<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T11:05:28.188415+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8f8adc74-4358-4a33-ab0c-8dfe7057d48b/export</id>
    <title>8f8adc74-4358-4a33-ab0c-8dfe7057d48b</title>
    <updated>2026-09-17T11:05:28.210303+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8f8adc74-4358-4a33-ab0c-8dfe7057d48b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37042", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:07.759918Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8f8adc74-4358-4a33-ab0c-8dfe7057d48b/export"/>
    <published>2026-09-17T10:15:07.759918+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f4a7cc7d-f8dc-41eb-aa25-218a0b6088a6/export</id>
    <title>f4a7cc7d-f8dc-41eb-aa25-218a0b6088a6</title>
    <updated>2026-09-17T11:05:28.213247+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f4a7cc7d-f8dc-41eb-aa25-218a0b6088a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37042", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:08.623287Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f4a7cc7d-f8dc-41eb-aa25-218a0b6088a6/export"/>
    <published>2026-09-15T10:15:08.623287+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e8771938-4df0-4830-a749-ac68336e96dc/export</id>
    <title>e8771938-4df0-4830-a749-ac68336e96dc</title>
    <updated>2026-09-17T11:05:28.213379+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e8771938-4df0-4830-a749-ac68336e96dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37042", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:15:38.328419Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e8771938-4df0-4830-a749-ac68336e96dc/export"/>
    <published>2026-09-11T10:15:38.328419+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/743b61ef-0822-4977-83f4-fdfa1ce61b6c/export</id>
    <title>743b61ef-0822-4977-83f4-fdfa1ce61b6c</title>
    <updated>2026-09-17T11:05:28.213484+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "743b61ef-0822-4977-83f4-fdfa1ce61b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-&amp;gt; https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-11T00:00:57.017368Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/743b61ef-0822-4977-83f4-fdfa1ce61b6c/export"/>
    <published>2026-09-11T00:00:57.017368+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/993affb0-09d7-4cb7-bd45-261add6c9aa8/export</id>
    <title>993affb0-09d7-4cb7-bd45-261add6c9aa8</title>
    <updated>2026-09-17T11:05:28.213599+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "993affb0-09d7-4cb7-bd45-261add6c9aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-11T00:00:54.574342Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/993affb0-09d7-4cb7-bd45-261add6c9aa8/export"/>
    <published>2026-09-11T00:00:54.574342+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d7ca4f2f-f190-47dc-9a8a-36f06d1cf2e5/export</id>
    <title>d7ca4f2f-f190-47dc-9a8a-36f06d1cf2e5</title>
    <updated>2026-09-17T11:05:28.213704+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d7ca4f2f-f190-47dc-9a8a-36f06d1cf2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3786", "type": "seen", "source": "https://t.me/cissp/6298", "content": "Nothing CRITICAL this time!\nOpenSSL has released patches for 2 new high-severity flaws (CVE-2022-3786 / CVE-2022-3602).\n\nhttps://thehackernews.com/2022/11/just-in-openssl-releases-patch-for-2.html\n\nCVE-2022-3602 has been downgraded from CRITICAL to HIGH as it cannot be exploited in most widely used architectures and platforms.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.10", "creation_timestamp": "2026-09-11T00:00:50.716501Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d7ca4f2f-f190-47dc-9a8a-36f06d1cf2e5/export"/>
    <published>2026-09-11T00:00:50.716501+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e2b61594-e0af-4862-b1ac-c7914174c83d/export</id>
    <title>e2b61594-e0af-4862-b1ac-c7914174c83d</title>
    <updated>2026-09-17T11:05:28.213802+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e2b61594-e0af-4862-b1ac-c7914174c83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37969", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6206", "content": "exploit\n1. CVE-2021-46422:\nTelesquare SDT-CW3B1 - OS command injection vulnerability\nhttps://github.com/Awei507/CVE-2021-46422\n\n2. CVE-2022-37969:\nTechnical Analysis of Windows CLFS Zero-Day Vulnerability\nhttps://www.zscaler.com/blogs/security-research/technical-analysis-windows-clfs-zero-day-vulnerability-cve-2022-37969-part\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.25", "creation_timestamp": "2026-09-11T00:00:50.128277Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e2b61594-e0af-4862-b1ac-c7914174c83d/export"/>
    <published>2026-09-11T00:00:50.128277+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/60715200-dd5e-4236-b22e-c41ca0b395c0/export</id>
    <title>60715200-dd5e-4236-b22e-c41ca0b395c0</title>
    <updated>2026-09-17T11:05:28.213901+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "60715200-dd5e-4236-b22e-c41ca0b395c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3786", "type": "seen", "source": "https://t.me/cissp/6298", "content": "Nothing CRITICAL this time!\nOpenSSL has released patches for 2 new high-severity flaws (CVE-2022-3786 / CVE-2022-3602).\n\nhttps://thehackernews.com/2022/11/just-in-openssl-releases-patch-for-2.html\n\nCVE-2022-3602 has been downgraded from CRITICAL to HIGH as it cannot be exploited in most widely used architectures and platforms.\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.10", "creation_timestamp": "2026-09-10T06:00:05.939151Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/60715200-dd5e-4236-b22e-c41ca0b395c0/export"/>
    <published>2026-09-10T06:00:05.939151+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f9249c9a-7e93-436a-9ce9-100162f8a1f2/export</id>
    <title>f9249c9a-7e93-436a-9ce9-100162f8a1f2</title>
    <updated>2026-09-17T11:05:28.213993+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f9249c9a-7e93-436a-9ce9-100162f8a1f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37969", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6206", "content": "exploit\n1. CVE-2021-46422:\nTelesquare SDT-CW3B1 - OS command injection vulnerability\nhttps://github.com/Awei507/CVE-2021-46422\n\n2. CVE-2022-37969:\nTechnical Analysis of Windows CLFS Zero-Day Vulnerability\nhttps://www.zscaler.com/blogs/security-research/technical-analysis-windows-clfs-zero-day-vulnerability-cve-2022-37969-part\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.25", "creation_timestamp": "2026-09-10T06:00:05.341213Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f9249c9a-7e93-436a-9ce9-100162f8a1f2/export"/>
    <published>2026-09-10T06:00:05.341213+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a242fef5-8d67-4cdd-8b49-008d15355840/export</id>
    <title>a242fef5-8d67-4cdd-8b49-008d15355840</title>
    <updated>2026-09-17T11:05:28.214088+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a242fef5-8d67-4cdd-8b49-008d15355840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-10T03:00:04.992517Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a242fef5-8d67-4cdd-8b49-008d15355840/export"/>
    <published>2026-09-10T03:00:04.992517+00:00</published>
  </entry>
</feed>
