<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 27 May 2026 05:00:05 +0000</lastBuildDate>
    <item>
      <title>b6e106b8-fa58-4363-a3c1-b98a504d2a61</title>
      <link>https://db.gcve.eu/sighting/b6e106b8-fa58-4363-a3c1-b98a504d2a61/export</link>
      <description>{"uuid": "b6e106b8-fa58-4363-a3c1-b98a504d2a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-2PVV-PH3X-2F9H", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9708", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31117\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack does not return a direct response but can be exploited through DNS or HTTP interactions to exfiltrate sensitive information. This vulnerability is fixed in 7.0.3.1.\n\ud83d\udccf Published: 2025-03-31T16:49:14.739Z\n\ud83d\udccf Modified: 2025-03-31T16:49:14.739Z\n\ud83d\udd17 References:\n1. https://github.com/openemr/openemr/security/advisories/GHSA-2pvv-ph3x-2f9h\n2. https://github.com/openemr/openemr/commit/aa6f50efb2971285633fa77ea7a50949408cab12", "creation_timestamp": "2025-03-31T17:30:57.000000Z"}</description>
      <content:encoded>{"uuid": "b6e106b8-fa58-4363-a3c1-b98a504d2a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-2PVV-PH3X-2F9H", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9708", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31117\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: OpenEMR is a free and open source electronic health records and medical practice management application. An Out-of-Band Server-Side Request Forgery (OOB SSRF) vulnerability was identified in OpenEMR, allowing an attacker to force the server to make unauthorized requests to external or internal resources. this attack does not return a direct response but can be exploited through DNS or HTTP interactions to exfiltrate sensitive information. This vulnerability is fixed in 7.0.3.1.\n\ud83d\udccf Published: 2025-03-31T16:49:14.739Z\n\ud83d\udccf Modified: 2025-03-31T16:49:14.739Z\n\ud83d\udd17 References:\n1. https://github.com/openemr/openemr/security/advisories/GHSA-2pvv-ph3x-2f9h\n2. https://github.com/openemr/openemr/commit/aa6f50efb2971285633fa77ea7a50949408cab12", "creation_timestamp": "2025-03-31T17:30:57.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b6e106b8-fa58-4363-a3c1-b98a504d2a61/export</guid>
      <pubDate>Mon, 31 Mar 2025 17:30:57 +0000</pubDate>
    </item>
  </channel>
</rss>
