<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-05T12:26:08.160658+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/bbf430df-d5e9-43f0-8646-7a12ee007d52/export</id>
    <title>bbf430df-d5e9-43f0-8646-7a12ee007d52</title>
    <updated>2026-06-05T12:26:08.464557+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "bbf430df-d5e9-43f0-8646-7a12ee007d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22888", "type": "seen", "source": "https://t.me/cibsecurity/66529", "content": "\u203c CVE-2023-22888 \u203c\n\nApache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low since it requires an authenticated user to exploit it. It is recommended to upgrade to a version that is not affected\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T14:45:35.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/bbf430df-d5e9-43f0-8646-7a12ee007d52/export"/>
    <published>2023-07-12T14:45:35+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/64c5f3b1-2198-4a90-9972-4213130afffe/export</id>
    <title>64c5f3b1-2198-4a90-9972-4213130afffe</title>
    <updated>2026-06-05T12:26:08.464503+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "64c5f3b1-2198-4a90-9972-4213130afffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22884", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4823", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-22884 PoC\nURL\uff1ahttps://github.com/jakabakos/CVE-2023-22884\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-29T09:28:36.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/64c5f3b1-2198-4a90-9972-4213130afffe/export"/>
    <published>2023-07-29T09:28:36+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/a30ec8a6-6f82-44e2-a728-9d46d757123f/export</id>
    <title>a30ec8a6-6f82-44e2-a728-9d46d757123f</title>
    <updated>2026-06-05T12:26:08.464450+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "a30ec8a6-6f82-44e2-a728-9d46d757123f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22884", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/793", "content": "https://github.com/jakabakos/CVE-2023-22884\nApache Airflow SQL PoC\n#github", "creation_timestamp": "2023-07-31T11:58:19.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/a30ec8a6-6f82-44e2-a728-9d46d757123f/export"/>
    <published>2023-07-31T11:58:19+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/a140bc17-62eb-4c27-b91f-cadb12f85823/export</id>
    <title>a140bc17-62eb-4c27-b91f-cadb12f85823</title>
    <updated>2026-06-05T12:26:08.464396+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "a140bc17-62eb-4c27-b91f-cadb12f85823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22884", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4848", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-22884 PoC\nURL\uff1ahttps://github.com/jakabakos/CVE-2023-22884-Airflow-SQLi\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-08-02T16:26:19.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/a140bc17-62eb-4c27-b91f-cadb12f85823/export"/>
    <published>2023-08-02T16:26:19+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/b06ea262-3dbd-44b2-b7a5-53e16d80e236/export</id>
    <title>b06ea262-3dbd-44b2-b7a5-53e16d80e236</title>
    <updated>2026-06-05T12:26:08.464339+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "b06ea262-3dbd-44b2-b7a5-53e16d80e236", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22880", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5594", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-22880\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for Windows clients before 5.13.1 contain an information disclosure vulnerability. A recent update to the Microsoft Edge WebView2 runtime used by the affected Zoom clients, transmitted text to Microsoft\u2019s online Spellcheck service instead of the local Windows Spellcheck. Updating Zoom remediates this vulnerability by disabling the feature. Updating Microsoft Edge WebView2 Runtime to at least version 109.0.1481.0 and restarting Zoom remediates this vulnerability by updating Microsoft\u2019s telemetry behavior.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:12:41.573Z\n\ud83d\udd17 References:\n1. https://explore.zoom.us/en/trust/security/security-bulletin/", "creation_timestamp": "2025-02-26T20:24:49.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/b06ea262-3dbd-44b2-b7a5-53e16d80e236/export"/>
    <published>2025-02-26T20:24:49+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/a697617a-766e-4176-b746-066bf77b5919/export</id>
    <title>a697617a-766e-4176-b746-066bf77b5919</title>
    <updated>2026-06-05T12:26:08.464282+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "a697617a-766e-4176-b746-066bf77b5919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22881", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-22881\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:06:35.273Z\n\ud83d\udd17 References:\n1. https://explore.zoom.us/en/trust/security/security-bulletin/", "creation_timestamp": "2025-02-26T20:24:49.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/a697617a-766e-4176-b746-066bf77b5919/export"/>
    <published>2025-02-26T20:24:49+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/4dd0dd7b-749e-4665-bd17-38c2412e6530/export</id>
    <title>4dd0dd7b-749e-4665-bd17-38c2412e6530</title>
    <updated>2026-06-05T12:26:08.464226+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "4dd0dd7b-749e-4665-bd17-38c2412e6530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22882", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5596", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-22882\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Zoom clients before version 5.13.5 contain a STUN parsing vulnerability. A malicious actor could send specially crafted UDP traffic to a victim Zoom client to remotely cause the client to crash, causing a denial of service.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:05:52.120Z\n\ud83d\udd17 References:\n1. https://explore.zoom.us/en/trust/security/security-bulletin/", "creation_timestamp": "2025-02-26T20:24:50.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/4dd0dd7b-749e-4665-bd17-38c2412e6530/export"/>
    <published>2025-02-26T20:24:50+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1972e7cc-1387-4901-9ddb-07c73c4f9b87/export</id>
    <title>1972e7cc-1387-4901-9ddb-07c73c4f9b87</title>
    <updated>2026-06-05T12:26:08.464162+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1972e7cc-1387-4901-9ddb-07c73c4f9b87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22883", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5597", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-22883\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H)\n\ud83d\udd39 Description: Zoom Client for IT Admin Windows installers before version 5.13.5 contain a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability in an attack chain during the installation process to escalate their privileges to the SYSTEM user.\n\ud83d\udccf Published: 2023-03-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T20:05:20.982Z\n\ud83d\udd17 References:\n1. https://explore.zoom.us/en/trust/security/security-bulletin/", "creation_timestamp": "2025-02-26T20:24:51.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1972e7cc-1387-4901-9ddb-07c73c4f9b87/export"/>
    <published>2025-02-26T20:24:51+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/7d3f8473-a690-4bca-811c-c7aa59b32a8c/export</id>
    <title>7d3f8473-a690-4bca-811c-c7aa59b32a8c</title>
    <updated>2026-06-05T12:26:08.464067+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "7d3f8473-a690-4bca-811c-c7aa59b32a8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22889", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6611", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-22889\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated users.\n\ud83d\udccf Published: 2023-03-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T20:26:49.707Z\n\ud83d\udd17 References:\n1. https://smartbear.com/security/cve/", "creation_timestamp": "2025-03-05T20:36:49.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/7d3f8473-a690-4bca-811c-c7aa59b32a8c/export"/>
    <published>2025-03-05T20:36:49+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/966c1721-828a-4c8c-afee-9d99e6764f5d/export</id>
    <title>966c1721-828a-4c8c-afee-9d99e6764f5d</title>
    <updated>2026-06-05T12:26:08.462230+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "966c1721-828a-4c8c-afee-9d99e6764f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-22889", "type": "seen", "source": "Telegram/-cWLWKjKOhkCjzaPlGvdVjHSaPT-bQNEvnSuViXJmjunhGKV", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/966c1721-828a-4c8c-afee-9d99e6764f5d/export"/>
    <published>2025-03-06T02:17:23+00:00</published>
  </entry>
</feed>
