https://vulnerability.circl.lu/sightings/feed 2026-05-05T05:16:37.100247+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/dd5d056a-e6b3-40d6-ac3d-720ff6ee3971/export 2026-05-05T05:16:37.438982+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "dd5d056a-e6b3-40d6-ac3d-720ff6ee3971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3005", "type": "seen", "source": "https://t.me/cibsecurity/21515", "content": "\u203c CVE-2021-3005 \u203c\n\nMK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-01-03T07:34:57.000000Z"} 2021-01-03T07:34:57+00:00 https://vulnerability.circl.lu/sighting/9e1e42b1-c131-4361-8033-202411d6f1ab/export 2026-05-05T05:16:37.438843+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "9e1e42b1-c131-4361-8033-202411d6f1ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30057", "type": "seen", "source": "https://t.me/arpsyndicate/535", "content": "#ExploitObserverAlert\n\nCVE-2021-30057\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2021-30057. A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in \"/restful-services/2.0/analyticalDrivers\" via the 'LABEL' and 'NAME' parameters.\n\nFIRST-EPSS: 0.000580000\nNVD-IS: 2.7\nNVD-ES: 1.7", "creation_timestamp": "2023-11-24T15:45:35.000000Z"} 2023-11-24T15:45:35+00:00 https://vulnerability.circl.lu/sighting/e8993299-507c-4da9-8a96-2924790a7ee7/export 2026-05-05T05:16:37.436539+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e8993299-507c-4da9-8a96-2924790a7ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30056", "type": "seen", "source": "https://t.me/arpsyndicate/550", "content": "#ExploitObserverAlert\n\nCVE-2021-30056\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2021-30056. Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage.\n\nFIRST-EPSS: 0.000580000\nNVD-IS: 2.7\nNVD-ES: 2.3", "creation_timestamp": "2023-11-24T23:12:26.000000Z"} 2023-11-24T23:12:26+00:00