https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 11 Jun 2026 15:48:02 +0000 https://vulnerability.circl.lu/sighting/b912413b-7258-404d-bcda-e131e850234d/export {"uuid": "b912413b-7258-404d-bcda-e131e850234d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44860", "type": "seen", "source": "https://t.me/cibsecurity/53527", "content": "\u203c CVE-2022-44860 \u203c\n\nAutomotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-25T20:15:52.000000Z"} {"uuid": "b912413b-7258-404d-bcda-e131e850234d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44860", "type": "seen", "source": "https://t.me/cibsecurity/53527", "content": "\u203c CVE-2022-44860 \u203c\n\nAutomotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-25T20:15:52.000000Z"} https://vulnerability.circl.lu/sighting/b912413b-7258-404d-bcda-e131e850234d/export Fri, 25 Nov 2022 20:15:52 +0000 https://vulnerability.circl.lu/sighting/99b3e5a1-9abe-4e47-a3e9-4f56fbac0871/export {"uuid": "99b3e5a1-9abe-4e47-a3e9-4f56fbac0871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4486", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4486\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Meteor Slides WordPress plugin before 1.5.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-16T15:37:42.618Z\n\ud83d\udccf Modified: 2025-04-07T17:42:36.768Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d0afd17c-09cd-4ab5-95a5-6ac8c3c0a50b", "creation_timestamp": "2025-04-07T17:45:27.000000Z"} {"uuid": "99b3e5a1-9abe-4e47-a3e9-4f56fbac0871", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4486", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4486\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Meteor Slides WordPress plugin before 1.5.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-16T15:37:42.618Z\n\ud83d\udccf Modified: 2025-04-07T17:42:36.768Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d0afd17c-09cd-4ab5-95a5-6ac8c3c0a50b", "creation_timestamp": "2025-04-07T17:45:27.000000Z"} https://vulnerability.circl.lu/sighting/99b3e5a1-9abe-4e47-a3e9-4f56fbac0871/export Mon, 07 Apr 2025 17:45:27 +0000