https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 10 Aug 2026 20:19:01 +0000 https://vulnerability.circl.lu/sighting/a80f542d-95bd-4c69-aad8-73c53d8bb058/export {"uuid": "a80f542d-95bd-4c69-aad8-73c53d8bb058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27432", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq25kbwzqo24", "content": "\ud83d\udccc CVE-2022-27432 - A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading ... https://www.cyberhub.blog/cves/CVE-2022-27432", "creation_timestamp": "2026-07-07T08:07:07.590634Z"} {"uuid": "a80f542d-95bd-4c69-aad8-73c53d8bb058", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27432", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mq25kbwzqo24", "content": "\ud83d\udccc CVE-2022-27432 - A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading ... https://www.cyberhub.blog/cves/CVE-2022-27432", "creation_timestamp": "2026-07-07T08:07:07.590634Z"} https://vulnerability.circl.lu/sighting/a80f542d-95bd-4c69-aad8-73c53d8bb058/export Tue, 07 Jul 2026 08:07:07 +0000 https://vulnerability.circl.lu/sighting/0e1fb267-f33e-4464-8fe0-9cc1d5f51a35/export {"uuid": "0e1fb267-f33e-4464-8fe0-9cc1d5f51a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27438", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6121", "content": "#exploit\n#Whitepaper\nCVE-2022-27438:\nCaphyon Advanced Installer 19.3 - \"CustomDetection\" Update Check RCE", "creation_timestamp": "2024-05-08T21:31:57.000000Z"} {"uuid": "0e1fb267-f33e-4464-8fe0-9cc1d5f51a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27438", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6121", "content": "#exploit\n#Whitepaper\nCVE-2022-27438:\nCaphyon Advanced Installer 19.3 - \"CustomDetection\" Update Check RCE", "creation_timestamp": "2024-05-08T21:31:57.000000Z"} https://vulnerability.circl.lu/sighting/0e1fb267-f33e-4464-8fe0-9cc1d5f51a35/export Wed, 08 May 2024 21:31:57 +0000 https://vulnerability.circl.lu/sighting/596fe6d8-f4f6-440f-ac9f-28bf15236617/export {"uuid": "596fe6d8-f4f6-440f-ac9f-28bf15236617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2743", "type": "seen", "source": "https://t.me/cibsecurity/55796", "content": "\u203c CVE-2022-2743 \u203c\n\nInteger overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. (Chrome security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T11:58:14.000000Z"} {"uuid": "596fe6d8-f4f6-440f-ac9f-28bf15236617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2743", "type": "seen", "source": "https://t.me/cibsecurity/55796", "content": "\u203c CVE-2022-2743 \u203c\n\nInteger overflow in Window Manager in Google Chrome on Chrome OS and Lacros prior to 104.0.5112.79 allowed a remote attacker who convinced a user to engage in specific UI interactions to perform an out of bounds memory write via crafted UI interactions. (Chrome security severity: High)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T11:58:14.000000Z"} https://vulnerability.circl.lu/sighting/596fe6d8-f4f6-440f-ac9f-28bf15236617/export Tue, 03 Jan 2023 11:58:14 +0000 https://vulnerability.circl.lu/sighting/91faa4d0-a751-48a6-9125-a814b38c6594/export {"uuid": "91faa4d0-a751-48a6-9125-a814b38c6594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27438", "type": "seen", "source": "https://t.me/cibsecurity/43900", "content": "\u203c CVE-2022-27438 \u203c\n\nCaphyon Ltd Advanced Installer 19.2 was discovered to contain a remote code execution (RCE) vulnerability via the Update Check function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-07T02:30:21.000000Z"} {"uuid": "91faa4d0-a751-48a6-9125-a814b38c6594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27438", "type": "seen", "source": "https://t.me/cibsecurity/43900", "content": "\u203c CVE-2022-27438 \u203c\n\nCaphyon Ltd Advanced Installer 19.2 was discovered to contain a remote code execution (RCE) vulnerability via the Update Check function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-07T02:30:21.000000Z"} https://vulnerability.circl.lu/sighting/91faa4d0-a751-48a6-9125-a814b38c6594/export Tue, 07 Jun 2022 02:30:21 +0000 https://vulnerability.circl.lu/sighting/64dc6dd1-b953-4bb8-962c-cbd7d6e7ed4b/export {"uuid": "64dc6dd1-b953-4bb8-962c-cbd7d6e7ed4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27436", "type": "seen", "source": "https://t.me/cibsecurity/40105", "content": "\u203c CVE-2022-27436 \u203c\n\nA cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T18:27:51.000000Z"} {"uuid": "64dc6dd1-b953-4bb8-962c-cbd7d6e7ed4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27436", "type": "seen", "source": "https://t.me/cibsecurity/40105", "content": "\u203c CVE-2022-27436 \u203c\n\nA cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_user at Ecommerce-Website v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username text field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T18:27:51.000000Z"} https://vulnerability.circl.lu/sighting/64dc6dd1-b953-4bb8-962c-cbd7d6e7ed4b/export Mon, 04 Apr 2022 18:27:51 +0000 https://vulnerability.circl.lu/sighting/9f1e4b0f-6b3c-49ff-b4d9-b98115204eb9/export {"uuid": "9f1e4b0f-6b3c-49ff-b4d9-b98115204eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27435", "type": "seen", "source": "https://t.me/cibsecurity/40103", "content": "\u203c CVE-2022-27435 \u203c\n\nAn unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T18:27:46.000000Z"} {"uuid": "9f1e4b0f-6b3c-49ff-b4d9-b98115204eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27435", "type": "seen", "source": "https://t.me/cibsecurity/40103", "content": "\u203c CVE-2022-27435 \u203c\n\nAn unrestricted file upload at /public/admin/index.php?add_product of Ecommerce-Website v1.1.0 allows attackers to upload a webshell via the Product Image component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T18:27:46.000000Z"} https://vulnerability.circl.lu/sighting/9f1e4b0f-6b3c-49ff-b4d9-b98115204eb9/export Mon, 04 Apr 2022 18:27:46 +0000 https://vulnerability.circl.lu/sighting/8c13ec49-1399-46f2-a92e-5421c29e4316/export {"uuid": "8c13ec49-1399-46f2-a92e-5421c29e4316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27432", "type": "seen", "source": "https://t.me/cibsecurity/39796", "content": "\u203c CVE-2022-27432 \u203c\n\nA Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-30T07:12:08.000000Z"} {"uuid": "8c13ec49-1399-46f2-a92e-5421c29e4316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-27432", "type": "seen", "source": "https://t.me/cibsecurity/39796", "content": "\u203c CVE-2022-27432 \u203c\n\nA Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-30T07:12:08.000000Z"} https://vulnerability.circl.lu/sighting/8c13ec49-1399-46f2-a92e-5421c29e4316/export Wed, 30 Mar 2022 07:12:08 +0000