<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 06 Jun 2026 00:01:51 +0000</lastBuildDate>
    <item>
      <title>9662d788-87e4-4b1d-90c4-fa4ebc1e4a2c</title>
      <link>https://db.gcve.eu/sighting/9662d788-87e4-4b1d-90c4-fa4ebc1e4a2c/export</link>
      <description>{"uuid": "9662d788-87e4-4b1d-90c4-fa4ebc1e4a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48074", "type": "seen", "source": "https://t.me/cvedetector/9100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48074 - \"DrayTek Vigor2960 Command Injection RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-48074 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:02.000000Z"}</description>
      <content:encoded>{"uuid": "9662d788-87e4-4b1d-90c4-fa4ebc1e4a2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48074", "type": "seen", "source": "https://t.me/cvedetector/9100", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48074 - \"DrayTek Vigor2960 Command Injection RCE\"\", \n  \"Content\": \"CVE ID : CVE-2024-48074 \nPublished : Oct. 28, 2024, 12:15 p.m. | 19\u00a0minutes ago \nDescription : An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-28T13:39:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/9662d788-87e4-4b1d-90c4-fa4ebc1e4a2c/export</guid>
      <pubDate>Mon, 28 Oct 2024 13:39:02 +0000</pubDate>
    </item>
    <item>
      <title>a7eff025-380d-41df-a6c1-241a7fa3e3a2</title>
      <link>https://db.gcve.eu/sighting/a7eff025-380d-41df-a6c1-241a7fa3e3a2/export</link>
      <description>{"uuid": "a7eff025-380d-41df-a6c1-241a7fa3e3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48073", "type": "seen", "source": "https://t.me/cvedetector/10226", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48073 - Sunniwell HT3300 Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-48073 \nPublished : Nov. 8, 2024, 10:15 p.m. | 29\u00a0minutes ago \nDescription : sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which could allow an attacker to pass commands to this program via command line arguments to gain elevated root privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T23:53:53.000000Z"}</description>
      <content:encoded>{"uuid": "a7eff025-380d-41df-a6c1-241a7fa3e3a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48073", "type": "seen", "source": "https://t.me/cvedetector/10226", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48073 - Sunniwell HT3300 Command Injection\", \n  \"Content\": \"CVE ID : CVE-2024-48073 \nPublished : Nov. 8, 2024, 10:15 p.m. | 29\u00a0minutes ago \nDescription : sunniwell HT3300 before 1.0.0.B022.2 is vulnerable to Insecure Permissions. The /usr/local/bin/update program, which is responsible for updating the software in the HT3300 device, is given the execution mode of sudo NOPASSWD. This program is vulnerable to a command injection vulnerability, which could allow an attacker to pass commands to this program via command line arguments to gain elevated root privileges. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-08T23:53:53.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a7eff025-380d-41df-a6c1-241a7fa3e3a2/export</guid>
      <pubDate>Fri, 08 Nov 2024 23:53:53 +0000</pubDate>
    </item>
    <item>
      <title>65149d85-9026-4da6-8893-544ec8ef2a07</title>
      <link>https://db.gcve.eu/sighting/65149d85-9026-4da6-8893-544ec8ef2a07/export</link>
      <description>{"uuid": "65149d85-9026-4da6-8893-544ec8ef2a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48075", "type": "seen", "source": "https://t.me/cvedetector/10751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48075 - Real Time Logic SharkSSL Heap Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48075 \nPublished : Nov. 12, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : A Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL 09.09.24 and earlier allows a remote attacker to trigger a Denial-of-Service via a malformed TLS Client Key Exchange message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T23:56:21.000000Z"}</description>
      <content:encoded>{"uuid": "65149d85-9026-4da6-8893-544ec8ef2a07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48075", "type": "seen", "source": "https://t.me/cvedetector/10751", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-48075 - Real Time Logic SharkSSL Heap Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-48075 \nPublished : Nov. 12, 2024, 10:15 p.m. | 37\u00a0minutes ago \nDescription : A Heap buffer overflow in the server-site handshake implementation in Real Time Logic SharkSSL 09.09.24 and earlier allows a remote attacker to trigger a Denial-of-Service via a malformed TLS Client Key Exchange message. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T23:56:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/65149d85-9026-4da6-8893-544ec8ef2a07/export</guid>
      <pubDate>Tue, 12 Nov 2024 23:56:21 +0000</pubDate>
    </item>
    <item>
      <title>b93cd84a-b04b-4346-92a5-b2d6cb55a9a3</title>
      <link>https://db.gcve.eu/sighting/b93cd84a-b04b-4346-92a5-b2d6cb55a9a3/export</link>
      <description>{"uuid": "b93cd84a-b04b-4346-92a5-b2d6cb55a9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48074", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulrhv2n2b", "content": "", "creation_timestamp": "2025-08-23T21:02:30.031492Z"}</description>
      <content:encoded>{"uuid": "b93cd84a-b04b-4346-92a5-b2d6cb55a9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-48074", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lx3ulrhv2n2b", "content": "", "creation_timestamp": "2025-08-23T21:02:30.031492Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b93cd84a-b04b-4346-92a5-b2d6cb55a9a3/export</guid>
      <pubDate>Sat, 23 Aug 2025 21:02:30 +0000</pubDate>
    </item>
  </channel>
</rss>
