<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Fri, 08 May 2026 08:26:57 +0000</lastBuildDate>
    <item>
      <title>14add2da-bb12-4102-94c4-fe129eb09187</title>
      <link>https://vulnerability.circl.lu/sighting/14add2da-bb12-4102-94c4-fe129eb09187/export</link>
      <description>{"uuid": "14add2da-bb12-4102-94c4-fe129eb09187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8335", "type": "seen", "source": "https://t.me/Kelvinseccommunity/768", "content": "\ud83d\udea8 CVE-2024-8335\nA vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2024-08-30T15:38:20.000000Z"}</description>
      <content:encoded>{"uuid": "14add2da-bb12-4102-94c4-fe129eb09187", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8335", "type": "seen", "source": "https://t.me/Kelvinseccommunity/768", "content": "\ud83d\udea8 CVE-2024-8335\nA vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2024-08-30T15:38:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/14add2da-bb12-4102-94c4-fe129eb09187/export</guid>
      <pubDate>Fri, 30 Aug 2024 15:38:20 +0000</pubDate>
    </item>
    <item>
      <title>2dc2cd87-f777-4291-a087-50996271106b</title>
      <link>https://vulnerability.circl.lu/sighting/2dc2cd87-f777-4291-a087-50996271106b/export</link>
      <description>{"uuid": "2dc2cd87-f777-4291-a087-50996271106b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8335", "type": "seen", "source": "https://t.me/cvedetector/4517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8335 - A vulnerability classified as critical has been fo\", \n  \"Content\": \"CVE ID : CVE-2024-8335 \nPublished : Aug. 30, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T15:39:07.000000Z"}</description>
      <content:encoded>{"uuid": "2dc2cd87-f777-4291-a087-50996271106b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-8335", "type": "seen", "source": "https://t.me/cvedetector/4517", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-8335 - A vulnerability classified as critical has been fo\", \n  \"Content\": \"CVE ID : CVE-2024-8335 \nPublished : Aug. 30, 2024, 1:15 p.m. | 22\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T15:39:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2dc2cd87-f777-4291-a087-50996271106b/export</guid>
      <pubDate>Fri, 30 Aug 2024 15:39:07 +0000</pubDate>
    </item>
  </channel>
</rss>
