https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 27 Jun 2026 19:36:50 +0000 https://vulnerability.circl.lu/sighting/2c6df3a0-c09e-4e76-ace6-a52e6fe2997d/export {"uuid": "2c6df3a0-c09e-4e76-ace6-a52e6fe2997d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636619774435599", "content": "", "creation_timestamp": "2024-12-11T22:46:51.469779Z"} {"uuid": "2c6df3a0-c09e-4e76-ace6-a52e6fe2997d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55652", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113636619774435599", "content": "", "creation_timestamp": "2024-12-11T22:46:51.469779Z"} https://vulnerability.circl.lu/sighting/2c6df3a0-c09e-4e76-ace6-a52e6fe2997d/export Wed, 11 Dec 2024 22:46:51 +0000 https://vulnerability.circl.lu/sighting/3586f5b8-2d7f-4523-a65c-a8da9daebd86/export {"uuid": "3586f5b8-2d7f-4523-a65c-a8da9daebd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55652", "type": "seen", "source": "https://t.me/cvedetector/12672", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-55652 - PenDoc JavaScript Sandbox Escape\", \n \"Content\": \"CVE ID : CVE-2024-55652 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : PenDoc is a penetration testing reporting application. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker can write a malicious docx template containing expressions that escape the JavaScript sandbox to execute arbitrary code on the system. An attacker who can control the contents of the template document is able to execute arbitrary code on the system. By default, only users with the `admin` role are able to create or update templates. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 patches the issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"12 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:57.000000Z"} {"uuid": "3586f5b8-2d7f-4523-a65c-a8da9daebd86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-55652", "type": "seen", "source": "https://t.me/cvedetector/12672", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-55652 - PenDoc JavaScript Sandbox Escape\", \n \"Content\": \"CVE ID : CVE-2024-55652 \nPublished : Dec. 12, 2024, 2:15 a.m. | 27\u00a0minutes ago \nDescription : PenDoc is a penetration testing reporting application. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an attacker can write a malicious docx template containing expressions that escape the JavaScript sandbox to execute arbitrary code on the system. An attacker who can control the contents of the template document is able to execute arbitrary code on the system. By default, only users with the `admin` role are able to create or update templates. Commit 1d4219c596f4f518798492e48386a20c6e9a2fe6 patches the issue. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"12 Dec 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-12T03:46:57.000000Z"} https://vulnerability.circl.lu/sighting/3586f5b8-2d7f-4523-a65c-a8da9daebd86/export Thu, 12 Dec 2024 03:46:57 +0000