<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 31 May 2026 05:33:57 +0000</lastBuildDate>
    <item>
      <title>28450a37-5767-484f-9a27-7a42267ceaa1</title>
      <link>https://vulnerability.circl.lu/sighting/28450a37-5767-484f-9a27-7a42267ceaa1/export</link>
      <description>{"uuid": "28450a37-5767-484f-9a27-7a42267ceaa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24830", "type": "seen", "source": "https://t.me/ctinow/198427", "content": "https://ift.tt/yp2wiVd\nCVE-2024-24830 | OpenObserve up to 0.7.x Role-Based Access Control /api/{org_id}/users improper authorization (GHSA-hfxx-g56f-8h5v)", "creation_timestamp": "2024-03-02T17:41:37.000000Z"}</description>
      <content:encoded>{"uuid": "28450a37-5767-484f-9a27-7a42267ceaa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24830", "type": "seen", "source": "https://t.me/ctinow/198427", "content": "https://ift.tt/yp2wiVd\nCVE-2024-24830 | OpenObserve up to 0.7.x Role-Based Access Control /api/{org_id}/users improper authorization (GHSA-hfxx-g56f-8h5v)", "creation_timestamp": "2024-03-02T17:41:37.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/28450a37-5767-484f-9a27-7a42267ceaa1/export</guid>
      <pubDate>Sat, 02 Mar 2024 17:41:37 +0000</pubDate>
    </item>
    <item>
      <title>2dec5517-243a-4129-888d-5445ad16c29f</title>
      <link>https://vulnerability.circl.lu/sighting/2dec5517-243a-4129-888d-5445ad16c29f/export</link>
      <description>{"uuid": "2dec5517-243a-4129-888d-5445ad16c29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24831", "type": "seen", "source": "https://t.me/ctinow/198695", "content": "https://ift.tt/n4s2dWC\nCVE-2024-24831 | Leap13 Premium Addons for Elementor Plugin up to 4.10.16 on WordPress cross site scripting", "creation_timestamp": "2024-03-03T11:41:52.000000Z"}</description>
      <content:encoded>{"uuid": "2dec5517-243a-4129-888d-5445ad16c29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24831", "type": "seen", "source": "https://t.me/ctinow/198695", "content": "https://ift.tt/n4s2dWC\nCVE-2024-24831 | Leap13 Premium Addons for Elementor Plugin up to 4.10.16 on WordPress cross site scripting", "creation_timestamp": "2024-03-03T11:41:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2dec5517-243a-4129-888d-5445ad16c29f/export</guid>
      <pubDate>Sun, 03 Mar 2024 11:41:52 +0000</pubDate>
    </item>
    <item>
      <title>e1836288-ecdb-46ae-b7ac-3d2e16e48dd4</title>
      <link>https://vulnerability.circl.lu/sighting/e1836288-ecdb-46ae-b7ac-3d2e16e48dd4/export</link>
      <description>{"uuid": "e1836288-ecdb-46ae-b7ac-3d2e16e48dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/ctinow/208470", "content": "https://ift.tt/xsUgbOH\nCVE-2024-2483 | Surya2Developer Hostel Management Service 1.0 Password Change /change-password.php oldpassword cross-site request forgery", "creation_timestamp": "2024-03-15T07:41:32.000000Z"}</description>
      <content:encoded>{"uuid": "e1836288-ecdb-46ae-b7ac-3d2e16e48dd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/ctinow/208470", "content": "https://ift.tt/xsUgbOH\nCVE-2024-2483 | Surya2Developer Hostel Management Service 1.0 Password Change /change-password.php oldpassword cross-site request forgery", "creation_timestamp": "2024-03-15T07:41:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e1836288-ecdb-46ae-b7ac-3d2e16e48dd4/export</guid>
      <pubDate>Fri, 15 Mar 2024 07:41:32 +0000</pubDate>
    </item>
    <item>
      <title>86a9a5b3-8913-43bb-a730-6eb4040236e9</title>
      <link>https://vulnerability.circl.lu/sighting/86a9a5b3-8913-43bb-a730-6eb4040236e9/export</link>
      <description>{"uuid": "86a9a5b3-8913-43bb-a730-6eb4040236e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/ctinow/208498", "content": "https://ift.tt/DKTm0Wq\nCVE-2024-2483", "creation_timestamp": "2024-03-15T08:26:10.000000Z"}</description>
      <content:encoded>{"uuid": "86a9a5b3-8913-43bb-a730-6eb4040236e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/ctinow/208498", "content": "https://ift.tt/DKTm0Wq\nCVE-2024-2483", "creation_timestamp": "2024-03-15T08:26:10.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/86a9a5b3-8913-43bb-a730-6eb4040236e9/export</guid>
      <pubDate>Fri, 15 Mar 2024 08:26:10 +0000</pubDate>
    </item>
    <item>
      <title>44aef7cb-7c96-4e45-b621-1f271faf4697</title>
      <link>https://vulnerability.circl.lu/sighting/44aef7cb-7c96-4e45-b621-1f271faf4697/export</link>
      <description>{"uuid": "44aef7cb-7c96-4e45-b621-1f271faf4697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/ctinow/208506", "content": "https://ift.tt/DKTm0Wq\nCVE-2024-2483", "creation_timestamp": "2024-03-15T08:31:56.000000Z"}</description>
      <content:encoded>{"uuid": "44aef7cb-7c96-4e45-b621-1f271faf4697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/ctinow/208506", "content": "https://ift.tt/DKTm0Wq\nCVE-2024-2483", "creation_timestamp": "2024-03-15T08:31:56.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/44aef7cb-7c96-4e45-b621-1f271faf4697/export</guid>
      <pubDate>Fri, 15 Mar 2024 08:31:56 +0000</pubDate>
    </item>
    <item>
      <title>298a843e-8baa-4b47-88c5-ccf55e325287</title>
      <link>https://vulnerability.circl.lu/sighting/298a843e-8baa-4b47-88c5-ccf55e325287/export</link>
      <description>{"uuid": "298a843e-8baa-4b47-88c5-ccf55e325287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/arpsyndicate/4263", "content": "#ExploitObserverAlert\n\nCVE-2024-2483\n\nDESCRIPTION: Exploit Observer has 30 entries in 5 file formats related to CVE-2024-2483. A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. This issue affects some unknown processing of the file /change-password.php of the component Password Change Handler. The manipulation of the argument oldpassword leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256889 was assigned to this vulnerability.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-03-16T21:43:51.000000Z"}</description>
      <content:encoded>{"uuid": "298a843e-8baa-4b47-88c5-ccf55e325287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2483", "type": "seen", "source": "https://t.me/arpsyndicate/4263", "content": "#ExploitObserverAlert\n\nCVE-2024-2483\n\nDESCRIPTION: Exploit Observer has 30 entries in 5 file formats related to CVE-2024-2483. A vulnerability, which was classified as problematic, has been found in Surya2Developer Hostel Management Service 1.0. This issue affects some unknown processing of the file /change-password.php of the component Password Change Handler. The manipulation of the argument oldpassword leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256889 was assigned to this vulnerability.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-03-16T21:43:51.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/298a843e-8baa-4b47-88c5-ccf55e325287/export</guid>
      <pubDate>Sat, 16 Mar 2024 21:43:51 +0000</pubDate>
    </item>
    <item>
      <title>9982d761-17b4-4320-8d1c-48a88441bffe</title>
      <link>https://vulnerability.circl.lu/sighting/9982d761-17b4-4320-8d1c-48a88441bffe/export</link>
      <description>{"uuid": "9982d761-17b4-4320-8d1c-48a88441bffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24832", "type": "seen", "source": "Telegram/8cmJI3E7g0lApNkKYZwg1e6OstcAiwKMjXCOucUrMbHjk587", "content": "", "creation_timestamp": "2025-02-06T02:42:30.000000Z"}</description>
      <content:encoded>{"uuid": "9982d761-17b4-4320-8d1c-48a88441bffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24832", "type": "seen", "source": "Telegram/8cmJI3E7g0lApNkKYZwg1e6OstcAiwKMjXCOucUrMbHjk587", "content": "", "creation_timestamp": "2025-02-06T02:42:30.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9982d761-17b4-4320-8d1c-48a88441bffe/export</guid>
      <pubDate>Thu, 06 Feb 2025 02:42:30 +0000</pubDate>
    </item>
    <item>
      <title>a41b9a09-d335-4ae3-a1e0-52865864b641</title>
      <link>https://vulnerability.circl.lu/sighting/a41b9a09-d335-4ae3-a1e0-52865864b641/export</link>
      <description>{"uuid": "a41b9a09-d335-4ae3-a1e0-52865864b641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24831", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrnw4425", "content": "", "creation_timestamp": "2025-02-19T21:02:42.030737Z"}</description>
      <content:encoded>{"uuid": "a41b9a09-d335-4ae3-a1e0-52865864b641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24831", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrnw4425", "content": "", "creation_timestamp": "2025-02-19T21:02:42.030737Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a41b9a09-d335-4ae3-a1e0-52865864b641/export</guid>
      <pubDate>Wed, 19 Feb 2025 21:02:42 +0000</pubDate>
    </item>
    <item>
      <title>606afa91-e647-459f-a75e-624b6cfe6d3e</title>
      <link>https://vulnerability.circl.lu/sighting/606afa91-e647-459f-a75e-624b6cfe6d3e/export</link>
      <description>{"uuid": "606afa91-e647-459f-a75e-624b6cfe6d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24833", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrqg662w", "content": "", "creation_timestamp": "2025-02-19T21:02:42.508389Z"}</description>
      <content:encoded>{"uuid": "606afa91-e647-459f-a75e-624b6cfe6d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24833", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3likodrqg662w", "content": "", "creation_timestamp": "2025-02-19T21:02:42.508389Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/606afa91-e647-459f-a75e-624b6cfe6d3e/export</guid>
      <pubDate>Wed, 19 Feb 2025 21:02:42 +0000</pubDate>
    </item>
    <item>
      <title>62c99688-c85b-4dd6-94bf-05be8d4f5dae</title>
      <link>https://vulnerability.circl.lu/sighting/62c99688-c85b-4dd6-94bf-05be8d4f5dae/export</link>
      <description>{"uuid": "62c99688-c85b-4dd6-94bf-05be8d4f5dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24837", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-24837\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Fr\u00e9d\u00e9ric GILLES FG PrestaShop to WooCommerce, Fr\u00e9d\u00e9ric GILLES FG Drupal to WordPress, Fr\u00e9d\u00e9ric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.\n\n\n\ud83d\udccf Published: 2024-02-21T07:18:55.035Z\n\ud83d\udccf Modified: 2025-04-22T16:24:05.124Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/fg-drupal-to-wp/wordpress-fg-drupal-to-wordpress-plugin-3-67-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve\n2. https://patchstack.com/database/vulnerability/fg-prestashop-to-woocommerce/wordpress-fg-prestashop-to-woocommerce-plugin-4-44-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve\n3. https://patchstack.com/database/vulnerability/fg-joomla-to-wordpress/wordpress-fg-joomla-to-wordpress-plugin-4-15-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T17:03:29.000000Z"}</description>
      <content:encoded>{"uuid": "62c99688-c85b-4dd6-94bf-05be8d4f5dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-24837", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-24837\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) vulnerability in Fr\u00e9d\u00e9ric GILLES FG PrestaShop to WooCommerce, Fr\u00e9d\u00e9ric GILLES FG Drupal to WordPress, Fr\u00e9d\u00e9ric GILLES FG Joomla to WordPress.This issue affects FG PrestaShop to WooCommerce: from n/a through 4.44.3; FG Drupal to WordPress: from n/a through 3.67.0; FG Joomla to WordPress: from n/a through 4.15.0.\n\n\n\ud83d\udccf Published: 2024-02-21T07:18:55.035Z\n\ud83d\udccf Modified: 2025-04-22T16:24:05.124Z\n\ud83d\udd17 References:\n1. https://patchstack.com/database/vulnerability/fg-drupal-to-wp/wordpress-fg-drupal-to-wordpress-plugin-3-67-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve\n2. https://patchstack.com/database/vulnerability/fg-prestashop-to-woocommerce/wordpress-fg-prestashop-to-woocommerce-plugin-4-44-3-cross-site-request-forgery-csrf-vulnerability?_s_id=cve\n3. https://patchstack.com/database/vulnerability/fg-joomla-to-wordpress/wordpress-fg-joomla-to-wordpress-plugin-4-15-0-cross-site-request-forgery-csrf-vulnerability?_s_id=cve", "creation_timestamp": "2025-04-22T17:03:29.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/62c99688-c85b-4dd6-94bf-05be8d4f5dae/export</guid>
      <pubDate>Tue, 22 Apr 2025 17:03:29 +0000</pubDate>
    </item>
  </channel>
</rss>
