<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 06 May 2026 16:36:10 +0000</lastBuildDate>
    <item>
      <title>8d39650c-ecb9-422b-b77b-2d5011066e5c</title>
      <link>https://vulnerability.circl.lu/sighting/8d39650c-ecb9-422b-b77b-2d5011066e5c/export</link>
      <description>{"uuid": "8d39650c-ecb9-422b-b77b-2d5011066e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30571", "type": "seen", "source": "https://t.me/cibsecurity/64773", "content": "\u203c CVE-2023-30571 \u203c\n\nLibarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T00:41:24.000000Z"}</description>
      <content:encoded>{"uuid": "8d39650c-ecb9-422b-b77b-2d5011066e5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30571", "type": "seen", "source": "https://t.me/cibsecurity/64773", "content": "\u203c CVE-2023-30571 \u203c\n\nLibarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race condition could lead to implicit directory creation with permissions 0777 (without the sticky bit), which means that any low-privileged local user can delete and rename files inside those directories.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-30T00:41:24.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d39650c-ecb9-422b-b77b-2d5011066e5c/export</guid>
      <pubDate>Tue, 30 May 2023 00:41:24 +0000</pubDate>
    </item>
    <item>
      <title>1c374825-6131-4730-82ed-fa35c047ae4a</title>
      <link>https://vulnerability.circl.lu/sighting/1c374825-6131-4730-82ed-fa35c047ae4a/export</link>
      <description>{"uuid": "1c374825-6131-4730-82ed-fa35c047ae4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30576", "type": "seen", "source": "https://t.me/cibsecurity/65029", "content": "\u203c CVE-2023-30576 \u203c\n\nApache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T12:29:56.000000Z"}</description>
      <content:encoded>{"uuid": "1c374825-6131-4730-82ed-fa35c047ae4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30576", "type": "seen", "source": "https://t.me/cibsecurity/65029", "content": "\u203c CVE-2023-30576 \u203c\n\nApache Guacamole 0.9.10 through 1.5.1 may continue to reference a freed RDP audio input buffer. Depending on timing, this may allow an attacker to execute arbitrary code with the privileges of the guacd process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-07T12:29:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1c374825-6131-4730-82ed-fa35c047ae4a/export</guid>
      <pubDate>Wed, 07 Jun 2023 12:29:56 +0000</pubDate>
    </item>
    <item>
      <title>ed369cf4-bc82-4750-817b-f5e058eb1de7</title>
      <link>https://vulnerability.circl.lu/sighting/ed369cf4-bc82-4750-817b-f5e058eb1de7/export</link>
      <description>{"uuid": "ed369cf4-bc82-4750-817b-f5e058eb1de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30577", "type": "seen", "source": "https://t.me/cibsecurity/67307", "content": "\u203c CVE-2023-30577 \u203c\n\nAMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T20:27:47.000000Z"}</description>
      <content:encoded>{"uuid": "ed369cf4-bc82-4750-817b-f5e058eb1de7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30577", "type": "seen", "source": "https://t.me/cibsecurity/67307", "content": "\u203c CVE-2023-30577 \u203c\n\nAMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T20:27:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ed369cf4-bc82-4750-817b-f5e058eb1de7/export</guid>
      <pubDate>Wed, 26 Jul 2023 20:27:47 +0000</pubDate>
    </item>
    <item>
      <title>fe23a303-0fbb-4028-90c2-3893c5b75967</title>
      <link>https://vulnerability.circl.lu/sighting/fe23a303-0fbb-4028-90c2-3893c5b75967/export</link>
      <description>{"uuid": "fe23a303-0fbb-4028-90c2-3893c5b75967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30578", "type": "seen", "source": "MISP/5a83e93a-f6bf-458b-86fc-c224f185e7d2", "content": "", "creation_timestamp": "2026-02-10T15:41:31.000000Z"}</description>
      <content:encoded>{"uuid": "fe23a303-0fbb-4028-90c2-3893c5b75967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-30578", "type": "seen", "source": "MISP/5a83e93a-f6bf-458b-86fc-c224f185e7d2", "content": "", "creation_timestamp": "2026-02-10T15:41:31.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fe23a303-0fbb-4028-90c2-3893c5b75967/export</guid>
      <pubDate>Tue, 10 Feb 2026 15:41:31 +0000</pubDate>
    </item>
  </channel>
</rss>
