<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 25 Jul 2026 10:50:20 +0000</lastBuildDate>
    <item>
      <title>abf7a3d6-42e6-4ce3-921a-1a47368725d1</title>
      <link>https://db.gcve.eu/sighting/abf7a3d6-42e6-4ce3-921a-1a47368725d1/export</link>
      <description>{"uuid": "abf7a3d6-42e6-4ce3-921a-1a47368725d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50656\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T17:49:55.263Z\n\ud83d\udd17 References:\n1. https://itsourcecode.com/free-projects/php-project/placement-management-system-project-in-php-with-source-code/\n2. https://github.com/riya98241/CVE/blob/main/CVE-2024-50656", "creation_timestamp": "2025-03-19T18:19:40.000000Z"}</description>
      <content:encoded>{"uuid": "abf7a3d6-42e6-4ce3-921a-1a47368725d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8118", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50656\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: itsourcecode Placement Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Full Name field in registration.php.\n\ud83d\udccf Published: 2025-02-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T17:49:55.263Z\n\ud83d\udd17 References:\n1. https://itsourcecode.com/free-projects/php-project/placement-management-system-project-in-php-with-source-code/\n2. https://github.com/riya98241/CVE/blob/main/CVE-2024-50656", "creation_timestamp": "2025-03-19T18:19:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/abf7a3d6-42e6-4ce3-921a-1a47368725d1/export</guid>
      <pubDate>Wed, 19 Mar 2025 18:19:40 +0000</pubDate>
    </item>
    <item>
      <title>1b9e5546-b971-43ac-add9-3ec22cf4e0ab</title>
      <link>https://db.gcve.eu/sighting/1b9e5546-b971-43ac-add9-3ec22cf4e0ab/export</link>
      <description>{"uuid": "1b9e5546-b971-43ac-add9-3ec22cf4e0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawvvhaq2w", "content": "", "creation_timestamp": "2025-02-03T19:16:13.999187Z"}</description>
      <content:encoded>{"uuid": "1b9e5546-b971-43ac-add9-3ec22cf4e0ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhcawvvhaq2w", "content": "", "creation_timestamp": "2025-02-03T19:16:13.999187Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/1b9e5546-b971-43ac-add9-3ec22cf4e0ab/export</guid>
      <pubDate>Mon, 03 Feb 2025 19:16:13 +0000</pubDate>
    </item>
    <item>
      <title>c7997f7c-b97b-4e4e-aa5b-56cee0442ec6</title>
      <link>https://db.gcve.eu/sighting/c7997f7c-b97b-4e4e-aa5b-56cee0442ec6/export</link>
      <description>{"uuid": "c7997f7c-b97b-4e4e-aa5b-56cee0442ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941466417414394", "content": "", "creation_timestamp": "2025-02-03T18:53:22.063039Z"}</description>
      <content:encoded>{"uuid": "c7997f7c-b97b-4e4e-aa5b-56cee0442ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50656", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113941466417414394", "content": "", "creation_timestamp": "2025-02-03T18:53:22.063039Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/c7997f7c-b97b-4e4e-aa5b-56cee0442ec6/export</guid>
      <pubDate>Mon, 03 Feb 2025 18:53:22 +0000</pubDate>
    </item>
    <item>
      <title>876363dd-5e75-4f89-8934-50001e3dc074</title>
      <link>https://db.gcve.eu/sighting/876363dd-5e75-4f89-8934-50001e3dc074/export</link>
      <description>{"uuid": "876363dd-5e75-4f89-8934-50001e3dc074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113793757486628973", "content": "", "creation_timestamp": "2025-01-08T16:49:03.931801Z"}</description>
      <content:encoded>{"uuid": "876363dd-5e75-4f89-8934-50001e3dc074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113793757486628973", "content": "", "creation_timestamp": "2025-01-08T16:49:03.931801Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/876363dd-5e75-4f89-8934-50001e3dc074/export</guid>
      <pubDate>Wed, 08 Jan 2025 16:49:03 +0000</pubDate>
    </item>
    <item>
      <title>7d6e6dc0-0f63-4182-bf11-32db3ee4525b</title>
      <link>https://db.gcve.eu/sighting/7d6e6dc0-0f63-4182-bf11-32db3ee4525b/export</link>
      <description>{"uuid": "7d6e6dc0-0f63-4182-bf11-32db3ee4525b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://t.me/cvedetector/14598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50658 - AdPortal SSTI Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50658 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:36.000000Z"}</description>
      <content:encoded>{"uuid": "7d6e6dc0-0f63-4182-bf11-32db3ee4525b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://t.me/cvedetector/14598", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50658 - AdPortal SSTI Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-50658 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:36.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/7d6e6dc0-0f63-4182-bf11-32db3ee4525b/export</guid>
      <pubDate>Tue, 07 Jan 2025 19:44:36 +0000</pubDate>
    </item>
    <item>
      <title>98d68971-0b28-4600-a53c-e532f53b4b78</title>
      <link>https://db.gcve.eu/sighting/98d68971-0b28-4600-a53c-e532f53b4b78/export</link>
      <description>{"uuid": "98d68971-0b28-4600-a53c-e532f53b4b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://t.me/cvedetector/14595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50659 - iPublish Media Solutions AdPortal Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50659 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:31.000000Z"}</description>
      <content:encoded>{"uuid": "98d68971-0b28-4600-a53c-e532f53b4b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://t.me/cvedetector/14595", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-50659 - iPublish Media Solutions AdPortal Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2024-50659 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:31.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/98d68971-0b28-4600-a53c-e532f53b4b78/export</guid>
      <pubDate>Tue, 07 Jan 2025 19:44:31 +0000</pubDate>
    </item>
    <item>
      <title>b6645ffc-06e3-4cfd-88f7-9f79888c27cd</title>
      <link>https://db.gcve.eu/sighting/b6645ffc-06e3-4cfd-88f7-9f79888c27cd/export</link>
      <description>{"uuid": "b6645ffc-06e3-4cfd-88f7-9f79888c27cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6cre4yww2g", "content": "", "creation_timestamp": "2025-01-07T18:47:56.256742Z"}</description>
      <content:encoded>{"uuid": "b6645ffc-06e3-4cfd-88f7-9f79888c27cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6cre4yww2g", "content": "", "creation_timestamp": "2025-01-07T18:47:56.256742Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b6645ffc-06e3-4cfd-88f7-9f79888c27cd/export</guid>
      <pubDate>Tue, 07 Jan 2025 18:47:56 +0000</pubDate>
    </item>
    <item>
      <title>955558e4-5127-4b8e-b5d5-10560d1a234e</title>
      <link>https://db.gcve.eu/sighting/955558e4-5127-4b8e-b5d5-10560d1a234e/export</link>
      <description>{"uuid": "955558e4-5127-4b8e-b5d5-10560d1a234e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdzsfo2g", "content": "", "creation_timestamp": "2025-01-07T18:47:55.683328Z"}</description>
      <content:encoded>{"uuid": "955558e4-5127-4b8e-b5d5-10560d1a234e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6crdzsfo2g", "content": "", "creation_timestamp": "2025-01-07T18:47:55.683328Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/955558e4-5127-4b8e-b5d5-10560d1a234e/export</guid>
      <pubDate>Tue, 07 Jan 2025 18:47:55 +0000</pubDate>
    </item>
    <item>
      <title>7f9bc4ba-c3b5-4d4a-94ac-f45e76809ef4</title>
      <link>https://db.gcve.eu/sighting/7f9bc4ba-c3b5-4d4a-94ac-f45e76809ef4/export</link>
      <description>{"uuid": "7f9bc4ba-c3b5-4d4a-94ac-f45e76809ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50658\n\ud83d\udd39 Description: Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:09:32.971186\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:17.000000Z"}</description>
      <content:encoded>{"uuid": "7f9bc4ba-c3b5-4d4a-94ac-f45e76809ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50658", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/516", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50658\n\ud83d\udd39 Description: Server-Side Template Injection (SSTI) was found in AdPortal 3.0.39 allows a remote attacker to execute arbitrary code via the shippingAsBilling and firstname parameters in updateuserinfo.html file\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:09:32.971186\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:17.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/7f9bc4ba-c3b5-4d4a-94ac-f45e76809ef4/export</guid>
      <pubDate>Tue, 07 Jan 2025 18:39:17 +0000</pubDate>
    </item>
    <item>
      <title>2e275a9d-4063-4baa-8a91-b50372ddf46d</title>
      <link>https://db.gcve.eu/sighting/2e275a9d-4063-4baa-8a91-b50372ddf46d/export</link>
      <description>{"uuid": "2e275a9d-4063-4baa-8a91-b50372ddf46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50659\n\ud83d\udd39 Description: Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:10:00.715872\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:11.000000Z"}</description>
      <content:encoded>{"uuid": "2e275a9d-4063-4baa-8a91-b50372ddf46d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-50659", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/515", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-50659\n\ud83d\udd39 Description: Cross Site Scripting vulnerability iPublish Media Solutions AdPortal 3.0.39 allows a remote attacker to escalate privileges via the shippingAsBilling parameter in updateuserinfo.html.\n\ud83d\udccf Published: 2025-01-07T00:00:00\n\ud83d\udccf Modified: 2025-01-07T18:10:00.715872\n\ud83d\udd17 References:\n1. http://adportal.com\n2. http://ipublish.com\n3. https://petercipolone.info/wp-content/uploads/2025/01/iPublishMedia_AdPortal3.0.39_CVEs.pdf", "creation_timestamp": "2025-01-07T18:39:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2e275a9d-4063-4baa-8a91-b50372ddf46d/export</guid>
      <pubDate>Tue, 07 Jan 2025 18:39:11 +0000</pubDate>
    </item>
  </channel>
</rss>
