<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 08 May 2026 13:41:44 +0000</lastBuildDate>
    <item>
      <title>74b2f9c5-d835-4d86-8987-1d899c37798c</title>
      <link>https://vulnerability.circl.lu/sighting/74b2f9c5-d835-4d86-8987-1d899c37798c/export</link>
      <description>{"uuid": "74b2f9c5-d835-4d86-8987-1d899c37798c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51961", "type": "seen", "source": "https://t.me/cvedetector/19421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-51961 - ArcGIS Server File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-51961 \nPublished : March 3, 2025, 8:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : There is a local file inclusion vulnerability in ArcGIS Server 10.9.1 thru 11.3 that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files from the remote server.\u00a0 Due to the nature of the files accessible in this vulnerability the impact to confidentiality is High there is no impact to both integrity or availability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:30.000000Z"}</description>
      <content:encoded>{"uuid": "74b2f9c5-d835-4d86-8987-1d899c37798c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51961", "type": "seen", "source": "https://t.me/cvedetector/19421", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-51961 - ArcGIS Server File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-51961 \nPublished : March 3, 2025, 8:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : There is a local file inclusion vulnerability in ArcGIS Server 10.9.1 thru 11.3 that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files from the remote server.\u00a0 Due to the nature of the files accessible in this vulnerability the impact to confidentiality is High there is no impact to both integrity or availability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T23:56:30.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/74b2f9c5-d835-4d86-8987-1d899c37798c/export</guid>
      <pubDate>Mon, 03 Mar 2025 23:56:30 +0000</pubDate>
    </item>
    <item>
      <title>d1007499-bda8-4ef4-956a-b8fd69c8f2a7</title>
      <link>https://vulnerability.circl.lu/sighting/d1007499-bda8-4ef4-956a-b8fd69c8f2a7/export</link>
      <description>{"uuid": "d1007499-bda8-4ef4-956a-b8fd69c8f2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51961", "type": "seen", "source": "Telegram/tVbctFyvN-TxaH-BgMCAaH3C4ImaVflMfxu8Fo5nx0XM2ZSC", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}</description>
      <content:encoded>{"uuid": "d1007499-bda8-4ef4-956a-b8fd69c8f2a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51961", "type": "seen", "source": "Telegram/tVbctFyvN-TxaH-BgMCAaH3C4ImaVflMfxu8Fo5nx0XM2ZSC", "content": "", "creation_timestamp": "2025-03-08T04:34:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d1007499-bda8-4ef4-956a-b8fd69c8f2a7/export</guid>
      <pubDate>Sat, 08 Mar 2025 04:34:09 +0000</pubDate>
    </item>
    <item>
      <title>f11a4dd1-1cb5-42f0-9f7c-8ff0dec09ce8</title>
      <link>https://vulnerability.circl.lu/sighting/f11a4dd1-1cb5-42f0-9f7c-8ff0dec09ce8/export</link>
      <description>{"uuid": "f11a4dd1-1cb5-42f0-9f7c-8ff0dec09ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51961", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-51961\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: There is a local file inclusion vulnerability in ArcGIS Server 11.3 and below that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files from the remote server.\u00a0 Due to the nature of the files accessible in this vulnerability the impact to confidentiality is High there is no impact to both integrity or availability.\n\ud83d\udccf Published: 2025-03-03T19:58:26.627Z\n\ud83d\udccf Modified: 2025-04-10T19:25:47.824Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/arcgis-server-security-2025-update-1-patch/", "creation_timestamp": "2025-04-10T19:49:25.000000Z"}</description>
      <content:encoded>{"uuid": "f11a4dd1-1cb5-42f0-9f7c-8ff0dec09ce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-51961", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-51961\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: There is a local file inclusion vulnerability in ArcGIS Server 11.3 and below that may allow a remote, unauthenticated attacker to craft a URL that could potentially disclose sensitive configuration information by reading internal files from the remote server.\u00a0 Due to the nature of the files accessible in this vulnerability the impact to confidentiality is High there is no impact to both integrity or availability.\n\ud83d\udccf Published: 2025-03-03T19:58:26.627Z\n\ud83d\udccf Modified: 2025-04-10T19:25:47.824Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/trust-arcgis/administration/arcgis-server-security-2025-update-1-patch/", "creation_timestamp": "2025-04-10T19:49:25.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f11a4dd1-1cb5-42f0-9f7c-8ff0dec09ce8/export</guid>
      <pubDate>Thu, 10 Apr 2025 19:49:25 +0000</pubDate>
    </item>
  </channel>
</rss>
