Vulnerability-Lookup

CERTFR-2026-AVI-0508

Vulnerability from certfr_avis - Published: 2026-04-29 - Updated: 2026-04-29

De multiples vulnérabilités ont été découvertes dans Moodle. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une injection SQL (SQLi) et une injection de requêtes illégitimes par rebond (CSRF).

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Moodle	Moodle	Moodle versions 5.0.x antérieures à 5.0.7
Moodle	Moodle	Moodle versions 5.1.x antérieures à 5.1.4
Moodle	Moodle	Moodle versions 4.5.x antérieures à 4.5.11

References

Title

Publication Time

Tags

Bulletin de sécurité Moodle 474067	2026-04-29	vendor-advisory
Bulletin de sécurité Moodle 474069	2026-04-29	vendor-advisory
Bulletin de sécurité Moodle 474066	2026-04-29	vendor-advisory
Bulletin de sécurité Moodle 474063	2026-04-29	vendor-advisory
Bulletin de sécurité Moodle 474064	2026-04-29	vendor-advisory
Bulletin de sécurité Moodle 474068	2026-04-29	vendor-advisory
Bulletin de sécurité Moodle 474065	2026-04-29	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Moodle versions 5.0.x ant\u00e9rieures \u00e0 5.0.7",
      "product": {
        "name": "Moodle",
        "vendor": {
          "name": "Moodle",
          "scada": false
        }
      }
    },
    {
      "description": "Moodle versions 5.1.x ant\u00e9rieures \u00e0 5.1.4",
      "product": {
        "name": "Moodle",
        "vendor": {
          "name": "Moodle",
          "scada": false
        }
      }
    },
    {
      "description": "Moodle versions 4.5.x ant\u00e9rieures \u00e0 4.5.11",
      "product": {
        "name": "Moodle",
        "vendor": {
          "name": "Moodle",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-7275",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7275"
    },
    {
      "name": "CVE-2025-14761",
      "url": "https://www.cve.org/CVERecord?id=CVE-2025-14761"
    },
    {
      "name": "CVE-2026-7277",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7277"
    },
    {
      "name": "CVE-2026-24765",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-24765"
    },
    {
      "name": "CVE-2026-7278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7278"
    },
    {
      "name": "CVE-2026-7274",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7274"
    },
    {
      "name": "CVE-2026-7276",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-7276"
    }
  ],
  "initial_release_date": "2026-04-29T00:00:00",
  "last_revision_date": "2026-04-29T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-0508",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-04-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF)"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Injection SQL (SQLi)"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Moodle. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une injection SQL (SQLi) et une injection de requ\u00eates ill\u00e9gitimes par rebond (CSRF).",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Moodle",
  "vendor_advisories": [
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474067",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474067"
    },
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474069",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474069"
    },
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474066",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474066"
    },
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474063",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474063"
    },
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474064",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474064"
    },
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474068",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474068"
    },
    {
      "published_at": "2026-04-29",
      "title": "Bulletin de s\u00e9curit\u00e9 Moodle 474065",
      "url": "https://moodle.org/mod/forum/discuss.php?d=474065"
    }
  ]
}

CVE-2026-24765 (GCVE-0-2026-24765)

Vulnerability from cvelistv5 – Published: 2026-01-27 21:35 – Updated: 2026-02-06 12:09

Title

PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling

Summary

PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the `cleanupForCoverage()` method, which deserializes code coverage files without validation, potentially allowing remote code execution if malicious `.coverage` files are present prior to the execution of the PHPT test. The vulnerability occurs when a `.coverage` file, which should not exist before test execution, is deserialized without the `allowed_classes` parameter restriction. An attacker with local file write access can place a malicious serialized object with a `__wakeup()` method into the file system, leading to arbitrary code execution during test runs with code coverage instrumentation enabled. This vulnerability requires local file write access to the location where PHPUnit stores or expects code coverage files for PHPT tests. This can occur through CI/CD pipeline attacks, the local development environment, and/or compromised dependencies. Rather than just silently sanitizing the input via `['allowed_classes' => false]`, the maintainer has chosen to make the anomalous state explicit by treating pre-existing `.coverage` files for PHPT tests as an error condition. Starting in versions in versions 12.5.8, 11.5.50, 10.5.62, 9.6.33, when a `.coverage` file is detected for a PHPT test prior to execution, PHPUnit will emit a clear error message identifying the anomalous state. Organizations can reduce the effective risk of this vulnerability through proper CI/CD configuration, including ephemeral runners, code review enforcement, branch protection, artifact isolation, and access control.

Severity ?

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-502 - Deserialization of Untrusted Data

Assigner

GitHub_M

References

URL

Tags

	https://github.com/sebastianbergmann/phpunit/secu…	x_refsource_CONFIRM
	https://github.com/sebastianbergmann/phpunit/comm…	x_refsource_MISC
	https://github.com/sebastianbergmann/phpunit/rele…	x_refsource_MISC
	https://github.com/sebastianbergmann/phpunit/rele…	x_refsource_MISC
	https://github.com/sebastianbergmann/phpunit/rele…	x_refsource_MISC
	https://github.com/sebastianbergmann/phpunit/rele…	x_refsource_MISC
	https://github.com/sebastianbergmann/phpunit/rele…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	sebastianbergmann	phpunit	Affected: < 8.5.52 Affected: >= 9.0.0, < 9.6.33 Affected: >= 10.0.0, < 10.5.62 Affected: >= 11.0.0, < 11.5.50 Affected: >= 12.0.0, < 12.5.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-24765",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-28T21:13:53.775602Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-28T21:14:01.691Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2026-02-06T12:09:45.308Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2026/02/msg00009.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpunit",
          "vendor": "sebastianbergmann",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 8.5.52"
            },
            {
              "status": "affected",
              "version": "\u003e= 9.0.0, \u003c 9.6.33"
            },
            {
              "status": "affected",
              "version": "\u003e= 10.0.0, \u003c 10.5.62"
            },
            {
              "status": "affected",
              "version": "\u003e= 11.0.0, \u003c 11.5.50"
            },
            {
              "status": "affected",
              "version": "\u003e= 12.0.0, \u003c 12.5.8"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "PHPUnit is a testing framework for PHP. A vulnerability has been discovered in versions prior to 12.5.8, 11.5.50, 10.5.62, 9.6.33, and 8.5.52 involving unsafe deserialization of code coverage data in PHPT test execution. The vulnerability exists in the `cleanupForCoverage()` method, which deserializes code coverage files without validation, potentially allowing remote code execution if malicious `.coverage` files are present prior to the execution of the PHPT test. The vulnerability occurs when a `.coverage` file, which should not exist before test execution, is deserialized without the `allowed_classes` parameter restriction. An attacker with local file write access can place a malicious serialized object with a `__wakeup()` method into the file system, leading to arbitrary code execution during test runs with code coverage instrumentation enabled. This vulnerability requires local file write access to the location where PHPUnit stores or expects code coverage files for PHPT tests. This can occur through CI/CD pipeline attacks, the local development environment, and/or compromised dependencies. Rather than just silently sanitizing the input via `[\u0027allowed_classes\u0027 =\u003e false]`, the maintainer has chosen to make the anomalous state explicit by treating pre-existing `.coverage` files for PHPT tests as an error condition. Starting in versions  in versions 12.5.8, 11.5.50, 10.5.62, 9.6.33, when a `.coverage` file is detected for a PHPT test prior to execution, PHPUnit will emit a clear error message identifying the anomalous state. Organizations can reduce the effective risk of this vulnerability through proper CI/CD configuration, including ephemeral runners, code review enforcement, branch protection, artifact isolation, and access control."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-502",
              "description": "CWE-502: Deserialization of Untrusted Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-27T21:35:54.292Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/sebastianbergmann/phpunit/security/advisories/GHSA-vvj3-c3rp-c85p",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/security/advisories/GHSA-vvj3-c3rp-c85p"
        },
        {
          "name": "https://github.com/sebastianbergmann/phpunit/commit/3141742e00620e2968d3d2e732d320de76685fda",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/commit/3141742e00620e2968d3d2e732d320de76685fda"
        },
        {
          "name": "https://github.com/sebastianbergmann/phpunit/releases/tag/10.5.63",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/releases/tag/10.5.63"
        },
        {
          "name": "https://github.com/sebastianbergmann/phpunit/releases/tag/11.5.50",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/releases/tag/11.5.50"
        },
        {
          "name": "https://github.com/sebastianbergmann/phpunit/releases/tag/12.5.8",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/releases/tag/12.5.8"
        },
        {
          "name": "https://github.com/sebastianbergmann/phpunit/releases/tag/8.5.52",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/releases/tag/8.5.52"
        },
        {
          "name": "https://github.com/sebastianbergmann/phpunit/releases/tag/9.6.33",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/sebastianbergmann/phpunit/releases/tag/9.6.33"
        }
      ],
      "source": {
        "advisory": "GHSA-vvj3-c3rp-c85p",
        "discovery": "UNKNOWN"
      },
      "title": "PHPUnit Vulnerable to Unsafe Deserialization in PHPT Code Coverage Handling"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-24765",
    "datePublished": "2026-01-27T21:35:54.292Z",
    "dateReserved": "2026-01-26T21:06:47.867Z",
    "dateUpdated": "2026-02-06T12:09:45.308Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14761 (GCVE-0-2025-14761)

Vulnerability from cvelistv5 – Published: 2025-12-17 20:13 – Updated: 2025-12-17 21:06

Summary

Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade AWS SDK for PHP to version 3.368.0 or later

Severity ?

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

6 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N

CWE

CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Assigner

AMZN

References

URL

Tags

	https://aws.amazon.com/security/security-bulletin…	vendor-advisory
	https://github.com/aws/aws-sdk-php/security/advis…	third-party-advisory
	https://github.com/aws/aws-sdk-php/releases/tag/3.368.0	patch

Impacted products

	Vendor	Product	Version
	AWS	AWS SDK for PHP	Unaffected: 3.368.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-14761",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-17T20:36:01.389941Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-17T20:41:07.602Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "AWS SDK for PHP",
          "vendor": "AWS",
          "versions": [
            {
              "status": "unaffected",
              "version": "3.368.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003e\u003c/p\u003e\u003cp\u003eMissing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an \"instruction file\" instead of S3\u0027s metadata record.\u003cbr\u003e\u003cbr\u003eTo mitigate this issue, upgrade AWS SDK for PHP to version 3.368.0 or later\u003c/p\u003e"
            }
          ],
          "value": "Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an \"instruction file\" instead of S3\u0027s metadata record.\n\nTo mitigate this issue, upgrade AWS SDK for PHP to version 3.368.0 or later"
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-148",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-148: Content Spoofing"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        },
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "NETWORK",
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "LOW",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "NONE",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "HIGH",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-327",
              "description": "CWE-327: Use of a Broken or Risky Cryptographic Algorithm",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-12-17T21:06:21.725Z",
        "orgId": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
        "shortName": "AMZN"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://aws.amazon.com/security/security-bulletins/AWS-2025-032/"
        },
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://github.com/aws/aws-sdk-php/security/advisories/GHSA-x8cp-jf6f-r4xh"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/aws/aws-sdk-php/releases/tag/3.368.0"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.5.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ff89ba41-3aa1-4d27-914a-91399e9639e5",
    "assignerShortName": "AMZN",
    "cveId": "CVE-2025-14761",
    "datePublished": "2025-12-17T20:13:54.665Z",
    "dateReserved": "2025-12-16T00:24:29.842Z",
    "dateUpdated": "2025-12-17T21:06:21.725Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTFR-2026-AVI-0508

Solutions

CVE-2026-24765 (GCVE-0-2026-24765)

CVE-2025-14761 (GCVE-0-2025-14761)

Tags

Sightings

Nomenclature