EUVD-2026-30333

Nextcloud News is an RSS/Atom feed reader. Prior to 28.3.0-beta.1, Nextcloud News allows authenticated users to add feeds by providing a feed URL via the web interface or the API. In affected versions, an authenticated attacker could provide a URL pointing to internal/private IP ranges or...

CVE-2023-33107

creationtimestamp| type| source ---|---|--- 2023-10-03 19:17:46+00:00| exploited| Telegram/Rxu4zo-zqPtpxwJhXuMIjF4FHa6XqkwC7R1LNZHIISepQ 2023-10-03 19:23:21+00:00| exploited| https://t.me/KomunitiSiber/881 2023-10-04 13:13:09+00:00| seen| https://t.me/truesecator/4924 2023-11-24 13:41:56+00:00|...

CVE-2020-12641

creationtimestamp| type| source ---|---|--- 2023-06-22 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-06-28 19:04:46+00:00| seen| https://t.me/itsecnews/2805 2023-12-04 09:23:00+00:00| seen| https://t.me/arpsyndicate/1166 2024-12-24 20:34:37+00:00| seen|...

CVE-2020-0638

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-28 02:26:19+00:00| seen| https://t.me/arpsyndicate/2177 2024-12-24 20:31:10+00:00| seen|...

CVE-2017-6737

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:27:41+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971329 2025-02-23 02:10:16+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2026-02-02...

CVE-2016-2388

creationtimestamp| type| source ---|---|--- 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 16:21:14+00:00| seen| https://t.me/arpsyndicate/976 2024-12-24 20:32:28+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971660 2025-02-06 02:42:30+00:00| see...

CVE-2023-32315

creationtimestamp| type| source ---|---|--- 2023-05-29 08:24:40+00:00| published-proof-of-concept| https://t.me/proxybar/1546 2023-05-29 11:08:45+00:00| published-proof-of-concept| https://t.me/arvinclub1/271 2023-05-30 15:18:17+00:00| published-proof-of-concept| https://t.me/dilagrafie/3072...

CVE-2023-26360

creationtimestamp| type| source ---|---|--- 2023-03-15 07:54:44+00:00| exploited| https://t.me/kasperskyb2b/516 2023-03-16 06:41:59+00:00| exploited| https://t.me/KomunitiSiber/65 2023-03-16 06:47:18+00:00| exploited| https://t.me/thehackernews/3153 2023-04-04 15:51:44+00:00| seen|...

CVE-2021-24793

The WPeMatico RSS Feed Fetcher WordPress plugin before 2.6.12 does not escape the Feed URL added to a campaign before outputting it in an attribute, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2021-31166

creationtimestamp| type| source ---|---|--- 2021-05-12 13:59:45+00:00| seen| https://t.me/thehackernews/1212 2021-05-15 14:00:18+00:00| seen| https://t.me/HackerOne/3005 2021-05-17 06:35:10+00:00| published-proof-of-concept| https://t.me/cKure/5378 2021-05-17 12:23:36+00:00|...

CVE-2021-30666

creationtimestamp| type| source ---|---|--- 2021-05-04 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=579 2021-05-04 08:13:01+00:00| seen| https://t.me/cKure/5148 2021-09-08 18:42:44+00:00| exploited| https://t.me/cibsecurity/28487 2021-11-08 08:58:17+00:00| seen|...

CVE-2020-27950

creationtimestamp| type| source ---|---|--- 2020-11-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=524 2020-11-06 09:06:43+00:00| exploited| https://t.me/thehackernews/892 2020-11-06 10:46:03+00:00| exploited| https://t.me/truesecator/1121 2020-11-06 15:57:15+00:00|...

CVE-2020-4428

creationtimestamp| type| source ---|---|--- 2020-05-05 17:17:40+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ibmdrmrce.rb 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen|...

CVE-2020-3952

creationtimestamp| type| source ---|---|--- 2020-04-12 06:01:42+00:00| seen| https://t.me/informationsecuritychannel/36785 2020-04-13 15:30:02+00:00| seen| https://t.me/SecLabNews/7342 2020-04-16 09:08:53+00:00| published-proof-of-concept| https://t.me/techpwnews/434 2020-04-16 12:54:03+00:00|...

CVE-2020-8467

creationtimestamp| type| source ---|---|--- 2020-03-18 10:15:02+00:00| exploited| https://t.me/SecLabNews/7124 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 03:17:32+00:00| seen|...

CVE-2018-14847

creationtimestamp| type| source ---|---|--- 2018-09-04 08:51:50+00:00| seen| MISP/5b8e46ef-a8b4-4059-8c5c-4cc0950d210f 2018-09-04 16:19:46+00:00| exploited| https://t.me/SecLabNews/3063 2018-09-05 10:41:49+00:00| exploited| https://t.me/mtikpro/98 2018-09-05 16:12:57+00:00| exploited|...

CVE-2014-0130

creationtimestamp| type| source ---|---|--- 2018-06-30 21:50:00+00:00| published-proof-of-concept| https://t.me/cKure/160 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:47:53+00:00| seen| https://t.me/arpsyndicate/1372 2024-12-24 20:28:47+00:00| seen|...

CVE-2017-3881

creationtimestamp| type| source ---|---|--- 2017-03-29 08:04:52+00:00| seen| https://t.me/webamoozir/1465 2017-04-10 10:20:32+00:00| published-proof-of-concept| https://t.me/canyoupwnme/1171 2017-04-12 14:54:05+00:00| published-proof-of-concept| https://t.me/HackerOne/616 2018-05-29 15:50:33+00:0...

CVE-2012-0956

ubiquity-slideshow-ubuntu before 58.2, during installation, allows remote man-in-the-middle attackers to execute arbitrary web script or HTML and read arbitrary files via a crafted attribute in the tag of a Twitter feed...