<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 08 Jun 2026 20:53:03 +0000</lastBuildDate>
    <item>
      <title>72a01023-9a7e-4199-b9a4-1504d497cf7a</title>
      <link>https://vulnerability.circl.lu/sighting/72a01023-9a7e-4199-b9a4-1504d497cf7a/export</link>
      <description>{"uuid": "72a01023-9a7e-4199-b9a4-1504d497cf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37777", "type": "seen", "source": "https://t.me/cibsecurity/29871", "content": "\u203c CVE-2021-37777 \u203c\n\nGila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T18:18:43.000000Z"}</description>
      <content:encoded>{"uuid": "72a01023-9a7e-4199-b9a4-1504d497cf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-37777", "type": "seen", "source": "https://t.me/cibsecurity/29871", "content": "\u203c CVE-2021-37777 \u203c\n\nGila CMS 2.2.0 is vulnerable to Insecure Direct Object Reference (IDOR). Thumbnails uploaded by one site owner are visible by another site owner just by knowing the other site name and fuzzing for picture names. This leads to sensitive information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-10-04T18:18:43.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/72a01023-9a7e-4199-b9a4-1504d497cf7a/export</guid>
      <pubDate>Mon, 04 Oct 2021 18:18:43 +0000</pubDate>
    </item>
  </channel>
</rss>
