<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 21 May 2026 04:13:37 +0000</lastBuildDate>
    <item>
      <title>3a2a182e-f06c-41dd-aac2-4dd3e2c359b6</title>
      <link>https://db.gcve.eu/sighting/3a2a182e-f06c-41dd-aac2-4dd3e2c359b6/export</link>
      <description>{"uuid": "3a2a182e-f06c-41dd-aac2-4dd3e2c359b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2014-10374", "type": "seen", "source": "https://t.me/cibsecurity/5517", "content": "ATENTION\u203c New - CVE-2014-10374\n\nOn Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to \"permanent trackability\" and \"considerable privacy concerns\" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low Energy (BLE) advertising packets with a TxAdd flag indicating random addresses, but the addresses remain constant. If devices come within BLE range at one or more locations where an adversary has set up passive sniffing, the adversary can determine whether the same device has entered one of these locations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-07-15T16:27:12.000000Z"}</description>
      <content:encoded>{"uuid": "3a2a182e-f06c-41dd-aac2-4dd3e2c359b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2014-10374", "type": "seen", "source": "https://t.me/cibsecurity/5517", "content": "ATENTION\u203c New - CVE-2014-10374\n\nOn Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to \"permanent trackability\" and \"considerable privacy concerns\" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low Energy (BLE) advertising packets with a TxAdd flag indicating random addresses, but the addresses remain constant. If devices come within BLE range at one or more locations where an adversary has set up passive sniffing, the adversary can determine whether the same device has entered one of these locations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-07-15T16:27:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/3a2a182e-f06c-41dd-aac2-4dd3e2c359b6/export</guid>
      <pubDate>Mon, 15 Jul 2019 16:27:12 +0000</pubDate>
    </item>
  </channel>
</rss>
