https://db.gcve.eu/sightings/feed 2026-05-26T04:18:58.046619+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent sightings. https://db.gcve.eu/sighting/7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f/export 2026-05-26T04:18:58.484072+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "7c59d9d3-54da-4e1f-b4c1-1e00c2afda0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13061", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-06-25T20:55:30.000000Z"} 2020-06-25T20:55:30+00:00 https://db.gcve.eu/sighting/3a06c040-e8ef-4662-bc6a-71e3e7cf2b78/export 2026-05-26T04:18:58.483992+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "3a06c040-e8ef-4662-bc6a-71e3e7cf2b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13165", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T11:55:36.000000Z"} 2020-07-01T11:55:36+00:00 https://db.gcve.eu/sighting/4154f6d5-89ad-499d-b0a2-d62a70a1b26c/export 2026-05-26T04:18:58.481384+00:00 cedric http://db.gcve.eu/user/cedric {"uuid": "4154f6d5-89ad-499d-b0a2-d62a70a1b26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-21268", "type": "seen", "source": "https://t.me/cibsecurity/13176", "content": "ATENTION\u203c New - CVE-2018-21268\n\nThe traceroute (aka node-traceroute) package through 1.0.0 for Node.js allows remote command injection via the host parameter. This occurs because the Child.exec() method, which is considered to be not entirely safe, is used. In particular, an OS command can be placed after a newline character.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-07-01T14:55:31.000000Z"} 2020-07-01T14:55:31+00:00