https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 29 Jul 2026 17:55:03 +0000 https://db.gcve.eu/sighting/e18ccdaf-d8de-44e6-b1c4-8ecc494217a0/export {"uuid": "e18ccdaf-d8de-44e6-b1c4-8ecc494217a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-3262", "type": "published-proof-of-concept", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-26T00:00:36.085634Z"} {"uuid": "e18ccdaf-d8de-44e6-b1c4-8ecc494217a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-3262", "type": "published-proof-of-concept", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-26T00:00:36.085634Z"} https://db.gcve.eu/sighting/e18ccdaf-d8de-44e6-b1c4-8ecc494217a0/export Sun, 26 Jul 2026 00:00:36 +0000 https://db.gcve.eu/sighting/6dadb627-3738-4c4b-9407-2767e298bc7a/export {"uuid": "6dadb627-3738-4c4b-9407-2767e298bc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-3262", "type": "seen", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-25T18:00:03.897123Z"} {"uuid": "6dadb627-3738-4c4b-9407-2767e298bc7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-3262", "type": "seen", "source": "Telegram/GQS1eZh6jW1eTFauE08lQEEwY9p26l5wOkUiZYKHwilYdP4", "content": "", "creation_timestamp": "2026-07-25T18:00:03.897123Z"} https://db.gcve.eu/sighting/6dadb627-3738-4c4b-9407-2767e298bc7a/export Sat, 25 Jul 2026 18:00:03 +0000 https://db.gcve.eu/sighting/d7db1923-c16b-4476-9a36-ba39d70636a6/export {"uuid": "d7db1923-c16b-4476-9a36-ba39d70636a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-3262", "type": "seen", "source": "https://t.me/cibsecurity/69394", "content": "\u203c CVE-2021-3262 \u203c\n\nTripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the \"Student Busing Information\" search queries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-30T00:17:50.000000Z"} {"uuid": "d7db1923-c16b-4476-9a36-ba39d70636a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-3262", "type": "seen", "source": "https://t.me/cibsecurity/69394", "content": "\u203c CVE-2021-3262 \u203c\n\nTripSpark VEO Transportation-2.2.x-XP_BB-20201123-184084 NovusEDU-2.2.x-XP_BB-20201123-184084 allows unsafe data inputs in POST body parameters from end users without sanitizing using server-side logic. It was possible to inject custom SQL commands into the \"Student Busing Information\" search queries.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-30T00:17:50.000000Z"} https://db.gcve.eu/sighting/d7db1923-c16b-4476-9a36-ba39d70636a6/export Wed, 30 Aug 2023 00:17:50 +0000 https://db.gcve.eu/sighting/027a7466-fb7f-4d5c-a849-6f7d51dc27ba/export {"uuid": "027a7466-fb7f-4d5c-a849-6f7d51dc27ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-32626", "type": "seen", "source": "https://t.me/cibsecurity/29923", "content": "\u203c CVE-2021-32626 \u203c\n\nRedis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote code execution. This problem exists in all versions of Redis with Lua scripting support, starting from 2.6. The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. For users unable to update an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T22:24:56.000000Z"} {"uuid": "027a7466-fb7f-4d5c-a849-6f7d51dc27ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-32626", "type": "seen", "source": "https://t.me/cibsecurity/29923", "content": "\u203c CVE-2021-32626 \u203c\n\nRedis is an open source, in-memory database that persists on disk. In affected versions specially crafted Lua scripts executing in Redis can cause the heap-based Lua stack to be overflowed, due to incomplete checks for this condition. This can result with heap corruption and potentially remote code execution. This problem exists in all versions of Redis with Lua scripting support, starting from 2.6. The problem is fixed in versions 6.2.6, 6.0.16 and 5.0.14. For users unable to update an additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from executing Lua scripts. This can be done using ACL to restrict EVAL and EVALSHA commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T22:24:56.000000Z"} https://db.gcve.eu/sighting/027a7466-fb7f-4d5c-a849-6f7d51dc27ba/export Mon, 04 Oct 2021 22:24:56 +0000 https://db.gcve.eu/sighting/753c6abe-9008-4ab3-83b0-8ecbc0b91de9/export {"uuid": "753c6abe-9008-4ab3-83b0-8ecbc0b91de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-32628", "type": "seen", "source": "https://t.me/cibsecurity/29921", "content": "\u203c CVE-2021-32628 \u203c\n\nRedis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves modifying the default ziplist configuration parameters (hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value) to a very large value, and then constructing specially crafted commands to create very large ziplists. The problem is fixed in Redis versions 6.2.6, 6.0.16, 5.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the above configuration parameters. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T22:24:51.000000Z"} {"uuid": "753c6abe-9008-4ab3-83b0-8ecbc0b91de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-32628", "type": "seen", "source": "https://t.me/cibsecurity/29921", "content": "\u203c CVE-2021-32628 \u203c\n\nRedis is an open source, in-memory database that persists on disk. An integer overflow bug in the ziplist data structure used by all versions of Redis can be exploited to corrupt the heap and potentially result with remote code execution. The vulnerability involves modifying the default ziplist configuration parameters (hash-max-ziplist-entries, hash-max-ziplist-value, zset-max-ziplist-entries or zset-max-ziplist-value) to a very large value, and then constructing specially crafted commands to create very large ziplists. The problem is fixed in Redis versions 6.2.6, 6.0.16, 5.0.14. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent users from modifying the above configuration parameters. This can be done using ACL to restrict unprivileged users from using the CONFIG SET command.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T22:24:51.000000Z"} https://db.gcve.eu/sighting/753c6abe-9008-4ab3-83b0-8ecbc0b91de9/export Mon, 04 Oct 2021 22:24:51 +0000 https://db.gcve.eu/sighting/3610c971-81f5-45bf-a0b1-9e399f2a4518/export {"uuid": "3610c971-81f5-45bf-a0b1-9e399f2a4518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-32623", "type": "seen", "source": "https://t.me/cibsecurity/25476", "content": "\u203c CVE-2021-32623 \u203c\n\nOpencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a (seemingly permanent) denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit this, users need to have ingest privileges, limiting the group of potential attackers The problem has been fixed in Opencast 9.6. There is no known workaround for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-16T07:39:24.000000Z"} {"uuid": "3610c971-81f5-45bf-a0b1-9e399f2a4518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-32623", "type": "seen", "source": "https://t.me/cibsecurity/25476", "content": "\u203c CVE-2021-32623 \u203c\n\nOpencast is a free and open source solution for automated video capture and distribution. Versions of Opencast prior to 9.6 are vulnerable to the billion laughs attack, which allows an attacker to easily execute a (seemingly permanent) denial of service attack, essentially taking down Opencast using a single HTTP request. To exploit this, users need to have ingest privileges, limiting the group of potential attackers The problem has been fixed in Opencast 9.6. There is no known workaround for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-06-16T07:39:24.000000Z"} https://db.gcve.eu/sighting/3610c971-81f5-45bf-a0b1-9e399f2a4518/export Wed, 16 Jun 2021 07:39:24 +0000