<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 28 Jul 2026 11:44:28 +0000</lastBuildDate>
    <item>
      <title>a970ad15-4bcc-4ecb-95a3-466ef7773fd4</title>
      <link>https://vulnerability.circl.lu/sighting/a970ad15-4bcc-4ecb-95a3-466ef7773fd4/export</link>
      <description>{"uuid": "a970ad15-4bcc-4ecb-95a3-466ef7773fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15689", "type": "published-proof-of-concept", "source": "Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8", "content": "", "creation_timestamp": "2025-09-17T21:00:04.000000Z"}</description>
      <content:encoded>{"uuid": "a970ad15-4bcc-4ecb-95a3-466ef7773fd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15689", "type": "published-proof-of-concept", "source": "Telegram/IechzTJqEoGzyCNt3bqa1OsFAGBEn8a-qVqD1btrcdGoLD8", "content": "", "creation_timestamp": "2025-09-17T21:00:04.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a970ad15-4bcc-4ecb-95a3-466ef7773fd4/export</guid>
      <pubDate>Wed, 17 Sep 2025 21:00:04 +0000</pubDate>
    </item>
    <item>
      <title>0a441289-98bc-4283-9de7-9e56fcd66736</title>
      <link>https://vulnerability.circl.lu/sighting/0a441289-98bc-4283-9de7-9e56fcd66736/export</link>
      <description>{"uuid": "0a441289-98bc-4283-9de7-9e56fcd66736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/17444", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:08.000000Z"}</description>
      <content:encoded>{"uuid": "0a441289-98bc-4283-9de7-9e56fcd66736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/17444", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:08.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0a441289-98bc-4283-9de7-9e56fcd66736/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:32:08 +0000</pubDate>
    </item>
    <item>
      <title>8c8d7555-7db7-41ab-ac75-cf46ef573363</title>
      <link>https://vulnerability.circl.lu/sighting/8c8d7555-7db7-41ab-ac75-cf46ef573363/export</link>
      <description>{"uuid": "8c8d7555-7db7-41ab-ac75-cf46ef573363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/17443", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:07.000000Z"}</description>
      <content:encoded>{"uuid": "8c8d7555-7db7-41ab-ac75-cf46ef573363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/17443", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c8d7555-7db7-41ab-ac75-cf46ef573363/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:32:07 +0000</pubDate>
    </item>
    <item>
      <title>9ff3cf49-4419-40a1-bd32-bd32f3e36b1f</title>
      <link>https://vulnerability.circl.lu/sighting/9ff3cf49-4419-40a1-bd32-bd32f3e36b1f/export</link>
      <description>{"uuid": "9ff3cf49-4419-40a1-bd32-bd32f3e36b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15681", "type": "seen", "source": "https://t.me/cibsecurity/17440", "content": "\u203c CVE-2017-15681 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:02.000000Z"}</description>
      <content:encoded>{"uuid": "9ff3cf49-4419-40a1-bd32-bd32f3e36b1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15681", "type": "seen", "source": "https://t.me/cibsecurity/17440", "content": "\u203c CVE-2017-15681 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating system which can lead to RCE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:32:02.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9ff3cf49-4419-40a1-bd32-bd32f3e36b1f/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:32:02 +0000</pubDate>
    </item>
    <item>
      <title>693987cd-4e26-4664-98df-ff916b1b18dc</title>
      <link>https://vulnerability.circl.lu/sighting/693987cd-4e26-4664-98df-ff916b1b18dc/export</link>
      <description>{"uuid": "693987cd-4e26-4664-98df-ff916b1b18dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15686", "type": "seen", "source": "https://t.me/cibsecurity/17437", "content": "\u203c CVE-2017-15686 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users\u00e2\u20ac\u2122 cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:59.000000Z"}</description>
      <content:encoded>{"uuid": "693987cd-4e26-4664-98df-ff916b1b18dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15686", "type": "seen", "source": "https://t.me/cibsecurity/17437", "content": "\u203c CVE-2017-15686 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: Cross Site Scripting (XSS), which allows remote attackers to steal users\u00e2\u20ac\u2122 cookies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/693987cd-4e26-4664-98df-ff916b1b18dc/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:31:59 +0000</pubDate>
    </item>
    <item>
      <title>f4e4b030-f993-4da6-a068-f662a0808a7e</title>
      <link>https://vulnerability.circl.lu/sighting/f4e4b030-f993-4da6-a068-f662a0808a7e/export</link>
      <description>{"uuid": "f4e4b030-f993-4da6-a068-f662a0808a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15680", "type": "seen", "source": "https://t.me/cibsecurity/17436", "content": "\u203c CVE-2017-15680 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:55.000000Z"}</description>
      <content:encoded>{"uuid": "f4e4b030-f993-4da6-a068-f662a0808a7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15680", "type": "seen", "source": "https://t.me/cibsecurity/17436", "content": "\u203c CVE-2017-15680 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an IDOR vulnerability exists which allows unauthenticated attackers to view and modify administrative data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4e4b030-f993-4da6-a068-f662a0808a7e/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:31:55 +0000</pubDate>
    </item>
    <item>
      <title>830609e4-f055-45aa-b330-d98cce5910a3</title>
      <link>https://vulnerability.circl.lu/sighting/830609e4-f055-45aa-b330-d98cce5910a3/export</link>
      <description>{"uuid": "830609e4-f055-45aa-b330-d98cce5910a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15684", "type": "seen", "source": "https://t.me/cibsecurity/17434", "content": "\u203c CVE-2017-15684 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:54.000000Z"}</description>
      <content:encoded>{"uuid": "830609e4-f055-45aa-b330-d98cce5910a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15684", "type": "seen", "source": "https://t.me/cibsecurity/17434", "content": "\u203c CVE-2017-15684 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/830609e4-f055-45aa-b330-d98cce5910a3/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:31:54 +0000</pubDate>
    </item>
    <item>
      <title>a8a984c4-b381-4367-a16b-d166e4a2ea99</title>
      <link>https://vulnerability.circl.lu/sighting/a8a984c4-b381-4367-a16b-d166e4a2ea99/export</link>
      <description>{"uuid": "a8a984c4-b381-4367-a16b-d166e4a2ea99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15685", "type": "seen", "source": "https://t.me/cibsecurity/17432", "content": "\u203c CVE-2017-15685 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:52.000000Z"}</description>
      <content:encoded>{"uuid": "a8a984c4-b381-4367-a16b-d166e4a2ea99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15685", "type": "seen", "source": "https://t.me/cibsecurity/17432", "content": "\u203c CVE-2017-15685 \u203c\n\nCrafter CMS Crafter Studio 3.0.1 is affected by: XML External Entity (XXE). An unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-12-09T07:31:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a8a984c4-b381-4367-a16b-d166e4a2ea99/export</guid>
      <pubDate>Wed, 09 Dec 2020 07:31:52 +0000</pubDate>
    </item>
    <item>
      <title>c3a6297d-11c5-4a90-84b5-29338277ff39</title>
      <link>https://vulnerability.circl.lu/sighting/c3a6297d-11c5-4a90-84b5-29338277ff39/export</link>
      <description>{"uuid": "c3a6297d-11c5-4a90-84b5-29338277ff39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/16899", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:19.000000Z"}</description>
      <content:encoded>{"uuid": "c3a6297d-11c5-4a90-84b5-29338277ff39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15683", "type": "seen", "source": "https://t.me/cibsecurity/16899", "content": "\u203c CVE-2017-15683 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c3a6297d-11c5-4a90-84b5-29338277ff39/export</guid>
      <pubDate>Fri, 27 Nov 2020 20:50:19 +0000</pubDate>
    </item>
    <item>
      <title>e3051f7d-3e3c-4d15-bfeb-e846b9baaeda</title>
      <link>https://vulnerability.circl.lu/sighting/e3051f7d-3e3c-4d15-bfeb-e846b9baaeda/export</link>
      <description>{"uuid": "e3051f7d-3e3c-4d15-bfeb-e846b9baaeda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/16898", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:18.000000Z"}</description>
      <content:encoded>{"uuid": "e3051f7d-3e3c-4d15-bfeb-e846b9baaeda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-15682", "type": "seen", "source": "https://t.me/cibsecurity/16898", "content": "\u203c CVE-2017-15682 \u203c\n\nIn Crafter CMS Crafter Studio 3.0.1 an unauthenticated attacker is able to inject malicious JavaScript code resulting in a stored/blind XSS in the admin panel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-11-27T20:50:18.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e3051f7d-3e3c-4d15-bfeb-e846b9baaeda/export</guid>
      <pubDate>Fri, 27 Nov 2020 20:50:18 +0000</pubDate>
    </item>
  </channel>
</rss>
