<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T12:06:59.322212+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b55edcc8-2971-4221-95b0-76e86f1c533b/export</id>
    <title>b55edcc8-2971-4221-95b0-76e86f1c533b</title>
    <updated>2026-09-17T12:06:59.337957+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b55edcc8-2971-4221-95b0-76e86f1c533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:08.003835Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b55edcc8-2971-4221-95b0-76e86f1c533b/export"/>
    <published>2026-09-17T10:15:08.003835+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/47f0e52c-e74a-4254-aa60-e1e971da292d/export</id>
    <title>47f0e52c-e74a-4254-aa60-e1e971da292d</title>
    <updated>2026-09-17T12:06:59.340022+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "47f0e52c-e74a-4254-aa60-e1e971da292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:09.516173Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/47f0e52c-e74a-4254-aa60-e1e971da292d/export"/>
    <published>2026-09-16T10:15:09.516173+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ebc0e885-f109-4339-a9cd-80367c67f31e/export</id>
    <title>ebc0e885-f109-4339-a9cd-80367c67f31e</title>
    <updated>2026-09-17T12:06:59.340151+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ebc0e885-f109-4339-a9cd-80367c67f31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:08.248867Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ebc0e885-f109-4339-a9cd-80367c67f31e/export"/>
    <published>2026-09-15T10:15:08.248867+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/098acf70-5fa0-46ba-9834-8ae7cb46ff9e/export</id>
    <title>098acf70-5fa0-46ba-9834-8ae7cb46ff9e</title>
    <updated>2026-09-17T12:06:59.340253+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "098acf70-5fa0-46ba-9834-8ae7cb46ff9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:09.089242Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/098acf70-5fa0-46ba-9834-8ae7cb46ff9e/export"/>
    <published>2026-09-13T10:00:09.089242+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4d949ef6-595a-4772-af1a-d2823cc6ca69/export</id>
    <title>4d949ef6-595a-4772-af1a-d2823cc6ca69</title>
    <updated>2026-09-17T12:06:59.340352+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4d949ef6-595a-4772-af1a-d2823cc6ca69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:03.597485Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4d949ef6-595a-4772-af1a-d2823cc6ca69/export"/>
    <published>2026-09-11T10:00:03.597485+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34c5b0f3-b4bb-45e0-831a-9ff829693d65/export</id>
    <title>34c5b0f3-b4bb-45e0-831a-9ff829693d65</title>
    <updated>2026-09-17T12:06:59.340454+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "34c5b0f3-b4bb-45e0-831a-9ff829693d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-11T00:00:54.778527Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34c5b0f3-b4bb-45e0-831a-9ff829693d65/export"/>
    <published>2026-09-11T00:00:54.778527+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a704a5e-90f1-454e-92e2-bee9b541cde3/export</id>
    <title>9a704a5e-90f1-454e-92e2-bee9b541cde3</title>
    <updated>2026-09-17T12:06:59.340560+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a704a5e-90f1-454e-92e2-bee9b541cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress &amp;lt;1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-11T00:00:50.990075Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a704a5e-90f1-454e-92e2-bee9b541cde3/export"/>
    <published>2026-09-11T00:00:50.990075+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b57c1c45-5475-4b4c-91c0-6ff9ce428741/export</id>
    <title>b57c1c45-5475-4b4c-91c0-6ff9ce428741</title>
    <updated>2026-09-17T12:06:59.340662+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b57c1c45-5475-4b4c-91c0-6ff9ce428741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-11T00:00:50.304063Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b57c1c45-5475-4b4c-91c0-6ff9ce428741/export"/>
    <published>2026-09-11T00:00:50.304063+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/88ee07d2-3762-4e98-ae27-a93a21955e43/export</id>
    <title>88ee07d2-3762-4e98-ae27-a93a21955e43</title>
    <updated>2026-09-17T12:06:59.340764+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "88ee07d2-3762-4e98-ae27-a93a21955e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-11T00:00:49.891904Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/88ee07d2-3762-4e98-ae27-a93a21955e43/export"/>
    <published>2026-09-11T00:00:49.891904+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/93414137-d7e0-4f68-a1af-63ec745e471c/export</id>
    <title>93414137-d7e0-4f68-a1af-63ec745e471c</title>
    <updated>2026-09-17T12:06:59.340860+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cve.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "93414137-d7e0-4f68-a1af-63ec745e471c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:11.035440Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/93414137-d7e0-4f68-a1af-63ec745e471c/export"/>
    <published>2026-09-10T10:15:11.035440+00:00</published>
  </entry>
</feed>
