<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 28 May 2026 10:12:20 +0000</lastBuildDate>
    <item>
      <title>36bd0711-86d2-48ca-af2a-1d635c978688</title>
      <link>https://db.gcve.eu/sighting/36bd0711-86d2-48ca-af2a-1d635c978688/export</link>
      <description>{"uuid": "36bd0711-86d2-48ca-af2a-1d635c978688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38000", "type": "seen", "source": "https://t.me/cibsecurity/72226", "content": "\u203c CVE-2023-38000 \u203c\n\nAuth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core\u00c2\u00a06.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin &amp;lt;= 16.8.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T14:28:54.000000Z"}</description>
      <content:encoded>{"uuid": "36bd0711-86d2-48ca-af2a-1d635c978688", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38000", "type": "seen", "source": "https://t.me/cibsecurity/72226", "content": "\u203c CVE-2023-38000 \u203c\n\nAuth. Stored (contributor+) Cross-Site Scripting (XSS) vulnerability in WordPress core\u00c2\u00a06.3 through 6.3.1, from 6.2 through 6.2.2, from 6.1 through 6.1.3, from 6.0 through 6.0.5, from 5.9 through 5.9.7 and Gutenberg plugin &amp;lt;= 16.8.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-13T14:28:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/36bd0711-86d2-48ca-af2a-1d635c978688/export</guid>
      <pubDate>Fri, 13 Oct 2023 14:28:54 +0000</pubDate>
    </item>
    <item>
      <title>a47e73f3-c316-4f09-a710-406e8b030e2d</title>
      <link>https://db.gcve.eu/sighting/a47e73f3-c316-4f09-a710-406e8b030e2d/export</link>
      <description>{"uuid": "a47e73f3-c316-4f09-a710-406e8b030e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38001", "type": "seen", "source": "https://t.me/cvedetector/2050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-38001 - IBM Aspera Orchestrator Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-38001 \nPublished : July 30, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.  IBM X-Force ID:  260206. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T19:55:38.000000Z"}</description>
      <content:encoded>{"uuid": "a47e73f3-c316-4f09-a710-406e8b030e2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38001", "type": "seen", "source": "https://t.me/cvedetector/2050", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-38001 - IBM Aspera Orchestrator Cross-Site Request Forgery (CSRF) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2023-38001 \nPublished : July 30, 2024, 5:15 p.m. | 33\u00a0minutes ago \nDescription : IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.  IBM X-Force ID:  260206. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-30T19:55:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a47e73f3-c316-4f09-a710-406e8b030e2d/export</guid>
      <pubDate>Tue, 30 Jul 2024 19:55:38 +0000</pubDate>
    </item>
    <item>
      <title>78e7e8f1-ada0-4919-abf5-f5743a7f9101</title>
      <link>https://db.gcve.eu/sighting/78e7e8f1-ada0-4919-abf5-f5743a7f9101/export</link>
      <description>{"uuid": "78e7e8f1-ada0-4919-abf5-f5743a7f9101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113895497637771015", "content": "", "creation_timestamp": "2025-01-26T16:02:54.222606Z"}</description>
      <content:encoded>{"uuid": "78e7e8f1-ada0-4919-abf5-f5743a7f9101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113895497637771015", "content": "", "creation_timestamp": "2025-01-26T16:02:54.222606Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/78e7e8f1-ada0-4919-abf5-f5743a7f9101/export</guid>
      <pubDate>Sun, 26 Jan 2025 16:02:54 +0000</pubDate>
    </item>
    <item>
      <title>22a717c3-f03b-4c1f-83f7-8d9e58f5af93</title>
      <link>https://db.gcve.eu/sighting/22a717c3-f03b-4c1f-83f7-8d9e58f5af93/export</link>
      <description>{"uuid": "22a717c3-f03b-4c1f-83f7-8d9e58f5af93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnt4rdc3h2n", "content": "", "creation_timestamp": "2025-01-26T16:15:43.641417Z"}</description>
      <content:encoded>{"uuid": "22a717c3-f03b-4c1f-83f7-8d9e58f5af93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgnt4rdc3h2n", "content": "", "creation_timestamp": "2025-01-26T16:15:43.641417Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/22a717c3-f03b-4c1f-83f7-8d9e58f5af93/export</guid>
      <pubDate>Sun, 26 Jan 2025 16:15:43 +0000</pubDate>
    </item>
    <item>
      <title>0786cc4a-1b18-44aa-a0c5-49f5b701ee96</title>
      <link>https://db.gcve.eu/sighting/0786cc4a-1b18-44aa-a0c5-49f5b701ee96/export</link>
      <description>{"uuid": "0786cc4a-1b18-44aa-a0c5-49f5b701ee96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgo36srwyn2r", "content": "", "creation_timestamp": "2025-01-26T18:40:01.571627Z"}</description>
      <content:encoded>{"uuid": "0786cc4a-1b18-44aa-a0c5-49f5b701ee96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgo36srwyn2r", "content": "", "creation_timestamp": "2025-01-26T18:40:01.571627Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/0786cc4a-1b18-44aa-a0c5-49f5b701ee96/export</guid>
      <pubDate>Sun, 26 Jan 2025 18:40:01 +0000</pubDate>
    </item>
    <item>
      <title>f5536bec-9d2a-4b48-b76a-52743468f1b0</title>
      <link>https://db.gcve.eu/sighting/f5536bec-9d2a-4b48-b76a-52743468f1b0/export</link>
      <description>{"uuid": "f5536bec-9d2a-4b48-b76a-52743468f1b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-844j-8v3q-83rf\n\ud83d\udd25 CVSS Score: 4.1 (CVSS_V3)\n\ud83d\udd39 Description: IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-38009\n2. https://www.ibm.com/support/pages/node/7172691\n3. https://www.ibm.com/support/pages/node/7172692", "creation_timestamp": "2025-01-26T19:07:26.000000Z"}</description>
      <content:encoded>{"uuid": "f5536bec-9d2a-4b48-b76a-52743468f1b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: GHSA-844j-8v3q-83rf\n\ud83d\udd25 CVSS Score: 4.1 (CVSS_V3)\n\ud83d\udd39 Description: IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning.\n\ud83d\udccf Published: 2025-01-26T18:30:32Z\n\ud83d\udccf Modified: 2025-01-26T18:30:32Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2023-38009\n2. https://www.ibm.com/support/pages/node/7172691\n3. https://www.ibm.com/support/pages/node/7172692", "creation_timestamp": "2025-01-26T19:07:26.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/f5536bec-9d2a-4b48-b76a-52743468f1b0/export</guid>
      <pubDate>Sun, 26 Jan 2025 19:07:26 +0000</pubDate>
    </item>
    <item>
      <title>1d58f0a4-c5b9-4490-b63d-4386d0fd66ed</title>
      <link>https://db.gcve.eu/sighting/1d58f0a4-c5b9-4490-b63d-4386d0fd66ed/export</link>
      <description>{"uuid": "1d58f0a4-c5b9-4490-b63d-4386d0fd66ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://t.me/cvedetector/16419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-38009 - IBM Cognos Mobile Client Certificate Pinning Bypass\", \n  \"Content\": \"CVE ID : CVE-2023-38009 \nPublished : Jan. 26, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T19:55:29.000000Z"}</description>
      <content:encoded>{"uuid": "1d58f0a4-c5b9-4490-b63d-4386d0fd66ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38009", "type": "seen", "source": "https://t.me/cvedetector/16419", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2023-38009 - IBM Cognos Mobile Client Certificate Pinning Bypass\", \n  \"Content\": \"CVE ID : CVE-2023-38009 \nPublished : Jan. 26, 2025, 4:15 p.m. | 1\u00a0hour, 50\u00a0minutes ago \nDescription : IBM Cognos Mobile Client 1.1 iOS may be vulnerable to information disclosure through man in the middle techniques due to the lack of certificate pinning. \nSeverity: 4.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-26T19:55:29.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/1d58f0a4-c5b9-4490-b63d-4386d0fd66ed/export</guid>
      <pubDate>Sun, 26 Jan 2025 19:55:29 +0000</pubDate>
    </item>
    <item>
      <title>c449f5d8-db52-43e1-887a-b6b663ba95d5</title>
      <link>https://db.gcve.eu/sighting/c449f5d8-db52-43e1-887a-b6b663ba95d5/export</link>
      <description>{"uuid": "c449f5d8-db52-43e1-887a-b6b663ba95d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38007", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19720", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-38007\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.\n\ud83d\udccf Published: 2025-06-27T14:48:28.581Z\n\ud83d\udccf Modified: 2025-06-27T14:48:28.581Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7237162", "creation_timestamp": "2025-06-27T14:51:20.000000Z"}</description>
      <content:encoded>{"uuid": "c449f5d8-db52-43e1-887a-b6b663ba95d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38007", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19720", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-38007\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.\n\ud83d\udccf Published: 2025-06-27T14:48:28.581Z\n\ud83d\udccf Modified: 2025-06-27T14:48:28.581Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7237162", "creation_timestamp": "2025-06-27T14:51:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/c449f5d8-db52-43e1-887a-b6b663ba95d5/export</guid>
      <pubDate>Fri, 27 Jun 2025 14:51:20 +0000</pubDate>
    </item>
    <item>
      <title>758ccc10-cc0d-4210-a2eb-1d345b914351</title>
      <link>https://db.gcve.eu/sighting/758ccc10-cc0d-4210-a2eb-1d345b914351/export</link>
      <description>{"uuid": "758ccc10-cc0d-4210-a2eb-1d345b914351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmc6fiaxi2r", "content": "", "creation_timestamp": "2025-06-27T18:42:06.263475Z"}</description>
      <content:encoded>{"uuid": "758ccc10-cc0d-4210-a2eb-1d345b914351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-38007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsmc6fiaxi2r", "content": "", "creation_timestamp": "2025-06-27T18:42:06.263475Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/758ccc10-cc0d-4210-a2eb-1d345b914351/export</guid>
      <pubDate>Fri, 27 Jun 2025 18:42:06 +0000</pubDate>
    </item>
  </channel>
</rss>
