<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 06 May 2026 07:06:18 +0000</lastBuildDate>
    <item>
      <title>3da0199d-ae5d-4071-b64c-b7b51b6b25f2</title>
      <link>https://vulnerability.circl.lu/sighting/3da0199d-ae5d-4071-b64c-b7b51b6b25f2/export</link>
      <description>{"uuid": "3da0199d-ae5d-4071-b64c-b7b51b6b25f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37935", "type": "seen", "source": "https://t.me/cibsecurity/33749", "content": "\u203c CVE-2021-37935 \u203c\n\nAn information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user to get information about the domain name of the configured LDAP server. An attacker could exploit this vulnerability by requesting the login page and searching for the \"isLdap\" JavaScript parameter in the HTML source code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-10T20:25:15.000000Z"}</description>
      <content:encoded>{"uuid": "3da0199d-ae5d-4071-b64c-b7b51b6b25f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37935", "type": "seen", "source": "https://t.me/cibsecurity/33749", "content": "\u203c CVE-2021-37935 \u203c\n\nAn information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user to get information about the domain name of the configured LDAP server. An attacker could exploit this vulnerability by requesting the login page and searching for the \"isLdap\" JavaScript parameter in the HTML source code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-10T20:25:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3da0199d-ae5d-4071-b64c-b7b51b6b25f2/export</guid>
      <pubDate>Fri, 10 Dec 2021 20:25:15 +0000</pubDate>
    </item>
  </channel>
</rss>
