<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-02T03:23:18.172089+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/d79cc4f2-0658-4ef3-8047-52ba95578903/export</id>
    <title>d79cc4f2-0658-4ef3-8047-52ba95578903</title>
    <updated>2026-05-02T03:23:18.497536+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "d79cc4f2-0658-4ef3-8047-52ba95578903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1584", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5092", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1584\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-02-23T12:31:04.886Z\n\ud83d\udccf Modified: 2025-02-23T12:31:04.886Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.296560\n2. https://vuldb.com/?ctiid.296560\n3. https://vuldb.com/?submit.504454\n4. https://github.com/opensolon/solon/issues/332\n5. https://github.com/opensolon/solon/issues/332#issuecomment-2674330700\n6. https://github.com/opensolon/solon/issues/332#issue-2866229828\n7. https://github.com/opensolon/solon/commit/f46e47fd1f8455b9467d7ead3cdb0509115b2ef1", "creation_timestamp": "2025-02-23T13:20:46.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/d79cc4f2-0658-4ef3-8047-52ba95578903/export"/>
    <published>2025-02-23T13:20:46+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/f1fddc36-d80c-46af-a074-0f69de6b4408/export</id>
    <title>f1fddc36-d80c-46af-a074-0f69de6b4408</title>
    <updated>2026-05-02T03:23:18.497456+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "f1fddc36-d80c-46af-a074-0f69de6b4408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1584", "type": "seen", "source": "https://t.me/cvedetector/18744", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1584 - OpenSolon Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1584 \nPublished : Feb. 23, 2025, 1:15 p.m. | 51\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfiles/src/main/java/org/noear/solon/web/staticfiles/StaticMappings.java. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.9 is able to address this issue. The name of the patch is f46e47fd1f8455b9467d7ead3cdb0509115b2ef1. It is recommended to upgrade the affected component. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-23T15:12:40.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/f1fddc36-d80c-46af-a074-0f69de6b4408/export"/>
    <published>2025-02-23T15:12:40+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/cfd8890a-9c6f-4cec-975f-cb0d346cb8d0/export</id>
    <title>cfd8890a-9c6f-4cec-975f-cb0d346cb8d0</title>
    <updated>2026-05-02T03:23:18.497353+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "cfd8890a-9c6f-4cec-975f-cb0d346cb8d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3liuati6uir2s", "content": "", "creation_timestamp": "2025-02-23T16:27:25.910798Z"}</content>
    <link href="https://db.gcve.eu/sighting/cfd8890a-9c6f-4cec-975f-cb0d346cb8d0/export"/>
    <published>2025-02-23T16:27:25.910798+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/12366043-6235-47a6-8e77-6939b5dfc058/export</id>
    <title>12366043-6235-47a6-8e77-6939b5dfc058</title>
    <updated>2026-05-02T03:23:18.495904+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "12366043-6235-47a6-8e77-6939b5dfc058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-1584", "type": "seen", "source": "Telegram/FkPHm0OPZwFY6IizzLceyJQkxKoJPShAs_Ah8ISqEUdRQ0er", "content": "", "creation_timestamp": "2025-02-23T17:38:05.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/12366043-6235-47a6-8e77-6939b5dfc058/export"/>
    <published>2025-02-23T17:38:05+00:00</published>
  </entry>
</feed>
