<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-11T13:02:17.669474+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/61e745cc-5d7b-4612-9fed-e0ad6cf98354/export</id>
    <title>61e745cc-5d7b-4612-9fed-e0ad6cf98354</title>
    <updated>2026-06-11T13:02:18.059600+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "61e745cc-5d7b-4612-9fed-e0ad6cf98354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30399", "type": "seen", "source": "https://t.me/cibsecurity/63330", "content": "\u203c CVE-2023-30399 \u203c\n\nInsecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-05T00:37:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/61e745cc-5d7b-4612-9fed-e0ad6cf98354/export"/>
    <published>2023-05-05T00:37:19+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/659f41be-f2ca-4610-acce-4c85a0e4293e/export</id>
    <title>659f41be-f2ca-4610-acce-4c85a0e4293e</title>
    <updated>2026-06-11T13:02:18.059521+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "659f41be-f2ca-4610-acce-4c85a0e4293e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30394", "type": "seen", "source": "https://t.me/cibsecurity/63905", "content": "\u203c CVE-2023-30394 \u203c\n\nMoveIT v1.1.11 was discovered to contain a cross-site scripting (XSS) vulenrability via the API authentication function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T22:15:35.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/659f41be-f2ca-4610-acce-4c85a0e4293e/export"/>
    <published>2023-05-11T22:15:35+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c51e5cba-ea82-4662-adc9-1ebfd6391d0c/export</id>
    <title>c51e5cba-ea82-4662-adc9-1ebfd6391d0c</title>
    <updated>2026-06-11T13:02:18.059440+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c51e5cba-ea82-4662-adc9-1ebfd6391d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3039", "type": "seen", "source": "https://t.me/cibsecurity/70248", "content": "\u203c CVE-2023-3039 \u203c\n\nSD ROM Utility, versions prior to 1.0.2.0 contain an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform arbitrary code execution with limited access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:47.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c51e5cba-ea82-4662-adc9-1ebfd6391d0c/export"/>
    <published>2023-09-12T12:22:47+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/36678a55-099c-4b50-9f8f-25629fad3353/export</id>
    <title>36678a55-099c-4b50-9f8f-25629fad3353</title>
    <updated>2026-06-11T13:02:18.059335+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "36678a55-099c-4b50-9f8f-25629fad3353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30399", "type": "seen", "source": "https://t.me/arpsyndicate/541", "content": "#ExploitObserverAlert\n\nCVE-2023-30399\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30399. Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.\n\nFIRST-EPSS: 0.000620000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-11-24T20:05:40.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/36678a55-099c-4b50-9f8f-25629fad3353/export"/>
    <published>2023-11-24T20:05:40+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/13d014a1-48c6-4deb-9b50-08a8c04806a6/export</id>
    <title>13d014a1-48c6-4deb-9b50-08a8c04806a6</title>
    <updated>2026-06-11T13:02:18.057606+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "13d014a1-48c6-4deb-9b50-08a8c04806a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30399", "type": "seen", "source": "https://t.me/arpsyndicate/1622", "content": "#ExploitObserverAlert\n\nCVE-2023-30399\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-30399. Insecure permissions in the settings page of GARO Wallbox GLB/GTB/GTC before v189 allows attackers to redirect users to a crafted update package link via a man-in-the-middle attack.\n\nFIRST-EPSS: 0.000620000\nNVD-IS: 5.9\nNVD-ES: 2.2", "creation_timestamp": "2023-12-10T12:53:04.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/13d014a1-48c6-4deb-9b50-08a8c04806a6/export"/>
    <published>2023-12-10T12:53:04+00:00</published>
  </entry>
</feed>
