<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 25 May 2026 18:51:01 +0000</lastBuildDate>
    <item>
      <title>b3f76d6a-93d0-4f06-a6c9-7bdfb310f79e</title>
      <link>https://db.gcve.eu/sighting/b3f76d6a-93d0-4f06-a6c9-7bdfb310f79e/export</link>
      <description>{"uuid": "b3f76d6a-93d0-4f06-a6c9-7bdfb310f79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-2587", "type": "seen", "source": "https://t.me/SecLabNews/7856", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Onapsis \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2020-2586 \u0438 CVE-2020-2587), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BigDebIT, \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Oracle E-Business Suite (EBS), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 CRM, ERP \u0438 SCM \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.    \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle E-Business Suite \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0431\u0438\u0437\u043d\u0435\u0441-\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430", "creation_timestamp": "2020-09-20T22:00:19.000000Z"}</description>
      <content:encoded>{"uuid": "b3f76d6a-93d0-4f06-a6c9-7bdfb310f79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-2587", "type": "seen", "source": "https://t.me/SecLabNews/7856", "content": "\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Onapsis \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2020-2586 \u0438 CVE-2020-2587), \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BigDebIT, \u0432 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 Oracle E-Business Suite (EBS), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0439 \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 CRM, ERP \u0438 SCM \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439.    \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Oracle E-Business Suite \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442 \u0431\u0438\u0437\u043d\u0435\u0441-\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0440\u0438\u0441\u043a\u0443 \u0432\u0437\u043b\u043e\u043c\u0430", "creation_timestamp": "2020-09-20T22:00:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b3f76d6a-93d0-4f06-a6c9-7bdfb310f79e/export</guid>
      <pubDate>Sun, 20 Sep 2020 22:00:19 +0000</pubDate>
    </item>
    <item>
      <title>cd535874-a554-41c2-89b2-2bf49bba64b6</title>
      <link>https://db.gcve.eu/sighting/cd535874-a554-41c2-89b2-2bf49bba64b6/export</link>
      <description>{"uuid": "cd535874-a554-41c2-89b2-2bf49bba64b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25876", "type": "seen", "source": "https://t.me/cibsecurity/26049", "content": "\u203c CVE-2020-25876 \u203c\n\nA stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-10T02:15:18.000000Z"}</description>
      <content:encoded>{"uuid": "cd535874-a554-41c2-89b2-2bf49bba64b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25876", "type": "seen", "source": "https://t.me/cibsecurity/26049", "content": "\u203c CVE-2020-25876 \u203c\n\nA stored cross site scripting (XSS) vulnerability in the 'Pages' feature of Codoforum v5.0.2 allows authenticated attackers to execute arbitrary web scripts or HTML via crafted payload entered into the 'Page Title' parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-07-10T02:15:18.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/cd535874-a554-41c2-89b2-2bf49bba64b6/export</guid>
      <pubDate>Sat, 10 Jul 2021 02:15:18 +0000</pubDate>
    </item>
    <item>
      <title>052106b8-efe2-41c9-acb6-e4c77361c9f6</title>
      <link>https://db.gcve.eu/sighting/052106b8-efe2-41c9-acb6-e4c77361c9f6/export</link>
      <description>{"uuid": "052106b8-efe2-41c9-acb6-e4c77361c9f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25872", "type": "seen", "source": "https://t.me/cibsecurity/31484", "content": "\u203c CVE-2020-25872 \u203c\n\nA vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-30T00:18:32.000000Z"}</description>
      <content:encoded>{"uuid": "052106b8-efe2-41c9-acb6-e4c77361c9f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25872", "type": "seen", "source": "https://t.me/cibsecurity/31484", "content": "\u203c CVE-2020-25872 \u203c\n\nA vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perform a directory traversal attack via a GET request urlencode parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-30T00:18:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/052106b8-efe2-41c9-acb6-e4c77361c9f6/export</guid>
      <pubDate>Sat, 30 Oct 2021 00:18:32 +0000</pubDate>
    </item>
    <item>
      <title>2c7d4e84-3a3b-4586-b520-fd1ac3874653</title>
      <link>https://db.gcve.eu/sighting/2c7d4e84-3a3b-4586-b520-fd1ac3874653/export</link>
      <description>{"uuid": "2c7d4e84-3a3b-4586-b520-fd1ac3874653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25873", "type": "seen", "source": "https://t.me/cibsecurity/31489", "content": "\u203c CVE-2020-25873 \u203c\n\nA directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the \"id\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-30T00:18:37.000000Z"}</description>
      <content:encoded>{"uuid": "2c7d4e84-3a3b-4586-b520-fd1ac3874653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2020-25873", "type": "seen", "source": "https://t.me/cibsecurity/31489", "content": "\u203c CVE-2020-25873 \u203c\n\nA directory traversal vulnerability in the component system/manager/class/web/database.php was discovered in Baijiacms V4 which allows attackers to arbitrarily delete folders on the server via the \"id\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-30T00:18:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/2c7d4e84-3a3b-4586-b520-fd1ac3874653/export</guid>
      <pubDate>Sat, 30 Oct 2021 00:18:37 +0000</pubDate>
    </item>
  </channel>
</rss>
