<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-04T22:47:06.905087+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/bcbce104-1650-4afd-a717-4954c978701a/export</id>
    <title>bcbce104-1650-4afd-a717-4954c978701a</title>
    <updated>2026-05-04T22:47:07.217733+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "bcbce104-1650-4afd-a717-4954c978701a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/cibsecurity/29211", "content": "\u203c CVE-2021-38112 \u203c\n\nIn the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T07:28:28.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/bcbce104-1650-4afd-a717-4954c978701a/export"/>
    <published>2021-09-22T07:28:28+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/cd2f4ecc-5b9a-4852-80b5-f4c4d2708823/export</id>
    <title>cd2f4ecc-5b9a-4852-80b5-f4c4d2708823</title>
    <updated>2026-05-04T22:47:07.217674+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "cd2f4ecc-5b9a-4852-80b5-f4c4d2708823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/information_security_channel/45320", "content": "Remote Code Execution Vulnerability Found in AWS WorkSpaces\nhttp://feedproxy.google.com/~r/securityweek/~3/yPzIUfA2pFw/remote-code-execution-vulnerability-found-aws-workspaces\n\nRhino Security Labs researchers have identified a vulnerability in the AWS WorkSpaces desktop client that could allow an attacker to execute arbitrary code remotely.\nTracked as CVE-2021-38112, the security bug could be triggered when the user opens a malicious WorkSpaces URI from the browser, allowing a remote attacker to execute arbitrary code on the vulnerable system.\nread more (https://www.securityweek.com/remote-code-execution-vulnerability-found-aws-workspaces)", "creation_timestamp": "2021-09-22T18:22:12.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/cd2f4ecc-5b9a-4852-80b5-f4c4d2708823/export"/>
    <published>2021-09-22T18:22:12+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f/export</id>
    <title>ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f</title>
    <updated>2026-05-04T22:47:07.217612+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4358", "content": "#Cloud_Security\nCVE-2021-38112:\nAWS WorkSpaces Desktop Client RCE\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce", "creation_timestamp": "2021-09-23T11:07:01.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f/export"/>
    <published>2021-09-23T11:07:01+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/c0ca5b70-9931-46b8-84a7-651ce76b8b67/export</id>
    <title>c0ca5b70-9931-46b8-84a7-651ce76b8b67</title>
    <updated>2026-05-04T22:47:07.217531+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "c0ca5b70-9931-46b8-84a7-651ce76b8b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "published-proof-of-concept", "source": "https://t.me/cloud_sec/203", "content": "\ud83d\udd36 CVE-2021-38112: AWS WorkSpaces Remote Code Execution\n\nA vulnerability in the AWS WorkSpaces desktop client (CVE-2021-38112), which allows commands to be executed if a victim opens a malicious WorkSpaces URI from their browser.\n\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/\n\n#aws", "creation_timestamp": "2021-09-27T06:31:36.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/c0ca5b70-9931-46b8-84a7-651ce76b8b67/export"/>
    <published>2021-09-27T06:31:36+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/e10186b3-6523-4d90-8e3b-c7b733e1b8c4/export</id>
    <title>e10186b3-6523-4d90-8e3b-c7b733e1b8c4</title>
    <updated>2026-05-04T22:47:07.216510+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "e10186b3-6523-4d90-8e3b-c7b733e1b8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4416", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Sep 1-30)\nCVE-2021-40444 - Microsoft MSHTML RCE\nhttps://t.me/cybersecuritytechnologies/4276\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-22005 - vCenter Server contains - arbitrary file upload\nhttps://t.me/cybersecuritytechnologies/4401\nCVE-2021-30860 - Zero-Click iPhone Exploit\nhttps://t.me/cybersecuritytechnologies/4318\nCVE-2021-38647 - OMIGOD RCE Vuln in Multiple Azure Linux Deployments\nhttps://t.me/cybersecuritytechnologies/4315\nCVE-2021-30632 - Out of bounds write in V8\nhttps://t.me/cybersecuritytechnologies/4342\nCVE-2021-33035 - Code Execution in Apache OpenOffice\nhttps://t.me/cybersecuritytechnologies/4329\nCVE-2021-38112 - AWS WorkSpaces Desktop Client RCE\nhttps://t.me/cybersecuritytechnologies/4358\nCVE-2021-30740 / CVE-2021-30768 - A malicious application may be able to execute arbitrary code with kernel privileges\nhttps://mobile.twitter.com/infinityABCDE/status/1437596340222038017", "creation_timestamp": "2021-10-01T11:01:01.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/e10186b3-6523-4d90-8e3b-c7b733e1b8c4/export"/>
    <published>2021-10-01T11:01:01+00:00</published>
  </entry>
</feed>
