https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 20 Sep 2026 05:47:27 +0000 https://db.gcve.eu/sighting/f522f2ce-1881-4990-a265-e7e9ba39b324/export {"uuid": "f522f2ce-1881-4990-a265-e7e9ba39b324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0918", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7920", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0918\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2023-02-19T08:19:27.685Z\n\ud83d\udccf Modified: 2025-03-18T15:41:46.796Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.221494\n2. https://vuldb.com/?ctiid.221494\n3. https://blog.0xgabe.com/?p=71", "creation_timestamp": "2025-03-18T15:49:57.000000Z"} {"uuid": "f522f2ce-1881-4990-a265-e7e9ba39b324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0918", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7920", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0918\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability has been found in codeprojects Pharmacy Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file add.php of the component Avatar Image Handler. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-221494 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2023-02-19T08:19:27.685Z\n\ud83d\udccf Modified: 2025-03-18T15:41:46.796Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.221494\n2. https://vuldb.com/?ctiid.221494\n3. https://blog.0xgabe.com/?p=71", "creation_timestamp": "2025-03-18T15:49:57.000000Z"} https://db.gcve.eu/sighting/f522f2ce-1881-4990-a265-e7e9ba39b324/export Tue, 18 Mar 2025 15:49:57 +0000 https://db.gcve.eu/sighting/10681a04-955e-44be-b222-649654134326/export {"uuid": "10681a04-955e-44be-b222-649654134326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0978", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0978\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nA command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack\n\n\n\ud83d\udccf Published: 2023-03-13T13:29:32.271Z\n\ud83d\udccf Modified: 2025-02-27T19:15:59.531Z\n\ud83d\udd17 References:\n1. https://kcm.trellix.com/corporate/index?page=content&id=SB10397", "creation_timestamp": "2025-02-27T19:25:55.000000Z"} {"uuid": "10681a04-955e-44be-b222-649654134326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0978", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5756", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0978\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: \nA command injection vulnerability in Trellix Intelligent Sandbox CLI for version 5.2 and earlier, allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This vulnerability is due to insufficient validation of arguments that are passed to specific CLI command. The vulnerability allows the attack\n\n\n\ud83d\udccf Published: 2023-03-13T13:29:32.271Z\n\ud83d\udccf Modified: 2025-02-27T19:15:59.531Z\n\ud83d\udd17 References:\n1. https://kcm.trellix.com/corporate/index?page=content&id=SB10397", "creation_timestamp": "2025-02-27T19:25:55.000000Z"} https://db.gcve.eu/sighting/10681a04-955e-44be-b222-649654134326/export Thu, 27 Feb 2025 19:25:55 +0000 https://db.gcve.eu/sighting/be5f48e1-220b-4eac-8533-4a7e664a5d24/export {"uuid": "be5f48e1-220b-4eac-8533-4a7e664a5d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0940", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0940\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.\n\ud83d\udccf Published: 2023-03-20T15:52:16.823Z\n\ud83d\udccf Modified: 2025-02-26T19:05:40.403Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5", "creation_timestamp": "2025-02-26T19:24:11.000000Z"} {"uuid": "be5f48e1-220b-4eac-8533-4a7e664a5d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0940", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0940\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The ProfileGrid WordPress plugin before 5.3.1 provides an AJAX endpoint for resetting a user password but does not implement proper authorization. This allows a user with low privileges, such as subscriber, to change the password of any account, including Administrator ones.\n\ud83d\udccf Published: 2023-03-20T15:52:16.823Z\n\ud83d\udccf Modified: 2025-02-26T19:05:40.403Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/56744f72-2d48-4f42-8195-24b4dd951bb5", "creation_timestamp": "2025-02-26T19:24:11.000000Z"} https://db.gcve.eu/sighting/be5f48e1-220b-4eac-8533-4a7e664a5d24/export Wed, 26 Feb 2025 19:24:11 +0000 https://db.gcve.eu/sighting/39c44629-022b-44f3-84d7-c9d790501e23/export {"uuid": "39c44629-022b-44f3-84d7-c9d790501e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0937", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0937\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\ud83d\udccf Published: 2023-03-20T15:52:18.503Z\n\ud83d\udccf Modified: 2025-02-25T21:17:38.359Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162", "creation_timestamp": "2025-02-25T21:27:47.000000Z"} {"uuid": "39c44629-022b-44f3-84d7-c9d790501e23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0937", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0937\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The VK All in One Expansion Unit WordPress plugin before 9.87.1.0 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers\n\ud83d\udccf Published: 2023-03-20T15:52:18.503Z\n\ud83d\udccf Modified: 2025-02-25T21:17:38.359Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5110ff02-c721-43eb-b13e-50aca25e1162", "creation_timestamp": "2025-02-25T21:27:47.000000Z"} https://db.gcve.eu/sighting/39c44629-022b-44f3-84d7-c9d790501e23/export Tue, 25 Feb 2025 21:27:47 +0000 https://db.gcve.eu/sighting/c0604ac6-1563-4c70-8a51-3daf848a92a5/export {"uuid": "c0604ac6-1563-4c70-8a51-3daf848a92a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0967", "type": "seen", "source": "Telegram/2-YU90Wv5YWshlruW1kNzRO2RablTkmy7UBF5dCX03CHAuP2", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"} {"uuid": "c0604ac6-1563-4c70-8a51-3daf848a92a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0967", "type": "seen", "source": "Telegram/2-YU90Wv5YWshlruW1kNzRO2RablTkmy7UBF5dCX03CHAuP2", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"} https://db.gcve.eu/sighting/c0604ac6-1563-4c70-8a51-3daf848a92a5/export Fri, 14 Feb 2025 10:09:23 +0000 https://db.gcve.eu/sighting/deb76480-67f7-4706-9863-e6f268ea5da5/export {"uuid": "deb76480-67f7-4706-9863-e6f268ea5da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0944", "type": "seen", "source": "Telegram/nlkqkBLwRbGhOW97RbK4xP-pvnoUE6zKsiWANVMMFYGGsvtg", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"} {"uuid": "deb76480-67f7-4706-9863-e6f268ea5da5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0944", "type": "seen", "source": "Telegram/nlkqkBLwRbGhOW97RbK4xP-pvnoUE6zKsiWANVMMFYGGsvtg", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"} https://db.gcve.eu/sighting/deb76480-67f7-4706-9863-e6f268ea5da5/export Fri, 14 Feb 2025 10:09:22 +0000 https://db.gcve.eu/sighting/3bbb5f9e-8854-4e9b-96fd-e430ec6d6bed/export {"uuid": "3bbb5f9e-8854-4e9b-96fd-e430ec6d6bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0959", "type": "seen", "source": "Telegram/qt5pNLZnlXO2TAs-200UdBk1eZdn6_aaU3LM14eZkr3PzHgF", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"} {"uuid": "3bbb5f9e-8854-4e9b-96fd-e430ec6d6bed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0959", "type": "seen", "source": "Telegram/qt5pNLZnlXO2TAs-200UdBk1eZdn6_aaU3LM14eZkr3PzHgF", "content": "", "creation_timestamp": "2025-02-14T10:09:22.000000Z"} https://db.gcve.eu/sighting/3bbb5f9e-8854-4e9b-96fd-e430ec6d6bed/export Fri, 14 Feb 2025 10:09:22 +0000 https://db.gcve.eu/sighting/ea632074-87f0-4795-9fd3-3e6ee60501c9/export {"uuid": "ea632074-87f0-4795-9fd3-3e6ee60501c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "Telegram/OV7uW8ZjUFkmIzESbVQZFNyMVUdBruVf7OY1jAy84hC-kCit", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"} {"uuid": "ea632074-87f0-4795-9fd3-3e6ee60501c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "Telegram/OV7uW8ZjUFkmIzESbVQZFNyMVUdBruVf7OY1jAy84hC-kCit", "content": "", "creation_timestamp": "2025-02-14T10:08:09.000000Z"} https://db.gcve.eu/sighting/ea632074-87f0-4795-9fd3-3e6ee60501c9/export Fri, 14 Feb 2025 10:08:09 +0000 https://db.gcve.eu/sighting/8c64016a-cc15-4242-a16b-3dd51f2baf1c/export {"uuid": "8c64016a-cc15-4242-a16b-3dd51f2baf1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "Telegram/EEc6QwaIXkDfJISUMSXQ3lC444cMSM0h193akoonPjLdlchd", "content": "", "creation_timestamp": "2025-02-14T10:06:10.000000Z"} {"uuid": "8c64016a-cc15-4242-a16b-3dd51f2baf1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0922", "type": "seen", "source": "Telegram/EEc6QwaIXkDfJISUMSXQ3lC444cMSM0h193akoonPjLdlchd", "content": "", "creation_timestamp": "2025-02-14T10:06:10.000000Z"} https://db.gcve.eu/sighting/8c64016a-cc15-4242-a16b-3dd51f2baf1c/export Fri, 14 Feb 2025 10:06:10 +0000 https://db.gcve.eu/sighting/46a26ca0-5a1a-442a-97f9-361a44baf17c/export {"uuid": "46a26ca0-5a1a-442a-97f9-361a44baf17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0921", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0921\n\ud83d\udd39 Description: A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.\n\ud83d\udccf Published: 2023-06-06T00:00:00\n\ud83d\udccf Modified: 2025-01-07T21:51:37.372Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/392433\n2. https://hackerone.com/reports/1869839\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0921.json", "creation_timestamp": "2025-01-07T22:38:05.000000Z"} {"uuid": "46a26ca0-5a1a-442a-97f9-361a44baf17c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-0921", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-0921\n\ud83d\udd39 Description: A lack of length validation in GitLab CE/EE affecting all versions from 8.3 before 15.10.8, 15.11 before 15.11.7, and 16.0 before 16.0.2 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.\n\ud83d\udccf Published: 2023-06-06T00:00:00\n\ud83d\udccf Modified: 2025-01-07T21:51:37.372Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/392433\n2. https://hackerone.com/reports/1869839\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2023/CVE-2023-0921.json", "creation_timestamp": "2025-01-07T22:38:05.000000Z"} https://db.gcve.eu/sighting/46a26ca0-5a1a-442a-97f9-361a44baf17c/export Tue, 07 Jan 2025 22:38:05 +0000