<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 04 Jun 2026 03:04:11 +0000</lastBuildDate>
    <item>
      <title>6ac0f0c7-4d2c-47bc-a3c9-c58a5781aff4</title>
      <link>https://vulnerability.circl.lu/sighting/6ac0f0c7-4d2c-47bc-a3c9-c58a5781aff4/export</link>
      <description>{"uuid": "6ac0f0c7-4d2c-47bc-a3c9-c58a5781aff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13547", "type": "seen", "source": "https://t.me/cibsecurity/21186", "content": "\u203c CVE-2020-13547 \u203c\n\nA type confusion vulnerability exists in the JavaScript engine of Foxit Software\u00e2\u20ac\u2122s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-22T22:53:20.000000Z"}</description>
      <content:encoded>{"uuid": "6ac0f0c7-4d2c-47bc-a3c9-c58a5781aff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13547", "type": "seen", "source": "https://t.me/cibsecurity/21186", "content": "\u203c CVE-2020-13547 \u203c\n\nA type confusion vulnerability exists in the JavaScript engine of Foxit Software\u00e2\u20ac\u2122s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the user to open the malicious file to trigger this vulnerability. If the browser plugin extension is enabled, visiting a malicious site can also trigger the vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-22T22:53:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6ac0f0c7-4d2c-47bc-a3c9-c58a5781aff4/export</guid>
      <pubDate>Tue, 22 Dec 2020 22:53:20 +0000</pubDate>
    </item>
    <item>
      <title>82e6baf3-e1c9-4e58-9685-a960a8669159</title>
      <link>https://vulnerability.circl.lu/sighting/82e6baf3-e1c9-4e58-9685-a960a8669159/export</link>
      <description>{"uuid": "82e6baf3-e1c9-4e58-9685-a960a8669159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13547", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2282", "content": "#Threat_Research\n1. Prototype Pollution PoC\n(Affecting\u00a0ini\u00a0package, versions\u00a0&amp;lt;1.3.6)\nhttps://snyk.io/vuln/SNYK-JS-INI-1048974\n2. Foxit Reader JavaScript media openPlayer type confusion vulnerability (PoC for CVE-2020-13547)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1165", "creation_timestamp": "2020-12-31T18:32:41.000000Z"}</description>
      <content:encoded>{"uuid": "82e6baf3-e1c9-4e58-9685-a960a8669159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-13547", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/2282", "content": "#Threat_Research\n1. Prototype Pollution PoC\n(Affecting\u00a0ini\u00a0package, versions\u00a0&amp;lt;1.3.6)\nhttps://snyk.io/vuln/SNYK-JS-INI-1048974\n2. Foxit Reader JavaScript media openPlayer type confusion vulnerability (PoC for CVE-2020-13547)\nhttps://talosintelligence.com/vulnerability_reports/TALOS-2020-1165", "creation_timestamp": "2020-12-31T18:32:41.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/82e6baf3-e1c9-4e58-9685-a960a8669159/export</guid>
      <pubDate>Thu, 31 Dec 2020 18:32:41 +0000</pubDate>
    </item>
  </channel>
</rss>
