https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 16 Aug 2026 17:54:47 +0000 https://vulnerability.circl.lu/sighting/fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4/export {"uuid": "fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3227", "type": "seen", "source": "https://t.me/Dooztoria/22", "content": "\ud83c\udf65 Overview of Vulnerable Endpoints in WordPress Applications\n\n cves path\n \nCVE-2022-2864 includes/settings.php \nCVE-2022-3227 includes/class-searchwp-live-ajax-search.php \nCVE-2022-2941 admin/class-wp-useronline-admin.php \nspecifiNoted includes/class-wpvivid-backup.php \nCVE-2022-2436 includes/class-download-manager.php \nCVE-2022-25148 includes/class-wp-statistics-hits.php \nCVE-2022-1476 lib/model/class-ai1wm-backups.php \nCVE-2022-0236 includes/classes/class-wpie-general.php \nCVE-2022-1119 includes/ee-downloader.php \nCVE-2022-0888 includes/class-ninja-forms-file-uploads.php", "creation_timestamp": "2025-12-19T20:18:03.000000Z"} {"uuid": "fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3227", "type": "seen", "source": "https://t.me/Dooztoria/22", "content": "\ud83c\udf65 Overview of Vulnerable Endpoints in WordPress Applications\n\n cves path\n \nCVE-2022-2864 includes/settings.php \nCVE-2022-3227 includes/class-searchwp-live-ajax-search.php \nCVE-2022-2941 admin/class-wp-useronline-admin.php \nspecifiNoted includes/class-wpvivid-backup.php \nCVE-2022-2436 includes/class-download-manager.php \nCVE-2022-25148 includes/class-wp-statistics-hits.php \nCVE-2022-1476 lib/model/class-ai1wm-backups.php \nCVE-2022-0236 includes/classes/class-wpie-general.php \nCVE-2022-1119 includes/ee-downloader.php \nCVE-2022-0888 includes/class-ninja-forms-file-uploads.php", "creation_timestamp": "2025-12-19T20:18:03.000000Z"} https://vulnerability.circl.lu/sighting/fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4/export Fri, 19 Dec 2025 20:18:03 +0000 https://vulnerability.circl.lu/sighting/bcbacfce-7209-41b6-986f-bf0df2422582/export {"uuid": "bcbacfce-7209-41b6-986f-bf0df2422582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:07.000000Z"} {"uuid": "bcbacfce-7209-41b6-986f-bf0df2422582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:07.000000Z"} https://vulnerability.circl.lu/sighting/bcbacfce-7209-41b6-986f-bf0df2422582/export Sun, 31 Aug 2025 03:01:07 +0000 https://vulnerability.circl.lu/sighting/e4298aae-d170-4244-b34f-53c9c55382f0/export {"uuid": "e4298aae-d170-4244-b34f-53c9c55382f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "Telegram/R-HGiQTul2lcQLKBnhR-2gbWBVvSbjLi1y7N_WorJ6roN7X3", "content": "", "creation_timestamp": "2024-12-29T00:29:36.000000Z"} {"uuid": "e4298aae-d170-4244-b34f-53c9c55382f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "Telegram/R-HGiQTul2lcQLKBnhR-2gbWBVvSbjLi1y7N_WorJ6roN7X3", "content": "", "creation_timestamp": "2024-12-29T00:29:36.000000Z"} https://vulnerability.circl.lu/sighting/e4298aae-d170-4244-b34f-53c9c55382f0/export Sun, 29 Dec 2024 00:29:36 +0000 https://vulnerability.circl.lu/sighting/205a6e64-f7bf-405f-943d-40d1d88ec071/export {"uuid": "205a6e64-f7bf-405f-943d-40d1d88ec071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/6326", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\n\nCVE-2022-30190 - Follina exploit\nCVE-2022-26134 - OGNL injection in Atlassian Confluence Server/Data Center\nCVE-2022-26809 - Weakness in a core Windows 7/10/Srv19/22 component (RPC)\nCVE-2022-30075 - TP-Link AX50 Auth RCE\nCVE-2022-23222 - Linux Kernel eBPF LPE\nCVE-2022-32275 - Grafana 8.4.3 allows reading files\nCVE-2022-26937 - Windows NFS NLM Portmap Stack Buffer Overflow\nCVE-2022-23088 - Heap Overflow in FreeBSD Wi-Fi Stack\nCVE-2022-31626 - RCE in PHP <=7.4.29\nCVE-2022-30333 - Dir Traversal in rar", "creation_timestamp": "2024-10-12T06:49:41.000000Z"} {"uuid": "205a6e64-f7bf-405f-943d-40d1d88ec071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/6326", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\n\nCVE-2022-30190 - Follina exploit\nCVE-2022-26134 - OGNL injection in Atlassian Confluence Server/Data Center\nCVE-2022-26809 - Weakness in a core Windows 7/10/Srv19/22 component (RPC)\nCVE-2022-30075 - TP-Link AX50 Auth RCE\nCVE-2022-23222 - Linux Kernel eBPF LPE\nCVE-2022-32275 - Grafana 8.4.3 allows reading files\nCVE-2022-26937 - Windows NFS NLM Portmap Stack Buffer Overflow\nCVE-2022-23088 - Heap Overflow in FreeBSD Wi-Fi Stack\nCVE-2022-31626 - RCE in PHP <=7.4.29\nCVE-2022-30333 - Dir Traversal in rar", "creation_timestamp": "2024-10-12T06:49:41.000000Z"} https://vulnerability.circl.lu/sighting/205a6e64-f7bf-405f-943d-40d1d88ec071/export Sat, 12 Oct 2024 06:49:41 +0000 https://vulnerability.circl.lu/sighting/7693ff14-e5ed-4048-a65a-b1cf578d85b2/export {"uuid": "7693ff14-e5ed-4048-a65a-b1cf578d85b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32271", "type": "seen", "source": "https://t.me/cibsecurity/43791", "content": "\u203c CVE-2022-32271 \u203c\n\nIn Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T23:44:22.000000Z"} {"uuid": "7693ff14-e5ed-4048-a65a-b1cf578d85b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32271", "type": "seen", "source": "https://t.me/cibsecurity/43791", "content": "\u203c CVE-2022-32271 \u203c\n\nIn Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T23:44:22.000000Z"} https://vulnerability.circl.lu/sighting/7693ff14-e5ed-4048-a65a-b1cf578d85b2/export Tue, 11 Oct 2022 23:44:22 +0000 https://vulnerability.circl.lu/sighting/6c986341-f10e-4d6e-8293-aab0cd377645/export {"uuid": "6c986341-f10e-4d6e-8293-aab0cd377645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32277", "type": "seen", "source": "https://t.me/cibsecurity/49380", "content": "\u203c CVE-2022-32277 \u203c\n\nSquiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-07T00:13:31.000000Z"} {"uuid": "6c986341-f10e-4d6e-8293-aab0cd377645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32277", "type": "seen", "source": "https://t.me/cibsecurity/49380", "content": "\u203c CVE-2022-32277 \u203c\n\nSquiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-07T00:13:31.000000Z"} https://vulnerability.circl.lu/sighting/6c986341-f10e-4d6e-8293-aab0cd377645/export Wed, 07 Sep 2022 00:13:31 +0000 https://vulnerability.circl.lu/sighting/5e7ff923-edf7-4272-aafb-250b242a4ca1/export {"uuid": "5e7ff923-edf7-4272-aafb-250b242a4ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32274", "type": "seen", "source": "https://t.me/cibsecurity/46165", "content": "\u203c CVE-2022-32274 \u203c\n\nThe Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-13T18:26:25.000000Z"} {"uuid": "5e7ff923-edf7-4272-aafb-250b242a4ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32274", "type": "seen", "source": "https://t.me/cibsecurity/46165", "content": "\u203c CVE-2022-32274 \u203c\n\nThe Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-13T18:26:25.000000Z"} https://vulnerability.circl.lu/sighting/5e7ff923-edf7-4272-aafb-250b242a4ca1/export Wed, 13 Jul 2022 18:26:25 +0000 https://vulnerability.circl.lu/sighting/f1eb964e-615c-42c0-81d5-b772867b2f98/export {"uuid": "f1eb964e-615c-42c0-81d5-b772867b2f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "seen", "source": "https://t.me/cibsecurity/44731", "content": "\u203c CVE-2022-32276 \u203c\n\n** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:42.000000Z"} {"uuid": "f1eb964e-615c-42c0-81d5-b772867b2f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "seen", "source": "https://t.me/cibsecurity/44731", "content": "\u203c CVE-2022-32276 \u203c\n\n** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:42.000000Z"} https://vulnerability.circl.lu/sighting/f1eb964e-615c-42c0-81d5-b772867b2f98/export Fri, 17 Jun 2022 16:23:42 +0000 https://vulnerability.circl.lu/sighting/f3a8964e-ca7c-4897-a715-e479f1b72d6f/export {"uuid": "f3a8964e-ca7c-4897-a715-e479f1b72d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32278", "type": "seen", "source": "https://t.me/cibsecurity/44347", "content": "\u203c CVE-2022-32278 \u203c\n\nXFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-14T02:18:17.000000Z"} {"uuid": "f3a8964e-ca7c-4897-a715-e479f1b72d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32278", "type": "seen", "source": "https://t.me/cibsecurity/44347", "content": "\u203c CVE-2022-32278 \u203c\n\nXFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-14T02:18:17.000000Z"} https://vulnerability.circl.lu/sighting/f3a8964e-ca7c-4897-a715-e479f1b72d6f/export Tue, 14 Jun 2022 02:18:17 +0000 https://vulnerability.circl.lu/sighting/7d118739-e35f-44d9-ba14-f4f5a2b357ed/export {"uuid": "7d118739-e35f-44d9-ba14-f4f5a2b357ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32272", "type": "seen", "source": "https://t.me/cibsecurity/44104", "content": "\u203c CVE-2022-32272 \u203c\n\nOPSWAT MetaDefender Core (MDCore) before 5.1.2 has incorrect access control, resulting in privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-09T18:33:30.000000Z"} {"uuid": "7d118739-e35f-44d9-ba14-f4f5a2b357ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32272", "type": "seen", "source": "https://t.me/cibsecurity/44104", "content": "\u203c CVE-2022-32272 \u203c\n\nOPSWAT MetaDefender Core (MDCore) before 5.1.2 has incorrect access control, resulting in privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-09T18:33:30.000000Z"} https://vulnerability.circl.lu/sighting/7d118739-e35f-44d9-ba14-f4f5a2b357ed/export Thu, 09 Jun 2022 18:33:30 +0000