<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 17 Sep 2026 12:06:59 +0000</lastBuildDate>
    <item>
      <title>b55edcc8-2971-4221-95b0-76e86f1c533b</title>
      <link>https://vulnerability.circl.lu/sighting/b55edcc8-2971-4221-95b0-76e86f1c533b/export</link>
      <description>{"uuid": "b55edcc8-2971-4221-95b0-76e86f1c533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:08.003835Z"}</description>
      <content:encoded>{"uuid": "b55edcc8-2971-4221-95b0-76e86f1c533b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-16)", "content": "", "creation_timestamp": "2026-09-17T10:15:08.003835Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b55edcc8-2971-4221-95b0-76e86f1c533b/export</guid>
      <pubDate>Thu, 17 Sep 2026 10:15:08 +0000</pubDate>
    </item>
    <item>
      <title>47f0e52c-e74a-4254-aa60-e1e971da292d</title>
      <link>https://vulnerability.circl.lu/sighting/47f0e52c-e74a-4254-aa60-e1e971da292d/export</link>
      <description>{"uuid": "47f0e52c-e74a-4254-aa60-e1e971da292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:09.516173Z"}</description>
      <content:encoded>{"uuid": "47f0e52c-e74a-4254-aa60-e1e971da292d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:15:09.516173Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/47f0e52c-e74a-4254-aa60-e1e971da292d/export</guid>
      <pubDate>Wed, 16 Sep 2026 10:15:09 +0000</pubDate>
    </item>
    <item>
      <title>ebc0e885-f109-4339-a9cd-80367c67f31e</title>
      <link>https://vulnerability.circl.lu/sighting/ebc0e885-f109-4339-a9cd-80367c67f31e/export</link>
      <description>{"uuid": "ebc0e885-f109-4339-a9cd-80367c67f31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:08.248867Z"}</description>
      <content:encoded>{"uuid": "ebc0e885-f109-4339-a9cd-80367c67f31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:08.248867Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ebc0e885-f109-4339-a9cd-80367c67f31e/export</guid>
      <pubDate>Tue, 15 Sep 2026 10:15:08 +0000</pubDate>
    </item>
    <item>
      <title>098acf70-5fa0-46ba-9834-8ae7cb46ff9e</title>
      <link>https://vulnerability.circl.lu/sighting/098acf70-5fa0-46ba-9834-8ae7cb46ff9e/export</link>
      <description>{"uuid": "098acf70-5fa0-46ba-9834-8ae7cb46ff9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:09.089242Z"}</description>
      <content:encoded>{"uuid": "098acf70-5fa0-46ba-9834-8ae7cb46ff9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4059", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:09.089242Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/098acf70-5fa0-46ba-9834-8ae7cb46ff9e/export</guid>
      <pubDate>Sun, 13 Sep 2026 10:00:09 +0000</pubDate>
    </item>
    <item>
      <title>4d949ef6-595a-4772-af1a-d2823cc6ca69</title>
      <link>https://vulnerability.circl.lu/sighting/4d949ef6-595a-4772-af1a-d2823cc6ca69/export</link>
      <description>{"uuid": "4d949ef6-595a-4772-af1a-d2823cc6ca69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:03.597485Z"}</description>
      <content:encoded>{"uuid": "4d949ef6-595a-4772-af1a-d2823cc6ca69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4063", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:00:03.597485Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/4d949ef6-595a-4772-af1a-d2823cc6ca69/export</guid>
      <pubDate>Fri, 11 Sep 2026 10:00:03 +0000</pubDate>
    </item>
    <item>
      <title>34c5b0f3-b4bb-45e0-831a-9ff829693d65</title>
      <link>https://vulnerability.circl.lu/sighting/34c5b0f3-b4bb-45e0-831a-9ff829693d65/export</link>
      <description>{"uuid": "34c5b0f3-b4bb-45e0-831a-9ff829693d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-11T00:00:54.778527Z"}</description>
      <content:encoded>{"uuid": "34c5b0f3-b4bb-45e0-831a-9ff829693d65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40765", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-11T00:00:54.778527Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/34c5b0f3-b4bb-45e0-831a-9ff829693d65/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:54 +0000</pubDate>
    </item>
    <item>
      <title>9a704a5e-90f1-454e-92e2-bee9b541cde3</title>
      <link>https://vulnerability.circl.lu/sighting/9a704a5e-90f1-454e-92e2-bee9b541cde3/export</link>
      <description>{"uuid": "9a704a5e-90f1-454e-92e2-bee9b541cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress &amp;lt;1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-11T00:00:50.990075Z"}</description>
      <content:encoded>{"uuid": "9a704a5e-90f1-454e-92e2-bee9b541cde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40146", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress &amp;lt;1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-11T00:00:50.990075Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9a704a5e-90f1-454e-92e2-bee9b541cde3/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:50 +0000</pubDate>
    </item>
    <item>
      <title>b57c1c45-5475-4b4c-91c0-6ff9ce428741</title>
      <link>https://vulnerability.circl.lu/sighting/b57c1c45-5475-4b4c-91c0-6ff9ce428741/export</link>
      <description>{"uuid": "b57c1c45-5475-4b4c-91c0-6ff9ce428741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-11T00:00:50.304063Z"}</description>
      <content:encoded>{"uuid": "b57c1c45-5475-4b4c-91c0-6ff9ce428741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6215", "content": "exploit\n1. CVE-2022-2992:\nAuthenticated RCE in Gitlab via GitHub import\nhttps://github.com/CsEnox/CVE-2022-2992\n\n2. CVE-2022-40684:\nCritical Authentication Bypass in FortiOS and FortiProxy\ud83e\udee3\nhttps://github.com/dickson0day/CVE-2022-40684\n\n+Three special and readable news\ud83d\udc47\ud83c\udffb\n\nA 19-year-old Sydney teenager has been arrested for allegedly using leaked Optus telecom data to extort victims in SMS scams.\nRead: https://thehackernews.com/2022/10/19-year-old-hacker-arrested-for-using.html\n\nFormer Uber Chief Security Officer has been found guilty of hiding 2016 #databreach from regulators in an attempt to cover up the incident.\nRead: https://thehackernews.com/2022/10/former-uber-security-chief-found-guilty.html\n\nResearchers have published technical details and a PoC exploit for a recently disclosed critical vulnerability (CVE-2022-40684) affecting Fortinet FortiOS, FortiProxy, and FortiSwitchManager.\nRead: https://thehackernews.com/2022/10/poc-exploit-released-for-critical.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.26", "creation_timestamp": "2026-09-11T00:00:50.304063Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/b57c1c45-5475-4b4c-91c0-6ff9ce428741/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:50 +0000</pubDate>
    </item>
    <item>
      <title>88ee07d2-3762-4e98-ae27-a93a21955e43</title>
      <link>https://vulnerability.circl.lu/sighting/88ee07d2-3762-4e98-ae27-a93a21955e43/export</link>
      <description>{"uuid": "88ee07d2-3762-4e98-ae27-a93a21955e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-11T00:00:49.891904Z"}</description>
      <content:encoded>{"uuid": "88ee07d2-3762-4e98-ae27-a93a21955e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "seen", "source": "https://t.me/cissp/6200", "content": "Fortinet has privately warned its customers about a new authentication bypass vulnerability (CVE-2022-40684) affecting FortiGate firewalls and FortiProxy web proxies.\nRead: https://thehackernews.com/2022/10/fortinet-warns-of-new-auth-bypass-flaw.html\n\n\n\u200e-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.07.15", "creation_timestamp": "2026-09-11T00:00:49.891904Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/88ee07d2-3762-4e98-ae27-a93a21955e43/export</guid>
      <pubDate>Fri, 11 Sep 2026 00:00:49 +0000</pubDate>
    </item>
    <item>
      <title>93414137-d7e0-4f68-a1af-63ec745e471c</title>
      <link>https://vulnerability.circl.lu/sighting/93414137-d7e0-4f68-a1af-63ec745e471c/export</link>
      <description>{"uuid": "93414137-d7e0-4f68-a1af-63ec745e471c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:11.035440Z"}</description>
      <content:encoded>{"uuid": "93414137-d7e0-4f68-a1af-63ec745e471c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40684", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:11.035440Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/93414137-d7e0-4f68-a1af-63ec745e471c/export</guid>
      <pubDate>Thu, 10 Sep 2026 10:15:11 +0000</pubDate>
    </item>
  </channel>
</rss>
