks. \n \nFind out here: https://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html", "creation_timestamp": "2023-09-07T13:31:34.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/18739b74-e652-4b68-9144-d8e912a2bc58/export"/>
    <published>2023-09-07T13:31:34+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1dc149b6-d03f-416e-b00b-ee97c5dc6cd0/export</id>
    <title>1dc149b6-d03f-416e-b00b-ee97c5dc6cd0</title>
    <updated>2026-05-28T12:08:12.917300+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1dc149b6-d03f-416e-b00b-ee97c5dc6cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "published-proof-of-concept", "source": "Telegram/hqzcq-N-UmfLuy_GrV60Wdv72OSiDR6dOzg10bG3ca7Czg", "content": "", "creation_timestamp": "2023-09-07T13:42:21.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1dc149b6-d03f-416e-b00b-ee97c5dc6cd0/export"/>
    <published>2023-09-07T13:42:21+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/c169fe3b-a5ae-4b3c-be7a-cdbfcfc4da41/export</id>
    <title>c169fe3b-a5ae-4b3c-be7a-cdbfcfc4da41</title>
    <updated>2026-05-28T12:08:12.917245+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "c169fe3b-a5ae-4b3c-be7a-cdbfcfc4da41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "https://t.me/KomunitiSiber/755", "content": "Alert: Apache SuperSet Vulnerabilities Expose Servers to Remote Code Execution Attacks\nhttps://thehackernews.com/2023/09/alert-apache-superset-vulnerabilities.html\n\nPatches have been released to address two new security vulnerabilities in Apache SuperSet that could be exploited by an attacker to gain remote code execution on affected systems.\nThe update (version 2.1.1) plugs\u00a0CVE-2023-39265\u00a0and\u00a0CVE-2023-37941, which make it possible to conduct nefarious actions once a bad actor is able to gain control of Superset\u2019s metadata database.\nOutside of these", "creation_timestamp": "2023-09-07T13:47:33.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/c169fe3b-a5ae-4b3c-be7a-cdbfcfc4da41/export"/>
    <published>2023-09-07T13:47:33+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/2c2e98e2-46de-442a-980d-fdf812208549/export</id>
    <title>2c2e98e2-46de-442a-980d-fdf812208549</title>
    <updated>2026-05-28T12:08:12.917194+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "2c2e98e2-46de-442a-980d-fdf812208549", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apache_superset_cookie_sig_rce.rb", "content": "", "creation_timestamp": "2023-10-12T21:34:40.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/2c2e98e2-46de-442a-980d-fdf812208549/export"/>
    <published>2023-10-12T21:34:40+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/a4aea791-1dd3-4641-9107-2ca0ed2757e9/export</id>
    <title>a4aea791-1dd3-4641-9107-2ca0ed2757e9</title>
    <updated>2026-05-28T12:08:12.917135+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "a4aea791-1dd3-4641-9107-2ca0ed2757e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37940", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113670300799021960", "content": "", "creation_timestamp": "2024-12-17T21:32:23.055509Z"}</content>
    <link href="https://db.gcve.eu/sighting/a4aea791-1dd3-4641-9107-2ca0ed2757e9/export"/>
    <published>2024-12-17T21:32:23.055509+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/be2af9bd-843e-4a0b-a42e-92faede07ce1/export</id>
    <title>be2af9bd-843e-4a0b-a42e-92faede07ce1</title>
    <updated>2026-05-28T12:08:12.917078+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "be2af9bd-843e-4a0b-a42e-92faede07ce1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37940", "type": "seen", "source": "https://t.me/cvedetector/13141", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-37940 - Liferay Portal Liferay DXP Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2023-37940 \nPublished : Dec. 17, 2024, 10:15 p.m. | 43\u00a0minutes ago \nDescription : Cross-site scripting (XSS) vulnerability in the edit Service Access Policy page in Liferay Portal 7.0.0 through 7.4.3.87, and Liferay DXP 7.4 GA through update 87, 7.3 GA through update 29, and older unsupported versions allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a service access policy's `Service Class` text field. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T00:18:46.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/be2af9bd-843e-4a0b-a42e-92faede07ce1/export"/>
    <published>2024-12-18T00:18:46+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/c9497245-de45-4ea8-afa5-c89988bdffe8/export</id>
    <title>c9497245-de45-4ea8-afa5-c89988bdffe8</title>
    <updated>2026-05-28T12:08:12.917027+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "c9497245-de45-4ea8-afa5-c89988bdffe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/c9497245-de45-4ea8-afa5-c89988bdffe8/export"/>
    <published>2025-02-06T03:13:46+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/5ae84d6f-5b18-4224-833e-ef0578d8b46c/export</id>
    <title>5ae84d6f-5b18-4224-833e-ef0578d8b46c</title>
    <updated>2026-05-28T12:08:12.916968+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "5ae84d6f-5b18-4224-833e-ef0578d8b46c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:55.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/5ae84d6f-5b18-4224-833e-ef0578d8b46c/export"/>
    <published>2025-02-23T04:10:55+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/7beff782-361e-4ef3-9210-bd2f1ced140f/export</id>
    <title>7beff782-361e-4ef3-9210-bd2f1ced140f</title>
    <updated>2026-05-28T12:08:12.916894+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "7beff782-361e-4ef3-9210-bd2f1ced140f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwkbd7jwdi2v", "content": "", "creation_timestamp": "2025-08-16T21:02:22.128502Z"}</content>
    <link href="https://db.gcve.eu/sighting/7beff782-361e-4ef3-9210-bd2f1ced140f/export"/>
    <published>2025-08-16T21:02:22.128502+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/fd089b48-39c9-4c68-ab65-a8d6451b8cad/export</id>
    <title>fd089b48-39c9-4c68-ab65-a8d6451b8cad</title>
    <updated>2026-05-28T12:08:12.915877+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "fd089b48-39c9-4c68-ab65-a8d6451b8cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-37941", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:01.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/fd089b48-39c9-4c68-ab65-a8d6451b8cad/export"/>
    <published>2025-10-23T21:13:01+00:00</published>
  </entry>
</feed>
