https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 10 May 2026 19:29:38 +0000 https://vulnerability.circl.lu/sighting/b958167a-5cfe-48e8-bf4e-f28e70fadcd5/export {"uuid": "b958167a-5cfe-48e8-bf4e-f28e70fadcd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47792", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16690", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47792\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextcloud Desktop fixes the issue in version 3.15. No known workarounds are available.\n\ud83d\udccf Published: 2025-05-16T14:13:53.209Z\n\ud83d\udccf Modified: 2025-05-16T14:13:53.209Z\n\ud83d\udd17 References:\n1. https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qm2f-959g-7p65\n2. https://github.com/nextcloud/desktop/pull/7517\n3. https://hackerone.com/reports/1995856", "creation_timestamp": "2025-05-16T14:39:40.000000Z"} {"uuid": "b958167a-5cfe-48e8-bf4e-f28e70fadcd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-47792", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16690", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-47792\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Nextcloud Desktop is the desktop sync client for Nextcloud. In versions of Nextcloud Desktop prior to 3.15, 3rdparty applications already installed on a user machine can create link shares for almost all data via the socket API. These shares can then be easily sent off to an external service. Nextcloud Desktop fixes the issue in version 3.15. No known workarounds are available.\n\ud83d\udccf Published: 2025-05-16T14:13:53.209Z\n\ud83d\udccf Modified: 2025-05-16T14:13:53.209Z\n\ud83d\udd17 References:\n1. https://github.com/nextcloud/security-advisories/security/advisories/GHSA-qm2f-959g-7p65\n2. https://github.com/nextcloud/desktop/pull/7517\n3. https://hackerone.com/reports/1995856", "creation_timestamp": "2025-05-16T14:39:40.000000Z"} https://vulnerability.circl.lu/sighting/b958167a-5cfe-48e8-bf4e-f28e70fadcd5/export Fri, 16 May 2025 14:39:40 +0000