https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 02 Sep 2026 19:52:28 +0000 https://db.gcve.eu/sighting/c4d97718-afb8-4f40-af44-56a1b5c80ba1/export {"uuid": "c4d97718-afb8-4f40-af44-56a1b5c80ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53270", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"} {"uuid": "c4d97718-afb8-4f40-af44-56a1b5c80ba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53270", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:05.000000Z"} https://db.gcve.eu/sighting/c4d97718-afb8-4f40-af44-56a1b5c80ba1/export Tue, 16 Sep 2025 03:45:05 +0000 https://db.gcve.eu/sighting/6e4c8ae2-7045-486a-8ac0-8a165555fc31/export {"uuid": "6e4c8ae2-7045-486a-8ac0-8a165555fc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:00.000000Z"} {"uuid": "6e4c8ae2-7045-486a-8ac0-8a165555fc31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-16T03:45:00.000000Z"} https://db.gcve.eu/sighting/6e4c8ae2-7045-486a-8ac0-8a165555fc31/export Tue, 16 Sep 2025 03:45:00 +0000 https://db.gcve.eu/sighting/71157e81-833d-4dd9-a4a2-9915957b9d50/export {"uuid": "71157e81-833d-4dd9-a4a2-9915957b9d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53270", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"} {"uuid": "71157e81-833d-4dd9-a4a2-9915957b9d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53270", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:32.000000Z"} https://db.gcve.eu/sighting/71157e81-833d-4dd9-a4a2-9915957b9d50/export Mon, 15 Sep 2025 13:28:32 +0000 https://db.gcve.eu/sighting/e0f62f65-1573-4422-91fa-9ca442de2c0f/export {"uuid": "e0f62f65-1573-4422-91fa-9ca442de2c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"} {"uuid": "e0f62f65-1573-4422-91fa-9ca442de2c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "MISP/acd0294c-4561-4286-a04e-5c02a1c67b1f", "content": "", "creation_timestamp": "2025-09-15T13:28:31.000000Z"} https://db.gcve.eu/sighting/e0f62f65-1573-4422-91fa-9ca442de2c0f/export Mon, 15 Sep 2025 13:28:31 +0000 https://db.gcve.eu/sighting/f8585117-e3ae-4b30-a138-2cfada9bea6e/export {"uuid": "f8585117-e3ae-4b30-a138-2cfada9bea6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "Telegram/66j94aRIlP7ZchCyVbH64Aq5ZRV5Hhss2kLTvEhmtIuytOpQ", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"} {"uuid": "f8585117-e3ae-4b30-a138-2cfada9bea6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "Telegram/66j94aRIlP7ZchCyVbH64Aq5ZRV5Hhss2kLTvEhmtIuytOpQ", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"} https://db.gcve.eu/sighting/f8585117-e3ae-4b30-a138-2cfada9bea6e/export Tue, 18 Feb 2025 23:42:23 +0000 https://db.gcve.eu/sighting/9b8c1220-5298-4c49-903e-8a6dd4f5ee5c/export {"uuid": "9b8c1220-5298-4c49-903e-8a6dd4f5ee5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53275", "type": "seen", "source": "Telegram/TXjQzQgzOHIECJ_MWa7ZlmHCxKny7DMPnS1Yi-SHilBFS741", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"} {"uuid": "9b8c1220-5298-4c49-903e-8a6dd4f5ee5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53275", "type": "seen", "source": "Telegram/TXjQzQgzOHIECJ_MWa7ZlmHCxKny7DMPnS1Yi-SHilBFS741", "content": "", "creation_timestamp": "2025-02-18T23:42:23.000000Z"} https://db.gcve.eu/sighting/9b8c1220-5298-4c49-903e-8a6dd4f5ee5c/export Tue, 18 Feb 2025 23:42:23 +0000 https://db.gcve.eu/sighting/3932820c-9904-4898-8de4-59eedf727bbe/export {"uuid": "3932820c-9904-4898-8de4-59eedf727bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53277", "type": "seen", "source": "https://t.me/cvedetector/15386", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-53277 - Silverstripe Framework Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-53277 \nPublished : Jan. 14, 2025, 11:15 p.m. | 37\u00a0minutes ago \nDescription : Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the CMS where that content doesn't get correctly sanitised prior to being included in the form message, resulting in an XSS vulnerability. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"15 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:53:36.000000Z"} {"uuid": "3932820c-9904-4898-8de4-59eedf727bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53277", "type": "seen", "source": "https://t.me/cvedetector/15386", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-53277 - Silverstripe Framework Cross-Site Scripting Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-53277 \nPublished : Jan. 14, 2025, 11:15 p.m. | 37\u00a0minutes ago \nDescription : Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the CMS where that content doesn't get correctly sanitised prior to being included in the form message, resulting in an XSS vulnerability. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"15 Jan 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T00:53:36.000000Z"} https://db.gcve.eu/sighting/3932820c-9904-4898-8de4-59eedf727bbe/export Wed, 15 Jan 2025 00:53:36 +0000 https://db.gcve.eu/sighting/536af465-5ee1-4575-b2fa-6ee9c1c507fc/export {"uuid": "536af465-5ee1-4575-b2fa-6ee9c1c507fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53277", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1633", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-53277\n\ud83d\udd39 Description: Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the CMS where that content doesn't get correctly sanitised prior to being included in the form message, resulting in an XSS vulnerability. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T22:45:07.403Z\n\ud83d\udccf Modified: 2025-01-14T22:45:07.403Z\n\ud83d\udd17 References:\n1. https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-ff6q-3c9c-6cf5\n2. https://github.com/silverstripe/silverstripe-framework/commit/74904f539347b7d1f8c5b5fb9e28d62ff251ee00\n3. https://www.silverstripe.org/download/security-releases/cve-2024-53277", "creation_timestamp": "2025-01-14T23:09:10.000000Z"} {"uuid": "536af465-5ee1-4575-b2fa-6ee9c1c507fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53277", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1633", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-53277\n\ud83d\udd39 Description: Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There are scenarios in the CMS where that content doesn't get correctly sanitised prior to being included in the form message, resulting in an XSS vulnerability. This issue has been addressed in silverstripe/framework version 5.3.8 and users are advised to upgrade. There are no known workarounds for this vulnerability.\n\ud83d\udccf Published: 2025-01-14T22:45:07.403Z\n\ud83d\udccf Modified: 2025-01-14T22:45:07.403Z\n\ud83d\udd17 References:\n1. https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-ff6q-3c9c-6cf5\n2. https://github.com/silverstripe/silverstripe-framework/commit/74904f539347b7d1f8c5b5fb9e28d62ff251ee00\n3. https://www.silverstripe.org/download/security-releases/cve-2024-53277", "creation_timestamp": "2025-01-14T23:09:10.000000Z"} https://db.gcve.eu/sighting/536af465-5ee1-4575-b2fa-6ee9c1c507fc/export Tue, 14 Jan 2025 23:09:10 +0000 https://db.gcve.eu/sighting/86f7420d-927c-438c-ac95-bdbac1b25118/export {"uuid": "86f7420d-927c-438c-ac95-bdbac1b25118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "https://t.me/cvedetector/13545", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-53276 - Home-Gallery.org CORS Cross-Site Request Information Disclosure\", \n \"Content\": \"CVE ID : CVE-2024-53276 \nPublished : Dec. 23, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default settings. The following express middleware allows any website to make a cross site request to home-gallery, thus allowing them to read any endpoint on home-gallery. Home-gallery is mostly safe from cross-site requests due to most of its pages requiring JavaScript, and cross-site requests such as fetch() do not render javascript. If an attacker is able to get the path of the preview images which are randomized, an attacker will be able to view such a photo. If any static files or endpoints are introduced in the future that contain sensitive information, they will be accessible to an attacker website. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"23 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T20:00:26.000000Z"} {"uuid": "86f7420d-927c-438c-ac95-bdbac1b25118", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53276", "type": "seen", "source": "https://t.me/cvedetector/13545", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-53276 - Home-Gallery.org CORS Cross-Site Request Information Disclosure\", \n \"Content\": \"CVE ID : CVE-2024-53276 \nPublished : Dec. 23, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, an open CORS policy in app.js may allow an attacker to view the images of home-gallery when it is using the default settings. The following express middleware allows any website to make a cross site request to home-gallery, thus allowing them to read any endpoint on home-gallery. Home-gallery is mostly safe from cross-site requests due to most of its pages requiring JavaScript, and cross-site requests such as fetch() do not render javascript. If an attacker is able to get the path of the preview images which are randomized, an attacker will be able to view such a photo. If any static files or endpoints are introduced in the future that contain sensitive information, they will be accessible to an attacker website. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"23 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T20:00:26.000000Z"} https://db.gcve.eu/sighting/86f7420d-927c-438c-ac95-bdbac1b25118/export Mon, 23 Dec 2024 20:00:26 +0000 https://db.gcve.eu/sighting/8c33d23a-f20f-41a3-bbf0-018be5e8467e/export {"uuid": "8c33d23a-f20f-41a3-bbf0-018be5e8467e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53275", "type": "seen", "source": "https://t.me/cvedetector/13544", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-53275 - Home-Gallery.org DNS Rebinding Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-53275 \nPublished : Dec. 23, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to DNS rebinding. In this attack, an attacker will ask a user to visit their website. The attacker website will then change the DNS records of their domain from their IP address to the internal IP address of the home-gallery instance. To tell which IP addresses are valid, we can rebind a subdomain to each IP address we want to check, and see if there is a response. Once potential candidates have been found, the attacker can launch the attack by reading the response of the web server after the IP address has changed. When the attacker domain is fetched, the response will be from the home-gallery instance, not the attacker website, because the IP address has been changed. Due to a lack of authentication, home-gallery photos can then be extracted by the attacker website. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"23 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T20:00:25.000000Z"} {"uuid": "8c33d23a-f20f-41a3-bbf0-018be5e8467e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-53275", "type": "seen", "source": "https://t.me/cvedetector/13544", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-53275 - Home-Gallery.org DNS Rebinding Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-53275 \nPublished : Dec. 23, 2024, 6:15 p.m. | 34\u00a0minutes ago \nDescription : Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to DNS rebinding. In this attack, an attacker will ask a user to visit their website. The attacker website will then change the DNS records of their domain from their IP address to the internal IP address of the home-gallery instance. To tell which IP addresses are valid, we can rebind a subdomain to each IP address we want to check, and see if there is a response. Once potential candidates have been found, the attacker can launch the attack by reading the response of the web server after the IP address has changed. When the attacker domain is fetched, the response will be from the home-gallery instance, not the attacker website, because the IP address has been changed. Due to a lack of authentication, home-gallery photos can then be extracted by the attacker website. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"23 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-23T20:00:25.000000Z"} https://db.gcve.eu/sighting/8c33d23a-f20f-41a3-bbf0-018be5e8467e/export Mon, 23 Dec 2024 20:00:25 +0000