<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 09 May 2026 12:04:38 +0000</lastBuildDate>
    <item>
      <title>52114aff-2788-4b89-b3ef-929970dd9559</title>
      <link>https://vulnerability.circl.lu/sighting/52114aff-2788-4b89-b3ef-929970dd9559/export</link>
      <description>{"uuid": "52114aff-2788-4b89-b3ef-929970dd9559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7881", "type": "seen", "source": "https://t.me/cibsecurity/33002", "content": "\u203c CVE-2020-7881 \u203c\n\nThe vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by \"FanTicket\" field. It is because of stored data without validation of length.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-26T20:29:56.000000Z"}</description>
      <content:encoded>{"uuid": "52114aff-2788-4b89-b3ef-929970dd9559", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-7881", "type": "seen", "source": "https://t.me/cibsecurity/33002", "content": "\u203c CVE-2020-7881 \u203c\n\nThe vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy() operate by \"FanTicket\" field. It is because of stored data without validation of length.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-26T20:29:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/52114aff-2788-4b89-b3ef-929970dd9559/export</guid>
      <pubDate>Fri, 26 Nov 2021 20:29:56 +0000</pubDate>
    </item>
  </channel>
</rss>
