<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 06 Jun 2026 21:34:51 +0000</lastBuildDate>
    <item>
      <title>26fe7657-cfb2-43be-b3c2-ee34f838de50</title>
      <link>https://db.gcve.eu/sighting/26fe7657-cfb2-43be-b3c2-ee34f838de50/export</link>
      <description>{"uuid": "26fe7657-cfb2-43be-b3c2-ee34f838de50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44795", "type": "seen", "source": "https://t.me/cibsecurity/36378", "content": "\u203c CVE-2021-44795 \u203c\n\nSingle Connect does not perform an authorization check when using the \"sc-assigned-credential-ui\" module. A remote attacker could exploit this vulnerability to modify users permissions. The exploitation of this vulnerability might allow a remote attacker to delete permissions from other users without authenticating.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:34.000000Z"}</description>
      <content:encoded>{"uuid": "26fe7657-cfb2-43be-b3c2-ee34f838de50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44795", "type": "seen", "source": "https://t.me/cibsecurity/36378", "content": "\u203c CVE-2021-44795 \u203c\n\nSingle Connect does not perform an authorization check when using the \"sc-assigned-credential-ui\" module. A remote attacker could exploit this vulnerability to modify users permissions. The exploitation of this vulnerability might allow a remote attacker to delete permissions from other users without authenticating.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:34.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/26fe7657-cfb2-43be-b3c2-ee34f838de50/export</guid>
      <pubDate>Thu, 27 Jan 2022 16:20:34 +0000</pubDate>
    </item>
    <item>
      <title>797cfd43-734d-48f2-bfc7-e2cdcd0d32e4</title>
      <link>https://db.gcve.eu/sighting/797cfd43-734d-48f2-bfc7-e2cdcd0d32e4/export</link>
      <description>{"uuid": "797cfd43-734d-48f2-bfc7-e2cdcd0d32e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44794", "type": "seen", "source": "https://t.me/cibsecurity/36380", "content": "\u203c CVE-2021-44794 \u203c\n\nSingle Connect does not perform an authorization check when using the \"sc-diagnostic-ui\" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:36.000000Z"}</description>
      <content:encoded>{"uuid": "797cfd43-734d-48f2-bfc7-e2cdcd0d32e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44794", "type": "seen", "source": "https://t.me/cibsecurity/36380", "content": "\u203c CVE-2021-44794 \u203c\n\nSingle Connect does not perform an authorization check when using the \"sc-diagnostic-ui\" module. A remote attacker could exploit this vulnerability to access the device information page. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:36.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/797cfd43-734d-48f2-bfc7-e2cdcd0d32e4/export</guid>
      <pubDate>Thu, 27 Jan 2022 16:20:36 +0000</pubDate>
    </item>
    <item>
      <title>6cff2154-2df0-42d0-863f-68ddcd7715c4</title>
      <link>https://db.gcve.eu/sighting/6cff2154-2df0-42d0-863f-68ddcd7715c4/export</link>
      <description>{"uuid": "6cff2154-2df0-42d0-863f-68ddcd7715c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44793", "type": "seen", "source": "https://t.me/cibsecurity/36382", "content": "\u203c CVE-2021-44793 \u203c\n\nSingle Connect does not perform an authorization check when using the sc-reports-ui\" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information including the database credentials. Since the database runs with high privileges it is possible to execute commands with the attained credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:38.000000Z"}</description>
      <content:encoded>{"uuid": "6cff2154-2df0-42d0-863f-68ddcd7715c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44793", "type": "seen", "source": "https://t.me/cibsecurity/36382", "content": "\u203c CVE-2021-44793 \u203c\n\nSingle Connect does not perform an authorization check when using the sc-reports-ui\" module. A remote attacker could exploit this vulnerability to access the device configuration page and export the data to an external file. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information including the database credentials. Since the database runs with high privileges it is possible to execute commands with the attained credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/6cff2154-2df0-42d0-863f-68ddcd7715c4/export</guid>
      <pubDate>Thu, 27 Jan 2022 16:20:38 +0000</pubDate>
    </item>
    <item>
      <title>bf73d4f4-e5e2-44b0-b65c-20d4d5344750</title>
      <link>https://db.gcve.eu/sighting/bf73d4f4-e5e2-44b0-b65c-20d4d5344750/export</link>
      <description>{"uuid": "bf73d4f4-e5e2-44b0-b65c-20d4d5344750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44792", "type": "seen", "source": "https://t.me/cibsecurity/36383", "content": "\u203c CVE-2021-44792 \u203c\n\nSingle Connect does not perform an authorization check when using the \"log-monitor\" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:39.000000Z"}</description>
      <content:encoded>{"uuid": "bf73d4f4-e5e2-44b0-b65c-20d4d5344750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44792", "type": "seen", "source": "https://t.me/cibsecurity/36383", "content": "\u203c CVE-2021-44792 \u203c\n\nSingle Connect does not perform an authorization check when using the \"log-monitor\" module. A remote attacker could exploit this vulnerability to access the logging interface. The exploitation of this vulnerability might allow a remote attacker to obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-27T16:20:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/bf73d4f4-e5e2-44b0-b65c-20d4d5344750/export</guid>
      <pubDate>Thu, 27 Jan 2022 16:20:39 +0000</pubDate>
    </item>
    <item>
      <title>3ca3dd5b-0f34-4348-b7f3-fbb62fa95224</title>
      <link>https://db.gcve.eu/sighting/3ca3dd5b-0f34-4348-b7f3-fbb62fa95224/export</link>
      <description>{"uuid": "3ca3dd5b-0f34-4348-b7f3-fbb62fa95224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "Telegram/EGF3NmaXYAGdUVCW6ZNHpq65TpVvAZPt5jTlYHUdXoaBYbM", "content": "", "creation_timestamp": "2022-03-04T19:45:45.000000Z"}</description>
      <content:encoded>{"uuid": "3ca3dd5b-0f34-4348-b7f3-fbb62fa95224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "Telegram/EGF3NmaXYAGdUVCW6ZNHpq65TpVvAZPt5jTlYHUdXoaBYbM", "content": "", "creation_timestamp": "2022-03-04T19:45:45.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/3ca3dd5b-0f34-4348-b7f3-fbb62fa95224/export</guid>
      <pubDate>Fri, 04 Mar 2022 19:45:45 +0000</pubDate>
    </item>
    <item>
      <title>70474f9d-fcdb-4dab-af58-c4bfdb6c6940</title>
      <link>https://db.gcve.eu/sighting/70474f9d-fcdb-4dab-af58-c4bfdb6c6940/export</link>
      <description>{"uuid": "70474f9d-fcdb-4dab-af58-c4bfdb6c6940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44791", "type": "seen", "source": "https://t.me/cibsecurity/45773", "content": "\u203c CVE-2021-44791 \u203c\n\nIn Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-07T22:15:44.000000Z"}</description>
      <content:encoded>{"uuid": "70474f9d-fcdb-4dab-af58-c4bfdb6c6940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44791", "type": "seen", "source": "https://t.me/cibsecurity/45773", "content": "\u203c CVE-2021-44791 \u203c\n\nIn Apache Druid 0.22.1 and earlier, certain specially-crafted links result in unescaped URL parameters being sent back in HTML responses. This makes it possible to execute reflected XSS attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-07T22:15:44.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/70474f9d-fcdb-4dab-af58-c4bfdb6c6940/export</guid>
      <pubDate>Thu, 07 Jul 2022 22:15:44 +0000</pubDate>
    </item>
    <item>
      <title>a312336e-b87f-4bab-812e-eb999ee20b38</title>
      <link>https://db.gcve.eu/sighting/a312336e-b87f-4bab-812e-eb999ee20b38/export</link>
      <description>{"uuid": "a312336e-b87f-4bab-812e-eb999ee20b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51193", "content": "", "creation_timestamp": "2023-04-01T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "a312336e-b87f-4bab-812e-eb999ee20b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51193", "content": "", "creation_timestamp": "2023-04-01T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a312336e-b87f-4bab-812e-eb999ee20b38/export</guid>
      <pubDate>Sat, 01 Apr 2023 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>0dee57d8-0201-414f-8bd8-d7e4d6fd4557</title>
      <link>https://db.gcve.eu/sighting/0dee57d8-0201-414f-8bd8-d7e4d6fd4557/export</link>
      <description>{"uuid": "0dee57d8-0201-414f-8bd8-d7e4d6fd4557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "https://t.me/arpsyndicate/1472", "content": "#ExploitObserverAlert\n\nCVE-2021-44790\n\nDESCRIPTION: Exploit Observer has 39 entries related to CVE-2021-44790. A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.\n\nFIRST-EPSS: 0.060470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-06T00:09:00.000000Z"}</description>
      <content:encoded>{"uuid": "0dee57d8-0201-414f-8bd8-d7e4d6fd4557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "https://t.me/arpsyndicate/1472", "content": "#ExploitObserverAlert\n\nCVE-2021-44790\n\nDESCRIPTION: Exploit Observer has 39 entries related to CVE-2021-44790. A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.\n\nFIRST-EPSS: 0.060470000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-06T00:09:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/0dee57d8-0201-414f-8bd8-d7e4d6fd4557/export</guid>
      <pubDate>Wed, 06 Dec 2023 00:09:00 +0000</pubDate>
    </item>
    <item>
      <title>fe954e85-6ad5-412e-a118-d4491dbb8b79</title>
      <link>https://db.gcve.eu/sighting/fe954e85-6ad5-412e-a118-d4491dbb8b79/export</link>
      <description>{"uuid": "fe954e85-6ad5-412e-a118-d4491dbb8b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"}</description>
      <content:encoded>{"uuid": "fe954e85-6ad5-412e-a118-d4491dbb8b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-44790", "type": "seen", "source": "Telegram/Hf_SunJuoYNf_bsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ", "content": "", "creation_timestamp": "2024-10-15T10:14:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/fe954e85-6ad5-412e-a118-d4491dbb8b79/export</guid>
      <pubDate>Tue, 15 Oct 2024 10:14:15 +0000</pubDate>
    </item>
    <item>
      <title>0eff1347-eeec-4300-b2e5-2aa30a7dd30a</title>
      <link>https://db.gcve.eu/sighting/0eff1347-eeec-4300-b2e5-2aa30a7dd30a/export</link>
      <description>{"uuid": "0eff1347-eeec-4300-b2e5-2aa30a7dd30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-4479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndkmh7dlw27", "content": "", "creation_timestamp": "2026-06-02T21:39:21.326905Z"}</description>
      <content:encoded>{"uuid": "0eff1347-eeec-4300-b2e5-2aa30a7dd30a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2021-4479", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mndkmh7dlw27", "content": "", "creation_timestamp": "2026-06-02T21:39:21.326905Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/0eff1347-eeec-4300-b2e5-2aa30a7dd30a/export</guid>
      <pubDate>Tue, 02 Jun 2026 21:39:21 +0000</pubDate>
    </item>
  </channel>
</rss>
