https://vulnerability.circl.lu/sightings/feed 2026-08-16T17:54:48.226248+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4/export 2026-08-16T17:54:48.242877+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3227", "type": "seen", "source": "https://t.me/Dooztoria/22", "content": "\ud83c\udf65 Overview of Vulnerable Endpoints in WordPress Applications\n\n cves path\n \nCVE-2022-2864 includes/settings.php \nCVE-2022-3227 includes/class-searchwp-live-ajax-search.php \nCVE-2022-2941 admin/class-wp-useronline-admin.php \nspecifiNoted includes/class-wpvivid-backup.php \nCVE-2022-2436 includes/class-download-manager.php \nCVE-2022-25148 includes/class-wp-statistics-hits.php \nCVE-2022-1476 lib/model/class-ai1wm-backups.php \nCVE-2022-0236 includes/classes/class-wpie-general.php \nCVE-2022-1119 includes/ee-downloader.php \nCVE-2022-0888 includes/class-ninja-forms-file-uploads.php", "creation_timestamp": "2025-12-19T20:18:03.000000Z"} 2025-12-19T20:18:03+00:00 https://vulnerability.circl.lu/sighting/bcbacfce-7209-41b6-986f-bf0df2422582/export 2026-08-16T17:54:48.245682+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "bcbacfce-7209-41b6-986f-bf0df2422582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:07.000000Z"} 2025-08-31T03:01:07+00:00 https://vulnerability.circl.lu/sighting/e4298aae-d170-4244-b34f-53c9c55382f0/export 2026-08-16T17:54:48.245824+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e4298aae-d170-4244-b34f-53c9c55382f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "Telegram/R-HGiQTul2lcQLKBnhR-2gbWBVvSbjLi1y7N_WorJ6roN7X3", "content": "", "creation_timestamp": "2024-12-29T00:29:36.000000Z"} 2024-12-29T00:29:36+00:00 https://vulnerability.circl.lu/sighting/205a6e64-f7bf-405f-943d-40d1d88ec071/export 2026-08-16T17:54:48.245930+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "205a6e64-f7bf-405f-943d-40d1d88ec071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/6326", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\n\nCVE-2022-30190 - Follina exploit\nCVE-2022-26134 - OGNL injection in Atlassian Confluence Server/Data Center\nCVE-2022-26809 - Weakness in a core Windows 7/10/Srv19/22 component (RPC)\nCVE-2022-30075 - TP-Link AX50 Auth RCE\nCVE-2022-23222 - Linux Kernel eBPF LPE\nCVE-2022-32275 - Grafana 8.4.3 allows reading files\nCVE-2022-26937 - Windows NFS NLM Portmap Stack Buffer Overflow\nCVE-2022-23088 - Heap Overflow in FreeBSD Wi-Fi Stack\nCVE-2022-31626 - RCE in PHP <=7.4.29\nCVE-2022-30333 - Dir Traversal in rar", "creation_timestamp": "2024-10-12T06:49:41.000000Z"} 2024-10-12T06:49:41+00:00 https://vulnerability.circl.lu/sighting/7693ff14-e5ed-4048-a65a-b1cf578d85b2/export 2026-08-16T17:54:48.246034+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7693ff14-e5ed-4048-a65a-b1cf578d85b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32271", "type": "seen", "source": "https://t.me/cibsecurity/43791", "content": "\u203c CVE-2022-32271 \u203c\n\nIn Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T23:44:22.000000Z"} 2022-10-11T23:44:22+00:00 https://vulnerability.circl.lu/sighting/6c986341-f10e-4d6e-8293-aab0cd377645/export 2026-08-16T17:54:48.246136+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6c986341-f10e-4d6e-8293-aab0cd377645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32277", "type": "seen", "source": "https://t.me/cibsecurity/49380", "content": "\u203c CVE-2022-32277 \u203c\n\nSquiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-07T00:13:31.000000Z"} 2022-09-07T00:13:31+00:00 https://vulnerability.circl.lu/sighting/5e7ff923-edf7-4272-aafb-250b242a4ca1/export 2026-08-16T17:54:48.246236+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5e7ff923-edf7-4272-aafb-250b242a4ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32274", "type": "seen", "source": "https://t.me/cibsecurity/46165", "content": "\u203c CVE-2022-32274 \u203c\n\nThe Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-13T18:26:25.000000Z"} 2022-07-13T18:26:25+00:00 https://vulnerability.circl.lu/sighting/f1eb964e-615c-42c0-81d5-b772867b2f98/export 2026-08-16T17:54:48.246334+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f1eb964e-615c-42c0-81d5-b772867b2f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "seen", "source": "https://t.me/cibsecurity/44731", "content": "\u203c CVE-2022-32276 \u203c\n\n** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:42.000000Z"} 2022-06-17T16:23:42+00:00 https://vulnerability.circl.lu/sighting/f3a8964e-ca7c-4897-a715-e479f1b72d6f/export 2026-08-16T17:54:48.246432+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "f3a8964e-ca7c-4897-a715-e479f1b72d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32278", "type": "seen", "source": "https://t.me/cibsecurity/44347", "content": "\u203c CVE-2022-32278 \u203c\n\nXFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-14T02:18:17.000000Z"} 2022-06-14T02:18:17+00:00 https://vulnerability.circl.lu/sighting/7d118739-e35f-44d9-ba14-f4f5a2b357ed/export 2026-08-16T17:54:48.246529+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "7d118739-e35f-44d9-ba14-f4f5a2b357ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32272", "type": "seen", "source": "https://t.me/cibsecurity/44104", "content": "\u203c CVE-2022-32272 \u203c\n\nOPSWAT MetaDefender Core (MDCore) before 5.1.2 has incorrect access control, resulting in privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-09T18:33:30.000000Z"} 2022-06-09T18:33:30+00:00