<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 26 May 2026 16:55:14 +0000</lastBuildDate>
    <item>
      <title>870252a7-ea01-4706-aa25-09e090bb430b</title>
      <link>https://db.gcve.eu/sighting/870252a7-ea01-4706-aa25-09e090bb430b/export</link>
      <description>{"uuid": "870252a7-ea01-4706-aa25-09e090bb430b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-41028", "type": "seen", "source": "https://t.me/cibsecurity/69100", "content": "\u203c CVE-2023-41028 \u203c\n\nA stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T02:12:49.000000Z"}</description>
      <content:encoded>{"uuid": "870252a7-ea01-4706-aa25-09e090bb430b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-41028", "type": "seen", "source": "https://t.me/cibsecurity/69100", "content": "\u203c CVE-2023-41028 \u203c\n\nA stack-based buffer overflow exists in Juplink RX4-1500, a WiFi router, in versions 1.0.2 through 1.0.5. An authenticated attacker can exploit this vulnerability to achieve code execution as root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T02:12:49.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/870252a7-ea01-4706-aa25-09e090bb430b/export</guid>
      <pubDate>Thu, 24 Aug 2023 02:12:49 +0000</pubDate>
    </item>
    <item>
      <title>871e0b2d-cc90-4390-b9aa-d806ff451c3f</title>
      <link>https://db.gcve.eu/sighting/871e0b2d-cc90-4390-b9aa-d806ff451c3f/export</link>
      <description>{"uuid": "871e0b2d-cc90-4390-b9aa-d806ff451c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-41029", "type": "seen", "source": "https://t.me/cibsecurity/70950", "content": "\u203c CVE-2023-41029 \u203c\n\nCommand injection vulnerability in the\u00c2\u00a0homemng.htm endpoint\u00c2\u00a0in\u00c2\u00a0Juplink RX4-1500 Wifi router firmware versions\u00c2\u00a0V1.0.2,\u00c2\u00a0V1.0.3,\u00c2\u00a0V1.0.4, and\u00c2\u00a0V1.0.5\u00c2\u00a0allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T20:31:52.000000Z"}</description>
      <content:encoded>{"uuid": "871e0b2d-cc90-4390-b9aa-d806ff451c3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-41029", "type": "seen", "source": "https://t.me/cibsecurity/70950", "content": "\u203c CVE-2023-41029 \u203c\n\nCommand injection vulnerability in the\u00c2\u00a0homemng.htm endpoint\u00c2\u00a0in\u00c2\u00a0Juplink RX4-1500 Wifi router firmware versions\u00c2\u00a0V1.0.2,\u00c2\u00a0V1.0.3,\u00c2\u00a0V1.0.4, and\u00c2\u00a0V1.0.5\u00c2\u00a0allows authenticated remote attackers to execute commands as root via specially crafted HTTP requests to the vulnerable endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T20:31:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/871e0b2d-cc90-4390-b9aa-d806ff451c3f/export</guid>
      <pubDate>Fri, 22 Sep 2023 20:31:52 +0000</pubDate>
    </item>
    <item>
      <title>4070e407-017e-427b-b223-f1b11f87dcd4</title>
      <link>https://db.gcve.eu/sighting/4070e407-017e-427b-b223-f1b11f87dcd4/export</link>
      <description>{"uuid": "4070e407-017e-427b-b223-f1b11f87dcd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-41027", "type": "seen", "source": "https://t.me/cibsecurity/70955", "content": "\u203c CVE-2023-41027 \u203c\n\nCredential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T20:32:00.000000Z"}</description>
      <content:encoded>{"uuid": "4070e407-017e-427b-b223-f1b11f87dcd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-41027", "type": "seen", "source": "https://t.me/cibsecurity/70955", "content": "\u203c CVE-2023-41027 \u203c\n\nCredential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attacker to leak the password for the administrative account via requests to the vulnerable endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-22T20:32:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/4070e407-017e-427b-b223-f1b11f87dcd4/export</guid>
      <pubDate>Fri, 22 Sep 2023 20:32:00 +0000</pubDate>
    </item>
    <item>
      <title>6ee906bb-b1b4-476b-8a23-5816fe5fc59e</title>
      <link>https://db.gcve.eu/sighting/6ee906bb-b1b4-476b-8a23-5816fe5fc59e/export</link>
      <description>{"uuid": "6ee906bb-b1b4-476b-8a23-5816fe5fc59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4102", "type": "seen", "source": "https://t.me/cibsecurity/71498", "content": "\u203c CVE-2023-4102 \u203c\n\nQSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T16:41:22.000000Z"}</description>
      <content:encoded>{"uuid": "6ee906bb-b1b4-476b-8a23-5816fe5fc59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-4102", "type": "seen", "source": "https://t.me/cibsecurity/71498", "content": "\u203c CVE-2023-4102 \u203c\n\nQSige login SSO does not have an access control mechanism to verify whether the user requesting a resource has sufficient permissions to do so. As a prerequisite, it is necessary to log into the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T16:41:22.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/6ee906bb-b1b4-476b-8a23-5816fe5fc59e/export</guid>
      <pubDate>Tue, 03 Oct 2023 16:41:22 +0000</pubDate>
    </item>
  </channel>
</rss>
