<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-26T19:54:44.813000+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/9bcbf16e-7de5-4888-8982-cba251e299c0/export</id>
    <title>9bcbf16e-7de5-4888-8982-cba251e299c0</title>
    <updated>2026-05-26T19:54:45.149144+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "9bcbf16e-7de5-4888-8982-cba251e299c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30531", "type": "seen", "source": "https://t.me/cibsecurity/61995", "content": "\u203c CVE-2023-30531 \u203c\n\nJenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:27.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/9bcbf16e-7de5-4888-8982-cba251e299c0/export"/>
    <published>2023-04-12T22:24:27+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/a976d1f5-996d-43b8-bfc9-de9d9279959c/export</id>
    <title>a976d1f5-996d-43b8-bfc9-de9d9279959c</title>
    <updated>2026-05-26T19:54:45.149091+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "a976d1f5-996d-43b8-bfc9-de9d9279959c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30532", "type": "seen", "source": "https://t.me/cibsecurity/62002", "content": "\u203c CVE-2023-30532 \u203c\n\nA missing permission check in Jenkins TurboScript Plugin 1.3 and earlier allows attackers with Item/Read permission to trigger builds of jobs corresponding to the attacker-specified repository.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T22:24:36.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/a976d1f5-996d-43b8-bfc9-de9d9279959c/export"/>
    <published>2023-04-12T22:24:36+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/88f38b15-fcc1-4ac7-9f4c-8dcb20203886/export</id>
    <title>88f38b15-fcc1-4ac7-9f4c-8dcb20203886</title>
    <updated>2026-05-26T19:54:45.149038+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "88f38b15-fcc1-4ac7-9f4c-8dcb20203886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30535", "type": "seen", "source": "https://t.me/cibsecurity/62201", "content": "\u203c CVE-2023-30535 \u203c\n\nSnowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Users of the Snowflake JDBC driver were vulnerable to a command injection vulnerability. An attacker could set up a malicious, publicly accessible server which responds to the SSO URL with an attack payload. If the attacker then tricked a user into visiting the maliciously crafted connection URL, the user\u00e2\u20ac\u2122s local machine would render the malicious payload, leading to a remote code execution. The vulnerability was patched on March 17, 2023 as part of Snowflake JDBC driver Version 3.13.29. All users should immediately upgrade the Snowflake JDBC driver to the latest version: 3.13.29.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T00:26:27.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/88f38b15-fcc1-4ac7-9f4c-8dcb20203886/export"/>
    <published>2023-04-15T00:26:27+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/f2b45414-d281-4328-a99e-7140ecfd2747/export</id>
    <title>f2b45414-d281-4328-a99e-7140ecfd2747</title>
    <updated>2026-05-26T19:54:45.148983+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "f2b45414-d281-4328-a99e-7140ecfd2747", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30536", "type": "seen", "source": "https://t.me/cibsecurity/62316", "content": "\u203c CVE-2023-30536 \u203c\n\nslim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\\n) into both the header names and values. While the specification states that \\r\\n\\r\\n is used to terminate the header list, many servers in the wild will also accept \\n\\n. An attacker that is able to control the header names that are passed to Slilm-Psr7 would be able to intentionally craft invalid messages, possibly causing application errors or invalid HTTP requests being sent out with an PSR-18 HTTP client. The latter might present a denial of service vector if a remote service\u00e2\u20ac\u2122s web application firewall bans the application due to the receipt of malformed requests. The issue has been patched in version 1.6.1. There are no known workarounds to this issue. Users are advised to upgrade.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-18T02:28:41.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/f2b45414-d281-4328-a99e-7140ecfd2747/export"/>
    <published>2023-04-18T02:28:41+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/9d73943d-00c4-4b2e-b95e-c50f29e03e52/export</id>
    <title>9d73943d-00c4-4b2e-b95e-c50f29e03e52</title>
    <updated>2026-05-26T19:54:45.148908+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "9d73943d-00c4-4b2e-b95e-c50f29e03e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30535", "type": "seen", "source": "https://t.me/true_secator/4331", "content": "\u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Prestashop, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043b\u044e\u0431\u043e\u043c\u0443 \u0431\u044d\u043a\u044d\u043d\u0434-\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0432\u0441\u044e \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 Check Point Research, \u043e \u0447\u0435\u043c Prestashop \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 28 \u0430\u043f\u0440\u0435\u043b\u044f.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-30839 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 9.9 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u044e\u0431\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u043e\u0442 \u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u0442\u0435\u0440\u0435\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430 \u0438 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0439 \u0443\u0449\u0435\u0440\u0431 \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0435\u0433\u043e \u0431\u0438\u0437\u043d\u0435\u0441\u0430.\n\n\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c, \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 PrestaShop \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.3 \u0438 \u0441\u0442\u0430\u0440\u0448\u0435.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0441\u0430\u0439\u0442\u0435 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0441\u043c\u044f\u0433\u0447\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b \u0447\u0430\u0441\u0442\u043e \u043d\u0430\u043d\u0438\u043c\u0430\u044e\u0442 \u0431\u043e\u043b\u044c\u0448\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0437\u0430\u043a\u0430\u0437\u043e\u0432, \u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0443\u0433\u0440\u043e\u0437\u0443 \u0435\u0441\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u0438\u0445 \u0445\u043e\u0441\u0442\u044b \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0442 \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u043b\u0438 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0443\u0449\u0435\u0440\u0431 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435\u0434\u043e\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0438.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0448\u0438\u0440\u043e\u043a\u043e\u0435 \u043f\u043e\u043b\u0435 \u0430\u0442\u0430\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u0443\u044e \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u043e\u0439 \u043a\u043e\u043c\u043c\u0435\u0440\u0446\u0438\u0438, \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u0431\u044d\u043a\u0434\u043e\u0440.\n\n\u0411\u044d\u043a\u0434\u043e\u0440-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u0430\u0432\u043d\u043e \u043d\u0435 \u043d\u043e\u0443-\u0445\u0430\u0443 \u0438 \u0442\u0430\u043a\u0442\u0438\u043a\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Sucuri, \u043d\u0430\u0431\u0438\u0440\u0430\u044e\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u0445\u043e\u0442\u044c \u043f\u043e\u043a\u0430 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043d\u0430 \u0441\u0430\u0439\u0442\u044b WordPress.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0438\u043c \u0438 \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2023-30535 (CVSS: 7.7) \u0438 CVE-2023-30838 (CVSS: 8.0), \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.0.4 \u0438 1.7.8.9, \u0434\u043e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0441\u0435\u043c \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432 PrestaShop \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.", "creation_timestamp": "2023-04-27T19:58:34.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/9d73943d-00c4-4b2e-b95e-c50f29e03e52/export"/>
    <published>2023-04-27T19:58:34+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/c82ec7b7-9dbb-4cc0-a680-5a1ed2c3c1be/export</id>
    <title>c82ec7b7-9dbb-4cc0-a680-5a1ed2c3c1be</title>
    <updated>2026-05-26T19:54:45.148848+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "c82ec7b7-9dbb-4cc0-a680-5a1ed2c3c1be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/4014", "content": "\ud83d\udccc\ud83d\udccdJonas Photo Indonesia Leak : https://system32.ink/jonas-photo-indonesia-leak/\n\n\ud83d\udcdfAngkasa MALAYSIAN Data Leak : https://system32.ink/angkasa-malaysian-data-leak/\n\n\ud83d\udc7e\ud83d\udc7eTitan Stealer Source Code : https://system32.ink/titan-stealer-source-code/\n\n\ud83d\udda8Sudomy \u2013 Subdomain Enumeration &amp;amp; Analysis Tool : https://system32.ink/sudomy-subdomain-enumeration-analysis-tool/\n  \n\ud83d\udc7e\ud83d\udda8Scan4All \u2013 Vuls Scanner 15000+PoCs : https://system32.ink/scan4all-vuls-scanner-15000pocs/\n\n\ud83e\ude85NgelistMoment \u2013 Domain Grabber : https://system32.ink/ngelistmoment-domain-grabber/\n\n\ud83e\uddeeCVE-2023-30533 POC : https://system32.ink/cve-2023-30533-poc/\n\n@Crackcodes | System32.ink | Crackcodes.in", "creation_timestamp": "2023-08-11T03:59:21.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/c82ec7b7-9dbb-4cc0-a680-5a1ed2c3c1be/export"/>
    <published>2023-08-11T03:59:21+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ebb6dcfe-ee5b-4fe2-bc1e-8a0c9a3f16a1/export</id>
    <title>ebb6dcfe-ee5b-4fe2-bc1e-8a0c9a3f16a1</title>
    <updated>2026-05-26T19:54:45.148794+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ebb6dcfe-ee5b-4fe2-bc1e-8a0c9a3f16a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "Telegram/oCXtildE2yTi9IxdSuzh8AMqV0fg_39dXN2lm3qeaYClxQ", "content": "", "creation_timestamp": "2023-08-11T04:00:05.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ebb6dcfe-ee5b-4fe2-bc1e-8a0c9a3f16a1/export"/>
    <published>2023-08-11T04:00:05+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/778faf36-384e-432e-ba79-6695928d09ba/export</id>
    <title>778faf36-384e-432e-ba79-6695928d09ba</title>
    <updated>2026-05-26T19:54:45.148730+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "778faf36-384e-432e-ba79-6695928d09ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8828", "content": "#exploit\n1. CVE-2023-30533:\nSheetJS CE &amp;lt;0.19.2 - Prototype Pollution\nhttps://github.com/BenEdridge/CVE-2023-30533\n\n2. CVE-2023-35356:\nWindows Kernel Security Descriptor UaF\nhttps://packetstormsecurity.com/files/174118/Microsoft-Windows-Kernel-Security-Descriptor-Use-After-Free.html\n\n3. Java Debugger for Visual Studio Code - RCE https://www.mcnulty.blog/posts/dap-csrf", "creation_timestamp": "2023-08-11T11:17:53.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/778faf36-384e-432e-ba79-6695928d09ba/export"/>
    <published>2023-08-11T11:17:53+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1ad2a089-89c4-4771-9e90-a1a76f850953/export</id>
    <title>1ad2a089-89c4-4771-9e90-a1a76f850953</title>
    <updated>2026-05-26T19:54:45.148641+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1ad2a089-89c4-4771-9e90-a1a76f850953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30534", "type": "seen", "source": "https://t.me/cibsecurity/69916", "content": "\u203c CVE-2023-30534 \u203c\n\nCacti is an open source operational monitoring and fault management framework. There are two instances of insecure deserialization in Cacti version 1.2.24. While a viable gadget chain exists in Cacti\u00e2\u20ac\u2122s vendor directory (phpseclib), the necessary gadgets are not included, making them inaccessible and the insecure deserializations not exploitable. Each instance of insecure deserialization is due to using the unserialize function without sanitizing the user input. Cacti has a \u00e2\u20ac\u0153safe\u00e2\u20ac\ufffd deserialization that attempts to sanitize the content and check for specific values before calling unserialize, but it isn\u00e2\u20ac\u2122t used in these instances. The vulnerable code lies in graphs_new.php, specifically within the host_new_graphs_save function. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-06T02:17:23.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1ad2a089-89c4-4771-9e90-a1a76f850953/export"/>
    <published>2023-09-06T02:17:23+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/648b37f3-fac2-47d5-95d1-45a869081254/export</id>
    <title>648b37f3-fac2-47d5-95d1-45a869081254</title>
    <updated>2026-05-26T19:54:45.147651+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "648b37f3-fac2-47d5-95d1-45a869081254", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-30533", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4887", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aCVE-2023-30533\nURL\uff1ahttps://github.com/BenEdridge/CVE-2023-30533\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-09-17T12:00:28.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/648b37f3-fac2-47d5-95d1-45a869081254/export"/>
    <published>2023-09-17T12:00:28+00:00</published>
  </entry>
</feed>
