<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-30T06:52:03.965622+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/0bc414f5-82d2-4e86-9459-1b74266263e3/export</id>
    <title>0bc414f5-82d2-4e86-9459-1b74266263e3</title>
    <updated>2026-05-30T06:52:04.309036+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "0bc414f5-82d2-4e86-9459-1b74266263e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45368", "type": "seen", "source": "https://t.me/cvedetector/5629", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45368 - Rockwell Automation H2-DM1E PLC Authentication Protocol Inconsistency vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45368 \nPublished : Sept. 13, 2024, 5:15 p.m. | 17\u00a0minutes ago \nDescription : The H2-DM1E PLC's authentication protocol appears to utilize either a custom encoding scheme or a challenge-response protocol. However, there's an observed anomaly in the H2-DM1E PLC's protocol execution, namely its acceptance of multiple distinct packets as valid authentication responses. This behavior deviates from standard security practices where a single, specific response or encoding pattern is expected for successful authentication. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-13T19:38:27.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/0bc414f5-82d2-4e86-9459-1b74266263e3/export"/>
    <published>2024-09-13T19:38:27+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/bef182c1-416a-4758-b9db-724206a7f32f/export</id>
    <title>bef182c1-416a-4758-b9db-724206a7f32f</title>
    <updated>2026-05-30T06:52:04.308980+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "bef182c1-416a-4758-b9db-724206a7f32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45366", "type": "seen", "source": "https://t.me/cvedetector/5902", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45366 - Welcart e-Commerce Cross-Site Scripting urlparse\", \n  \"Content\": \"CVE ID : CVE-2024-45366 \nPublished : Sept. 18, 2024, 6:15 a.m. | 38\u00a0minutes ago \nDescription : Welcart e-Commerce prior to 2.11.2 contains a cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on the user's web browser. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-18T09:11:07.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/bef182c1-416a-4758-b9db-724206a7f32f/export"/>
    <published>2024-09-18T09:11:07+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ce3eecb0-11e4-4333-8093-542be3b50850/export</id>
    <title>ce3eecb0-11e4-4333-8093-542be3b50850</title>
    <updated>2026-05-30T06:52:04.308921+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ce3eecb0-11e4-4333-8093-542be3b50850", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45367", "type": "seen", "source": "https://t.me/cvedetector/6940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45367 - \"ONS-S8 Spectra Aggregation Switch Authentication Bypass Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-45367 \nPublished : Oct. 3, 2024, 11:15 p.m. | 33\u00a0minutes ago \nDescription : The web server for ONS-S8 - Spectra Aggregation Switch includes an incomplete authentication process, which can lead to an attacker authenticating without a password. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-04T01:49:09.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ce3eecb0-11e4-4333-8093-542be3b50850/export"/>
    <published>2024-10-04T01:49:09+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/840ba96c-f9dc-4c74-b4d6-5214ebf75f7b/export</id>
    <title>840ba96c-f9dc-4c74-b4d6-5214ebf75f7b</title>
    <updated>2026-05-30T06:52:04.308864+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "840ba96c-f9dc-4c74-b4d6-5214ebf75f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45369", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07", "content": "", "creation_timestamp": "2024-11-21T11:00:00.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/840ba96c-f9dc-4c74-b4d6-5214ebf75f7b/export"/>
    <published>2024-11-21T11:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/98a34c8d-4dc3-4c51-93f3-c98783149be5/export</id>
    <title>98a34c8d-4dc3-4c51-93f3-c98783149be5</title>
    <updated>2026-05-30T06:52:04.308782+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "98a34c8d-4dc3-4c51-93f3-c98783149be5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45361", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9029", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-45361\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information.\n\ud83d\udccf Published: 2025-03-27T07:16:21.898Z\n\ud83d\udccf Modified: 2025-03-27T07:16:21.898Z\n\ud83d\udd17 References:\n1. https://trust.mi.com/zh-CN/misrc/bulletins/advisory?cveId=558", "creation_timestamp": "2025-03-27T07:26:06.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/98a34c8d-4dc3-4c51-93f3-c98783149be5/export"/>
    <published>2025-03-27T07:26:06+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/11493e5d-0c5b-4561-b992-ea2f36e219a2/export</id>
    <title>11493e5d-0c5b-4561-b992-ea2f36e219a2</title>
    <updated>2026-05-30T06:52:04.307608+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "11493e5d-0c5b-4561-b992-ea2f36e219a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-45361", "type": "seen", "source": "https://t.me/cvedetector/21267", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45361 - Xiaomi Mi Connect Service APP Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-45361 \nPublished : March 27, 2025, 8:15 a.m. | 1\u00a0hour, 5\u00a0minutes ago \nDescription : A protocol flaw vulnerability exists in the Xiaomi Mi Connect Service APP. The vulnerability is caused by the validation logic is flawed and can be exploited by attackers to leak sensitive user information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-27T10:47:49.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/11493e5d-0c5b-4561-b992-ea2f36e219a2/export"/>
    <published>2025-03-27T10:47:49+00:00</published>
  </entry>
</feed>
