https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 27 May 2026 07:14:35 +0000 https://db.gcve.eu/sighting/15fbe169-3a27-4bdb-8e73-24f427147950/export {"uuid": "15fbe169-3a27-4bdb-8e73-24f427147950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-C2C3-PQW5-5P7C", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31135\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7.\n\ud83d\udccf Published: 2025-04-01T22:03:09.405Z\n\ud83d\udccf Modified: 2025-04-01T22:03:09.405Z\n\ud83d\udd17 References:\n1. https://github.com/phires/go-guerrilla/security/advisories/GHSA-c2c3-pqw5-5p7c\n2. https://github.com/phires/go-guerrilla/commit/7673947f2d5204a135d7ae0b7f80759e548abee6", "creation_timestamp": "2025-04-01T22:32:44.000000Z"} {"uuid": "15fbe169-3a27-4bdb-8e73-24f427147950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-C2C3-PQW5-5P7C", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10023", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-31135\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7.\n\ud83d\udccf Published: 2025-04-01T22:03:09.405Z\n\ud83d\udccf Modified: 2025-04-01T22:03:09.405Z\n\ud83d\udd17 References:\n1. https://github.com/phires/go-guerrilla/security/advisories/GHSA-c2c3-pqw5-5p7c\n2. https://github.com/phires/go-guerrilla/commit/7673947f2d5204a135d7ae0b7f80759e548abee6", "creation_timestamp": "2025-04-01T22:32:44.000000Z"} https://db.gcve.eu/sighting/15fbe169-3a27-4bdb-8e73-24f427147950/export Tue, 01 Apr 2025 22:32:44 +0000