https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 04 May 2026 22:47:06 +0000 https://db.gcve.eu/sighting/bcbce104-1650-4afd-a717-4954c978701a/export {"uuid": "bcbce104-1650-4afd-a717-4954c978701a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/cibsecurity/29211", "content": "\u203c CVE-2021-38112 \u203c\n\nIn the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T07:28:28.000000Z"} {"uuid": "bcbce104-1650-4afd-a717-4954c978701a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/cibsecurity/29211", "content": "\u203c CVE-2021-38112 \u203c\n\nIn the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-09-22T07:28:28.000000Z"} https://db.gcve.eu/sighting/bcbce104-1650-4afd-a717-4954c978701a/export Wed, 22 Sep 2021 07:28:28 +0000 https://db.gcve.eu/sighting/cd2f4ecc-5b9a-4852-80b5-f4c4d2708823/export {"uuid": "cd2f4ecc-5b9a-4852-80b5-f4c4d2708823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/information_security_channel/45320", "content": "Remote Code Execution Vulnerability Found in AWS WorkSpaces\nhttp://feedproxy.google.com/~r/securityweek/~3/yPzIUfA2pFw/remote-code-execution-vulnerability-found-aws-workspaces\n\nRhino Security Labs researchers have identified a vulnerability in the AWS WorkSpaces desktop client that could allow an attacker to execute arbitrary code remotely.\nTracked as CVE-2021-38112, the security bug could be triggered when the user opens a malicious WorkSpaces URI from the browser, allowing a remote attacker to execute arbitrary code on the vulnerable system.\nread more (https://www.securityweek.com/remote-code-execution-vulnerability-found-aws-workspaces)", "creation_timestamp": "2021-09-22T18:22:12.000000Z"} {"uuid": "cd2f4ecc-5b9a-4852-80b5-f4c4d2708823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/information_security_channel/45320", "content": "Remote Code Execution Vulnerability Found in AWS WorkSpaces\nhttp://feedproxy.google.com/~r/securityweek/~3/yPzIUfA2pFw/remote-code-execution-vulnerability-found-aws-workspaces\n\nRhino Security Labs researchers have identified a vulnerability in the AWS WorkSpaces desktop client that could allow an attacker to execute arbitrary code remotely.\nTracked as CVE-2021-38112, the security bug could be triggered when the user opens a malicious WorkSpaces URI from the browser, allowing a remote attacker to execute arbitrary code on the vulnerable system.\nread more (https://www.securityweek.com/remote-code-execution-vulnerability-found-aws-workspaces)", "creation_timestamp": "2021-09-22T18:22:12.000000Z"} https://db.gcve.eu/sighting/cd2f4ecc-5b9a-4852-80b5-f4c4d2708823/export Wed, 22 Sep 2021 18:22:12 +0000 https://db.gcve.eu/sighting/ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f/export {"uuid": "ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4358", "content": "#Cloud_Security\nCVE-2021-38112:\nAWS WorkSpaces Desktop Client RCE\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce", "creation_timestamp": "2021-09-23T11:07:01.000000Z"} {"uuid": "ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4358", "content": "#Cloud_Security\nCVE-2021-38112:\nAWS WorkSpaces Desktop Client RCE\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce", "creation_timestamp": "2021-09-23T11:07:01.000000Z"} https://db.gcve.eu/sighting/ee74fd48-b8ff-4537-9cc5-e5f7fb1ca34f/export Thu, 23 Sep 2021 11:07:01 +0000 https://db.gcve.eu/sighting/c0ca5b70-9931-46b8-84a7-651ce76b8b67/export {"uuid": "c0ca5b70-9931-46b8-84a7-651ce76b8b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "published-proof-of-concept", "source": "https://t.me/cloud_sec/203", "content": "\ud83d\udd36 CVE-2021-38112: AWS WorkSpaces Remote Code Execution\n\nA vulnerability in the AWS WorkSpaces desktop client (CVE-2021-38112), which allows commands to be executed if a victim opens a malicious WorkSpaces URI from their browser.\n\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/\n\n#aws", "creation_timestamp": "2021-09-27T06:31:36.000000Z"} {"uuid": "c0ca5b70-9931-46b8-84a7-651ce76b8b67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "published-proof-of-concept", "source": "https://t.me/cloud_sec/203", "content": "\ud83d\udd36 CVE-2021-38112: AWS WorkSpaces Remote Code Execution\n\nA vulnerability in the AWS WorkSpaces desktop client (CVE-2021-38112), which allows commands to be executed if a victim opens a malicious WorkSpaces URI from their browser.\n\nhttps://rhinosecuritylabs.com/aws/cve-2021-38112-aws-workspaces-rce/\n\n#aws", "creation_timestamp": "2021-09-27T06:31:36.000000Z"} https://db.gcve.eu/sighting/c0ca5b70-9931-46b8-84a7-651ce76b8b67/export Mon, 27 Sep 2021 06:31:36 +0000 https://db.gcve.eu/sighting/e10186b3-6523-4d90-8e3b-c7b733e1b8c4/export {"uuid": "e10186b3-6523-4d90-8e3b-c7b733e1b8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4416", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Sep 1-30)\nCVE-2021-40444 - Microsoft MSHTML RCE\nhttps://t.me/cybersecuritytechnologies/4276\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-22005 - vCenter Server contains - arbitrary file upload\nhttps://t.me/cybersecuritytechnologies/4401\nCVE-2021-30860 - Zero-Click iPhone Exploit\nhttps://t.me/cybersecuritytechnologies/4318\nCVE-2021-38647 - OMIGOD RCE Vuln in Multiple Azure Linux Deployments\nhttps://t.me/cybersecuritytechnologies/4315\nCVE-2021-30632 - Out of bounds write in V8\nhttps://t.me/cybersecuritytechnologies/4342\nCVE-2021-33035 - Code Execution in Apache OpenOffice\nhttps://t.me/cybersecuritytechnologies/4329\nCVE-2021-38112 - AWS WorkSpaces Desktop Client RCE\nhttps://t.me/cybersecuritytechnologies/4358\nCVE-2021-30740 / CVE-2021-30768 - A malicious application may be able to execute arbitrary code with kernel privileges\nhttps://mobile.twitter.com/infinityABCDE/status/1437596340222038017", "creation_timestamp": "2021-10-01T11:01:01.000000Z"} {"uuid": "e10186b3-6523-4d90-8e3b-c7b733e1b8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-38112", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/4416", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Sep 1-30)\nCVE-2021-40444 - Microsoft MSHTML RCE\nhttps://t.me/cybersecuritytechnologies/4276\nCVE-2021-26084 - Confluence Server Webwork OGNL Inj\nhttps://t.me/cybersecuritytechnologies/4202\nCVE-2021-22005 - vCenter Server contains - arbitrary file upload\nhttps://t.me/cybersecuritytechnologies/4401\nCVE-2021-30860 - Zero-Click iPhone Exploit\nhttps://t.me/cybersecuritytechnologies/4318\nCVE-2021-38647 - OMIGOD RCE Vuln in Multiple Azure Linux Deployments\nhttps://t.me/cybersecuritytechnologies/4315\nCVE-2021-30632 - Out of bounds write in V8\nhttps://t.me/cybersecuritytechnologies/4342\nCVE-2021-33035 - Code Execution in Apache OpenOffice\nhttps://t.me/cybersecuritytechnologies/4329\nCVE-2021-38112 - AWS WorkSpaces Desktop Client RCE\nhttps://t.me/cybersecuritytechnologies/4358\nCVE-2021-30740 / CVE-2021-30768 - A malicious application may be able to execute arbitrary code with kernel privileges\nhttps://mobile.twitter.com/infinityABCDE/status/1437596340222038017", "creation_timestamp": "2021-10-01T11:01:01.000000Z"} https://db.gcve.eu/sighting/e10186b3-6523-4d90-8e3b-c7b733e1b8c4/export Fri, 01 Oct 2021 11:01:01 +0000