<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 05 May 2026 13:51:52 +0000</lastBuildDate>
    <item>
      <title>42d322ad-8ffe-4ad7-a4ae-ea0cbe58969c</title>
      <link>https://db.gcve.eu/sighting/42d322ad-8ffe-4ad7-a4ae-ea0cbe58969c/export</link>
      <description>{"uuid": "42d322ad-8ffe-4ad7-a4ae-ea0cbe58969c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-50472", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/45877", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTechnical Details and Exploit for CVE-2025-50472\nURL\uff1ahttps://github.com/xhjy2020/CVE-2025-50472\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-30T02:06:44.000000Z"}</description>
      <content:encoded>{"uuid": "42d322ad-8ffe-4ad7-a4ae-ea0cbe58969c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-50472", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/45877", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTechnical Details and Exploit for CVE-2025-50472\nURL\uff1ahttps://github.com/xhjy2020/CVE-2025-50472\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-07-30T02:06:44.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/42d322ad-8ffe-4ad7-a4ae-ea0cbe58969c/export</guid>
      <pubDate>Wed, 30 Jul 2025 02:06:44 +0000</pubDate>
    </item>
    <item>
      <title>6498f476-abc3-4bd8-86b0-7df4a157df94</title>
      <link>https://db.gcve.eu/sighting/6498f476-abc3-4bd8-86b0-7df4a157df94/export</link>
      <description>{"uuid": "6498f476-abc3-4bd8-86b0-7df4a157df94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-50472", "type": "published-proof-of-concept", "source": "Telegram/VpSLWgrXHtrmcOPs4PM1cQJBzzMAPYN1YtPGDHOJLYwyRYo", "content": "", "creation_timestamp": "2025-07-30T09:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "6498f476-abc3-4bd8-86b0-7df4a157df94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-50472", "type": "published-proof-of-concept", "source": "Telegram/VpSLWgrXHtrmcOPs4PM1cQJBzzMAPYN1YtPGDHOJLYwyRYo", "content": "", "creation_timestamp": "2025-07-30T09:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/6498f476-abc3-4bd8-86b0-7df4a157df94/export</guid>
      <pubDate>Wed, 30 Jul 2025 09:00:04 +0000</pubDate>
    </item>
    <item>
      <title>4182d81c-43a7-4f9a-8cc9-a0b0f36240ee</title>
      <link>https://db.gcve.eu/sighting/4182d81c-43a7-4f9a-8cc9-a0b0f36240ee/export</link>
      <description>{"uuid": "4182d81c-43a7-4f9a-8cc9-a0b0f36240ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-50472", "type": "seen", "source": "https://t.me/bhhub/866", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "creation_timestamp": "2025-08-10T17:27:27.000000Z"}</description>
      <content:encoded>{"uuid": "4182d81c-43a7-4f9a-8cc9-a0b0f36240ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2025-50472", "type": "seen", "source": "https://t.me/bhhub/866", "content": "\u201cFresh Carnage\u201d \u2014 New Critical CVEs of the Week (Never Before Featured)\n\n\ud83e\uddec CVE-2025-50472 \u2013 Command Injection via Payload Parser\n\nCVSS: 9.8\nA flaw in how a core component parses external inputs lets attackers execute arbitrary system commands. Triggered via network \u2014 perfect for worms.\n\n\ud83e\uddef CVE-2025-54574 \u2013 Auth Bypass in Embedded Auth Module\n\nCVSS: 9.3 | AI Score: 8.5\nImproper input validation enables remote attackers to bypass login gates and access admin functionality. Expect this in IoT and router exploits.\n\n\ud83d\uddc2 CVE-2025-50870 \u2013 Memory Corruption in XML Parser\n\nCVSS: 9.8\nAnother parser bites the dust \u2014 this one chokes on malformed markup, allowing full compromise via crafted XML. Happens quietly during automated processing.\n\n\ud83e\uddde CVE-2025-5954 \u2013 Untrusted Input in Dynamic Eval Context\n\nCVSS: 9.8\nDynamic code evaluation fed with unsanitized input? You know how this ends. Attackers can inject logic, spawn shells, or pivot laterally.\n\n\ud83d\udef0 CVE-2025-8426 \u2013 Remote Buffer Overflow in Packet Handler\n\nCVSS: 9.4 | AI Score: 9.0\nThe kind of bug attackers love: network-exposed, unauthenticated, and trivially overflowed. One bad packet is all it takes.\n\n@bhhub", "creation_timestamp": "2025-08-10T17:27:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/4182d81c-43a7-4f9a-8cc9-a0b0f36240ee/export</guid>
      <pubDate>Sun, 10 Aug 2025 17:27:27 +0000</pubDate>
    </item>
  </channel>
</rss>
