https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 29 Jul 2026 10:02:24 +0000 https://db.gcve.eu/sighting/afe100af-0aee-47c9-98e3-bc56c9de55d9/export {"uuid": "afe100af-0aee-47c9-98e3-bc56c9de55d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57273", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16984", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57273\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized \"reason\" field and a derivable device key generated from the public SSH key.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-20T14:27:40.251Z\n\ud83d\udd17 References:\n1. http://netgate.com\n2. https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack/\n3. https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2\n4. https://docs.netgate.com/downloads/pfSense-SA-25_03.webgui.asc", "creation_timestamp": "2025-05-20T14:40:44.000000Z"} {"uuid": "afe100af-0aee-47c9-98e3-bc56c9de55d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57273", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16984", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57273\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross-site scripting (XSS) in the Automatic Configuration Backup (ACB) service, allowing remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized \"reason\" field and a derivable device key generated from the public SSH key.\n\ud83d\udccf Published: 2025-05-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-20T14:27:40.251Z\n\ud83d\udd17 References:\n1. http://netgate.com\n2. https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack/\n3. https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2\n4. https://docs.netgate.com/downloads/pfSense-SA-25_03.webgui.asc", "creation_timestamp": "2025-05-20T14:40:44.000000Z"} https://db.gcve.eu/sighting/afe100af-0aee-47c9-98e3-bc56c9de55d9/export Tue, 20 May 2025 14:40:44 +0000 https://db.gcve.eu/sighting/aa050fca-34c3-485e-a37f-2f648d30a561/export {"uuid": "aa050fca-34c3-485e-a37f-2f648d30a561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5htyuzpq2h", "content": "", "creation_timestamp": "2025-05-14T16:58:07.286997Z"} {"uuid": "aa050fca-34c3-485e-a37f-2f648d30a561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57273", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5htyuzpq2h", "content": "", "creation_timestamp": "2025-05-14T16:58:07.286997Z"} https://db.gcve.eu/sighting/aa050fca-34c3-485e-a37f-2f648d30a561/export Wed, 14 May 2025 16:58:07 +0000 https://db.gcve.eu/sighting/6a25a2ac-ed16-4fa6-8dc0-d018f0c36fb2/export {"uuid": "6a25a2ac-ed16-4fa6-8dc0-d018f0c36fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://t.me/cvedetector/17526", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-57279 - OpenLDAP LDAP User Manager Reflected Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-57279 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:51.000000Z"} {"uuid": "6a25a2ac-ed16-4fa6-8dc0-d018f0c36fb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://t.me/cvedetector/17526", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-57279 - OpenLDAP LDAP User Manager Reflected Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-57279 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability has been identified in the LDAP User Manager <=\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:51.000000Z"} https://db.gcve.eu/sighting/6a25a2ac-ed16-4fa6-8dc0-d018f0c36fb2/export Sat, 08 Feb 2025 00:41:51 +0000 https://db.gcve.eu/sighting/0fcac737-fbf8-49d0-a410-3ac5937afa1f/export {"uuid": "0fcac737-fbf8-49d0-a410-3ac5937afa1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57278", "type": "seen", "source": "https://t.me/cvedetector/17525", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-57278 - QingScan Reflected Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-57278 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in QingScan <=v1.8.0.\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:47.000000Z"} {"uuid": "0fcac737-fbf8-49d0-a410-3ac5937afa1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57278", "type": "seen", "source": "https://t.me/cvedetector/17525", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-57278 - QingScan Reflected Cross-Site Scripting (XSS)\", \n \"Content\": \"CVE ID : CVE-2024-57278 \nPublished : Feb. 7, 2025, 10:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A reflected Cross-Site Scripting (XSS) vulnerability exists in /webscan/sqlmap/index.html in QingScan <=v1.8.0.\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"08 Feb 2025\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-08T00:41:47.000000Z"} https://db.gcve.eu/sighting/0fcac737-fbf8-49d0-a410-3ac5937afa1f/export Sat, 08 Feb 2025 00:41:47 +0000 https://db.gcve.eu/sighting/563db0fb-8e82-4f7a-accc-7d160b2b198a/export {"uuid": "563db0fb-8e82-4f7a-accc-7d160b2b198a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjbbggh2b", "content": "", "creation_timestamp": "2025-02-07T23:39:30.060868Z"} {"uuid": "563db0fb-8e82-4f7a-accc-7d160b2b198a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhmrjbbggh2b", "content": "", "creation_timestamp": "2025-02-07T23:39:30.060868Z"} https://db.gcve.eu/sighting/563db0fb-8e82-4f7a-accc-7d160b2b198a/export Fri, 07 Feb 2025 23:39:30 +0000 https://db.gcve.eu/sighting/1c64a855-ad85-466c-a85b-01bf1e5ad1ae/export {"uuid": "1c64a855-ad85-466c-a85b-01bf1e5ad1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtcpp7o27", "content": "", "creation_timestamp": "2025-02-07T22:15:35.214596Z"} {"uuid": "1c64a855-ad85-466c-a85b-01bf1e5ad1ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57279", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtcpp7o27", "content": "", "creation_timestamp": "2025-02-07T22:15:35.214596Z"} https://db.gcve.eu/sighting/1c64a855-ad85-466c-a85b-01bf1e5ad1ae/export Fri, 07 Feb 2025 22:15:35 +0000 https://db.gcve.eu/sighting/77bec773-f907-49fe-8d06-a2d82b8325e7/export {"uuid": "77bec773-f907-49fe-8d06-a2d82b8325e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57278", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtahhjy2u", "content": "", "creation_timestamp": "2025-02-07T22:15:32.467339Z"} {"uuid": "77bec773-f907-49fe-8d06-a2d82b8325e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57278", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhmmtahhjy2u", "content": "", "creation_timestamp": "2025-02-07T22:15:32.467339Z"} https://db.gcve.eu/sighting/77bec773-f907-49fe-8d06-a2d82b8325e7/export Fri, 07 Feb 2025 22:15:32 +0000 https://db.gcve.eu/sighting/4019441b-19a7-4018-a5dc-5a21ceb74605/export {"uuid": "4019441b-19a7-4018-a5dc-5a21ceb74605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3543", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57276\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\\SYSTEM privileges, enabling attackers to escalate privileges by replacing or placing a malicious executable in the service path.\n\ud83d\udccf Published: 2025-01-27T18:32:01Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57276\n2. https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md\n3. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md", "creation_timestamp": "2025-01-31T01:12:28.000000Z"} {"uuid": "4019441b-19a7-4018-a5dc-5a21ceb74605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3543", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57276\n\ud83d\udd25 CVSS Score: 7.3 (CVSS_V3)\n\ud83d\udd39 Description: In Electronic Arts Dragon Age Origins 1.05, the DAUpdaterSVC service contains an unquoted service path vulnerability. This service is configured with insecure permissions, allowing users to modify the executable file path used by the service. The service runs with NT AUTHORITY\\SYSTEM privileges, enabling attackers to escalate privileges by replacing or placing a malicious executable in the service path.\n\ud83d\udccf Published: 2025-01-27T18:32:01Z\n\ud83d\udccf Modified: 2025-01-31T00:30:44Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2024-57276\n2. https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md\n3. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md", "creation_timestamp": "2025-01-31T01:12:28.000000Z"} https://db.gcve.eu/sighting/4019441b-19a7-4018-a5dc-5a21ceb74605/export Fri, 31 Jan 2025 01:12:28 +0000 https://db.gcve.eu/sighting/13c6262e-74f5-4006-89e4-ad17c1666862/export {"uuid": "13c6262e-74f5-4006-89e4-ad17c1666862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57276\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-27T17:15:16.827\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md\n2. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md", "creation_timestamp": "2025-01-30T23:19:51.000000Z"} {"uuid": "13c6262e-74f5-4006-89e4-ad17c1666862", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57276", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-57276\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-27T17:15:16.827\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://github.com/yamerooo123/CVE/blob/main/CVE-2024-57276/Description.md\n2. https://github.com/yamerooo123/ResearchNBugBountyEncyclopedia/blob/main/Researches/Dragon%20Age%20Origins/Description.md", "creation_timestamp": "2025-01-30T23:19:51.000000Z"} https://db.gcve.eu/sighting/13c6262e-74f5-4006-89e4-ad17c1666862/export Thu, 30 Jan 2025 23:19:51 +0000 https://db.gcve.eu/sighting/311872e9-a10d-4708-916d-ecd9fc2c2108/export {"uuid": "311872e9-a10d-4708-916d-ecd9fc2c2108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5rwqv2y", "content": "", "creation_timestamp": "2025-01-27T18:55:23.994512Z"} {"uuid": "311872e9-a10d-4708-916d-ecd9fc2c2108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2024-57276", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgqmj5rwqv2y", "content": "", "creation_timestamp": "2025-01-27T18:55:23.994512Z"} https://db.gcve.eu/sighting/311872e9-a10d-4708-916d-ecd9fc2c2108/export Mon, 27 Jan 2025 18:55:23 +0000