https://vulnerability.circl.lu/sightings/feed 2026-07-06T15:54:47.683413+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/95cd477e-9064-4a89-8db5-1c0f610cdbd8/export 2026-07-06T15:54:47.702904+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "95cd477e-9064-4a89-8db5-1c0f610cdbd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31364", "type": "seen", "source": "https://t.me/cibsecurity/57364", "content": "\u203c CVE-2022-31364 \u203c\n\nCypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is lower_transport_layer_on_seg. \u00c2\u00b6\u00c2\u00b6 In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered by sending a series of segmented packets with inconsistent SegN.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T00:16:40.000000Z"} 2023-02-02T00:16:40+00:00 https://vulnerability.circl.lu/sighting/71216abd-bbde-4c66-a663-2b0de5974f8a/export 2026-07-06T15:54:47.705209+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "71216abd-bbde-4c66-a663-2b0de5974f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31363", "type": "seen", "source": "https://t.me/cibsecurity/57363", "content": "\u203c CVE-2022-31363 \u203c\n\nCypress : https://www.infineon.com/ Cypress Bluetooth Mesh SDK BSA0107_05.01.00-BX8-AMESH-08 is affected by: Buffer Overflow. The impact is: execute arbitrary code (remote). The component is: affected function is pb_transport_handle_frag_. \u00c2\u00b6\u00c2\u00b6 In Cypress Bluetooth Mesh SDK, there is an out-of-bound write vulnerability that can be triggered during mesh provisioning. Because there is no check for mismatched SegN and TotalLength in Transaction Start PDU.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T00:16:39.000000Z"} 2023-02-02T00:16:39+00:00 https://vulnerability.circl.lu/sighting/d5304d3e-c3f0-421f-9572-14cab921442f/export 2026-07-06T15:54:47.705308+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "d5304d3e-c3f0-421f-9572-14cab921442f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31366", "type": "seen", "source": "https://t.me/cibsecurity/51874", "content": "\u203c CVE-2022-31366 \u203c\n\nAn arbitrary file upload vulnerability in the apiImportLabs function in api_labs.php of EVE-NG 2.0.3-112 Community allows attackers to execute arbitrary code via a crafted UNL file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-20T16:21:19.000000Z"} 2022-10-20T16:21:19+00:00 https://vulnerability.circl.lu/sighting/89a392cd-a136-4032-9105-581a1fd9270f/export 2026-07-06T15:54:47.705380+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "89a392cd-a136-4032-9105-581a1fd9270f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3136", "type": "seen", "source": "https://t.me/cibsecurity/51074", "content": "\u203c CVE-2022-3136 \u203c\n\nThe Social Rocket WordPress plugin before 1.3.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T00:25:16.000000Z"} 2022-10-11T00:25:16+00:00 https://vulnerability.circl.lu/sighting/e7d79c65-5861-422d-9dae-680da7b476ee/export 2026-07-06T15:54:47.705449+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "e7d79c65-5861-422d-9dae-680da7b476ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31367", "type": "seen", "source": "https://t.me/cibsecurity/50549", "content": "\u203c CVE-2022-31367 \u203c\n\nStrapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-28T02:36:34.000000Z"} 2022-09-28T02:36:34+00:00