<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 09 Jun 2026 23:33:39 +0000</lastBuildDate>
    <item>
      <title>43ad68a2-3760-4ba8-8c3f-71504028caa1</title>
      <link>https://vulnerability.circl.lu/sighting/43ad68a2-3760-4ba8-8c3f-71504028caa1/export</link>
      <description>{"uuid": "43ad68a2-3760-4ba8-8c3f-71504028caa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42917", "type": "seen", "source": "https://t.me/cibsecurity/31566", "content": "\u203c CVE-2021-42917 \u203c\n\nBuffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-01T21:21:27.000000Z"}</description>
      <content:encoded>{"uuid": "43ad68a2-3760-4ba8-8c3f-71504028caa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42917", "type": "seen", "source": "https://t.me/cibsecurity/31566", "content": "\u203c CVE-2021-42917 \u203c\n\nBuffer overflow vulnerability in Kodi xbmc up to 19.0, allows attackers to cause a denial of service due to improper length of values passed to istream.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-11-01T21:21:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/43ad68a2-3760-4ba8-8c3f-71504028caa1/export</guid>
      <pubDate>Mon, 01 Nov 2021 21:21:27 +0000</pubDate>
    </item>
    <item>
      <title>68fff20d-3a13-4fa7-85f5-cb0254d384ba</title>
      <link>https://vulnerability.circl.lu/sighting/68fff20d-3a13-4fa7-85f5-cb0254d384ba/export</link>
      <description>{"uuid": "68fff20d-3a13-4fa7-85f5-cb0254d384ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42912", "type": "seen", "source": "https://t.me/cibsecurity/34151", "content": "\u203c CVE-2021-42912 \u203c\n\nFiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-16T20:36:13.000000Z"}</description>
      <content:encoded>{"uuid": "68fff20d-3a13-4fa7-85f5-cb0254d384ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42912", "type": "seen", "source": "https://t.me/cibsecurity/34151", "content": "\u203c CVE-2021-42912 \u203c\n\nFiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS command injection vulnerability. This vulnerability allows the attacker, once logged in, to send commands to the operating system as the root user via the ping diagnostic tool, bypassing the IP address field, and concatenating OS commands with a semicolon.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-12-16T20:36:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/68fff20d-3a13-4fa7-85f5-cb0254d384ba/export</guid>
      <pubDate>Thu, 16 Dec 2021 20:36:13 +0000</pubDate>
    </item>
    <item>
      <title>d6382363-8195-448c-8c2d-1c576fbfb092</title>
      <link>https://vulnerability.circl.lu/sighting/d6382363-8195-448c-8c2d-1c576fbfb092/export</link>
      <description>{"uuid": "d6382363-8195-448c-8c2d-1c576fbfb092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42911", "type": "seen", "source": "https://t.me/cibsecurity/39780", "content": "\u203c CVE-2021-42911 \u203c\n\nA Format String vulnerability exists in DrayTek Vigor 2960 &amp;lt;= 1.5.1.3, DrayTek Vigor 3900 &amp;lt;= 1.5.1.3, and DrayTek Vigor 300B &amp;lt;= 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-30T00:11:36.000000Z"}</description>
      <content:encoded>{"uuid": "d6382363-8195-448c-8c2d-1c576fbfb092", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-42911", "type": "seen", "source": "https://t.me/cibsecurity/39780", "content": "\u203c CVE-2021-42911 \u203c\n\nA Format String vulnerability exists in DrayTek Vigor 2960 &amp;lt;= 1.5.1.3, DrayTek Vigor 3900 &amp;lt;= 1.5.1.3, and DrayTek Vigor 300B &amp;lt;= 1.5.1.3 in the mainfunction.cgi file via a crafted HTTP message containing malformed QUERY STRING, which could let a remote malicious user execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-30T00:11:36.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d6382363-8195-448c-8c2d-1c576fbfb092/export</guid>
      <pubDate>Wed, 30 Mar 2022 00:11:36 +0000</pubDate>
    </item>
  </channel>
</rss>
