https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 02 Jun 2026 06:04:14 +0000 https://vulnerability.circl.lu/sighting/52b87648-6f2d-40c7-96fd-a6dfb0e3b1d2/export {"uuid": "52b87648-6f2d-40c7-96fd-a6dfb0e3b1d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-10549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8191", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-10549\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.\n\ud83d\udccf Published: 2025-03-20T10:11:32.621Z\n\ud83d\udccf Modified: 2025-03-20T10:11:32.621Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/ce7bd2d6-fd38-440d-a91a-dd8f3fc06bc2", "creation_timestamp": "2025-03-20T10:19:33.000000Z"} {"uuid": "52b87648-6f2d-40c7-96fd-a6dfb0e3b1d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-10549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8191", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-10549\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A vulnerability in the `/3/Parse` endpoint of h2oai/h2o-3 version 3.46.0.1 allows for a denial of service (DoS) attack. The endpoint uses a user-specified string to construct a regular expression, which is then applied to another user-specified string. By sending multiple simultaneous requests, an attacker can exhaust all available threads, leading to a complete denial of service.\n\ud83d\udccf Published: 2025-03-20T10:11:32.621Z\n\ud83d\udccf Modified: 2025-03-20T10:11:32.621Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/ce7bd2d6-fd38-440d-a91a-dd8f3fc06bc2", "creation_timestamp": "2025-03-20T10:19:33.000000Z"} https://vulnerability.circl.lu/sighting/52b87648-6f2d-40c7-96fd-a6dfb0e3b1d2/export Thu, 20 Mar 2025 10:19:33 +0000