<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-08-12T23:41:56.298798+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f67f7186-58de-4dc7-9d96-8875acb326c2/export</id>
    <title>f67f7186-58de-4dc7-9d96-8875acb326c2</title>
    <updated>2026-08-12T23:41:56.324300+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f67f7186-58de-4dc7-9d96-8875acb326c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpr57hpbnm2l", "content": "\ud83d\udccc CVE-2024-44625 - Gogs &amp;lt;=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. https://www.cyberhub.blog/cves/CVE-2024-44625", "creation_timestamp": "2026-07-03T18:07:06.633894Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f67f7186-58de-4dc7-9d96-8875acb326c2/export"/>
    <published>2026-07-03T18:07:06.633894+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3805dfb9-7394-4404-a8bc-080710b62a34/export</id>
    <title>3805dfb9-7394-4404-a8bc-080710b62a34</title>
    <updated>2026-08-12T23:41:56.325698+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3805dfb9-7394-4404-a8bc-080710b62a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3805dfb9-7394-4404-a8bc-080710b62a34/export"/>
    <published>2025-09-03T13:30:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bf08c3d7-2856-4fa3-888e-64563ecfe22e/export</id>
    <title>bf08c3d7-2856-4fa3-888e-64563ecfe22e</title>
    <updated>2026-08-12T23:41:56.325787+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bf08c3d7-2856-4fa3-888e-64563ecfe22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11640", "content": "#WebApp_Security\n1. Unpatched RCE in Gogs (CVE-2024-44625)\nhttps://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs\n2. From Arbitrary File Write to RCE in Restricted Rails apps\nhttps://blog.convisoappsec.com/en/from-arbitrary-file-write-to-rce-in-restricted-rails-apps", "creation_timestamp": "2025-01-04T08:18:58.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bf08c3d7-2856-4fa3-888e-64563ecfe22e/export"/>
    <published>2025-01-04T08:18:58+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5892b38a-a270-4fd2-9008-57430aa23812/export</id>
    <title>5892b38a-a270-4fd2-9008-57430aa23812</title>
    <updated>2026-08-12T23:41:56.325854+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5892b38a-a270-4fd2-9008-57430aa23812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/301", "content": "https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/\n\nUnpatched Remote Code Execution in Gogs\n\nhttps://github.com/Fysac/CVE-2024-44625\n\n#github #\u5206\u6790 #poc", "creation_timestamp": "2025-01-04T03:06:33.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5892b38a-a270-4fd2-9008-57430aa23812/export"/>
    <published>2025-01-04T03:06:33+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/db8f0d76-a7f0-462d-97a0-e26fc6657d44/export</id>
    <title>db8f0d76-a7f0-462d-97a0-e26fc6657d44</title>
    <updated>2026-08-12T23:41:56.325918+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "db8f0d76-a7f0-462d-97a0-e26fc6657d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://t.me/cvedetector/11122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-44625 - Gogs Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-44625 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : Gogs &amp;lt;=0.13.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:49.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/db8f0d76-a7f0-462d-97a0-e26fc6657d44/export"/>
    <published>2024-11-15T19:07:49+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/41ccd11b-45ba-4abc-8554-ec012b65a787/export</id>
    <title>41ccd11b-45ba-4abc-8554-ec012b65a787</title>
    <updated>2026-08-12T23:41:56.325985+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "41ccd11b-45ba-4abc-8554-ec012b65a787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11202", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769\n\n4. CVE-2024-45519: \nZimbra SMTP RCE\nhttps://blog.projectdiscovery.io/zimbra-remote-code-execution\n]-&amp;gt; https://github.com/p33d/CVE-2024-45519", "creation_timestamp": "2024-11-01T03:20:06.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/41ccd11b-45ba-4abc-8554-ec012b65a787/export"/>
    <published>2024-11-01T03:20:06+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/22501af5-8058-4f3e-b26f-b20d34b243d3/export</id>
    <title>22501af5-8058-4f3e-b26f-b20d34b243d3</title>
    <updated>2026-08-12T23:41:56.326046+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "22501af5-8058-4f3e-b26f-b20d34b243d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1582", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:48.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/22501af5-8058-4f3e-b26f-b20d34b243d3/export"/>
    <published>2024-10-02T16:38:48+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1/export</id>
    <title>58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1</title>
    <updated>2026-08-12T23:41:56.326110+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4904", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:47.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1/export"/>
    <published>2024-10-02T16:38:47+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a95d0e12-fa36-4b2e-84ca-2579239cb8f7/export</id>
    <title>a95d0e12-fa36-4b2e-84ca-2579239cb8f7</title>
    <updated>2026-08-12T23:41:56.326174+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a95d0e12-fa36-4b2e-84ca-2579239cb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3239", "content": "https://github.com/merbinr/CVE-2024-44623\n\nDetails about the Blind RCE issue(SPX-GC) in SPX-GC CVE-2024-44623\n#github #poc", "creation_timestamp": "2024-09-29T09:31:09.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a95d0e12-fa36-4b2e-84ca-2579239cb8f7/export"/>
    <published>2024-09-29T09:31:09+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f971c31b-cea3-4086-9fe2-438b730de04c/export</id>
    <title>f971c31b-cea3-4086-9fe2-438b730de04c</title>
    <updated>2026-08-12T23:41:56.326236+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f971c31b-cea3-4086-9fe2-438b730de04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "seen", "source": "https://t.me/cvedetector/5731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-44623 - TuomoKu SPx-GC Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-44623 \nPublished : Sept. 16, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T18:42:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f971c31b-cea3-4086-9fe2-438b730de04c/export"/>
    <published>2024-09-16T18:42:15+00:00</published>
  </entry>
</feed>
