https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 18 Jun 2026 06:21:58 +0000 https://vulnerability.circl.lu/sighting/54cf0bca-4cf7-4b14-80c6-8ba6e69aedae/export {"uuid": "54cf0bca-4cf7-4b14-80c6-8ba6e69aedae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48944", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lld7ipbs3y2k", "content": "", "creation_timestamp": "2025-03-27T02:03:49.196359Z"} {"uuid": "54cf0bca-4cf7-4b14-80c6-8ba6e69aedae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48944", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lld7ipbs3y2k", "content": "", "creation_timestamp": "2025-03-27T02:03:49.196359Z"} https://vulnerability.circl.lu/sighting/54cf0bca-4cf7-4b14-80c6-8ba6e69aedae/export Thu, 27 Mar 2025 02:03:49 +0000 https://vulnerability.circl.lu/sighting/b49b7877-77a6-45b9-aa65-91288335f1f7/export {"uuid": "b49b7877-77a6-45b9-aa65-91288335f1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48944", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48944\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke \"/kylin/api/xxx/diag\" api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the \"/kylin/api/xxx/diag\" api\n\nendpoint open for service.\n\n\nThis issue affects Apache Kylin: from 5.0.0 \nthrough \n\n5.0.1.\n\nUsers are recommended to upgrade to version 5.0.2, which fixes the issue.\n\ud83d\udccf Published: 2025-03-27T15:05:57.302Z\n\ud83d\udccf Modified: 2025-03-27T16:04:00.577Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/1xxxtdfh9hzqsqgb1pd9grb8hvqdyc9x", "creation_timestamp": "2025-03-27T16:27:05.000000Z"} {"uuid": "b49b7877-77a6-45b9-aa65-91288335f1f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-48944", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9139", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-48944\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Server-Side Request Forgery (SSRF) vulnerability in Apache Kylin. Through a kylin server, an attacker may forge a request to invoke \"/kylin/api/xxx/diag\" api on another internal host and possibly get leaked information. There are two preconditions: 1) The attacker has got admin access to a kylin server; 2) Another internal host has the \"/kylin/api/xxx/diag\" api\n\nendpoint open for service.\n\n\nThis issue affects Apache Kylin: from 5.0.0 \nthrough \n\n5.0.1.\n\nUsers are recommended to upgrade to version 5.0.2, which fixes the issue.\n\ud83d\udccf Published: 2025-03-27T15:05:57.302Z\n\ud83d\udccf Modified: 2025-03-27T16:04:00.577Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/1xxxtdfh9hzqsqgb1pd9grb8hvqdyc9x", "creation_timestamp": "2025-03-27T16:27:05.000000Z"} https://vulnerability.circl.lu/sighting/b49b7877-77a6-45b9-aa65-91288335f1f7/export Thu, 27 Mar 2025 16:27:05 +0000