https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 27 May 2026 23:44:15 +0000 https://db.gcve.eu/sighting/cbcf26ad-24d2-4b9f-8eb3-463988cde5a8/export {"uuid": "cbcf26ad-24d2-4b9f-8eb3-463988cde5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3w2c-jfr2-9pg9", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884286733931596", "content": "", "creation_timestamp": "2025-01-24T16:31:49.442687Z"} {"uuid": "cbcf26ad-24d2-4b9f-8eb3-463988cde5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3w2c-jfr2-9pg9", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113884286733931596", "content": "", "creation_timestamp": "2025-01-24T16:31:49.442687Z"} https://db.gcve.eu/sighting/cbcf26ad-24d2-4b9f-8eb3-463988cde5a8/export Fri, 24 Jan 2025 16:31:49 +0000 https://db.gcve.eu/sighting/523f037e-960f-49cb-ad8d-01a91443bdd5/export {"uuid": "523f037e-960f-49cb-ad8d-01a91443bdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3w2c-jfr2-9pg9", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113884389353887186", "content": "", "creation_timestamp": "2025-01-24T16:57:55.303847Z"} {"uuid": "523f037e-960f-49cb-ad8d-01a91443bdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3w2c-jfr2-9pg9", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/113884389353887186", "content": "", "creation_timestamp": "2025-01-24T16:57:55.303847Z"} https://db.gcve.eu/sighting/523f037e-960f-49cb-ad8d-01a91443bdd5/export Fri, 24 Jan 2025 16:57:55 +0000 https://db.gcve.eu/sighting/a0c45f66-e4a8-40a7-be1b-758f7eef4f50/export {"uuid": "a0c45f66-e4a8-40a7-be1b-758f7eef4f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3W2C-JFR2-9PG9", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2953", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22609\n\ud83d\udd39 Description: Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to attach any existing private key on a coolify instance to his own server. If the server configuration of IP / domain, port (most likely 22) and user (root) matches with the victim's server configuration, then the attacker can use the `Terminal` feature and execute arbitrary commands on the victim's server. Version 4.0.0-beta.361 fixes the issue.\n\ud83d\udccf Published: 2025-01-24T16:30:34.465Z\n\ud83d\udccf Modified: 2025-01-24T16:33:08.221Z\n\ud83d\udd17 References:\n1. https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "creation_timestamp": "2025-01-24T17:05:11.000000Z"} {"uuid": "a0c45f66-e4a8-40a7-be1b-758f7eef4f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3W2C-JFR2-9PG9", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2953", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-22609\n\ud83d\udd39 Description: Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to version 4.0.0-beta.361, the missing authorization allows any authenticated user to attach any existing private key on a coolify instance to his own server. If the server configuration of IP / domain, port (most likely 22) and user (root) matches with the victim's server configuration, then the attacker can use the `Terminal` feature and execute arbitrary commands on the victim's server. Version 4.0.0-beta.361 fixes the issue.\n\ud83d\udccf Published: 2025-01-24T16:30:34.465Z\n\ud83d\udccf Modified: 2025-01-24T16:33:08.221Z\n\ud83d\udd17 References:\n1. https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "creation_timestamp": "2025-01-24T17:05:11.000000Z"} https://db.gcve.eu/sighting/a0c45f66-e4a8-40a7-be1b-758f7eef4f50/export Fri, 24 Jan 2025 17:05:11 +0000 https://db.gcve.eu/sighting/fafe0bc0-f21f-4282-91bf-905969a6a141/export {"uuid": "fafe0bc0-f21f-4282-91bf-905969a6a141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3W2C-JFR2-9PG9", "type": "seen", "source": "https://t.me/suboxone_chatroom/7370", "content": "CVE-2025-22609, -22611, -22612: Multiple vulnerabilities in Coolify, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nThree vulnerabilities of highest severity in Coolify allow for RCE, privilege escalation, and authentication bypass.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/vUWWf\n\ud83d\udc49 Dork: http.favicon.hash_sha256:eaf648b6000a49599ed58bda49e576d0f981e535a8075d524a4be890edcf96d0 AND uri:*login*\n\nVendor's advisory: https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "creation_timestamp": "2025-04-01T12:36:06.000000Z"} {"uuid": "fafe0bc0-f21f-4282-91bf-905969a6a141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-3W2C-JFR2-9PG9", "type": "seen", "source": "https://t.me/suboxone_chatroom/7370", "content": "CVE-2025-22609, -22611, -22612: Multiple vulnerabilities in Coolify, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\nThree vulnerabilities of highest severity in Coolify allow for RCE, privilege escalation, and authentication bypass.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/vUWWf\n\ud83d\udc49 Dork: http.favicon.hash_sha256:eaf648b6000a49599ed58bda49e576d0f981e535a8075d524a4be890edcf96d0 AND uri:*login*\n\nVendor's advisory: https://github.com/coollabsio/coolify/security/advisories/GHSA-3w2c-jfr2-9pg9", "creation_timestamp": "2025-04-01T12:36:06.000000Z"} https://db.gcve.eu/sighting/fafe0bc0-f21f-4282-91bf-905969a6a141/export Tue, 01 Apr 2025 12:36:06 +0000