<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 10 May 2026 14:06:53 +0000</lastBuildDate>
    <item>
      <title>bf6f2b7c-56c2-445f-9aa7-f305b4327131</title>
      <link>https://db.gcve.eu/sighting/bf6f2b7c-56c2-445f-9aa7-f305b4327131/export</link>
      <description>{"uuid": "bf6f2b7c-56c2-445f-9aa7-f305b4327131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-21158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-21158\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-02-11T17:10:47.804Z\n\ud83d\udccf Modified: 2025-03-01T04:55:54.837Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-01.html", "creation_timestamp": "2025-03-01T05:27:06.000000Z"}</description>
      <content:encoded>{"uuid": "bf6f2b7c-56c2-445f-9aa7-f305b4327131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-21158", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6040", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-21158\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-02-11T17:10:47.804Z\n\ud83d\udccf Modified: 2025-03-01T04:55:54.837Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-01.html", "creation_timestamp": "2025-03-01T05:27:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/bf6f2b7c-56c2-445f-9aa7-f305b4327131/export</guid>
      <pubDate>Sat, 01 Mar 2025 05:27:06 +0000</pubDate>
    </item>
    <item>
      <title>521c114a-0fea-4c10-91a8-d9fb69277a74</title>
      <link>https://db.gcve.eu/sighting/521c114a-0fea-4c10-91a8-d9fb69277a74/export</link>
      <description>{"uuid": "521c114a-0fea-4c10-91a8-d9fb69277a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-21157", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-21157\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-02-11T17:10:45.344Z\n\ud83d\udccf Modified: 2025-03-01T04:55:53.513Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-01.html", "creation_timestamp": "2025-03-01T05:27:07.000000Z"}</description>
      <content:encoded>{"uuid": "521c114a-0fea-4c10-91a8-d9fb69277a74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-21157", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-21157\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\ud83d\udccf Published: 2025-02-11T17:10:45.344Z\n\ud83d\udccf Modified: 2025-03-01T04:55:53.513Z\n\ud83d\udd17 References:\n1. https://helpx.adobe.com/security/products/indesign/apsb25-01.html", "creation_timestamp": "2025-03-01T05:27:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/521c114a-0fea-4c10-91a8-d9fb69277a74/export</guid>
      <pubDate>Sat, 01 Mar 2025 05:27:07 +0000</pubDate>
    </item>
    <item>
      <title>778e3c34-9222-47a6-ae6e-00678a7a2d3c</title>
      <link>https://db.gcve.eu/sighting/778e3c34-9222-47a6-ae6e-00678a7a2d3c/export</link>
      <description>{"uuid": "778e3c34-9222-47a6-ae6e-00678a7a2d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljwhfycaym2s", "content": "", "creation_timestamp": "2025-03-09T06:55:40.805802Z"}</description>
      <content:encoded>{"uuid": "778e3c34-9222-47a6-ae6e-00678a7a2d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljwhfycaym2s", "content": "", "creation_timestamp": "2025-03-09T06:55:40.805802Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/778e3c34-9222-47a6-ae6e-00678a7a2d3c/export</guid>
      <pubDate>Sun, 09 Mar 2025 06:55:40 +0000</pubDate>
    </item>
    <item>
      <title>d9e2f4f9-8de9-4492-aeff-5a8d6722ff0c</title>
      <link>https://db.gcve.eu/sighting/d9e2f4f9-8de9-4492-aeff-5a8d6722ff0c/export</link>
      <description>{"uuid": "d9e2f4f9-8de9-4492-aeff-5a8d6722ff0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "https://t.me/cvedetector/19916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2115 - \"zzskzy Warehouse Refinement Management System Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2115 \nPublished : March 9, 2025, 6:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-09T09:35:12.000000Z"}</description>
      <content:encoded>{"uuid": "d9e2f4f9-8de9-4492-aeff-5a8d6722ff0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "https://t.me/cvedetector/19916", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-2115 - \"zzskzy Warehouse Refinement Management System Unrestricted File Upload Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-2115 \nPublished : March 9, 2025, 6:15 a.m. | 2\u00a0hours, 2\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-09T09:35:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d9e2f4f9-8de9-4492-aeff-5a8d6722ff0c/export</guid>
      <pubDate>Sun, 09 Mar 2025 09:35:12 +0000</pubDate>
    </item>
    <item>
      <title>8e42885f-1d32-44ce-9729-5d5362ba8092</title>
      <link>https://db.gcve.eu/sighting/8e42885f-1d32-44ce-9729-5d5362ba8092/export</link>
      <description>{"uuid": "8e42885f-1d32-44ce-9729-5d5362ba8092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "Telegram/C0TFlwi8EvGC4AjEJI7j6XiiBiVQph3KrBke9fkpgQ6LeWbh", "content": "", "creation_timestamp": "2025-03-09T10:38:05.000000Z"}</description>
      <content:encoded>{"uuid": "8e42885f-1d32-44ce-9729-5d5362ba8092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "Telegram/C0TFlwi8EvGC4AjEJI7j6XiiBiVQph3KrBke9fkpgQ6LeWbh", "content": "", "creation_timestamp": "2025-03-09T10:38:05.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/8e42885f-1d32-44ce-9729-5d5362ba8092/export</guid>
      <pubDate>Sun, 09 Mar 2025 10:38:05 +0000</pubDate>
    </item>
    <item>
      <title>0eca9ea2-39b7-4cea-8ea4-c975b2c1e0d8</title>
      <link>https://db.gcve.eu/sighting/0eca9ea2-39b7-4cea-8ea4-c975b2c1e0d8/export</link>
      <description>{"uuid": "0eca9ea2-39b7-4cea-8ea4-c975b2c1e0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "Telegram/2Ot3chEDsmDF1YgnWYvxbGjfg8VxEBGtQZIfoiXMnXrMRxTu", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}</description>
      <content:encoded>{"uuid": "0eca9ea2-39b7-4cea-8ea4-c975b2c1e0d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "Telegram/2Ot3chEDsmDF1YgnWYvxbGjfg8VxEBGtQZIfoiXMnXrMRxTu", "content": "", "creation_timestamp": "2025-03-10T14:45:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/0eca9ea2-39b7-4cea-8ea4-c975b2c1e0d8/export</guid>
      <pubDate>Mon, 10 Mar 2025 14:45:04 +0000</pubDate>
    </item>
    <item>
      <title>03706e1d-0cf4-44f6-b03a-7862be1d7559</title>
      <link>https://db.gcve.eu/sighting/03706e1d-0cf4-44f6-b03a-7862be1d7559/export</link>
      <description>{"uuid": "03706e1d-0cf4-44f6-b03a-7862be1d7559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2115\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-09T05:31:04.443Z\n\ud83d\udccf Modified: 2025-03-10T15:46:17.501Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.299010\n2. https://vuldb.com/?ctiid.299010\n3. https://vuldb.com/?submit.506655\n4. https://github.com/heiheixz/report/blob/main/sk_1.md", "creation_timestamp": "2025-03-10T16:38:06.000000Z"}</description>
      <content:encoded>{"uuid": "03706e1d-0cf4-44f6-b03a-7862be1d7559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7014", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-2115\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-03-09T05:31:04.443Z\n\ud83d\udccf Modified: 2025-03-10T15:46:17.501Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.299010\n2. https://vuldb.com/?ctiid.299010\n3. https://vuldb.com/?submit.506655\n4. https://github.com/heiheixz/report/blob/main/sk_1.md", "creation_timestamp": "2025-03-10T16:38:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/03706e1d-0cf4-44f6-b03a-7862be1d7559/export</guid>
      <pubDate>Mon, 10 Mar 2025 16:38:06 +0000</pubDate>
    </item>
    <item>
      <title>3cff8a0d-54e1-4a51-9360-0fbafd1887fe</title>
      <link>https://db.gcve.eu/sighting/3cff8a0d-54e1-4a51-9360-0fbafd1887fe/export</link>
      <description>{"uuid": "3cff8a0d-54e1-4a51-9360-0fbafd1887fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "Telegram/giT5pRdi2LWq5LxdeROHnZ7FR0eOYQsmUFdFrK5AWPfxcgPu", "content": "", "creation_timestamp": "2025-03-10T19:39:12.000000Z"}</description>
      <content:encoded>{"uuid": "3cff8a0d-54e1-4a51-9360-0fbafd1887fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "Telegram/giT5pRdi2LWq5LxdeROHnZ7FR0eOYQsmUFdFrK5AWPfxcgPu", "content": "", "creation_timestamp": "2025-03-10T19:39:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/3cff8a0d-54e1-4a51-9360-0fbafd1887fe/export</guid>
      <pubDate>Mon, 10 Mar 2025 19:39:12 +0000</pubDate>
    </item>
    <item>
      <title>d503c13a-aa20-4b47-b258-f6f0e5f14998</title>
      <link>https://db.gcve.eu/sighting/d503c13a-aa20-4b47-b258-f6f0e5f14998/export</link>
      <description>{"uuid": "d503c13a-aa20-4b47-b258-f6f0e5f14998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}</description>
      <content:encoded>{"uuid": "d503c13a-aa20-4b47-b258-f6f0e5f14998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d503c13a-aa20-4b47-b258-f6f0e5f14998/export</guid>
      <pubDate>Sat, 16 Aug 2025 01:45:14 +0000</pubDate>
    </item>
    <item>
      <title>bd5ee3a4-9d3b-4b3f-b348-b8fc18d46dc1</title>
      <link>https://db.gcve.eu/sighting/bd5ee3a4-9d3b-4b3f-b348-b8fc18d46dc1/export</link>
      <description>{"uuid": "bd5ee3a4-9d3b-4b3f-b348-b8fc18d46dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:34.000000Z"}</description>
      <content:encoded>{"uuid": "bd5ee3a4-9d3b-4b3f-b348-b8fc18d46dc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-2115", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:34.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/bd5ee3a4-9d3b-4b3f-b348-b8fc18d46dc1/export</guid>
      <pubDate>Tue, 19 Aug 2025 04:06:34 +0000</pubDate>
    </item>
  </channel>
</rss>
