<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 10 May 2026 10:55:26 +0000</lastBuildDate>
    <item>
      <title>7911e1b9-4f57-4543-819c-9ec09b3dc119</title>
      <link>https://vulnerability.circl.lu/sighting/7911e1b9-4f57-4543-819c-9ec09b3dc119/export</link>
      <description>{"uuid": "7911e1b9-4f57-4543-819c-9ec09b3dc119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-41124", "type": "seen", "source": "https://t.me/cvedetector/1234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41124 - Puncia: Unsecured API URLs in Subdomain Center &amp;amp; Exploit Observer lead to Insecure Data Transmission\", \n  \"Content\": \"CVE ID : CVE-2024-41124 \nPublished : July 19, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Puncia is the Official CLI utility for Subdomain Center &amp;amp; Exploit Observer. `API_URLS` is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access &amp;amp; MITM Attacks. This issue has been addressed in release version 0.21 by using https rather than http connections. All users are advised to upgrade. There is no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T22:53:54.000000Z"}</description>
      <content:encoded>{"uuid": "7911e1b9-4f57-4543-819c-9ec09b3dc119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-41124", "type": "seen", "source": "https://t.me/cvedetector/1234", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-41124 - Puncia: Unsecured API URLs in Subdomain Center &amp;amp; Exploit Observer lead to Insecure Data Transmission\", \n  \"Content\": \"CVE ID : CVE-2024-41124 \nPublished : July 19, 2024, 8:15 p.m. | 35\u00a0minutes ago \nDescription : Puncia is the Official CLI utility for Subdomain Center &amp;amp; Exploit Observer. `API_URLS` is utilizing HTTP instead of HTTPS for communication that can lead to issues like Eavesdropping, Data Tampering, Unauthorized Data Access &amp;amp; MITM Attacks. This issue has been addressed in release version 0.21 by using https rather than http connections. All users are advised to upgrade. There is no known workarounds for this vulnerability. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-19T22:53:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7911e1b9-4f57-4543-819c-9ec09b3dc119/export</guid>
      <pubDate>Fri, 19 Jul 2024 22:53:54 +0000</pubDate>
    </item>
  </channel>
</rss>
