<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 14 Sep 2026 21:03:04 +0000</lastBuildDate>
    <item>
      <title>90ff8abd-9187-44ee-8e37-7b64957be95d</title>
      <link>https://db.gcve.eu/sighting/90ff8abd-9187-44ee-8e37-7b64957be95d/export</link>
      <description>{"uuid": "90ff8abd-9187-44ee-8e37-7b64957be95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-49368", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpj4pvmeei2e", "content": "", "creation_timestamp": "2026-06-30T13:37:07.135927Z"}</description>
      <content:encoded>{"uuid": "90ff8abd-9187-44ee-8e37-7b64957be95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2024-49368", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpj4pvmeei2e", "content": "", "creation_timestamp": "2026-06-30T13:37:07.135927Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/90ff8abd-9187-44ee-8e37-7b64957be95d/export</guid>
      <pubDate>Tue, 30 Jun 2026 13:37:07 +0000</pubDate>
    </item>
    <item>
      <title>f2c2cf0b-97fc-4741-bc16-ec61a9454b12</title>
      <link>https://db.gcve.eu/sighting/f2c2cf0b-97fc-4741-bc16-ec61a9454b12/export</link>
      <description>{"uuid": "f2c2cf0b-97fc-4741-bc16-ec61a9454b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49363", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}</description>
      <content:encoded>{"uuid": "f2c2cf0b-97fc-4741-bc16-ec61a9454b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49363", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/f2c2cf0b-97fc-4741-bc16-ec61a9454b12/export</guid>
      <pubDate>Tue, 16 Sep 2025 03:45:05 +0000</pubDate>
    </item>
    <item>
      <title>880e2a40-9cb8-42d1-91b1-cea4c42ae19a</title>
      <link>https://db.gcve.eu/sighting/880e2a40-9cb8-42d1-91b1-cea4c42ae19a/export</link>
      <description>{"uuid": "880e2a40-9cb8-42d1-91b1-cea4c42ae19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49363", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}</description>
      <content:encoded>{"uuid": "880e2a40-9cb8-42d1-91b1-cea4c42ae19a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49363", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/880e2a40-9cb8-42d1-91b1-cea4c42ae19a/export</guid>
      <pubDate>Mon, 15 Sep 2025 13:28:32 +0000</pubDate>
    </item>
    <item>
      <title>7c86e3ee-68ec-482b-885d-6575ed03569b</title>
      <link>https://db.gcve.eu/sighting/7c86e3ee-68ec-482b-885d-6575ed03569b/export</link>
      <description>{"uuid": "7c86e3ee-68ec-482b-885d-6575ed03569b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv4afurpu23", "content": "", "creation_timestamp": "2025-07-01T06:49:46.432797Z"}</description>
      <content:encoded>{"uuid": "7c86e3ee-68ec-482b-885d-6575ed03569b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv4afurpu23", "content": "", "creation_timestamp": "2025-07-01T06:49:46.432797Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/7c86e3ee-68ec-482b-885d-6575ed03569b/export</guid>
      <pubDate>Tue, 01 Jul 2025 06:49:46 +0000</pubDate>
    </item>
    <item>
      <title>e72b977b-5bb8-4014-847f-ce03228556a0</title>
      <link>https://db.gcve.eu/sighting/e72b977b-5bb8-4014-847f-ce03228556a0/export</link>
      <description>{"uuid": "e72b977b-5bb8-4014-847f-ce03228556a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv3xhgojb2s", "content": "", "creation_timestamp": "2025-07-01T06:44:45.889591Z"}</description>
      <content:encoded>{"uuid": "e72b977b-5bb8-4014-847f-ce03228556a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsv3xhgojb2s", "content": "", "creation_timestamp": "2025-07-01T06:44:45.889591Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/e72b977b-5bb8-4014-847f-ce03228556a0/export</guid>
      <pubDate>Tue, 01 Jul 2025 06:44:45 +0000</pubDate>
    </item>
    <item>
      <title>8a1f5728-4a30-4b8f-be29-5061d4610d89</title>
      <link>https://db.gcve.eu/sighting/8a1f5728-4a30-4b8f-be29-5061d4610d89/export</link>
      <description>{"uuid": "8a1f5728-4a30-4b8f-be29-5061d4610d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49363", "type": "seen", "source": "https://t.me/cvedetector/13242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49363 - Misskey Proxy Loop Amplified Distributed Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-49363 \nPublished : Dec. 18, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : Misskey is an open source, federated social media platform. In affected versions FileServerService (media proxy) in github.com/misskey-dev/misskey 2024.10.1 or earlier did not detect proxy loops, which allows remote actors to execute a self-propagating reflected/amplified distributed denial-of-service via a maliciously crafted note. FileServerService.prototype.proxyHandler did not check incoming requests are not coming from another proxy server. An attacker can execute an amplified denial-of-service by sending a nested proxy request to the server and end the request with a malicious redirect back to another nested proxy request.  \nLeading to unbounded recursion until the original request is timed out. This issue has been addressed in version 2024.11.0-alpha.3. Users are advised to upgrade. Users unable to upgrade may configure the reverse proxy to block requests to the proxy with an empty User-Agent header or one containing Misskey/. An attacker can not effectively modify the User-Agent header without making another request to the server. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:03:50.000000Z"}</description>
      <content:encoded>{"uuid": "8a1f5728-4a30-4b8f-be29-5061d4610d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49363", "type": "seen", "source": "https://t.me/cvedetector/13242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49363 - Misskey Proxy Loop Amplified Distributed Denial-of-Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-49363 \nPublished : Dec. 18, 2024, 8:15 p.m. | 36\u00a0minutes ago \nDescription : Misskey is an open source, federated social media platform. In affected versions FileServerService (media proxy) in github.com/misskey-dev/misskey 2024.10.1 or earlier did not detect proxy loops, which allows remote actors to execute a self-propagating reflected/amplified distributed denial-of-service via a maliciously crafted note. FileServerService.prototype.proxyHandler did not check incoming requests are not coming from another proxy server. An attacker can execute an amplified denial-of-service by sending a nested proxy request to the server and end the request with a malicious redirect back to another nested proxy request.  \nLeading to unbounded recursion until the original request is timed out. This issue has been addressed in version 2024.11.0-alpha.3. Users are advised to upgrade. Users unable to upgrade may configure the reverse proxy to block requests to the proxy with an empty User-Agent header or one containing Misskey/. An attacker can not effectively modify the User-Agent header without making another request to the server. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-18T22:03:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/8a1f5728-4a30-4b8f-be29-5061d4610d89/export</guid>
      <pubDate>Wed, 18 Dec 2024 22:03:50 +0000</pubDate>
    </item>
    <item>
      <title>66d49275-9907-429d-8cd3-2cd651a63676</title>
      <link>https://db.gcve.eu/sighting/66d49275-9907-429d-8cd3-2cd651a63676/export</link>
      <description>{"uuid": "66d49275-9907-429d-8cd3-2cd651a63676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49360", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113567658636613264", "content": "", "creation_timestamp": "2024-11-29T18:29:08.102938Z"}</description>
      <content:encoded>{"uuid": "66d49275-9907-429d-8cd3-2cd651a63676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49360", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113567658636613264", "content": "", "creation_timestamp": "2024-11-29T18:29:08.102938Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/66d49275-9907-429d-8cd3-2cd651a63676/export</guid>
      <pubDate>Fri, 29 Nov 2024 18:29:08 +0000</pubDate>
    </item>
    <item>
      <title>df7b04ff-7dbe-404d-b322-c62fcca27a96</title>
      <link>https://db.gcve.eu/sighting/df7b04ff-7dbe-404d-b322-c62fcca27a96/export</link>
      <description>{"uuid": "df7b04ff-7dbe-404d-b322-c62fcca27a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49369", "type": "seen", "source": "https://t.me/cvedetector/10668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49369 - Icinga 2 TLS Certificate Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-49369 \nPublished : Nov. 12, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted cluster nodes as well as any API users that use TLS client certificates for authentication (ApiUser objects with the client_cn attribute set). This vulnerability has been fixed in v2.14.3, v2.13.10, v2.12.11, and v2.11.12. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:53:52.000000Z"}</description>
      <content:encoded>{"uuid": "df7b04ff-7dbe-404d-b322-c62fcca27a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49369", "type": "seen", "source": "https://t.me/cvedetector/10668", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-49369 - Icinga 2 TLS Certificate Validation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-49369 \nPublished : Nov. 12, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted cluster nodes as well as any API users that use TLS client certificates for authentication (ApiUser objects with the client_cn attribute set). This vulnerability has been fixed in v2.14.3, v2.13.10, v2.12.11, and v2.11.12. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-12T18:53:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/df7b04ff-7dbe-404d-b322-c62fcca27a96/export</guid>
      <pubDate>Tue, 12 Nov 2024 18:53:52 +0000</pubDate>
    </item>
    <item>
      <title>bd478272-da71-4dc0-80af-e8828a617fc2</title>
      <link>https://db.gcve.eu/sighting/bd478272-da71-4dc0-80af-e8828a617fc2/export</link>
      <description>{"uuid": "bd478272-da71-4dc0-80af-e8828a617fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49369", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113471023692988977", "content": "", "creation_timestamp": "2024-11-12T16:53:35.776670Z"}</description>
      <content:encoded>{"uuid": "bd478272-da71-4dc0-80af-e8828a617fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49369", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113471023692988977", "content": "", "creation_timestamp": "2024-11-12T16:53:35.776670Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/bd478272-da71-4dc0-80af-e8828a617fc2/export</guid>
      <pubDate>Tue, 12 Nov 2024 16:53:35 +0000</pubDate>
    </item>
    <item>
      <title>54bb3f8d-079b-46a1-880c-ecc8f6115d74</title>
      <link>https://db.gcve.eu/sighting/54bb3f8d-079b-46a1-880c-ecc8f6115d74/export</link>
      <description>{"uuid": "54bb3f8d-079b-46a1-880c-ecc8f6115d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49368", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9005", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExplorations of CVE-2024-49368 + Exploit Development\nURL\uff1ahttps://github.com/Aashay221999/CVE-2024-49368\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-12T03:55:35.000000Z"}</description>
      <content:encoded>{"uuid": "54bb3f8d-079b-46a1-880c-ecc8f6115d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-49368", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/9005", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aExplorations of CVE-2024-49368 + Exploit Development\nURL\uff1ahttps://github.com/Aashay221999/CVE-2024-49368\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-11-12T03:55:35.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/54bb3f8d-079b-46a1-880c-ecc8f6115d74/export</guid>
      <pubDate>Tue, 12 Nov 2024 03:55:35 +0000</pubDate>
    </item>
  </channel>
</rss>
