<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 01 Jul 2026 03:48:27 +0000</lastBuildDate>
    <item>
      <title>6a9faa45-0296-4a93-b028-ee1d90ef7b09</title>
      <link>https://db.gcve.eu/sighting/6a9faa45-0296-4a93-b028-ee1d90ef7b09/export</link>
      <description>{"uuid": "6a9faa45-0296-4a93-b028-ee1d90ef7b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-MJQ6-PV9C-QPPQ", "type": "seen", "source": "https://t.me/arpsyndicate/287", "content": "#ExploitObserverAlert\n\nGHSA-mjq6-pv9c-qppq\n\nDESCRIPTION: Exploit Observer has 1 entries related to GHSA-MJQ6-PV9C-QPPQ. The vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input.\nA user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders belonging to the user that runs the Arduino Create Agent via a crafted HTTP DELETE request.\nFurther details are available in the references.\n\nGHSS: 6.1", "creation_timestamp": "2023-11-20T12:18:50.000000Z"}</description>
      <content:encoded>{"uuid": "6a9faa45-0296-4a93-b028-ee1d90ef7b09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "GHSA-MJQ6-PV9C-QPPQ", "type": "seen", "source": "https://t.me/arpsyndicate/287", "content": "#ExploitObserverAlert\n\nGHSA-mjq6-pv9c-qppq\n\nDESCRIPTION: Exploit Observer has 1 entries related to GHSA-MJQ6-PV9C-QPPQ. The vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input.\nA user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass the CORS configuration, can delete arbitrary files or folders belonging to the user that runs the Arduino Create Agent via a crafted HTTP DELETE request.\nFurther details are available in the references.\n\nGHSS: 6.1", "creation_timestamp": "2023-11-20T12:18:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/6a9faa45-0296-4a93-b028-ee1d90ef7b09/export</guid>
      <pubDate>Mon, 20 Nov 2023 12:18:50 +0000</pubDate>
    </item>
  </channel>
</rss>
