<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 30 May 2026 16:40:49 +0000</lastBuildDate>
    <item>
      <title>16b2f0fb-aedf-4432-8629-2172d6b21c0f</title>
      <link>https://db.gcve.eu/sighting/16b2f0fb-aedf-4432-8629-2172d6b21c0f/export</link>
      <description>{"uuid": "16b2f0fb-aedf-4432-8629-2172d6b21c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35120", "type": "seen", "source": "https://t.me/cibsecurity/66177", "content": "\u203c CVE-2023-35120 \u203c\n\nPiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then the device could execute the GET or POST link request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T07:26:00.000000Z"}</description>
      <content:encoded>{"uuid": "16b2f0fb-aedf-4432-8629-2172d6b21c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35120", "type": "seen", "source": "https://t.me/cibsecurity/66177", "content": "\u203c CVE-2023-35120 \u203c\n\nPiiGAB M-Bus is vulnerable to cross-site request forgery. An attacker who wants to execute a certain command could send a phishing mail to the owner of the device and hope that the owner clicks on the link. If the owner of the device has a cookie stored that allows the owner to be logged in, then the device could execute the GET or POST link request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-07T07:26:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/16b2f0fb-aedf-4432-8629-2172d6b21c0f/export</guid>
      <pubDate>Fri, 07 Jul 2023 07:26:00 +0000</pubDate>
    </item>
    <item>
      <title>a4485113-d385-43ce-bce5-aefcc737866f</title>
      <link>https://db.gcve.eu/sighting/a4485113-d385-43ce-bce5-aefcc737866f/export</link>
      <description>{"uuid": "a4485113-d385-43ce-bce5-aefcc737866f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35124", "type": "seen", "source": "https://t.me/cibsecurity/69858", "content": "\u203c CVE-2023-35124 \u203c\n\nAn information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T20:17:05.000000Z"}</description>
      <content:encoded>{"uuid": "a4485113-d385-43ce-bce5-aefcc737866f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35124", "type": "seen", "source": "https://t.me/cibsecurity/69858", "content": "\u203c CVE-2023-35124 \u203c\n\nAn information disclosure vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to a disclosure of sensitive information. An attacker can send a sequence of requests to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T20:17:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a4485113-d385-43ce-bce5-aefcc737866f/export</guid>
      <pubDate>Tue, 05 Sep 2023 20:17:05 +0000</pubDate>
    </item>
    <item>
      <title>b8f9f86a-d629-44a7-9cc5-6fa753bc708d</title>
      <link>https://db.gcve.eu/sighting/b8f9f86a-d629-44a7-9cc5-6fa753bc708d/export</link>
      <description>{"uuid": "b8f9f86a-d629-44a7-9cc5-6fa753bc708d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-3512", "type": "seen", "source": "https://t.me/cibsecurity/71558", "content": "\u203c CVE-2023-3512 \u203c\n\nRelative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the \"Download file\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-04T14:11:56.000000Z"}</description>
      <content:encoded>{"uuid": "b8f9f86a-d629-44a7-9cc5-6fa753bc708d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-3512", "type": "seen", "source": "https://t.me/cibsecurity/71558", "content": "\u203c CVE-2023-3512 \u203c\n\nRelative path traversal vulnerability in Setelsa Security's ConacWin CB, in its 3.8.2.2 version and earlier, the exploitation of which could allow an attacker to perform an arbitrary download of files from the system via the \"Download file\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-04T14:11:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b8f9f86a-d629-44a7-9cc5-6fa753bc708d/export</guid>
      <pubDate>Wed, 04 Oct 2023 14:11:56 +0000</pubDate>
    </item>
    <item>
      <title>e5984187-24bb-4c4a-98cd-ae0bd11a3818</title>
      <link>https://db.gcve.eu/sighting/e5984187-24bb-4c4a-98cd-ae0bd11a3818/export</link>
      <description>{"uuid": "e5984187-24bb-4c4a-98cd-ae0bd11a3818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35126", "type": "seen", "source": "https://t.me/cibsecurity/72592", "content": "\u203c CVE-2023-35126 \u203c\n\nAn out-of-bounds write vulnerability exists within the parsers for both the \"DocumentViewStyles\" and \"DocumentEditStyles\" streams of Ichitaro 2023 1.0.1.59372 when processing types 0x0000-0x0009 of a style record with the type 0x2008. A specially crafted document can cause memory corruption, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T20:34:37.000000Z"}</description>
      <content:encoded>{"uuid": "e5984187-24bb-4c4a-98cd-ae0bd11a3818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35126", "type": "seen", "source": "https://t.me/cibsecurity/72592", "content": "\u203c CVE-2023-35126 \u203c\n\nAn out-of-bounds write vulnerability exists within the parsers for both the \"DocumentViewStyles\" and \"DocumentEditStyles\" streams of Ichitaro 2023 1.0.1.59372 when processing types 0x0000-0x0009 of a style record with the type 0x2008. A specially crafted document can cause memory corruption, which can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T20:34:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/e5984187-24bb-4c4a-98cd-ae0bd11a3818/export</guid>
      <pubDate>Thu, 19 Oct 2023 20:34:37 +0000</pubDate>
    </item>
    <item>
      <title>3c910a84-6c19-4025-a17e-7b432e2dd4d7</title>
      <link>https://db.gcve.eu/sighting/3c910a84-6c19-4025-a17e-7b432e2dd4d7/export</link>
      <description>{"uuid": "3c910a84-6c19-4025-a17e-7b432e2dd4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35128", "type": "seen", "source": "https://t.me/ctinow/165611", "content": "https://ift.tt/ecBOfbK\nCVE-2023-35128 Exploit", "creation_timestamp": "2024-01-10T08:16:29.000000Z"}</description>
      <content:encoded>{"uuid": "3c910a84-6c19-4025-a17e-7b432e2dd4d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35128", "type": "seen", "source": "https://t.me/ctinow/165611", "content": "https://ift.tt/ecBOfbK\nCVE-2023-35128 Exploit", "creation_timestamp": "2024-01-10T08:16:29.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/3c910a84-6c19-4025-a17e-7b432e2dd4d7/export</guid>
      <pubDate>Wed, 10 Jan 2024 08:16:29 +0000</pubDate>
    </item>
    <item>
      <title>e81233c1-847c-4166-a388-f27194781edc</title>
      <link>https://db.gcve.eu/sighting/e81233c1-847c-4166-a388-f27194781edc/export</link>
      <description>{"uuid": "e81233c1-847c-4166-a388-f27194781edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35128", "type": "seen", "source": "https://t.me/ctinow/173409", "content": "https://ift.tt/vkDaSNd\nCVE-2023-35128 | GTKWave 3.3.115 fstReaderIterBlocks2 integer overflow (TALOS-2023-1792)", "creation_timestamp": "2024-01-25T12:41:19.000000Z"}</description>
      <content:encoded>{"uuid": "e81233c1-847c-4166-a388-f27194781edc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35128", "type": "seen", "source": "https://t.me/ctinow/173409", "content": "https://ift.tt/vkDaSNd\nCVE-2023-35128 | GTKWave 3.3.115 fstReaderIterBlocks2 integer overflow (TALOS-2023-1792)", "creation_timestamp": "2024-01-25T12:41:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/e81233c1-847c-4166-a388-f27194781edc/export</guid>
      <pubDate>Thu, 25 Jan 2024 12:41:19 +0000</pubDate>
    </item>
    <item>
      <title>521c2d2f-8a32-402b-a728-4b6559107673</title>
      <link>https://db.gcve.eu/sighting/521c2d2f-8a32-402b-a728-4b6559107673/export</link>
      <description>{"uuid": "521c2d2f-8a32-402b-a728-4b6559107673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35121", "type": "seen", "source": "https://t.me/ctinow/184807", "content": "https://ift.tt/uql9jeB\nCVE-2023-35121", "creation_timestamp": "2024-02-14T17:03:00.000000Z"}</description>
      <content:encoded>{"uuid": "521c2d2f-8a32-402b-a728-4b6559107673", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35121", "type": "seen", "source": "https://t.me/ctinow/184807", "content": "https://ift.tt/uql9jeB\nCVE-2023-35121", "creation_timestamp": "2024-02-14T17:03:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/521c2d2f-8a32-402b-a728-4b6559107673/export</guid>
      <pubDate>Wed, 14 Feb 2024 17:03:00 +0000</pubDate>
    </item>
    <item>
      <title>ec94b0d4-2fe7-4888-aaa7-cd10a54dac75</title>
      <link>https://db.gcve.eu/sighting/ec94b0d4-2fe7-4888-aaa7-cd10a54dac75/export</link>
      <description>{"uuid": "ec94b0d4-2fe7-4888-aaa7-cd10a54dac75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35121", "type": "seen", "source": "https://t.me/ctinow/201361", "content": "https://ift.tt/p2Ng9o5\nCVE-2023-35121 | Intel oneAPI DPC++ Compiler Software prior 2023.2.1 access control (intel-sa-00988)", "creation_timestamp": "2024-03-06T14:11:50.000000Z"}</description>
      <content:encoded>{"uuid": "ec94b0d4-2fe7-4888-aaa7-cd10a54dac75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35121", "type": "seen", "source": "https://t.me/ctinow/201361", "content": "https://ift.tt/p2Ng9o5\nCVE-2023-35121 | Intel oneAPI DPC++ Compiler Software prior 2023.2.1 access control (intel-sa-00988)", "creation_timestamp": "2024-03-06T14:11:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ec94b0d4-2fe7-4888-aaa7-cd10a54dac75/export</guid>
      <pubDate>Wed, 06 Mar 2024 14:11:50 +0000</pubDate>
    </item>
    <item>
      <title>2bf22c8e-2f40-48de-9622-393d3cfd5fbc</title>
      <link>https://db.gcve.eu/sighting/2bf22c8e-2f40-48de-9622-393d3cfd5fbc/export</link>
      <description>{"uuid": "2bf22c8e-2f40-48de-9622-393d3cfd5fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35126", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10206", "content": "#exploit\n1. CVE-2024-2891:\nXbox GamingService Arbitrary Folder Move\nhttps://packetstormsecurity.com/files/177712/Xbox-GamingService-Arbitrary-Folder-Move.html\n\n2. Dissecting a complex vulnerability and achieving arbitrary code execution in Ichitaro Word (CVE-2023-35126, CVE-2023-34366, CVE-2023-38127, CVE-2023-38128)\nhttps://blog.talosintelligence.com/exploiting-low-severity-vulnerability-using-a-frame-pointer-overwrite", "creation_timestamp": "2024-03-24T17:54:38.000000Z"}</description>
      <content:encoded>{"uuid": "2bf22c8e-2f40-48de-9622-393d3cfd5fbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-35126", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10206", "content": "#exploit\n1. CVE-2024-2891:\nXbox GamingService Arbitrary Folder Move\nhttps://packetstormsecurity.com/files/177712/Xbox-GamingService-Arbitrary-Folder-Move.html\n\n2. Dissecting a complex vulnerability and achieving arbitrary code execution in Ichitaro Word (CVE-2023-35126, CVE-2023-34366, CVE-2023-38127, CVE-2023-38128)\nhttps://blog.talosintelligence.com/exploiting-low-severity-vulnerability-using-a-frame-pointer-overwrite", "creation_timestamp": "2024-03-24T17:54:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2bf22c8e-2f40-48de-9622-393d3cfd5fbc/export</guid>
      <pubDate>Sun, 24 Mar 2024 17:54:38 +0000</pubDate>
    </item>
  </channel>
</rss>
