<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 04 May 2026 19:54:19 +0000</lastBuildDate>
    <item>
      <title>9d1e1ce8-435b-4df1-afa6-70af9fc258c5</title>
      <link>https://vulnerability.circl.lu/sighting/9d1e1ce8-435b-4df1-afa6-70af9fc258c5/export</link>
      <description>{"uuid": "9d1e1ce8-435b-4df1-afa6-70af9fc258c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3969", "type": "seen", "source": "https://t.me/cibsecurity/67317", "content": "\u203c CVE-2023-3969 \u203c\n\nA vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0. Affected by this issue is some unknown functionality of the file index.php of the component HTTP POST Request Handler. The manipulation of the argument promo_code leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235568.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-27T16:28:33.000000Z"}</description>
      <content:encoded>{"uuid": "9d1e1ce8-435b-4df1-afa6-70af9fc258c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-3969", "type": "seen", "source": "https://t.me/cibsecurity/67317", "content": "\u203c CVE-2023-3969 \u203c\n\nA vulnerability, which was classified as problematic, has been found in GZ Scripts Availability Booking Calendar PHP 1.0. Affected by this issue is some unknown functionality of the file index.php of the component HTTP POST Request Handler. The manipulation of the argument promo_code leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-235568.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-27T16:28:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9d1e1ce8-435b-4df1-afa6-70af9fc258c5/export</guid>
      <pubDate>Thu, 27 Jul 2023 16:28:33 +0000</pubDate>
    </item>
    <item>
      <title>d56dc746-a89b-4cfe-b051-a4204f09ad8b</title>
      <link>https://vulnerability.circl.lu/sighting/d56dc746-a89b-4cfe-b051-a4204f09ad8b/export</link>
      <description>{"uuid": "d56dc746-a89b-4cfe-b051-a4204f09ad8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39695", "type": "seen", "source": "https://t.me/arpsyndicate/2440", "content": "#ExploitObserverAlert\n\nCVE-2023-39695\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-39695. Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T06:02:59.000000Z"}</description>
      <content:encoded>{"uuid": "d56dc746-a89b-4cfe-b051-a4204f09ad8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39695", "type": "seen", "source": "https://t.me/arpsyndicate/2440", "content": "#ExploitObserverAlert\n\nCVE-2023-39695\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-39695. Insufficient session expiration in Elenos ETG150 FM Transmitter v3.12 allows attackers to arbitrarily change transmitter configuration and data after logging out.\n\nFIRST-EPSS: 0.000460000\nNVD-IS: 1.4\nNVD-ES: 3.9", "creation_timestamp": "2024-01-04T06:02:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d56dc746-a89b-4cfe-b051-a4204f09ad8b/export</guid>
      <pubDate>Thu, 04 Jan 2024 06:02:59 +0000</pubDate>
    </item>
    <item>
      <title>1de36755-79ac-4570-82fa-18e5546b851d</title>
      <link>https://vulnerability.circl.lu/sighting/1de36755-79ac-4570-82fa-18e5546b851d/export</link>
      <description>{"uuid": "1de36755-79ac-4570-82fa-18e5546b851d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39691", "type": "seen", "source": "https://t.me/ctinow/182597", "content": "https://ift.tt/KeCElY3\nCVE-2023-39691 | kodbox up to 1.43 GET Request access control", "creation_timestamp": "2024-02-10T16:11:37.000000Z"}</description>
      <content:encoded>{"uuid": "1de36755-79ac-4570-82fa-18e5546b851d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-39691", "type": "seen", "source": "https://t.me/ctinow/182597", "content": "https://ift.tt/KeCElY3\nCVE-2023-39691 | kodbox up to 1.43 GET Request access control", "creation_timestamp": "2024-02-10T16:11:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1de36755-79ac-4570-82fa-18e5546b851d/export</guid>
      <pubDate>Sat, 10 Feb 2024 16:11:37 +0000</pubDate>
    </item>
  </channel>
</rss>
