{"vulnerability": "cve-2022-2399", "sightings": [{"uuid": "7cf66ee5-2049-432a-b192-8e71b1e4ae39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23992", "type": "seen", "source": "https://t.me/cibsecurity/37460", "content": "\u203c CVE-2022-23992 \u203c\n\nXCOM Data Transport for Windows, Linux, and UNIX 11.6 releases contain a vulnerability due to insufficient input validation that could potentially allow remote attackers to execute arbitrary commands with elevated privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-15T00:33:14.000000Z"}, {"uuid": "4c6ee0dc-2737-415a-9a98-f7695ddb6d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23999", "type": "seen", "source": "https://t.me/cibsecurity/37320", "content": "\u203c CVE-2022-23999 \u203c\n\nPendingIntent hijacking vulnerability in CpaReceiver prior to SMR Feb-2022 Release 1 allows local attackers to access media files without permission in KnoxPrivacyNoticeReceiver via implicit Intent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-11T20:29:08.000000Z"}, {"uuid": "9c1669d8-9636-450d-8d6c-124f23ad22b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23995", "type": "seen", "source": "https://t.me/cibsecurity/37326", "content": "\u203c CVE-2022-23995 \u203c\n\nUnprotected component vulnerability in StBedtimeModeAlarmReceiver in Wear OS 3.0 prior to Firmware update Feb-2022 Release allows untrusted applications to change bedtime mode without a proper permission.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-11T20:34:49.000000Z"}, {"uuid": "92640b10-0f17-4e95-8e25-85d127bdf1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23990", "type": "seen", "source": "https://t.me/cibsecurity/36341", "content": "\u203c CVE-2022-23990 \u203c\n\nExpat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-26T22:19:51.000000Z"}, {"uuid": "79066cab-35b6-4e86-83e4-34f539b6f7a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23993", "type": "seen", "source": "https://t.me/cibsecurity/36338", "content": "\u203c CVE-2022-23993 \u203c\n\n/usr/local/www/pkg.php in pfSense through 2.5.2 uses $_REQUEST['pkg_filter'] in a PHP echo call.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-26T22:19:47.000000Z"}]}