<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 04 May 2026 12:37:29 +0000</lastBuildDate>
    <item>
      <title>4211a247-96b9-473d-9fb1-a0a4e83b1bb9</title>
      <link>https://vulnerability.circl.lu/sighting/4211a247-96b9-473d-9fb1-a0a4e83b1bb9/export</link>
      <description>{"uuid": "4211a247-96b9-473d-9fb1-a0a4e83b1bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5823", "type": "seen", "source": "https://t.me/cvedetector/9327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5823 - Chuanhuchatgpt File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5823 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions &amp;lt;=\nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:55.000000Z"}</description>
      <content:encoded>{"uuid": "4211a247-96b9-473d-9fb1-a0a4e83b1bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-5823", "type": "seen", "source": "https://t.me/cvedetector/9327", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-5823 - Chuanhuchatgpt File Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-5823 \nPublished : Oct. 29, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A file overwrite vulnerability exists in gaizhenbiao/chuanhuchatgpt versions &amp;lt;=\nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T14:46:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4211a247-96b9-473d-9fb1-a0a4e83b1bb9/export</guid>
      <pubDate>Tue, 29 Oct 2024 14:46:55 +0000</pubDate>
    </item>
    <item>
      <title>467212fc-5c7f-4034-9eef-311136bc621d</title>
      <link>https://vulnerability.circl.lu/sighting/467212fc-5c7f-4034-9eef-311136bc621d/export</link>
      <description>{"uuid": "467212fc-5c7f-4034-9eef-311136bc621d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114455911703454153", "content": "", "creation_timestamp": "2025-05-05T15:23:34.046949Z"}</description>
      <content:encoded>{"uuid": "467212fc-5c7f-4034-9eef-311136bc621d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114455911703454153", "content": "", "creation_timestamp": "2025-05-05T15:23:34.046949Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/467212fc-5c7f-4034-9eef-311136bc621d/export</guid>
      <pubDate>Mon, 05 May 2025 15:23:34 +0000</pubDate>
    </item>
    <item>
      <title>028d0615-cf35-45bd-a204-e52d03640354</title>
      <link>https://vulnerability.circl.lu/sighting/028d0615-cf35-45bd-a204-e52d03640354/export</link>
      <description>{"uuid": "028d0615-cf35-45bd-a204-e52d03640354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrdaeww422", "content": "", "creation_timestamp": "2025-05-05T16:16:30.867601Z"}</description>
      <content:encoded>{"uuid": "028d0615-cf35-45bd-a204-e52d03640354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3logrdaeww422", "content": "", "creation_timestamp": "2025-05-05T16:16:30.867601Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/028d0615-cf35-45bd-a204-e52d03640354/export</guid>
      <pubDate>Mon, 05 May 2025 16:16:30 +0000</pubDate>
    </item>
    <item>
      <title>f4c871d4-b7a5-4601-9484-3c932121369a</title>
      <link>https://vulnerability.circl.lu/sighting/f4c871d4-b7a5-4601-9484-3c932121369a/export</link>
      <description>{"uuid": "f4c871d4-b7a5-4601-9484-3c932121369a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58237\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: consider that tail calls invalidate packet pointers\n\nTail-called programs could execute any of the helpers that invalidate\npacket pointers. Hence, conservatively assume that each tail call\ninvalidates packet pointers.\n\nMaking the change in bpf_helper_changes_pkt_data() automatically makes\nuse of check_cfg() logic that computes 'changes_pkt_data' effect for\nglobal sub-programs, such that the following program could be\nrejected:\n\n    int tail_call(struct __sk_buff *sk)\n    {\n     bpf_tail_call_static(sk, &amp;amp;jmp_table, 0);\n     return 0;\n    }\n\n    SEC(\"tc\")\n    int not_safe(struct __sk_buff *sk)\n    {\n     int *p = (void *)(long)sk-&amp;gt;data;\n     ... make p valid ...\n     tail_call(sk);\n     *p = 42; /* this is unsafe */\n     ...\n    }\n\nThe tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that\ncan invalidate packet pointers. Otherwise, it can't be freplaced with\ntailcall_freplace.c:entry_freplace() that does a tail call.\n\ud83d\udccf Published: 2025-05-05T14:53:34.153Z\n\ud83d\udccf Modified: 2025-05-09T08:06:10.185Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f1692ee23dcaaddc24ba407b269707ee5df1301f\n2. https://git.kernel.org/stable/c/1c2244437f9ad3dd91215f920401a14f2542dbfc\n3. https://git.kernel.org/stable/c/1a4607ffba35bf2a630aab299e34dd3f6e658d70", "creation_timestamp": "2025-05-09T08:25:23.000000Z"}</description>
      <content:encoded>{"uuid": "f4c871d4-b7a5-4601-9484-3c932121369a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58237", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-58237\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: consider that tail calls invalidate packet pointers\n\nTail-called programs could execute any of the helpers that invalidate\npacket pointers. Hence, conservatively assume that each tail call\ninvalidates packet pointers.\n\nMaking the change in bpf_helper_changes_pkt_data() automatically makes\nuse of check_cfg() logic that computes 'changes_pkt_data' effect for\nglobal sub-programs, such that the following program could be\nrejected:\n\n    int tail_call(struct __sk_buff *sk)\n    {\n     bpf_tail_call_static(sk, &amp;amp;jmp_table, 0);\n     return 0;\n    }\n\n    SEC(\"tc\")\n    int not_safe(struct __sk_buff *sk)\n    {\n     int *p = (void *)(long)sk-&amp;gt;data;\n     ... make p valid ...\n     tail_call(sk);\n     *p = 42; /* this is unsafe */\n     ...\n    }\n\nThe tc_bpf2bpf.c:subprog_tc() needs change: mark it as a function that\ncan invalidate packet pointers. Otherwise, it can't be freplaced with\ntailcall_freplace.c:entry_freplace() that does a tail call.\n\ud83d\udccf Published: 2025-05-05T14:53:34.153Z\n\ud83d\udccf Modified: 2025-05-09T08:06:10.185Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/f1692ee23dcaaddc24ba407b269707ee5df1301f\n2. https://git.kernel.org/stable/c/1c2244437f9ad3dd91215f920401a14f2542dbfc\n3. https://git.kernel.org/stable/c/1a4607ffba35bf2a630aab299e34dd3f6e658d70", "creation_timestamp": "2025-05-09T08:25:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4c871d4-b7a5-4601-9484-3c932121369a/export</guid>
      <pubDate>Fri, 09 May 2025 08:25:23 +0000</pubDate>
    </item>
    <item>
      <title>d681ff6f-b27a-45c1-8c52-56055ec6f10a</title>
      <link>https://vulnerability.circl.lu/sighting/d681ff6f-b27a-45c1-8c52-56055ec6f10a/export</link>
      <description>{"uuid": "d681ff6f-b27a-45c1-8c52-56055ec6f10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58239", "type": "published-proof-of-concept", "source": "Telegram/FfKjltZxnaFwusyOHUgU-Wt35uG6_eCy4jZB30o26CR4Gps", "content": "", "creation_timestamp": "2025-10-14T15:00:09.000000Z"}</description>
      <content:encoded>{"uuid": "d681ff6f-b27a-45c1-8c52-56055ec6f10a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-58239", "type": "published-proof-of-concept", "source": "Telegram/FfKjltZxnaFwusyOHUgU-Wt35uG6_eCy4jZB30o26CR4Gps", "content": "", "creation_timestamp": "2025-10-14T15:00:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d681ff6f-b27a-45c1-8c52-56055ec6f10a/export</guid>
      <pubDate>Tue, 14 Oct 2025 15:00:09 +0000</pubDate>
    </item>
    <item>
      <title>64bfc026-7700-4bdc-94cb-c6125f9f26f5</title>
      <link>https://vulnerability.circl.lu/sighting/64bfc026-7700-4bdc-94cb-c6125f9f26f5/export</link>
      <description>{"uuid": "64bfc026-7700-4bdc-94cb-c6125f9f26f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-58238", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "64bfc026-7700-4bdc-94cb-c6125f9f26f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-58238", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/64bfc026-7700-4bdc-94cb-c6125f9f26f5/export</guid>
      <pubDate>Thu, 19 Mar 2026 00:00:00 +0000</pubDate>
    </item>
    <item>
      <title>ba6334c0-dc17-4d90-9d7b-14702aa88fb3</title>
      <link>https://vulnerability.circl.lu/sighting/ba6334c0-dc17-4d90-9d7b-14702aa88fb3/export</link>
      <description>{"uuid": "ba6334c0-dc17-4d90-9d7b-14702aa88fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "ba6334c0-dc17-4d90-9d7b-14702aa88fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2024-58237", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ba6334c0-dc17-4d90-9d7b-14702aa88fb3/export</guid>
      <pubDate>Thu, 19 Mar 2026 00:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
