<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 08 Jun 2026 01:56:10 +0000</lastBuildDate>
    <item>
      <title>107b3f5d-94d2-4010-b9ba-285bcd44dff5</title>
      <link>https://vulnerability.circl.lu/sighting/107b3f5d-94d2-4010-b9ba-285bcd44dff5/export</link>
      <description>{"uuid": "107b3f5d-94d2-4010-b9ba-285bcd44dff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8253", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116552999803024611", "content": "\u26a0\ufe0f CVE-2026-8253: MEDIUM severity XSS in Devs Palace ERP Online v4.0.0 via /inventory/purchase_save. No patch; vendor unresponsive. Apply WAF rules &amp;amp; restrict access. Details: https://radar.offseq.com/threat/cve-2026-8253-cross-site-scripting-in-devs-palace--7f918dea #OffSeq #XSS #ERP #Vuln", "creation_timestamp": "2026-05-11T00:00:40.526691Z"}</description>
      <content:encoded>{"uuid": "107b3f5d-94d2-4010-b9ba-285bcd44dff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8253", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116552999803024611", "content": "\u26a0\ufe0f CVE-2026-8253: MEDIUM severity XSS in Devs Palace ERP Online v4.0.0 via /inventory/purchase_save. No patch; vendor unresponsive. Apply WAF rules &amp;amp; restrict access. Details: https://radar.offseq.com/threat/cve-2026-8253-cross-site-scripting-in-devs-palace--7f918dea #OffSeq #XSS #ERP #Vuln", "creation_timestamp": "2026-05-11T00:00:40.526691Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/107b3f5d-94d2-4010-b9ba-285bcd44dff5/export</guid>
      <pubDate>Mon, 11 May 2026 00:00:40 +0000</pubDate>
    </item>
    <item>
      <title>6b93566a-6c34-49d1-9bae-0e594cd2a875</title>
      <link>https://vulnerability.circl.lu/sighting/6b93566a-6c34-49d1-9bae-0e594cd2a875/export</link>
      <description>{"uuid": "6b93566a-6c34-49d1-9bae-0e594cd2a875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8253", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mljxryaweh2g", "content": "Devs Palace ERP Online 4.0 hit by MEDIUM XSS (CVE-2026-8253) in /inventory/purchase_save. No patch \u2014 use WAF rules &amp;amp; restrict privileged access. Monitor for updates: https://radar.offseq.com/threat/cve-2026-8253-cross-site-scripting-in-devs-palace--7f918dea #OffSeq #XSS #ERPSecurity", "creation_timestamp": "2026-05-11T00:00:42.234171Z"}</description>
      <content:encoded>{"uuid": "6b93566a-6c34-49d1-9bae-0e594cd2a875", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-8253", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mljxryaweh2g", "content": "Devs Palace ERP Online 4.0 hit by MEDIUM XSS (CVE-2026-8253) in /inventory/purchase_save. No patch \u2014 use WAF rules &amp;amp; restrict privileged access. Monitor for updates: https://radar.offseq.com/threat/cve-2026-8253-cross-site-scripting-in-devs-palace--7f918dea #OffSeq #XSS #ERPSecurity", "creation_timestamp": "2026-05-11T00:00:42.234171Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/6b93566a-6c34-49d1-9bae-0e594cd2a875/export</guid>
      <pubDate>Mon, 11 May 2026 00:00:42 +0000</pubDate>
    </item>
    <item>
      <title>676aebbe-6d0e-4804-ada4-0bc945165283</title>
      <link>https://vulnerability.circl.lu/sighting/676aebbe-6d0e-4804-ada4-0bc945165283/export</link>
      <description>{"uuid": "676aebbe-6d0e-4804-ada4-0bc945165283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlkdjhfyx72h", "content": "CVE-2026-8253 - Devs Palace ERP Online purchase_save cross site scripting\nCVE ID : CVE-2026-8253\n \n Published : May 11, 2026, 12:16 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerabil...", "creation_timestamp": "2026-05-11T03:30:39.788372Z"}</description>
      <content:encoded>{"uuid": "676aebbe-6d0e-4804-ada4-0bc945165283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8253", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mlkdjhfyx72h", "content": "CVE-2026-8253 - Devs Palace ERP Online purchase_save cross site scripting\nCVE ID : CVE-2026-8253\n \n Published : May 11, 2026, 12:16 a.m. | 2\u00a0hours, 13\u00a0minutes ago\n \n Description : A vulnerability was identified in Devs Palace ERP Online up to 4.0.0. Affected by this vulnerabil...", "creation_timestamp": "2026-05-11T03:30:39.788372Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/676aebbe-6d0e-4804-ada4-0bc945165283/export</guid>
      <pubDate>Mon, 11 May 2026 03:30:39 +0000</pubDate>
    </item>
  </channel>
</rss>
