<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 23 Jul 2026 21:50:12 +0000</lastBuildDate>
    <item>
      <title>0afc0a69-e897-4055-8086-f6db73c06ebd</title>
      <link>https://vulnerability.circl.lu/sighting/0afc0a69-e897-4055-8086-f6db73c06ebd/export</link>
      <description>{"uuid": "0afc0a69-e897-4055-8086-f6db73c06ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MWWQ-V92J-38XR", "type": "seen", "source": "https://t.me/arpsyndicate/773", "content": "#ExploitObserverAlert\n\nGHSA-mwwq-v92j-38xr\n\nDESCRIPTION: Exploit Observer has 8 entries related to GHSA-MWWQ-V92J-38XR. In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance.\n\nGHSS: 8.0", "creation_timestamp": "2023-11-29T16:58:47.000000Z"}</description>
      <content:encoded>{"uuid": "0afc0a69-e897-4055-8086-f6db73c06ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MWWQ-V92J-38XR", "type": "seen", "source": "https://t.me/arpsyndicate/773", "content": "#ExploitObserverAlert\n\nGHSA-mwwq-v92j-38xr\n\nDESCRIPTION: Exploit Observer has 8 entries related to GHSA-MWWQ-V92J-38XR. In Splunk Enterprise versions below 9.0.7 and 9.1.2, Splunk Enterprise does not safely sanitize extensible stylesheet language transformations (XSLT) that users supply. This means that an attacker can upload malicious XSLT which can result in remote code execution on the Splunk Enterprise instance.\n\nGHSS: 8.0", "creation_timestamp": "2023-11-29T16:58:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0afc0a69-e897-4055-8086-f6db73c06ebd/export</guid>
      <pubDate>Wed, 29 Nov 2023 16:58:47 +0000</pubDate>
    </item>
  </channel>
</rss>
