https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 22 Jul 2026 23:09:48 +0000 https://db.gcve.eu/sighting/bb9304fd-dd1d-4b2e-8d7a-827be5599c2d/export {"uuid": "bb9304fd-dd1d-4b2e-8d7a-827be5599c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28369", "type": "seen", "source": "https://t.me/ctinow/161792", "content": "https://ift.tt/8ABfbUQ\nCVE-2020-28369 | BeyondTrust Privilege Management up to 5.7 on Windows Installation Cryptbase.dll temp file", "creation_timestamp": "2024-01-02T14:36:36.000000Z"} {"uuid": "bb9304fd-dd1d-4b2e-8d7a-827be5599c2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28369", "type": "seen", "source": "https://t.me/ctinow/161792", "content": "https://ift.tt/8ABfbUQ\nCVE-2020-28369 | BeyondTrust Privilege Management up to 5.7 on Windows Installation Cryptbase.dll temp file", "creation_timestamp": "2024-01-02T14:36:36.000000Z"} https://db.gcve.eu/sighting/bb9304fd-dd1d-4b2e-8d7a-827be5599c2d/export Tue, 02 Jan 2024 14:36:36 +0000 https://db.gcve.eu/sighting/bbc895aa-8d86-4e80-a500-f045c05f123e/export {"uuid": "bbc895aa-8d86-4e80-a500-f045c05f123e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28360", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2161", "content": "#exploit\nCVE-2020-28360:\nnpm private-ip (including and prior to 1.0.5) - \nSSRF Bypass (IP Phone Home)\nhttps://johnjhacking.com/blog/cve-2020-28360/", "creation_timestamp": "2022-11-27T18:30:23.000000Z"} {"uuid": "bbc895aa-8d86-4e80-a500-f045c05f123e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28360", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2161", "content": "#exploit\nCVE-2020-28360:\nnpm private-ip (including and prior to 1.0.5) - \nSSRF Bypass (IP Phone Home)\nhttps://johnjhacking.com/blog/cve-2020-28360/", "creation_timestamp": "2022-11-27T18:30:23.000000Z"} https://db.gcve.eu/sighting/bbc895aa-8d86-4e80-a500-f045c05f123e/export Sun, 27 Nov 2022 18:30:23 +0000 https://db.gcve.eu/sighting/00536ac0-8cb1-45d0-9b19-d77b77d7b5b8/export {"uuid": "00536ac0-8cb1-45d0-9b19-d77b77d7b5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28361", "type": "seen", "source": "https://t.me/cibsecurity/17383", "content": "\u203c CVE-2020-28361 \u203c\n\nKamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T05:25:24.000000Z"} {"uuid": "00536ac0-8cb1-45d0-9b19-d77b77d7b5b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28361", "type": "seen", "source": "https://t.me/cibsecurity/17383", "content": "\u203c CVE-2020-28361 \u203c\n\nKamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T05:25:24.000000Z"} https://db.gcve.eu/sighting/00536ac0-8cb1-45d0-9b19-d77b77d7b5b8/export Wed, 09 Dec 2020 05:25:24 +0000 https://db.gcve.eu/sighting/dda0b5ea-55f3-4c77-866b-5a27ee4407c4/export {"uuid": "dda0b5ea-55f3-4c77-866b-5a27ee4407c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28360", "type": "seen", "source": "https://t.me/cibsecurity/16760", "content": "\u203c CVE-2020-28360 \u203c\n\nInsufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote attackers to request server-side resources or potentially execute arbitrary code through various SSRF techniques.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T00:46:20.000000Z"} {"uuid": "dda0b5ea-55f3-4c77-866b-5a27ee4407c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28360", "type": "seen", "source": "https://t.me/cibsecurity/16760", "content": "\u203c CVE-2020-28360 \u203c\n\nInsufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote attackers to request server-side resources or potentially execute arbitrary code through various SSRF techniques.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-24T00:46:20.000000Z"} https://db.gcve.eu/sighting/dda0b5ea-55f3-4c77-866b-5a27ee4407c4/export Tue, 24 Nov 2020 00:46:20 +0000 https://db.gcve.eu/sighting/c1484e8e-a72c-496c-85d1-fdbe99e2aa4e/export {"uuid": "c1484e8e-a72c-496c-85d1-fdbe99e2aa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28367", "type": "seen", "source": "https://t.me/cibsecurity/16536", "content": "\u203c CVE-2020-28367 \u203c\n\nGo before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:51.000000Z"} {"uuid": "c1484e8e-a72c-496c-85d1-fdbe99e2aa4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28367", "type": "seen", "source": "https://t.me/cibsecurity/16536", "content": "\u203c CVE-2020-28367 \u203c\n\nGo before 1.14.12 and 1.15.x before 1.15.5 allows Argument Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:51.000000Z"} https://db.gcve.eu/sighting/c1484e8e-a72c-496c-85d1-fdbe99e2aa4e/export Wed, 18 Nov 2020 20:40:51 +0000 https://db.gcve.eu/sighting/693b02f2-f372-46af-84e2-6b9d91d5c97c/export {"uuid": "693b02f2-f372-46af-84e2-6b9d91d5c97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28366", "type": "seen", "source": "https://t.me/cibsecurity/16523", "content": "\u203c CVE-2020-28366 \u203c\n\nGo before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:33.000000Z"} {"uuid": "693b02f2-f372-46af-84e2-6b9d91d5c97c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28366", "type": "seen", "source": "https://t.me/cibsecurity/16523", "content": "\u203c CVE-2020-28366 \u203c\n\nGo before 1.14.12 and 1.15.x before 1.15.5 allows Code Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:33.000000Z"} https://db.gcve.eu/sighting/693b02f2-f372-46af-84e2-6b9d91d5c97c/export Wed, 18 Nov 2020 20:40:33 +0000 https://db.gcve.eu/sighting/90ab6efb-8e5b-4f40-b8f3-135404f73640/export {"uuid": "90ab6efb-8e5b-4f40-b8f3-135404f73640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28362", "type": "seen", "source": "https://t.me/cibsecurity/16519", "content": "\u203c CVE-2020-28362 \u203c\n\nGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:29.000000Z"} {"uuid": "90ab6efb-8e5b-4f40-b8f3-135404f73640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28362", "type": "seen", "source": "https://t.me/cibsecurity/16519", "content": "\u203c CVE-2020-28362 \u203c\n\nGo before 1.14.12 and 1.15.x before 1.15.4 allows Denial of Service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T20:40:29.000000Z"} https://db.gcve.eu/sighting/90ab6efb-8e5b-4f40-b8f3-135404f73640/export Wed, 18 Nov 2020 20:40:29 +0000 https://db.gcve.eu/sighting/6866bbcb-2838-4657-ac71-68517bf03e72/export {"uuid": "6866bbcb-2838-4657-ac71-68517bf03e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28361", "type": "seen", "source": "https://t.me/cibsecurity/16511", "content": "\u203c CVE-2020-28361 \u203c\n\nKamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T16:40:20.000000Z"} {"uuid": "6866bbcb-2838-4657-ac71-68517bf03e72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28361", "type": "seen", "source": "https://t.me/cibsecurity/16511", "content": "\u203c CVE-2020-28361 \u203c\n\nKamailio before 5.4.0, as used in Sip Express Router (SER) in Sippy Softswitch 4.5 through 5.2 and other products, allows a bypass of a header-removal protection mechanism via whitespace characters. This occurs in the remove_hf function in the Kamailio textops module.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-18T16:40:20.000000Z"} https://db.gcve.eu/sighting/6866bbcb-2838-4657-ac71-68517bf03e72/export Wed, 18 Nov 2020 16:40:20 +0000 https://db.gcve.eu/sighting/e398b6ae-b2ee-4a47-9621-7150a889d45a/export {"uuid": "e398b6ae-b2ee-4a47-9621-7150a889d45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28368", "type": "seen", "source": "https://t.me/cibsecurity/16125", "content": "\u203c CVE-2020-28368 \u203c\n\nXen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a \"Platypus\" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T22:27:55.000000Z"} {"uuid": "e398b6ae-b2ee-4a47-9621-7150a889d45a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28368", "type": "seen", "source": "https://t.me/cibsecurity/16125", "content": "\u203c CVE-2020-28368 \u203c\n\nXen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a \"Platypus\" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T22:27:55.000000Z"} https://db.gcve.eu/sighting/e398b6ae-b2ee-4a47-9621-7150a889d45a/export Tue, 10 Nov 2020 22:27:55 +0000 https://db.gcve.eu/sighting/8d99bbcd-445a-4a70-babd-14fb4aaea51f/export {"uuid": "8d99bbcd-445a-4a70-babd-14fb4aaea51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28364", "type": "seen", "source": "https://t.me/cibsecurity/16054", "content": "\u203c CVE-2020-28364 \u203c\n\nA stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T00:55:44.000000Z"} {"uuid": "8d99bbcd-445a-4a70-babd-14fb4aaea51f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-28364", "type": "seen", "source": "https://t.me/cibsecurity/16054", "content": "\u203c CVE-2020-28364 \u203c\n\nA stored cross-site scripting (XSS) vulnerability affects the Web UI in Locust before 1.3.2, if the installation violates the usage expectations by exposing this UI to outside users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-10T00:55:44.000000Z"} https://db.gcve.eu/sighting/8d99bbcd-445a-4a70-babd-14fb4aaea51f/export Tue, 10 Nov 2020 00:55:44 +0000