<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 30 Apr 2026 19:41:47 +0000</lastBuildDate>
    <item>
      <title>408b7563-93d5-483a-b6b1-29934ee55fb5</title>
      <link>https://db.gcve.eu/sighting/408b7563-93d5-483a-b6b1-29934ee55fb5/export</link>
      <description>{"uuid": "408b7563-93d5-483a-b6b1-29934ee55fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-0703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0703\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-01-24T18:31:06.470Z\n\ud83d\udccf Modified: 2025-01-24T20:59:02.283Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293231\n2. https://vuldb.com/?ctiid.293231\n3. https://vuldb.com/?submit.480842\n4. https://github.com/JoeyBling/bootplus/issues/25\n5. https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618", "creation_timestamp": "2025-01-24T21:05:08.000000Z"}</description>
      <content:encoded>{"uuid": "408b7563-93d5-483a-b6b1-29934ee55fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-0703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3019", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0703\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.\n\ud83d\udccf Published: 2025-01-24T18:31:06.470Z\n\ud83d\udccf Modified: 2025-01-24T20:59:02.283Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.293231\n2. https://vuldb.com/?ctiid.293231\n3. https://vuldb.com/?submit.480842\n4. https://github.com/JoeyBling/bootplus/issues/25\n5. https://github.com/JoeyBling/bootplus/issues/25#issue-2786928618", "creation_timestamp": "2025-01-24T21:05:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/408b7563-93d5-483a-b6b1-29934ee55fb5/export</guid>
      <pubDate>Fri, 24 Jan 2025 21:05:08 +0000</pubDate>
    </item>
    <item>
      <title>ac5c882a-fc26-4a1f-a983-ebb6a2b4269c</title>
      <link>https://db.gcve.eu/sighting/ac5c882a-fc26-4a1f-a983-ebb6a2b4269c/export</link>
      <description>{"uuid": "ac5c882a-fc26-4a1f-a983-ebb6a2b4269c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-0703", "type": "seen", "source": "https://t.me/cvedetector/16336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0703 - JoeyBling Bootplus Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0703 \nPublished : Jan. 24, 2025, 7:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:06:15.000000Z"}</description>
      <content:encoded>{"uuid": "ac5c882a-fc26-4a1f-a983-ebb6a2b4269c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-0703", "type": "seen", "source": "https://t.me/cvedetector/16336", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0703 - JoeyBling Bootplus Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0703 \nPublished : Jan. 24, 2025, 7:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in JoeyBling bootplus up to 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue affects some unknown processing of the file src/main/java/io/github/controller/SysFileController.java. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T21:06:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ac5c882a-fc26-4a1f-a983-ebb6a2b4269c/export</guid>
      <pubDate>Fri, 24 Jan 2025 21:06:15 +0000</pubDate>
    </item>
  </channel>
</rss>
