https://vulnerability.circl.lu/sightings/feed 2026-06-12T03:56:40.114074+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/8b025047-6890-4ba3-a09f-15cda24c35c1/export 2026-06-12T03:56:40.545013+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "8b025047-6890-4ba3-a09f-15cda24c35c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27580", "type": "seen", "source": "https://t.me/cibsecurity/46570", "content": "\u203c CVE-2022-27580 \u203c\n\nA deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions up to and including 1.11.0 allows an attacker to craft malicious project files. Opening/importing such a malicious project file would execute arbitrary code with the privileges of the current user when opened or imported by the Safety Designer. This compromises confidentiality integrity and availability. For the attack to succeed a user must manually open a malicious project file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-19T20:41:03.000000Z"} 2022-07-19T20:41:03+00:00 https://vulnerability.circl.lu/sighting/4979878e-c966-46fa-b78e-137684056a9a/export 2026-06-12T03:56:40.542868+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "4979878e-c966-46fa-b78e-137684056a9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2758", "type": "seen", "source": "https://t.me/cibsecurity/49117", "content": "\u203c CVE-2022-2758 \u203c\n\nAll versions of LS Industrial Systems (LSIS) Co. Ltd LS Electric PLCs and XG5000 PLC programming software are affected where passwords are not adequately encrypted during the communication process between the XG5000 software and the affected PLC. This would allow an attacker to identify and decrypt the affected PLC\u00e2\u20ac\u2122s password by sniffing the traffic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-31T20:37:07.000000Z"} 2022-08-31T20:37:07+00:00