<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sun, 11 Oct 2026 05:48:02 +0000</lastBuildDate>
    <item>
      <title>91d6dd48-0580-414d-8172-8efa935fba5d</title>
      <link>https://vulnerability.circl.lu/sighting/91d6dd48-0580-414d-8172-8efa935fba5d/export</link>
      <description>{"uuid": "91d6dd48-0580-414d-8172-8efa935fba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40604", "type": "published-proof-of-concept", "source": "https://t.me/ptswarm/131", "content": "\ud83d\ude92Invision Community fixed an SSRF vulnerability (CVE-2021-40604) found by Mikhail Klyuchnikov!\n\nTimeline:\n\u2705 06/23/2021 - The advisory is published\n\ud83d\ude12 06/24/2021 - Requested CVE via MITRE\n\ud83d\ude00 06/13/2022 - CVE was assigned\n\nThe PoC\u2b06\ufe0f\n\nThe \"gkey\" param is an unfollow token.", "creation_timestamp": "2022-06-17T14:20:32.000000Z"}</description>
      <content:encoded>{"uuid": "91d6dd48-0580-414d-8172-8efa935fba5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40604", "type": "published-proof-of-concept", "source": "https://t.me/ptswarm/131", "content": "\ud83d\ude92Invision Community fixed an SSRF vulnerability (CVE-2021-40604) found by Mikhail Klyuchnikov!\n\nTimeline:\n\u2705 06/23/2021 - The advisory is published\n\ud83d\ude12 06/24/2021 - Requested CVE via MITRE\n\ud83d\ude00 06/13/2022 - CVE was assigned\n\nThe PoC\u2b06\ufe0f\n\nThe \"gkey\" param is an unfollow token.", "creation_timestamp": "2022-06-17T14:20:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/91d6dd48-0580-414d-8172-8efa935fba5d/export</guid>
      <pubDate>Fri, 17 Jun 2022 14:20:32 +0000</pubDate>
    </item>
    <item>
      <title>d56abd61-a387-4497-ad80-24782ba51c0f</title>
      <link>https://vulnerability.circl.lu/sighting/d56abd61-a387-4497-ad80-24782ba51c0f/export</link>
      <description>{"uuid": "d56abd61-a387-4497-ad80-24782ba51c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40604", "type": "seen", "source": "https://t.me/cibsecurity/44333", "content": "\u203c CVE-2021-40604 \u203c\n\nA Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T22:22:09.000000Z"}</description>
      <content:encoded>{"uuid": "d56abd61-a387-4497-ad80-24782ba51c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-40604", "type": "seen", "source": "https://t.me/cibsecurity/44333", "content": "\u203c CVE-2021-40604 \u203c\n\nA Server-Side Request Forgery (SSRF) vulnerability in IPS Community Suite before 4.6.2 allows remote authenticated users to request arbitrary URLs or trigger deserialization via phar protocol when generating class names dynamically. In some cases an exploitation is possible by an unauthenticated user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T22:22:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d56abd61-a387-4497-ad80-24782ba51c0f/export</guid>
      <pubDate>Mon, 13 Jun 2022 22:22:09 +0000</pubDate>
    </item>
  </channel>
</rss>
