https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 12 Aug 2026 23:41:57 +0000 https://vulnerability.circl.lu/sighting/f67f7186-58de-4dc7-9d96-8875acb326c2/export {"uuid": "f67f7186-58de-4dc7-9d96-8875acb326c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpr57hpbnm2l", "content": "\ud83d\udccc CVE-2024-44625 - Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. https://www.cyberhub.blog/cves/CVE-2024-44625", "creation_timestamp": "2026-07-03T18:07:06.633894Z"} {"uuid": "f67f7186-58de-4dc7-9d96-8875acb326c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpr57hpbnm2l", "content": "\ud83d\udccc CVE-2024-44625 - Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go. https://www.cyberhub.blog/cves/CVE-2024-44625", "creation_timestamp": "2026-07-03T18:07:06.633894Z"} https://vulnerability.circl.lu/sighting/f67f7186-58de-4dc7-9d96-8875acb326c2/export Fri, 03 Jul 2026 18:07:06 +0000 https://vulnerability.circl.lu/sighting/3805dfb9-7394-4404-a8bc-080710b62a34/export {"uuid": "3805dfb9-7394-4404-a8bc-080710b62a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"} {"uuid": "3805dfb9-7394-4404-a8bc-080710b62a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "MISP/dd71e3c5-20f7-409a-8bcc-8df3cd8022a7", "content": "", "creation_timestamp": "2025-09-03T13:30:06.000000Z"} https://vulnerability.circl.lu/sighting/3805dfb9-7394-4404-a8bc-080710b62a34/export Wed, 03 Sep 2025 13:30:06 +0000 https://vulnerability.circl.lu/sighting/bf08c3d7-2856-4fa3-888e-64563ecfe22e/export {"uuid": "bf08c3d7-2856-4fa3-888e-64563ecfe22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11640", "content": "#WebApp_Security\n1. Unpatched RCE in Gogs (CVE-2024-44625)\nhttps://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs\n2. From Arbitrary File Write to RCE in Restricted Rails apps\nhttps://blog.convisoappsec.com/en/from-arbitrary-file-write-to-rce-in-restricted-rails-apps", "creation_timestamp": "2025-01-04T08:18:58.000000Z"} {"uuid": "bf08c3d7-2856-4fa3-888e-64563ecfe22e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11640", "content": "#WebApp_Security\n1. Unpatched RCE in Gogs (CVE-2024-44625)\nhttps://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs\n2. From Arbitrary File Write to RCE in Restricted Rails apps\nhttps://blog.convisoappsec.com/en/from-arbitrary-file-write-to-rce-in-restricted-rails-apps", "creation_timestamp": "2025-01-04T08:18:58.000000Z"} https://vulnerability.circl.lu/sighting/bf08c3d7-2856-4fa3-888e-64563ecfe22e/export Sat, 04 Jan 2025 08:18:58 +0000 https://vulnerability.circl.lu/sighting/5892b38a-a270-4fd2-9008-57430aa23812/export {"uuid": "5892b38a-a270-4fd2-9008-57430aa23812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/301", "content": "https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/\n\nUnpatched Remote Code Execution in Gogs\n\nhttps://github.com/Fysac/CVE-2024-44625\n\n#github #\u5206\u6790 #poc", "creation_timestamp": "2025-01-04T03:06:33.000000Z"} {"uuid": "5892b38a-a270-4fd2-9008-57430aa23812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "published-proof-of-concept", "source": "https://t.me/ckeArsenal/301", "content": "https://fysac.github.io/posts/2024/11/unpatched-remote-code-execution-in-gogs/\n\nUnpatched Remote Code Execution in Gogs\n\nhttps://github.com/Fysac/CVE-2024-44625\n\n#github #\u5206\u6790 #poc", "creation_timestamp": "2025-01-04T03:06:33.000000Z"} https://vulnerability.circl.lu/sighting/5892b38a-a270-4fd2-9008-57430aa23812/export Sat, 04 Jan 2025 03:06:33 +0000 https://vulnerability.circl.lu/sighting/db8f0d76-a7f0-462d-97a0-e26fc6657d44/export {"uuid": "db8f0d76-a7f0-462d-97a0-e26fc6657d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://t.me/cvedetector/11122", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-44625 - Gogs Directory Traversal Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-44625 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : Gogs <=0.13.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"15 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:49.000000Z"} {"uuid": "db8f0d76-a7f0-462d-97a0-e26fc6657d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44625", "type": "seen", "source": "https://t.me/cvedetector/11122", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-44625 - Gogs Directory Traversal Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-44625 \nPublished : Nov. 15, 2024, 5:15 p.m. | 41\u00a0minutes ago \nDescription : Gogs <=0.13.0\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"15 Nov 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-15T19:07:49.000000Z"} https://vulnerability.circl.lu/sighting/db8f0d76-a7f0-462d-97a0-e26fc6657d44/export Fri, 15 Nov 2024 19:07:49 +0000 https://vulnerability.circl.lu/sighting/41ccd11b-45ba-4abc-8554-ec012b65a787/export {"uuid": "41ccd11b-45ba-4abc-8554-ec012b65a787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11202", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769\n\n4. CVE-2024-45519: \nZimbra SMTP RCE\nhttps://blog.projectdiscovery.io/zimbra-remote-code-execution\n]-> https://github.com/p33d/CVE-2024-45519", "creation_timestamp": "2024-11-01T03:20:06.000000Z"} {"uuid": "41ccd11b-45ba-4abc-8554-ec012b65a787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11202", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769\n\n4. CVE-2024-45519: \nZimbra SMTP RCE\nhttps://blog.projectdiscovery.io/zimbra-remote-code-execution\n]-> https://github.com/p33d/CVE-2024-45519", "creation_timestamp": "2024-11-01T03:20:06.000000Z"} https://vulnerability.circl.lu/sighting/41ccd11b-45ba-4abc-8554-ec012b65a787/export Fri, 01 Nov 2024 03:20:06 +0000 https://vulnerability.circl.lu/sighting/22501af5-8058-4f3e-b26f-b20d34b243d3/export {"uuid": "22501af5-8058-4f3e-b26f-b20d34b243d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1582", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:48.000000Z"} {"uuid": "22501af5-8058-4f3e-b26f-b20d34b243d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/1582", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:48.000000Z"} https://vulnerability.circl.lu/sighting/22501af5-8058-4f3e-b26f-b20d34b243d3/export Wed, 02 Oct 2024 16:38:48 +0000 https://vulnerability.circl.lu/sighting/58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1/export {"uuid": "58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4904", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:47.000000Z"} {"uuid": "58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/4904", "content": "#exploit\n1. CVE-2024-45489:\nArc Browser RCE in JavaScript Boosts\nhttps://kibty.town/blog/arc\n\n2. CVE-2024-44623:\nBlind RCE issue(SPX-GC) in SPX-GC\nhttps://github.com/merbinr/CVE-2024-44623\n\n3. CVE-2024-6769:\nPoisoning the activation cache to elevate from medium to high integrity in Windows 10/11/Srv2019/Srv2022\nhttps://github.com/fortra/CVE-2024-6769", "creation_timestamp": "2024-10-02T16:38:47.000000Z"} https://vulnerability.circl.lu/sighting/58a940b7-1fe2-4e3f-bbc7-2cd27c2647f1/export Wed, 02 Oct 2024 16:38:47 +0000 https://vulnerability.circl.lu/sighting/a95d0e12-fa36-4b2e-84ca-2579239cb8f7/export {"uuid": "a95d0e12-fa36-4b2e-84ca-2579239cb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3239", "content": "https://github.com/merbinr/CVE-2024-44623\n\nDetails about the Blind RCE issue(SPX-GC) in SPX-GC CVE-2024-44623\n#github #poc", "creation_timestamp": "2024-09-29T09:31:09.000000Z"} {"uuid": "a95d0e12-fa36-4b2e-84ca-2579239cb8f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/3239", "content": "https://github.com/merbinr/CVE-2024-44623\n\nDetails about the Blind RCE issue(SPX-GC) in SPX-GC CVE-2024-44623\n#github #poc", "creation_timestamp": "2024-09-29T09:31:09.000000Z"} https://vulnerability.circl.lu/sighting/a95d0e12-fa36-4b2e-84ca-2579239cb8f7/export Sun, 29 Sep 2024 09:31:09 +0000 https://vulnerability.circl.lu/sighting/f971c31b-cea3-4086-9fe2-438b730de04c/export {"uuid": "f971c31b-cea3-4086-9fe2-438b730de04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "seen", "source": "https://t.me/cvedetector/5731", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-44623 - TuomoKu SPx-GC Remote Code Execution Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-44623 \nPublished : Sept. 16, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T18:42:15.000000Z"} {"uuid": "f971c31b-cea3-4086-9fe2-438b730de04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-44623", "type": "seen", "source": "https://t.me/cvedetector/5731", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-44623 - TuomoKu SPx-GC Remote Code Execution Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-44623 \nPublished : Sept. 16, 2024, 4:15 p.m. | 23\u00a0minutes ago \nDescription : An issue in TuomoKu SPx-GC v.1.3.0 and before allows a remote attacker to execute arbitrary code via the child_process.js function. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"16 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-16T18:42:15.000000Z"} https://vulnerability.circl.lu/sighting/f971c31b-cea3-4086-9fe2-438b730de04c/export Mon, 16 Sep 2024 18:42:15 +0000