<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 30 Jul 2026 13:45:43 +0000</lastBuildDate>
    <item>
      <title>a6c3db56-4e3c-429b-9d51-395ccf55e4e8</title>
      <link>https://db.gcve.eu/sighting/a6c3db56-4e3c-429b-9d51-395ccf55e4e8/export</link>
      <description>{"uuid": "a6c3db56-4e3c-429b-9d51-395ccf55e4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-14855", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqkzdp34lf2o", "content": "", "creation_timestamp": "2026-07-14T01:07:07.228481Z"}</description>
      <content:encoded>{"uuid": "a6c3db56-4e3c-429b-9d51-395ccf55e4e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2017-14855", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mqkzdp34lf2o", "content": "", "creation_timestamp": "2026-07-14T01:07:07.228481Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a6c3db56-4e3c-429b-9d51-395ccf55e4e8/export</guid>
      <pubDate>Tue, 14 Jul 2026 01:07:07 +0000</pubDate>
    </item>
    <item>
      <title>3ec79d5d-6f17-4978-b75b-603bb28c7047</title>
      <link>https://db.gcve.eu/sighting/3ec79d5d-6f17-4978-b75b-603bb28c7047/export</link>
      <description>{"uuid": "3ec79d5d-6f17-4978-b75b-603bb28c7047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14854", "type": "seen", "source": "https://t.me/cibsecurity/4657", "content": "ATENTION\u203c New - CVE-2017-14854\n\nA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-04T00:31:07.000000Z"}</description>
      <content:encoded>{"uuid": "3ec79d5d-6f17-4978-b75b-603bb28c7047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14854", "type": "seen", "source": "https://t.me/cibsecurity/4657", "content": "ATENTION\u203c New - CVE-2017-14854\n\nA stack buffer overflow exists in one of the Orpak SiteOmat CGI components, allowing for remote code execution. The vulnerability affects all versions prior to 2017-09-25.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-04T00:31:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/3ec79d5d-6f17-4978-b75b-603bb28c7047/export</guid>
      <pubDate>Tue, 04 Jun 2019 00:31:07 +0000</pubDate>
    </item>
    <item>
      <title>5ca0d6ba-729f-438c-9da5-304d2f1d6e5c</title>
      <link>https://db.gcve.eu/sighting/5ca0d6ba-729f-438c-9da5-304d2f1d6e5c/export</link>
      <description>{"uuid": "5ca0d6ba-729f-438c-9da5-304d2f1d6e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14850", "type": "seen", "source": "https://t.me/cibsecurity/4653", "content": "ATENTION\u203c New - CVE-2017-14850\n\nAll known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:21.000000Z"}</description>
      <content:encoded>{"uuid": "5ca0d6ba-729f-438c-9da5-304d2f1d6e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14850", "type": "seen", "source": "https://t.me/cibsecurity/4653", "content": "ATENTION\u203c New - CVE-2017-14850\n\nAll known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/5ca0d6ba-729f-438c-9da5-304d2f1d6e5c/export</guid>
      <pubDate>Mon, 03 Jun 2019 22:31:21 +0000</pubDate>
    </item>
    <item>
      <title>47771987-28dd-4945-ae13-378e8550da9a</title>
      <link>https://db.gcve.eu/sighting/47771987-28dd-4945-ae13-378e8550da9a/export</link>
      <description>{"uuid": "47771987-28dd-4945-ae13-378e8550da9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14851", "type": "seen", "source": "https://t.me/cibsecurity/4652", "content": "ATENTION\u203c New - CVE-2017-14851\n\nA SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:20.000000Z"}</description>
      <content:encoded>{"uuid": "47771987-28dd-4945-ae13-378e8550da9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14851", "type": "seen", "source": "https://t.me/cibsecurity/4652", "content": "ATENTION\u203c New - CVE-2017-14851\n\nA SQL injection vulnerability exists in all Orpak SiteOmat versions prior to 2017-09-25. The vulnerability is in the login page, where the authentication validation process contains an insecure SELECT query. The attack allows for authentication bypass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/47771987-28dd-4945-ae13-378e8550da9a/export</guid>
      <pubDate>Mon, 03 Jun 2019 22:31:20 +0000</pubDate>
    </item>
    <item>
      <title>5878f3be-2afe-43c1-8f24-9fb7e73eefc3</title>
      <link>https://db.gcve.eu/sighting/5878f3be-2afe-43c1-8f24-9fb7e73eefc3/export</link>
      <description>{"uuid": "5878f3be-2afe-43c1-8f24-9fb7e73eefc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14853", "type": "seen", "source": "https://t.me/cibsecurity/4650", "content": "ATENTION\u203c New - CVE-2017-14853\n\nThe Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:19.000000Z"}</description>
      <content:encoded>{"uuid": "5878f3be-2afe-43c1-8f24-9fb7e73eefc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14853", "type": "seen", "source": "https://t.me/cibsecurity/4650", "content": "ATENTION\u203c New - CVE-2017-14853\n\nThe Orpak SiteOmat OrCU component is vulnerable to code injection, for all versions prior to 2017-09-25, due to a search query that uses a direct shell command. By tampering with the request, an attacker is able to run shell commands and receive valid output from the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/5878f3be-2afe-43c1-8f24-9fb7e73eefc3/export</guid>
      <pubDate>Mon, 03 Jun 2019 22:31:19 +0000</pubDate>
    </item>
    <item>
      <title>c4409532-252a-43ee-9c74-54465fc9f28c</title>
      <link>https://db.gcve.eu/sighting/c4409532-252a-43ee-9c74-54465fc9f28c/export</link>
      <description>{"uuid": "c4409532-252a-43ee-9c74-54465fc9f28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14852", "type": "seen", "source": "https://t.me/cibsecurity/4651", "content": "ATENTION\u203c New - CVE-2017-14852\n\nAn insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:19.000000Z"}</description>
      <content:encoded>{"uuid": "c4409532-252a-43ee-9c74-54465fc9f28c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2017-14852", "type": "seen", "source": "https://t.me/cibsecurity/4651", "content": "ATENTION\u203c New - CVE-2017-14852\n\nAn insecure communication was found between a user and the Orpak SiteOmat management console for all known versions, due to an invalid SSL certificate. The attack allows for an eavesdropper to capture the communication and decrypt the data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-06-03T22:31:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/c4409532-252a-43ee-9c74-54465fc9f28c/export</guid>
      <pubDate>Mon, 03 Jun 2019 22:31:19 +0000</pubDate>
    </item>
  </channel>
</rss>
