<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 18 Jun 2026 19:26:14 +0000</lastBuildDate>
    <item>
      <title>00ba0902-9513-4c6b-a30d-ea094832b742</title>
      <link>https://vulnerability.circl.lu/sighting/00ba0902-9513-4c6b-a30d-ea094832b742/export</link>
      <description>{"uuid": "00ba0902-9513-4c6b-a30d-ea094832b742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38748", "type": "seen", "source": "https://t.me/cibsecurity/67630", "content": "\u203c CVE-2023-38748 \u203c\n\nUse after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-07T06:19:07.000000Z"}</description>
      <content:encoded>{"uuid": "00ba0902-9513-4c6b-a30d-ea094832b742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38748", "type": "seen", "source": "https://t.me/cibsecurity/67630", "content": "\u203c CVE-2023-38748 \u203c\n\nUse after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-07T06:19:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/00ba0902-9513-4c6b-a30d-ea094832b742/export</guid>
      <pubDate>Mon, 07 Aug 2023 06:19:07 +0000</pubDate>
    </item>
    <item>
      <title>a72a1bfa-f148-48c9-b229-cd0b8f961180</title>
      <link>https://vulnerability.circl.lu/sighting/a72a1bfa-f148-48c9-b229-cd0b8f961180/export</link>
      <description>{"uuid": "a72a1bfa-f148-48c9-b229-cd0b8f961180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38741", "type": "seen", "source": "https://t.me/cibsecurity/68473", "content": "\u203c CVE-2023-38741 \u203c\n\nIBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 262905.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T22:19:48.000000Z"}</description>
      <content:encoded>{"uuid": "a72a1bfa-f148-48c9-b229-cd0b8f961180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38741", "type": "seen", "source": "https://t.me/cibsecurity/68473", "content": "\u203c CVE-2023-38741 \u203c\n\nIBM TXSeries for Multiplatforms 8.1, 8.2, and 9.1 is vulnerable to a denial of service, caused by improper enforcement of the timeout on individual read operations. By conducting a slowloris-type attacks, a remote attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 262905.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-14T22:19:48.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a72a1bfa-f148-48c9-b229-cd0b8f961180/export</guid>
      <pubDate>Mon, 14 Aug 2023 22:19:48 +0000</pubDate>
    </item>
    <item>
      <title>880afe90-bc03-4139-84a9-18cccf8992db</title>
      <link>https://vulnerability.circl.lu/sighting/880afe90-bc03-4139-84a9-18cccf8992db/export</link>
      <description>{"uuid": "880afe90-bc03-4139-84a9-18cccf8992db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "seen", "source": "https://t.me/cibsecurity/70231", "content": "\u203c CVE-2023-38743 \u203c\n\nZoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T22:27:55.000000Z"}</description>
      <content:encoded>{"uuid": "880afe90-bc03-4139-84a9-18cccf8992db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "seen", "source": "https://t.me/cibsecurity/70231", "content": "\u203c CVE-2023-38743 \u203c\n\nZoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-11T22:27:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/880afe90-bc03-4139-84a9-18cccf8992db/export</guid>
      <pubDate>Mon, 11 Sep 2023 22:27:55 +0000</pubDate>
    </item>
    <item>
      <title>354b7531-a643-429d-a070-4a43cf5c2c5f</title>
      <link>https://vulnerability.circl.lu/sighting/354b7531-a643-429d-a070-4a43cf5c2c5f/export</link>
      <description>{"uuid": "354b7531-a643-429d-a070-4a43cf5c2c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1222", "content": "https://petrusviet.medium.com/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe", "creation_timestamp": "2023-10-05T16:38:00.000000Z"}</description>
      <content:encoded>{"uuid": "354b7531-a643-429d-a070-4a43cf5c2c5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/1222", "content": "https://petrusviet.medium.com/cve-2023-38743-manageengine-admanager-command-injection-6afccbb196fe", "creation_timestamp": "2023-10-05T16:38:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/354b7531-a643-429d-a070-4a43cf5c2c5f/export</guid>
      <pubDate>Thu, 05 Oct 2023 16:38:00 +0000</pubDate>
    </item>
    <item>
      <title>427d9ddc-40d5-4431-9c1e-48774e930459</title>
      <link>https://vulnerability.circl.lu/sighting/427d9ddc-40d5-4431-9c1e-48774e930459/export</link>
      <description>{"uuid": "427d9ddc-40d5-4431-9c1e-48774e930459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9136", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS 17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\n4. CVE-2023-4911:\n\"Looney Tunables\"\nLPE in the glibc's ld*so\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n]-&amp;gt; https://github.com/RickdeJager/CVE-2023-4911", "creation_timestamp": "2023-10-06T06:39:32.000000Z"}</description>
      <content:encoded>{"uuid": "427d9ddc-40d5-4431-9c1e-48774e930459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/9136", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS 17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\n4. CVE-2023-4911:\n\"Looney Tunables\"\nLPE in the glibc's ld*so\nhttps://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt\n]-&amp;gt; https://github.com/RickdeJager/CVE-2023-4911", "creation_timestamp": "2023-10-06T06:39:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/427d9ddc-40d5-4431-9c1e-48774e930459/export</guid>
      <pubDate>Fri, 06 Oct 2023 06:39:32 +0000</pubDate>
    </item>
    <item>
      <title>44b46ab3-2a03-419f-b4bb-bc3e21ac6282</title>
      <link>https://vulnerability.circl.lu/sighting/44b46ab3-2a03-419f-b4bb-bc3e21ac6282/export</link>
      <description>{"uuid": "44b46ab3-2a03-419f-b4bb-bc3e21ac6282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3217", "content": "Hackers Factory \n\nFast and customizable Firebase api and Project ID extractor .\n\nhttps://github.com/ProjectNull0/Firebase-exploit\n\n403/401 Bypass Methods + Bash Automation + Your Support \n\nhttps://github.com/Dheerajmadhukar/4-ZERO-3\n\nGCP-Pentest-Checklist - Reposting\n\nhttps://github.com/CyberSecurityUP/GCP-Pentest-Checklist\n\nOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( \u200c\u00b0 \u200c\u0296 \u200c\u00b0)...\n\nhttps://github.com/hktalent/scan4all\n\nUses a Exploit found by\u00a0@Willy-JL\u00a0and\u00a0@ECTO-1A\u00a0to crash IOS17 devices over bluetooth.\n\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\nFind secrets and passwords in container images and file systems\n\nhttps://github.com/deepfence/SecretScanner\n\nManageEngine ADManager Command Injection\n\nhttps://github.com/PetrusViet/CVE-2023-38743\n\nCombining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider\n\nhttps://github.com/pathtofile/SealighterTI\n\nSnoopy Command Logger is a small library that logs all program executions on your Linux/BSD system.\n\nhttps://github.com/a2o/snoopy\n\nA small and portable Windows C library for sandbox detection\n\nhttps://github.com/kargisimos/detenv\n\n\u514d\u8d39\u7684 ChatGPT \u955c\u50cf\u7f51\u7ad9\u5217\u8868\uff0c\u6301\u7eed\u66f4\u65b0\u3002List of free ChatGPT mirror sites, continuously updated\n\nhttps://github.com/LiLittleCat/awesome-free-chatgpt\n\nDocuments Exfiltration project for fun and educational purposes\n\nhttps://github.com/TheD1rkMtr/DocPlz\n\nDorks for Google, Shodan and BinaryEdge\n\nhttps://github.com/iGotRootSRC/Dorkers\n\nAwesome VirusTotal Intelligence Search Queries\n\nhttps://github.com/Neo23x0/vti-dorks\n\nTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more\n\nhttps://github.com/edoardottt/cariddi\n\nA lightweight tool for scraping current and historic Google Analytics data\n\nhttps://github.com/jclark1913/osint-google-analytics\n\nAthena OS is an Arch Linux-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!\n\nhttps://github.com/Athena-OS/athena-iso\n\nOSINT tool to find informations about a github user (email2username, username2email, creation date\n\nhttps://github.com/hippiiee/osgint\n\nOSCP Cheatsheet \n\nhttps://github.com/0xSojalSec/OSCP-Cheatsheet\n\nThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.\n\nhttps://github.com/Bert-JanP/Open-Source-Threat-Intel-Feeds\n\nFree web-application vulnerability and version scanner\n\nhttps://github.com/fgeek/pyfiscan\n\nKubernetes Attack Graph\n\nhttps://github.com/DataDog/KubeHound\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-10-08T23:47:00.000000Z"}</description>
      <content:encoded>{"uuid": "44b46ab3-2a03-419f-b4bb-bc3e21ac6282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3217", "content": "Hackers Factory \n\nFast and customizable Firebase api and Project ID extractor .\n\nhttps://github.com/ProjectNull0/Firebase-exploit\n\n403/401 Bypass Methods + Bash Automation + Your Support \n\nhttps://github.com/Dheerajmadhukar/4-ZERO-3\n\nGCP-Pentest-Checklist - Reposting\n\nhttps://github.com/CyberSecurityUP/GCP-Pentest-Checklist\n\nOfficial repository vuls Scan: 15000+PoCs; 23 kinds of application password crack; 7000+Web fingerprints; 146 protocols and 90000+ rules Port scanning; Fuzz, HW, awesome BugBounty( \u200c\u00b0 \u200c\u0296 \u200c\u00b0)...\n\nhttps://github.com/hktalent/scan4all\n\nUses a Exploit found by\u00a0@Willy-JL\u00a0and\u00a0@ECTO-1A\u00a0to crash IOS17 devices over bluetooth.\n\nhttps://github.com/RapierXbox/ESP32-Sour-Apple\n\nFind secrets and passwords in container images and file systems\n\nhttps://github.com/deepfence/SecretScanner\n\nManageEngine ADManager Command Injection\n\nhttps://github.com/PetrusViet/CVE-2023-38743\n\nCombining Sealighter with unpatched exploits to run the Threat-Intelligence ETW Provider\n\nhttps://github.com/pathtofile/SealighterTI\n\nSnoopy Command Logger is a small library that logs all program executions on your Linux/BSD system.\n\nhttps://github.com/a2o/snoopy\n\nA small and portable Windows C library for sandbox detection\n\nhttps://github.com/kargisimos/detenv\n\n\u514d\u8d39\u7684 ChatGPT \u955c\u50cf\u7f51\u7ad9\u5217\u8868\uff0c\u6301\u7eed\u66f4\u65b0\u3002List of free ChatGPT mirror sites, continuously updated\n\nhttps://github.com/LiLittleCat/awesome-free-chatgpt\n\nDocuments Exfiltration project for fun and educational purposes\n\nhttps://github.com/TheD1rkMtr/DocPlz\n\nDorks for Google, Shodan and BinaryEdge\n\nhttps://github.com/iGotRootSRC/Dorkers\n\nAwesome VirusTotal Intelligence Search Queries\n\nhttps://github.com/Neo23x0/vti-dorks\n\nTake a list of domains, crawl urls and scan for endpoints, secrets, api keys, file extensions, tokens and more\n\nhttps://github.com/edoardottt/cariddi\n\nA lightweight tool for scraping current and historic Google Analytics data\n\nhttps://github.com/jclark1913/osint-google-analytics\n\nAthena OS is an Arch Linux-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!\n\nhttps://github.com/Athena-OS/athena-iso\n\nOSINT tool to find informations about a github user (email2username, username2email, creation date\n\nhttps://github.com/hippiiee/osgint\n\nOSCP Cheatsheet \n\nhttps://github.com/0xSojalSec/OSCP-Cheatsheet\n\nThis repository contains Open Source freely usable Threat Intel feeds that can be used without additional requirements. Contains multiple types such as IP, URL, CVE and Hash.\n\nhttps://github.com/Bert-JanP/Open-Source-Threat-Intel-Feeds\n\nFree web-application vulnerability and version scanner\n\nhttps://github.com/fgeek/pyfiscan\n\nKubernetes Attack Graph\n\nhttps://github.com/DataDog/KubeHound\n\n#infosec #cybersecurity #hackersfactory \n\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-10-08T23:47:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44b46ab3-2a03-419f-b4bb-bc3e21ac6282/export</guid>
      <pubDate>Sun, 08 Oct 2023 23:47:00 +0000</pubDate>
    </item>
    <item>
      <title>beb308b3-689b-4e23-adee-e37106a37bf5</title>
      <link>https://vulnerability.circl.lu/sighting/beb308b3-689b-4e23-adee-e37106a37bf5/export</link>
      <description>{"uuid": "beb308b3-689b-4e23-adee-e37106a37bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38740", "type": "seen", "source": "https://t.me/cibsecurity/72384", "content": "\u203c CVE-2023-38740 \u203c\n\nIBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T02:32:19.000000Z"}</description>
      <content:encoded>{"uuid": "beb308b3-689b-4e23-adee-e37106a37bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38740", "type": "seen", "source": "https://t.me/cibsecurity/72384", "content": "\u203c CVE-2023-38740 \u203c\n\nIBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-Force ID: 262613.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T02:32:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/beb308b3-689b-4e23-adee-e37106a37bf5/export</guid>
      <pubDate>Tue, 17 Oct 2023 02:32:19 +0000</pubDate>
    </item>
    <item>
      <title>0843f40c-0827-4533-b3ee-c0aedb172130</title>
      <link>https://vulnerability.circl.lu/sighting/0843f40c-0827-4533-b3ee-c0aedb172130/export</link>
      <description>{"uuid": "0843f40c-0827-4533-b3ee-c0aedb172130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "Telegram/vWAIVOeT_IzeuZIw0wF5sXcBTpojv-A8JZVrt0MMrvV-", "content": "", "creation_timestamp": "2023-10-22T23:38:20.000000Z"}</description>
      <content:encoded>{"uuid": "0843f40c-0827-4533-b3ee-c0aedb172130", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "Telegram/vWAIVOeT_IzeuZIw0wF5sXcBTpojv-A8JZVrt0MMrvV-", "content": "", "creation_timestamp": "2023-10-22T23:38:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0843f40c-0827-4533-b3ee-c0aedb172130/export</guid>
      <pubDate>Sun, 22 Oct 2023 23:38:20 +0000</pubDate>
    </item>
    <item>
      <title>299b3f2d-d8ae-49e6-8de2-a26d5fca5f8a</title>
      <link>https://vulnerability.circl.lu/sighting/299b3f2d-d8ae-49e6-8de2-a26d5fca5f8a/export</link>
      <description>{"uuid": "299b3f2d-d8ae-49e6-8de2-a26d5fca5f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3874", "type": "seen", "source": "https://t.me/arpsyndicate/2374", "content": "#ExploitObserverAlert\n\nCVE-2023-3874\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-3874. A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235236.\n\nFIRST-EPSS: 0.000640000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-03T22:49:27.000000Z"}</description>
      <content:encoded>{"uuid": "299b3f2d-d8ae-49e6-8de2-a26d5fca5f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3874", "type": "seen", "source": "https://t.me/arpsyndicate/2374", "content": "#ExploitObserverAlert\n\nCVE-2023-3874\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-3874. A vulnerability, which was classified as critical, was found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235236.\n\nFIRST-EPSS: 0.000640000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-03T22:49:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/299b3f2d-d8ae-49e6-8de2-a26d5fca5f8a/export</guid>
      <pubDate>Wed, 03 Jan 2024 22:49:27 +0000</pubDate>
    </item>
    <item>
      <title>fc92cee0-974c-423a-801d-9aa088766d3c</title>
      <link>https://vulnerability.circl.lu/sighting/fc92cee0-974c-423a-801d-9aa088766d3c/export</link>
      <description>{"uuid": "fc92cee0-974c-423a-801d-9aa088766d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1252", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple", "creation_timestamp": "2024-08-16T08:32:27.000000Z"}</description>
      <content:encoded>{"uuid": "fc92cee0-974c-423a-801d-9aa088766d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-38743", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/1252", "content": "#exploit\n1. MSIFortune - LPE with MSI Installers\nhttps://badoption.eu/blog/2023/10/03/MSIFortune.html\n\n2. CVE-2023-38743:\nManageEngine ADManager Command Injection\nhttps://github.com/PetrusViet/CVE-2023-38743\n\n3. IOS17 Crash Exploit\nhttps://github.com/RapierXbox/ESP32-Sour-Apple", "creation_timestamp": "2024-08-16T08:32:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fc92cee0-974c-423a-801d-9aa088766d3c/export</guid>
      <pubDate>Fri, 16 Aug 2024 08:32:27 +0000</pubDate>
    </item>
  </channel>
</rss>
