<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 27 Jul 2026 21:11:05 +0000</lastBuildDate>
    <item>
      <title>471aec01-50cd-4ce7-bd8e-9957cd9ec274</title>
      <link>https://vulnerability.circl.lu/sighting/471aec01-50cd-4ce7-bd8e-9957cd9ec274/export</link>
      <description>{"uuid": "471aec01-50cd-4ce7-bd8e-9957cd9ec274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34265", "type": "seen", "source": "https://t.me/EchelonEyes/431", "content": "\u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Django, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439\n\n\u041d\u0430 GitHub \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Django, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python. \u041e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2022-34265, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0435\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \n\nCVE-2022-34265 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: Django 3.2.x prior to 3.2.14 \u0438 Django 4.0.x prior to 4.0.6. Django \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Django \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0442\u043e\u043b\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435, \u043a\u0430\u043a Instagram, Mozilla, The Washington Times, Pinterest, YouTube, Google \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://github.com/aeyesec/CVE-2022-34265\n\nhttps://www.djangoproject.com/weblog/2022/jul/04/security-releases/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Django", "creation_timestamp": "2026-07-27T00:01:21.655706Z"}</description>
      <content:encoded>{"uuid": "471aec01-50cd-4ce7-bd8e-9957cd9ec274", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34265", "type": "seen", "source": "https://t.me/EchelonEyes/431", "content": "\u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Django, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439\n\n\u041d\u0430 GitHub \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Django, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python. \u041e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2022-34265, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0435\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \n\nCVE-2022-34265 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: Django 3.2.x prior to 3.2.14 \u0438 Django 4.0.x prior to 4.0.6. Django \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Django \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0442\u043e\u043b\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435, \u043a\u0430\u043a Instagram, Mozilla, The Washington Times, Pinterest, YouTube, Google \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://github.com/aeyesec/CVE-2022-34265\n\nhttps://www.djangoproject.com/weblog/2022/jul/04/security-releases/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Django", "creation_timestamp": "2026-07-27T00:01:21.655706Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/471aec01-50cd-4ce7-bd8e-9957cd9ec274/export</guid>
      <pubDate>Mon, 27 Jul 2026 00:01:21 +0000</pubDate>
    </item>
    <item>
      <title>f88c4564-2d90-4bdc-9b88-59d371baeedd</title>
      <link>https://vulnerability.circl.lu/sighting/f88c4564-2d90-4bdc-9b88-59d371baeedd/export</link>
      <description>{"uuid": "f88c4564-2d90-4bdc-9b88-59d371baeedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34265", "type": "seen", "source": "https://t.me/EchelonEyes/431", "content": "\u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Django, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439\n\n\u041d\u0430 GitHub \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Django, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python. \u041e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2022-34265, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0435\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \n\nCVE-2022-34265 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: Django 3.2.x prior to 3.2.14 \u0438 Django 4.0.x prior to 4.0.6. Django \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Django \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0442\u043e\u043b\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435, \u043a\u0430\u043a Instagram, Mozilla, The Washington Times, Pinterest, YouTube, Google \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://github.com/aeyesec/CVE-2022-34265\n\nhttps://www.djangoproject.com/weblog/2022/jul/04/security-releases/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Django", "creation_timestamp": "2026-07-26T02:02:52.005154Z"}</description>
      <content:encoded>{"uuid": "f88c4564-2d90-4bdc-9b88-59d371baeedd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34265", "type": "seen", "source": "https://t.me/EchelonEyes/431", "content": "\u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Django, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439\n\n\u041d\u0430 GitHub \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 Django, \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Python. \u041e\u0448\u0438\u0431\u043a\u0430, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a CVE-2022-34265, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0435\u0439 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0435\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u043c\u0443 \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0439 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \n\nCVE-2022-34265 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445: Django 3.2.x prior to 3.2.14 \u0438 Django 4.0.x prior to 4.0.6. Django \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043e\u0446\u0435\u043d\u043a\u0430\u043c, \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 Django \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0442\u044b\u0441\u044f\u0447 \u0441\u0430\u0439\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0441\u0442\u043e\u043b\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435, \u043a\u0430\u043a Instagram, Mozilla, The Washington Times, Pinterest, YouTube, Google \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://github.com/aeyesec/CVE-2022-34265\n\nhttps://www.djangoproject.com/weblog/2022/jul/04/security-releases/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Django", "creation_timestamp": "2026-07-26T02:02:52.005154Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f88c4564-2d90-4bdc-9b88-59d371baeedd/export</guid>
      <pubDate>Sun, 26 Jul 2026 02:02:52 +0000</pubDate>
    </item>
    <item>
      <title>2979635a-cd9b-4826-9d62-641e70604160</title>
      <link>https://vulnerability.circl.lu/sighting/2979635a-cd9b-4826-9d62-641e70604160/export</link>
      <description>{"uuid": "2979635a-cd9b-4826-9d62-641e70604160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34265", "type": "seen", "source": "https://t.me/arpsyndicate/4392", "content": "#ExploitObserverAlert\n\nCVE-2022-34265\n\nDESCRIPTION: Exploit Observer has 47 entries in 9 file formats related to CVE-2022-34265. An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.\n\nFIRST-EPSS: 0.117370000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-04-09T05:15:10.000000Z"}</description>
      <content:encoded>{"uuid": "2979635a-cd9b-4826-9d62-641e70604160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34265", "type": "seen", "source": "https://t.me/arpsyndicate/4392", "content": "#ExploitObserverAlert\n\nCVE-2022-34265\n\nDESCRIPTION: Exploit Observer has 47 entries in 9 file formats related to CVE-2022-34265. An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.\n\nFIRST-EPSS: 0.117370000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-04-09T05:15:10.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/2979635a-cd9b-4826-9d62-641e70604160/export</guid>
      <pubDate>Tue, 09 Apr 2024 05:15:10 +0000</pubDate>
    </item>
    <item>
      <title>cfb62bae-42b4-442e-bcb0-1c259da66729</title>
      <link>https://vulnerability.circl.lu/sighting/cfb62bae-42b4-442e-bcb0-1c259da66729/export</link>
      <description>{"uuid": "cfb62bae-42b4-442e-bcb0-1c259da66729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/ctinow/170107", "content": "https://ift.tt/jgRVX9G\nCVE-2022-34268 | RWS WorldServer up to 11.7.2 /clientLogin improper authentication", "creation_timestamp": "2024-01-19T09:16:27.000000Z"}</description>
      <content:encoded>{"uuid": "cfb62bae-42b4-442e-bcb0-1c259da66729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/ctinow/170107", "content": "https://ift.tt/jgRVX9G\nCVE-2022-34268 | RWS WorldServer up to 11.7.2 /clientLogin improper authentication", "creation_timestamp": "2024-01-19T09:16:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/cfb62bae-42b4-442e-bcb0-1c259da66729/export</guid>
      <pubDate>Fri, 19 Jan 2024 09:16:27 +0000</pubDate>
    </item>
    <item>
      <title>f2b083aa-8a77-4d21-bfb7-fc185d050488</title>
      <link>https://vulnerability.circl.lu/sighting/f2b083aa-8a77-4d21-bfb7-fc185d050488/export</link>
      <description>{"uuid": "f2b083aa-8a77-4d21-bfb7-fc185d050488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34267", "type": "seen", "source": "https://t.me/ctinow/170103", "content": "https://ift.tt/XTrsR9z\nCVE-2022-34267 | RWS WorldServer up to 11.7.2 JAR Archive api improper authentication", "creation_timestamp": "2024-01-19T09:16:23.000000Z"}</description>
      <content:encoded>{"uuid": "f2b083aa-8a77-4d21-bfb7-fc185d050488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34267", "type": "seen", "source": "https://t.me/ctinow/170103", "content": "https://ift.tt/XTrsR9z\nCVE-2022-34267 | RWS WorldServer up to 11.7.2 JAR Archive api improper authentication", "creation_timestamp": "2024-01-19T09:16:23.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f2b083aa-8a77-4d21-bfb7-fc185d050488/export</guid>
      <pubDate>Fri, 19 Jan 2024 09:16:23 +0000</pubDate>
    </item>
    <item>
      <title>19ff7c34-76b3-49c3-89f9-7491fa41c40c</title>
      <link>https://vulnerability.circl.lu/sighting/19ff7c34-76b3-49c3-89f9-7491fa41c40c/export</link>
      <description>{"uuid": "19ff7c34-76b3-49c3-89f9-7491fa41c40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34267", "type": "seen", "source": "https://t.me/ctinow/162826", "content": "https://ift.tt/WiouwsZ\nCVE-2022-34267 Exploit", "creation_timestamp": "2024-01-04T08:16:40.000000Z"}</description>
      <content:encoded>{"uuid": "19ff7c34-76b3-49c3-89f9-7491fa41c40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34267", "type": "seen", "source": "https://t.me/ctinow/162826", "content": "https://ift.tt/WiouwsZ\nCVE-2022-34267 Exploit", "creation_timestamp": "2024-01-04T08:16:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/19ff7c34-76b3-49c3-89f9-7491fa41c40c/export</guid>
      <pubDate>Thu, 04 Jan 2024 08:16:40 +0000</pubDate>
    </item>
    <item>
      <title>26318706-d8fc-4386-a625-b7aa31400b34</title>
      <link>https://vulnerability.circl.lu/sighting/26318706-d8fc-4386-a625-b7aa31400b34/export</link>
      <description>{"uuid": "26318706-d8fc-4386-a625-b7aa31400b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/ctinow/162754", "content": "https://ift.tt/N0f94gu\nCVE-2022-34268 Exploit", "creation_timestamp": "2024-01-04T04:21:52.000000Z"}</description>
      <content:encoded>{"uuid": "26318706-d8fc-4386-a625-b7aa31400b34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/ctinow/162754", "content": "https://ift.tt/N0f94gu\nCVE-2022-34268 Exploit", "creation_timestamp": "2024-01-04T04:21:52.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/26318706-d8fc-4386-a625-b7aa31400b34/export</guid>
      <pubDate>Thu, 04 Jan 2024 04:21:52 +0000</pubDate>
    </item>
    <item>
      <title>c68a1c45-59a2-40e3-b437-387dcd6c786c</title>
      <link>https://vulnerability.circl.lu/sighting/c68a1c45-59a2-40e3-b437-387dcd6c786c/export</link>
      <description>{"uuid": "c68a1c45-59a2-40e3-b437-387dcd6c786c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/arpsyndicate/2200", "content": "#ExploitObserverAlert\n\nCVE-2022-34268\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-34268. An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host.", "creation_timestamp": "2023-12-28T05:42:33.000000Z"}</description>
      <content:encoded>{"uuid": "c68a1c45-59a2-40e3-b437-387dcd6c786c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/arpsyndicate/2200", "content": "#ExploitObserverAlert\n\nCVE-2022-34268\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-34268. An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host.", "creation_timestamp": "2023-12-28T05:42:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c68a1c45-59a2-40e3-b437-387dcd6c786c/export</guid>
      <pubDate>Thu, 28 Dec 2023 05:42:33 +0000</pubDate>
    </item>
    <item>
      <title>c8822dd2-8c6f-484a-ba38-176e8a6b8cac</title>
      <link>https://vulnerability.circl.lu/sighting/c8822dd2-8c6f-484a-ba38-176e8a6b8cac/export</link>
      <description>{"uuid": "c8822dd2-8c6f-484a-ba38-176e8a6b8cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34267", "type": "seen", "source": "https://t.me/arpsyndicate/2185", "content": "#ExploitObserverAlert\n\nCVE-2022-34267\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-34267. An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.", "creation_timestamp": "2023-12-28T03:29:28.000000Z"}</description>
      <content:encoded>{"uuid": "c8822dd2-8c6f-484a-ba38-176e8a6b8cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34267", "type": "seen", "source": "https://t.me/arpsyndicate/2185", "content": "#ExploitObserverAlert\n\nCVE-2022-34267\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-34267. An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.", "creation_timestamp": "2023-12-28T03:29:28.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/c8822dd2-8c6f-484a-ba38-176e8a6b8cac/export</guid>
      <pubDate>Thu, 28 Dec 2023 03:29:28 +0000</pubDate>
    </item>
    <item>
      <title>ff5e740d-0a3a-4f00-a7c2-f040b2fdfb1b</title>
      <link>https://vulnerability.circl.lu/sighting/ff5e740d-0a3a-4f00-a7c2-f040b2fdfb1b/export</link>
      <description>{"uuid": "ff5e740d-0a3a-4f00-a7c2-f040b2fdfb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/ctinow/159169", "content": "https://ift.tt/TO2tZFl\nCVE-2022-34268", "creation_timestamp": "2023-12-25T09:31:15.000000Z"}</description>
      <content:encoded>{"uuid": "ff5e740d-0a3a-4f00-a7c2-f040b2fdfb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34268", "type": "seen", "source": "https://t.me/ctinow/159169", "content": "https://ift.tt/TO2tZFl\nCVE-2022-34268", "creation_timestamp": "2023-12-25T09:31:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ff5e740d-0a3a-4f00-a7c2-f040b2fdfb1b/export</guid>
      <pubDate>Mon, 25 Dec 2023 09:31:15 +0000</pubDate>
    </item>
  </channel>
</rss>
