<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 07 May 2026 03:36:38 +0000</lastBuildDate>
    <item>
      <title>27b20bec-c2de-416d-b55d-68f4ac54e1c3</title>
      <link>https://vulnerability.circl.lu/sighting/27b20bec-c2de-416d-b55d-68f4ac54e1c3/export</link>
      <description>{"uuid": "27b20bec-c2de-416d-b55d-68f4ac54e1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40492", "type": "seen", "source": "https://t.me/cvedetector/1127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40492 - \"Heartbeat Chat Cross Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-40492 \nPublished : July 17, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T00:55:02.000000Z"}</description>
      <content:encoded>{"uuid": "27b20bec-c2de-416d-b55d-68f4ac54e1c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40492", "type": "seen", "source": "https://t.me/cvedetector/1127", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40492 - \"Heartbeat Chat Cross Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2024-40492 \nPublished : July 17, 2024, 10:15 p.m. | 38\u00a0minutes ago \nDescription : Cross Site Scripting vulnerability in Heartbeat Chat v.15.2.1 allows a remote attacker to execute arbitrary code via the setname function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-18T00:55:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/27b20bec-c2de-416d-b55d-68f4ac54e1c3/export</guid>
      <pubDate>Thu, 18 Jul 2024 00:55:02 +0000</pubDate>
    </item>
    <item>
      <title>b4692d8e-8134-4e33-abf1-c905e69190a0</title>
      <link>https://vulnerability.circl.lu/sighting/b4692d8e-8134-4e33-abf1-c905e69190a0/export</link>
      <description>{"uuid": "b4692d8e-8134-4e33-abf1-c905e69190a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40495", "type": "seen", "source": "https://t.me/cvedetector/1590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40495 - Linksys Router E2500 Remote Code Execution vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40495 \nPublished : July 24, 2024, 7:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T21:40:06.000000Z"}</description>
      <content:encoded>{"uuid": "b4692d8e-8134-4e33-abf1-c905e69190a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40495", "type": "seen", "source": "https://t.me/cvedetector/1590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40495 - Linksys Router E2500 Remote Code Execution vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40495 \nPublished : July 24, 2024, 7:15 p.m. | 18\u00a0minutes ago \nDescription : A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T21:40:06.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b4692d8e-8134-4e33-abf1-c905e69190a0/export</guid>
      <pubDate>Wed, 24 Jul 2024 21:40:06 +0000</pubDate>
    </item>
    <item>
      <title>e7ce5059-9b65-435f-99ce-b43974fd4a13</title>
      <link>https://vulnerability.circl.lu/sighting/e7ce5059-9b65-435f-99ce-b43974fd4a13/export</link>
      <description>{"uuid": "e7ce5059-9b65-435f-99ce-b43974fd4a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40498", "type": "seen", "source": "https://t.me/cvedetector/2479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40498 - PuneethReddyHC Online Shopping System SQL Injection Heap\", \n  \"Content\": \"CVE ID : CVE-2024-40498 \nPublished : Aug. 5, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T19:46:04.000000Z"}</description>
      <content:encoded>{"uuid": "e7ce5059-9b65-435f-99ce-b43974fd4a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40498", "type": "seen", "source": "https://t.me/cvedetector/2479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40498 - PuneethReddyHC Online Shopping System SQL Injection Heap\", \n  \"Content\": \"CVE ID : CVE-2024-40498 \nPublished : Aug. 5, 2024, 5:15 p.m. | 25\u00a0minutes ago \nDescription : SQL Injection vulnerability in PuneethReddyHC Online Shopping sysstem advanced v.1.0 allows an attacker to execute arbitrary code via the register.php \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-05T19:46:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e7ce5059-9b65-435f-99ce-b43974fd4a13/export</guid>
      <pubDate>Mon, 05 Aug 2024 19:46:04 +0000</pubDate>
    </item>
    <item>
      <title>fe1f5023-acc7-4968-b7f6-72a69dde45a8</title>
      <link>https://vulnerability.circl.lu/sighting/fe1f5023-acc7-4968-b7f6-72a69dde45a8/export</link>
      <description>{"uuid": "fe1f5023-acc7-4968-b7f6-72a69dde45a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40493", "type": "seen", "source": "https://t.me/cvedetector/8663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40493 - CoAP FreeCoAP Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40493 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes `coap_msg_get_payload(resp)` to return a null pointer, which is then dereferenced in a call to `memcpy`. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:39:59.000000Z"}</description>
      <content:encoded>{"uuid": "fe1f5023-acc7-4968-b7f6-72a69dde45a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40493", "type": "seen", "source": "https://t.me/cvedetector/8663", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40493 - CoAP FreeCoAP Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40493 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes `coap_msg_get_payload(resp)` to return a null pointer, which is then dereferenced in a call to `memcpy`. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:39:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/fe1f5023-acc7-4968-b7f6-72a69dde45a8/export</guid>
      <pubDate>Wed, 23 Oct 2024 00:39:59 +0000</pubDate>
    </item>
    <item>
      <title>788074a8-d22a-4cfc-8bbb-a30e3493d605</title>
      <link>https://vulnerability.circl.lu/sighting/788074a8-d22a-4cfc-8bbb-a30e3493d605/export</link>
      <description>{"uuid": "788074a8-d22a-4cfc-8bbb-a30e3493d605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40494", "type": "seen", "source": "https://t.me/cvedetector/8664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40494 - FreeCoAP Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40494 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:40:00.000000Z"}</description>
      <content:encoded>{"uuid": "788074a8-d22a-4cfc-8bbb-a30e3493d605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40494", "type": "seen", "source": "https://t.me/cvedetector/8664", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40494 - FreeCoAP Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40494 \nPublished : Oct. 22, 2024, 10:15 p.m. | 22\u00a0minutes ago \nDescription : Buffer Overflow in coap_msg.c in FreeCoAP allows remote attackers to execute arbitrary code or cause a denial of service (stack buffer overflow) via a crafted packet. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-23T00:40:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/788074a8-d22a-4cfc-8bbb-a30e3493d605/export</guid>
      <pubDate>Wed, 23 Oct 2024 00:40:00 +0000</pubDate>
    </item>
    <item>
      <title>df1e63ad-bc65-406c-9918-8704389d2e10</title>
      <link>https://vulnerability.circl.lu/sighting/df1e63ad-bc65-406c-9918-8704389d2e10/export</link>
      <description>{"uuid": "df1e63ad-bc65-406c-9918-8704389d2e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40490", "type": "seen", "source": "https://t.me/cvedetector/9609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40490 - Sourcebans++ Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40490 \nPublished : Nov. 1, 2024, 4:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:51:42.000000Z"}</description>
      <content:encoded>{"uuid": "df1e63ad-bc65-406c-9918-8704389d2e10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-40490", "type": "seen", "source": "https://t.me/cvedetector/9609", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40490 - Sourcebans++ Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2024-40490 \nPublished : Nov. 1, 2024, 4:15 p.m. | 29\u00a0minutes ago \nDescription : An issue in Sourcebans++ before v.1.8.0 allows a remote attacker to obtain sensitive information via a crafted XAJAX call to the Forgot Password function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-01T17:51:42.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/df1e63ad-bc65-406c-9918-8704389d2e10/export</guid>
      <pubDate>Fri, 01 Nov 2024 17:51:42 +0000</pubDate>
    </item>
  </channel>
</rss>
