https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 26 Jun 2026 02:46:12 +0000 https://vulnerability.circl.lu/sighting/55307a0b-e56d-488d-8dad-12f49f686e17/export {"uuid": "55307a0b-e56d-488d-8dad-12f49f686e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-29319", "type": "seen", "source": "https://t.me/cvedetector/108", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-29319 - Volmarg Personal Management System 1.4.64 is vulne\", \n \"Content\": \"CVE ID : CVE-2024-29319 \nPublished : July 5, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"05 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T18:46:03.000000Z"} {"uuid": "55307a0b-e56d-488d-8dad-12f49f686e17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-29319", "type": "seen", "source": "https://t.me/cvedetector/108", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-29319 - Volmarg Personal Management System 1.4.64 is vulne\", \n \"Content\": \"CVE ID : CVE-2024-29319 \nPublished : July 5, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"05 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T18:46:03.000000Z"} https://vulnerability.circl.lu/sighting/55307a0b-e56d-488d-8dad-12f49f686e17/export Fri, 05 Jul 2024 18:46:03 +0000 https://vulnerability.circl.lu/sighting/0da5ce2f-5b96-4684-b820-fddeae401d94/export {"uuid": "0da5ce2f-5b96-4684-b820-fddeae401d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-29318", "type": "seen", "source": "https://t.me/cvedetector/109", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-29318 - Volmarg Personal Management System 1.4.64 is vulne\", \n \"Content\": \"CVE ID : CVE-2024-29318 \nPublished : July 5, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"05 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T18:46:04.000000Z"} {"uuid": "0da5ce2f-5b96-4684-b820-fddeae401d94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-29318", "type": "seen", "source": "https://t.me/cvedetector/109", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-29318 - Volmarg Personal Management System 1.4.64 is vulne\", \n \"Content\": \"CVE ID : CVE-2024-29318 \nPublished : July 5, 2024, 4:15 p.m. | 26\u00a0minutes ago \nDescription : Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"05 Jul 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-05T18:46:04.000000Z"} https://vulnerability.circl.lu/sighting/0da5ce2f-5b96-4684-b820-fddeae401d94/export Fri, 05 Jul 2024 18:46:04 +0000 https://vulnerability.circl.lu/sighting/b9625061-497f-4b47-902e-1f4dbb36aa17/export {"uuid": "b9625061-497f-4b47-902e-1f4dbb36aa17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2931", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6452", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2931\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpfront_user_role_editor_assign_roles_user_autocomplete AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract retrieve a list of all user email addresses who are registered on the site.\n\ud83d\udccf Published: 2024-04-02T08:32:29.442Z\n\ud83d\udccf Modified: 2025-03-04T21:51:17.580Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/078a0647-fc3a-436c-bf00-8776b16e66ff?source=cve\n2. https://inky-knuckle-2c2.notion.site/WPFront-User-Role-Editor-Information-disclosure-7435b8340a004f5f8485cad375326b2c\n3. https://plugins.trac.wordpress.org/changeset/3061241/wpfront-user-role-editor/trunk/includes/users/class-assign-migrate.php", "creation_timestamp": "2025-03-04T22:33:25.000000Z"} {"uuid": "b9625061-497f-4b47-902e-1f4dbb36aa17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-2931", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6452", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-2931\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.1.11184 via the wpfront_user_role_editor_assign_roles_user_autocomplete AJAX action. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract retrieve a list of all user email addresses who are registered on the site.\n\ud83d\udccf Published: 2024-04-02T08:32:29.442Z\n\ud83d\udccf Modified: 2025-03-04T21:51:17.580Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/078a0647-fc3a-436c-bf00-8776b16e66ff?source=cve\n2. https://inky-knuckle-2c2.notion.site/WPFront-User-Role-Editor-Information-disclosure-7435b8340a004f5f8485cad375326b2c\n3. https://plugins.trac.wordpress.org/changeset/3061241/wpfront-user-role-editor/trunk/includes/users/class-assign-migrate.php", "creation_timestamp": "2025-03-04T22:33:25.000000Z"} https://vulnerability.circl.lu/sighting/b9625061-497f-4b47-902e-1f4dbb36aa17/export Tue, 04 Mar 2025 22:33:25 +0000