https://db.gcve.eu/sightings/feed 2026-07-01T09:46:16.402404+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/6a9faa45-0296-4a93-b028-ee1d90ef7b09/export 2026-07-01T09:46:16.413707+00:00 cedric https://db.gcve.eu/user/cedric {"uuid": "6a9faa45-0296-4a93-b028-ee1d90ef7b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-MJQ6-PV9C-QPPQ", "type": "seen", "source": "https://t.me/arpsyndicate/287", "content": "#ExploitObserverAlert\n\nGHSA-mjq6-pv9c-qppq\n\nDESCRIPTION: Exploit Observer has 1 entries related to GHSA-MJQ6-PV9C-QPPQ. The vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input.\nA user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders belonging to the user that runs the Arduino Create Agent via a crafted HTTP DELETE request.\nFurther details are available in the references.\n\nGHSS: 6.1", "creation_timestamp": "2023-11-20T12:18:50.000000Z"} 2023-11-20T12:18:50+00:00