<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-07-29T00:26:01.227690+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/d25bc388-af5a-4c98-9d06-26529bee75f9/export</id>
    <title>d25bc388-af5a-4c98-9d06-26529bee75f9</title>
    <updated>2026-07-29T00:26:01.243492+00:00</updated>
    <author>
      <name>sync_user</name>
      <uri>https://db.gcve.eu/user/sync_user</uri>
    </author>
    <content>{"uuid": "d25bc388-af5a-4c98-9d06-26529bee75f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-45142", "type": "seen", "source": "https://t.me/cyberwarehouse/476", "content": "", "creation_timestamp": "2026-07-27T00:00:22.237605Z"}</content>
    <link href="https://db.gcve.eu/sighting/d25bc388-af5a-4c98-9d06-26529bee75f9/export"/>
    <published>2026-07-27T00:00:22.237605+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/cb390ace-69c9-468b-833c-b8f9456a79bf/export</id>
    <title>cb390ace-69c9-468b-833c-b8f9456a79bf</title>
    <updated>2026-07-29T00:26:01.245046+00:00</updated>
    <author>
      <name>sync_user</name>
      <uri>https://db.gcve.eu/user/sync_user</uri>
    </author>
    <content>{"uuid": "cb390ace-69c9-468b-833c-b8f9456a79bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2023-45142", "type": "seen", "source": "https://t.me/cyberwarehouse/476", "content": "", "creation_timestamp": "2026-07-26T02:00:19.833962Z"}</content>
    <link href="https://db.gcve.eu/sighting/cb390ace-69c9-468b-833c-b8f9456a79bf/export"/>
    <published>2026-07-26T02:00:19.833962+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/93c62843-bf15-4b3a-9795-506a6d81a4b1/export</id>
    <title>93c62843-bf15-4b3a-9795-506a6d81a4b1</title>
    <updated>2026-07-29T00:26:01.245227+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "93c62843-bf15-4b3a-9795-506a6d81a4b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45142", "type": "seen", "source": "https://gist.github.com/cwayne18/3da2b9bf101aefc5a7f783c55023b8af", "content": "", "creation_timestamp": "2025-01-28T13:36:28.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/93c62843-bf15-4b3a-9795-506a6d81a4b1/export"/>
    <published>2025-01-28T13:36:28+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/764e2d50-22c0-43a2-9d7a-e1cba2d805c9/export</id>
    <title>764e2d50-22c0-43a2-9d7a-e1cba2d805c9</title>
    <updated>2026-07-29T00:26:01.245978+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "764e2d50-22c0-43a2-9d7a-e1cba2d805c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45146", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9214", "content": "#exploit\n1. CVE-2023-32439:\nApple WebKit Type Confusion Vulnerability\nhttps://www.ai.moda/en/blog/cve-2023-32439\n\n2. CVE-2023-4415:\nRuijie Network RG-EW1200G Login Bypass\nhttps://github.com/thedarknessdied/Ruijie_RG-EW1200G_login_bypass-CVE-2023-4415\n\n3. CVE-2023-45146:\nUnsafe deserialization in XXL-RPC\nhttps://securitylab.github.com/advisories/GHSL-2023-052_XXL-RPC", "creation_timestamp": "2024-11-17T13:15:56.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/764e2d50-22c0-43a2-9d7a-e1cba2d805c9/export"/>
    <published>2024-11-17T13:15:56+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1a1afd08-cca6-40fa-acac-8be19d5a0486/export</id>
    <title>1a1afd08-cca6-40fa-acac-8be19d5a0486</title>
    <updated>2026-07-29T00:26:01.246047+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1a1afd08-cca6-40fa-acac-8be19d5a0486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45143", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08", "content": "", "creation_timestamp": "2024-11-14T12:00:00.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1a1afd08-cca6-40fa-acac-8be19d5a0486/export"/>
    <published>2024-11-14T12:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1c853d51-4cd2-4f64-b923-bb7807add26f/export</id>
    <title>1c853d51-4cd2-4f64-b923-bb7807add26f</title>
    <updated>2026-07-29T00:26:01.246100+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1c853d51-4cd2-4f64-b923-bb7807add26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45146", "type": "seen", "source": "https://t.me/Rootsec_2/1387", "content": "#exploit\n1. CVE-2023-32439:\nApple WebKit Type Confusion Vulnerability\nhttps://www.ai.moda/en/blog/cve-2023-32439\n\n2. CVE-2023-4415:\nRuijie Network RG-EW1200G Login Bypass\nhttps://github.com/thedarknessdied/Ruijie_RG-EW1200G_login_bypass-CVE-2023-4415\n\n3. CVE-2023-45146:\nUnsafe deserialization in XXL-RPC\nhttps://securitylab.github.com/advisories/GHSL-2023-052_XXL-RPC", "creation_timestamp": "2024-08-16T08:33:58.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1c853d51-4cd2-4f64-b923-bb7807add26f/export"/>
    <published>2024-08-16T08:33:58+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/c86f46e7-6a68-4873-8f1f-53676f5954fe/export</id>
    <title>c86f46e7-6a68-4873-8f1f-53676f5954fe</title>
    <updated>2026-07-29T00:26:01.246159+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "c86f46e7-6a68-4873-8f1f-53676f5954fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45145", "type": "seen", "source": "https://t.me/ctinow/181139", "content": "https://ift.tt/PAKZQkt\nCVE-2023-45145 | Oracle Communications Fraud Monitor 5.0/5.1 Infrastructure exposure of resource", "creation_timestamp": "2024-02-08T03:41:27.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/c86f46e7-6a68-4873-8f1f-53676f5954fe/export"/>
    <published>2024-02-08T03:41:27+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ff19a4c5-f393-4310-89bb-f55edbe13773/export</id>
    <title>ff19a4c5-f393-4310-89bb-f55edbe13773</title>
    <updated>2026-07-29T00:26:01.246215+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ff19a4c5-f393-4310-89bb-f55edbe13773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45145", "type": "seen", "source": "https://t.me/ctinow/181114", "content": "https://ift.tt/Va9dviL\nCVE-2023-45145 | Oracle Communications Cloud Native Core Network Repository Function Install/Upgrade unknown vulnerability", "creation_timestamp": "2024-02-08T03:02:10.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ff19a4c5-f393-4310-89bb-f55edbe13773/export"/>
    <published>2024-02-08T03:02:10+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/6049d31c-8b29-428b-adb3-206fabb3c432/export</id>
    <title>6049d31c-8b29-428b-adb3-206fabb3c432</title>
    <updated>2026-07-29T00:26:01.246268+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "6049d31c-8b29-428b-adb3-206fabb3c432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45145", "type": "seen", "source": "https://t.me/cibsecurity/72542", "content": "\u203c CVE-2023-45145 \u203c\n\nRedis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T00:33:58.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/6049d31c-8b29-428b-adb3-206fabb3c432/export"/>
    <published>2023-10-19T00:33:58+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/951a5e1b-eced-49b7-ab7e-4d9abdc676b5/export</id>
    <title>951a5e1b-eced-49b7-ab7e-4d9abdc676b5</title>
    <updated>2026-07-29T00:26:01.246325+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "951a5e1b-eced-49b7-ab7e-4d9abdc676b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-45149", "type": "seen", "source": "https://t.me/cibsecurity/72359", "content": "\u203c CVE-2023-45149 \u203c\n\nNextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public talk conversation passwords can be bypassed, as there was an endpoint validating the conversation password without registering bruteforce attempts. It is recommended that the Nextcloud Talk app is upgraded to 15.0.8, 16.0.6 or 17.1.1. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T00:32:27.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/951a5e1b-eced-49b7-ab7e-4d9abdc676b5/export"/>
    <published>2023-10-17T00:32:27+00:00</published>
  </entry>
</feed>
