<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 22 Sep 2026 13:22:52 +0000</lastBuildDate>
    <item>
      <title>3bf016c0-c5a6-4b87-812e-232d280a639a</title>
      <link>https://vulnerability.circl.lu/sighting/3bf016c0-c5a6-4b87-812e-232d280a639a/export</link>
      <description>{"uuid": "3bf016c0-c5a6-4b87-812e-232d280a639a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40344", "type": "seen", "source": "https://t.me/cibsecurity/31194", "content": "\u203c CVE-2021-40344 \u203c\n\nAn issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-26T14:14:46.000000Z"}</description>
      <content:encoded>{"uuid": "3bf016c0-c5a6-4b87-812e-232d280a639a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40344", "type": "seen", "source": "https://t.me/cibsecurity/31194", "content": "\u203c CVE-2021-40344 \u203c\n\nAn issue was discovered in Nagios XI 5.8.5. In the Custom Includes section of the Admin panel, an administrator can upload files with arbitrary extensions as long as the MIME type corresponds to an image. Therefore it is possible to upload a crafted PHP script to achieve remote command execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-26T14:14:46.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/3bf016c0-c5a6-4b87-812e-232d280a639a/export</guid>
      <pubDate>Tue, 26 Oct 2021 14:14:46 +0000</pubDate>
    </item>
  </channel>
</rss>
