<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 31 May 2026 13:10:49 +0000</lastBuildDate>
    <item>
      <title>fe8d4504-a361-452c-8968-71b042c42430</title>
      <link>https://vulnerability.circl.lu/sighting/fe8d4504-a361-452c-8968-71b042c42430/export</link>
      <description>{"uuid": "fe8d4504-a361-452c-8968-71b042c42430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31756", "type": "seen", "source": "https://t.me/cibsecurity/64458", "content": "\u203c CVE-2023-31756 \u203c\n\nA command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions &amp;lt;= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T16:43:13.000000Z"}</description>
      <content:encoded>{"uuid": "fe8d4504-a361-452c-8968-71b042c42430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31756", "type": "seen", "source": "https://t.me/cibsecurity/64458", "content": "\u203c CVE-2023-31756 \u203c\n\nA command injection vulnerability exists in the administrative web portal in TP-Link Archer VR1600V devices running firmware Versions &amp;lt;= 0.1.0. 0.9.1 v5006.0 Build 220518 Rel.32480n which allows remote attackers, authenticated to the administrative web portal as an administrator user to open an operating system level shell via the 'X_TP_IfName' parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T16:43:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fe8d4504-a361-452c-8968-71b042c42430/export</guid>
      <pubDate>Fri, 19 May 2023 16:43:13 +0000</pubDate>
    </item>
    <item>
      <title>68833dbc-3cb6-41b5-88f8-99c3c3d4114d</title>
      <link>https://vulnerability.circl.lu/sighting/68833dbc-3cb6-41b5-88f8-99c3c3d4114d/export</link>
      <description>{"uuid": "68833dbc-3cb6-41b5-88f8-99c3c3d4114d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31752", "type": "seen", "source": "https://t.me/cibsecurity/64648", "content": "\u203c CVE-2023-31752 \u203c\n\nSourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:37:21.000000Z"}</description>
      <content:encoded>{"uuid": "68833dbc-3cb6-41b5-88f8-99c3c3d4114d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31752", "type": "seen", "source": "https://t.me/cibsecurity/64648", "content": "\u203c CVE-2023-31752 \u203c\n\nSourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T00:37:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68833dbc-3cb6-41b5-88f8-99c3c3d4114d/export</guid>
      <pubDate>Wed, 24 May 2023 00:37:21 +0000</pubDate>
    </item>
    <item>
      <title>5bd180f7-159c-4ee1-b104-a968737c4b58</title>
      <link>https://vulnerability.circl.lu/sighting/5bd180f7-159c-4ee1-b104-a968737c4b58/export</link>
      <description>{"uuid": "5bd180f7-159c-4ee1-b104-a968737c4b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31759", "type": "seen", "source": "https://t.me/cibsecurity/64662", "content": "\u203c CVE-2023-31759 \u203c\n\nWeak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T07:26:43.000000Z"}</description>
      <content:encoded>{"uuid": "5bd180f7-159c-4ee1-b104-a968737c4b58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31759", "type": "seen", "source": "https://t.me/cibsecurity/64662", "content": "\u203c CVE-2023-31759 \u203c\n\nWeak Security in the 433MHz keyfob of Kerui W18 Alarm System v1.0 allows attackers to gain full access via a code replay attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T07:26:43.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5bd180f7-159c-4ee1-b104-a968737c4b58/export</guid>
      <pubDate>Wed, 24 May 2023 07:26:43 +0000</pubDate>
    </item>
    <item>
      <title>4139588c-e014-432b-b712-913db7d4c3bb</title>
      <link>https://vulnerability.circl.lu/sighting/4139588c-e014-432b-b712-913db7d4c3bb/export</link>
      <description>{"uuid": "4139588c-e014-432b-b712-913db7d4c3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4774", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aProof of Concept for CVE-2023-31753 - eNdonesia Portal 8.7\nURL\uff1ahttps://github.com/khmk2k/CVE-2023-31753\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-20T14:16:24.000000Z"}</description>
      <content:encoded>{"uuid": "4139588c-e014-432b-b712-913db7d4c3bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/4774", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2023\n\u63cf\u8ff0\uff1aProof of Concept for CVE-2023-31753 - eNdonesia Portal 8.7\nURL\uff1ahttps://github.com/khmk2k/CVE-2023-31753\n\n\u6807\u7b7e\uff1a#CVE-2023", "creation_timestamp": "2023-07-20T14:16:24.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4139588c-e014-432b-b712-913db7d4c3bb/export</guid>
      <pubDate>Thu, 20 Jul 2023 14:16:24 +0000</pubDate>
    </item>
    <item>
      <title>c471d64f-9f28-4ecb-b02b-5ed6f9db5433</title>
      <link>https://vulnerability.circl.lu/sighting/c471d64f-9f28-4ecb-b02b-5ed6f9db5433/export</link>
      <description>{"uuid": "c471d64f-9f28-4ecb-b02b-5ed6f9db5433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "seen", "source": "https://t.me/cibsecurity/67060", "content": "\u203c CVE-2023-31753 \u203c\n\nSQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the \"rid=\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T00:42:47.000000Z"}</description>
      <content:encoded>{"uuid": "c471d64f-9f28-4ecb-b02b-5ed6f9db5433", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31753", "type": "seen", "source": "https://t.me/cibsecurity/67060", "content": "\u203c CVE-2023-31753 \u203c\n\nSQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the \"rid=\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-21T00:42:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c471d64f-9f28-4ecb-b02b-5ed6f9db5433/export</guid>
      <pubDate>Fri, 21 Jul 2023 00:42:47 +0000</pubDate>
    </item>
    <item>
      <title>ecade554-7155-43ba-965a-2df87d62df3b</title>
      <link>https://vulnerability.circl.lu/sighting/ecade554-7155-43ba-965a-2df87d62df3b/export</link>
      <description>{"uuid": "ecade554-7155-43ba-965a-2df87d62df3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2215", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31752\n\ud83d\udd39 Description: SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T20:06:30.330Z\n\ud83d\udd17 References:\n1. https://github.com/4O4NtFd/bug_report/blob/main/SQLI2/SQLi-2.md", "creation_timestamp": "2025-01-17T20:58:04.000000Z"}</description>
      <content:encoded>{"uuid": "ecade554-7155-43ba-965a-2df87d62df3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-31752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2215", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-31752\n\ud83d\udd39 Description: SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php.\n\ud83d\udccf Published: 2023-05-23T00:00:00\n\ud83d\udccf Modified: 2025-01-17T20:06:30.330Z\n\ud83d\udd17 References:\n1. https://github.com/4O4NtFd/bug_report/blob/main/SQLI2/SQLi-2.md", "creation_timestamp": "2025-01-17T20:58:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ecade554-7155-43ba-965a-2df87d62df3b/export</guid>
      <pubDate>Fri, 17 Jan 2025 20:58:04 +0000</pubDate>
    </item>
  </channel>
</rss>
