<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 07 Jun 2026 19:06:04 +0000</lastBuildDate>
    <item>
      <title>af1abd06-4822-44c3-9df8-d9d4007d3a01</title>
      <link>https://vulnerability.circl.lu/sighting/af1abd06-4822-44c3-9df8-d9d4007d3a01/export</link>
      <description>{"uuid": "af1abd06-4822-44c3-9df8-d9d4007d3a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1958", "type": "published-proof-of-concept", "source": "https://t.me/cKure/234", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 #CVE-2020-1958; A high severity #LDAP injection vulnerability in\u00a0#Apache #Druid\u00a00.17.0 allowing an attacker to bypass LDAP search filter and retrieve any LDAP attribute values of users that exist on the LDAP server.\n\nhttps://github.com/ggolawski/CVE-2020-1958/", "creation_timestamp": "2020-04-12T06:21:11.000000Z"}</description>
      <content:encoded>{"uuid": "af1abd06-4822-44c3-9df8-d9d4007d3a01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-1958", "type": "published-proof-of-concept", "source": "https://t.me/cKure/234", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 #CVE-2020-1958; A high severity #LDAP injection vulnerability in\u00a0#Apache #Druid\u00a00.17.0 allowing an attacker to bypass LDAP search filter and retrieve any LDAP attribute values of users that exist on the LDAP server.\n\nhttps://github.com/ggolawski/CVE-2020-1958/", "creation_timestamp": "2020-04-12T06:21:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/af1abd06-4822-44c3-9df8-d9d4007d3a01/export</guid>
      <pubDate>Sun, 12 Apr 2020 06:21:11 +0000</pubDate>
    </item>
    <item>
      <title>7f814a9d-0062-43a7-8498-4bdf87db389b</title>
      <link>https://vulnerability.circl.lu/sighting/7f814a9d-0062-43a7-8498-4bdf87db389b/export</link>
      <description>{"uuid": "7f814a9d-0062-43a7-8498-4bdf87db389b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19587", "type": "seen", "source": "https://t.me/cibsecurity/49758", "content": "\u203c CVE-2020-19587 \u203c\n\nCross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:23.000000Z"}</description>
      <content:encoded>{"uuid": "7f814a9d-0062-43a7-8498-4bdf87db389b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19587", "type": "seen", "source": "https://t.me/cibsecurity/49758", "content": "\u203c CVE-2020-19587 \u203c\n\nCross Site Scripting (XSS) vulnerability in configMap parameters in Yellowfin Business Intelligence 7.3 allows remote attackers to run arbitrary code via MIAdminStyles.i4 Admin UI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7f814a9d-0062-43a7-8498-4bdf87db389b/export</guid>
      <pubDate>Wed, 14 Sep 2022 14:26:23 +0000</pubDate>
    </item>
    <item>
      <title>f981d10d-2b1e-4948-b339-38e46ae59820</title>
      <link>https://vulnerability.circl.lu/sighting/f981d10d-2b1e-4948-b339-38e46ae59820/export</link>
      <description>{"uuid": "f981d10d-2b1e-4948-b339-38e46ae59820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19586", "type": "seen", "source": "https://t.me/cibsecurity/49759", "content": "\u203c CVE-2020-19586 \u203c\n\nIncorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:24.000000Z"}</description>
      <content:encoded>{"uuid": "f981d10d-2b1e-4948-b339-38e46ae59820", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-19586", "type": "seen", "source": "https://t.me/cibsecurity/49759", "content": "\u203c CVE-2020-19586 \u203c\n\nIncorrect Access Control issue in Yellowfin Business Intelligence 7.3 allows remote attackers to escalate privilege via MIAdminStyles.i4 Admin UI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:24.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f981d10d-2b1e-4948-b339-38e46ae59820/export</guid>
      <pubDate>Wed, 14 Sep 2022 14:26:24 +0000</pubDate>
    </item>
  </channel>
</rss>
