https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:26:33.804782+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/f867b67a-5eb8-4f40-9f69-8b40c9c7c738/export 2026-09-17T10:26:33.823407+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "f867b67a-5eb8-4f40-9f69-8b40c9c7c738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20494", "type": "published-proof-of-concept", "source": "Telegram/zD_Rfe9Y-aXW8w4zhe31U9CTWjjn8KJbo68aYq1j3L4K1iQ", "content": "", "creation_timestamp": "2026-09-15T00:00:27.175070Z"} 2026-09-15T00:00:27.175070+00:00 https://vulnerability.circl.lu/sighting/0395e5d4-c5d0-4c9a-83c2-0ac336e5d983/export 2026-09-17T10:26:33.825960+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "0395e5d4-c5d0-4c9a-83c2-0ac336e5d983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20494", "type": "seen", "source": "Telegram/zD_Rfe9Y-aXW8w4zhe31U9CTWjjn8KJbo68aYq1j3L4K1iQ", "content": "", "creation_timestamp": "2026-09-14T03:00:07.620102Z"} 2026-09-14T03:00:07.620102+00:00 https://vulnerability.circl.lu/sighting/e4c6ebb9-9211-4ffb-b34d-060fce97f8ba/export 2026-09-17T10:26:33.826093+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e4c6ebb9-9211-4ffb-b34d-060fce97f8ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20452", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6470", "content": "exploit\n1. CVE-2023-0210:\nUnauthenticated remote DOS in ksmbd NTLMv2 authentication (Linux kernel)\nhttps://seclists.org/oss-sec/2023/q1/4\n\n2. CVE-2022-20452:\nPrivilege escalation on Android from installed app to system/another app via LazyValue using Parcel after recycle()\nhttps://github.com/michalbednarski/LeakValue\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.21", "creation_timestamp": "2026-09-11T00:00:52.679773Z"} 2026-09-11T00:00:52.679773+00:00 https://vulnerability.circl.lu/sighting/6833b6e1-59b2-4265-8ad9-2862b530ae2d/export 2026-09-17T10:26:33.826201+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6833b6e1-59b2-4265-8ad9-2862b530ae2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20857", "type": "seen", "source": "https://t.me/cissp/6015", "content": "Cisco releases patches for 45 vulnerabilities affecting multiple products, most critical of which (CVE-2022-20857, CVE-2022-20858, CVE-2022-20861) affect Nexus Dashboard for data centers and cloud network infrastructures.\nRead: https://thehackernews.com/2022/07/cisco-releases-patches-for-critical.html\n\n\n\u200e", "creation_timestamp": "2026-09-11T00:00:48.794485Z"} 2026-09-11T00:00:48.794485+00:00 https://vulnerability.circl.lu/sighting/73999995-408f-4aa9-958c-ec1ea2380f27/export 2026-09-17T10:26:33.826296+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "73999995-408f-4aa9-958c-ec1ea2380f27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20858", "type": "seen", "source": "https://t.me/cissp/6015", "content": "Cisco releases patches for 45 vulnerabilities affecting multiple products, most critical of which (CVE-2022-20857, CVE-2022-20858, CVE-2022-20861) affect Nexus Dashboard for data centers and cloud network infrastructures.\nRead: https://thehackernews.com/2022/07/cisco-releases-patches-for-critical.html\n\n\n\u200e", "creation_timestamp": "2026-09-11T00:00:48.754008Z"} 2026-09-11T00:00:48.754008+00:00 https://vulnerability.circl.lu/sighting/4056c08f-c6b4-4c1f-922e-2a5c848a7d66/export 2026-09-17T10:26:33.826395+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4056c08f-c6b4-4c1f-922e-2a5c848a7d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20861", "type": "seen", "source": "https://t.me/cissp/6015", "content": "Cisco releases patches for 45 vulnerabilities affecting multiple products, most critical of which (CVE-2022-20857, CVE-2022-20858, CVE-2022-20861) affect Nexus Dashboard for data centers and cloud network infrastructures.\nRead: https://thehackernews.com/2022/07/cisco-releases-patches-for-critical.html\n\n\n\u200e", "creation_timestamp": "2026-09-11T00:00:48.702630Z"} 2026-09-11T00:00:48.702630+00:00 https://vulnerability.circl.lu/sighting/2a19d8d4-8bde-462b-a958-a085f438c269/export 2026-09-17T10:26:33.826493+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "2a19d8d4-8bde-462b-a958-a085f438c269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/cissp/5948", "content": "Dear Friends,\nPlease be informed that Microsoft's June 2022 Security updates have been released, and this month\u2019s release provides fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.\nOf the total patches introduced\u00a0today, three are classified as 'Critical' as they allow remote code execution (RC), with the rest classified as Important.\nBelow is a list of critical vulnerabilities that have been fixed in this month\u2019s release.\nCVE-2022-30136 | Windows Network File System Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30158 | Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30163 | Windows Hyper-V Remote Code Execution (RCE) Vulnerability\nFor more information about this month\u2019s advisory, please refer to the following\nhttps://lnkd.in/eBy3f3Re\nOther vendors advisories\n\n================\nAtlassian\nAtlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Centre actively exploited in the wild to backdoor Internet-exposed servers. The zero-day (CVE-2022-26134) affects all supported versions of Confluence Server and Data Centre and allows unauthenticated attackers to gain remote code execution on unpatched servers.\nFor more information, please refer to this article\nhttps://lnkd.in/ek6vKfQm\n\nGoogle\nGoogle released an update for Google Chrome, The Stable channel has been updated to 102.0.5005.115 for Windows, Mac, and Linux which will roll out over the coming days/weeks.\nThis update includes 7 security fixes. Below, we highlight fixes that were contributed by external researchers, one of the fixed bugs was tracked as CVE-2022-2007 and ranked as High, the researcher who reported this bug got 10,000$ as a bounty by reporting this bug.\n\nRedhat\nRedhat released a set of security updates that address solutions for many flaws that ranked as high and medium, for a complete list of addressed vulnerabilities and their related advisories, Please refer to this\u00a0link\n\nOracle\nOracle recently released the following security and patch update advisories, we are following and keep you updated when oracle releases its mega security patches next July.\nhttps://lnkd.in/ehPBvZZ6\n\nhttps://lnkd.in/ewcFuGqi\n\n\nFollow your normal patch management process, and test the patches before being applied to production according to change management", "creation_timestamp": "2026-09-11T00:00:47.271460Z"} 2026-09-11T00:00:47.271460+00:00 https://vulnerability.circl.lu/sighting/a5a99e78-38e9-4fd3-b21f-8bdc0fba980e/export 2026-09-17T10:26:33.826626+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a5a99e78-38e9-4fd3-b21f-8bdc0fba980e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/cissp/5212", "content": "Ukraine says recent coordinated cyberattacks on select government systems are part of a larger wave of malicious activity aimed at sabotaging the country's critical infrastructure.\nRead: https://thehackernews.com/2022/01/ukraine-recent-cyber-attacks-part-of.html\n\nRussian hackers are heavily leveraging malicious Traffic Direction System (TSD) to spread several malware families, including Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish.\nRead details: https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html\n\nMicrosoft has detected hackers exploiting a new zero-day vulnerability (CVE-2021-35247) in SolarWinds Serv-U software related to Log4j attacks.\nRead: https://thehackernews.com/2022/01/microsoft-hackers-exploiting-new.html\n\nServ-U version 15.3 has been released to patch the issue.\nCisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2026-09-11T00:00:40.538193Z"} 2026-09-11T00:00:40.538193+00:00 https://vulnerability.circl.lu/sighting/4af25416-0b7b-44b1-bc62-9b7b281a656b/export 2026-09-17T10:26:33.826747+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4af25416-0b7b-44b1-bc62-9b7b281a656b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-20649", "type": "seen", "source": "https://t.me/cissp/5212", "content": "Ukraine says recent coordinated cyberattacks on select government systems are part of a larger wave of malicious activity aimed at sabotaging the country's critical infrastructure.\nRead: https://thehackernews.com/2022/01/ukraine-recent-cyber-attacks-part-of.html\n\nRussian hackers are heavily leveraging malicious Traffic Direction System (TSD) to spread several malware families, including Campo Loader, Hancitor, IcedID, QBot, Buer Loader, and SocGholish.\nRead details: https://thehackernews.com/2022/01/russian-hackers-heavily-using-malicious.html\n\nMicrosoft has detected hackers exploiting a new zero-day vulnerability (CVE-2021-35247) in SolarWinds Serv-U software related to Log4j attacks.\nRead: https://thehackernews.com/2022/01/microsoft-hackers-exploiting-new.html\n\nServ-U version 15.3 has been released to patch the issue.\nCisco has released a security patch for a critical vulnerability (CVE-2022-20649) affecting RCM for Cisco StarOS that could be weaponized by an unauthenticated remote attacker to execute arbitrary code & take over vulnerable machines.\nDetails: https://thehackernews.com/2022/01/cisco-issues-patch-for-critical-rce.html", "creation_timestamp": "2026-09-10T12:00:04.939451Z"} 2026-09-10T12:00:04.939451+00:00 https://vulnerability.circl.lu/sighting/4b9ebff8-fbf3-43f2-a93d-ee586e3f9450/export 2026-09-17T10:26:33.826858+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4b9ebff8-fbf3-43f2-a93d-ee586e3f9450", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2007", "type": "seen", "source": "https://t.me/cissp/5948", "content": "Dear Friends,\nPlease be informed that Microsoft's June 2022 Security updates have been released, and this month\u2019s release provides fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.\nOf the total patches introduced\u00a0today, three are classified as 'Critical' as they allow remote code execution (RC), with the rest classified as Important.\nBelow is a list of critical vulnerabilities that have been fixed in this month\u2019s release.\nCVE-2022-30136 | Windows Network File System Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30158 | Microsoft SharePoint Server Remote Code Execution (RCE) Vulnerability\n\nCVE-2022-30163 | Windows Hyper-V Remote Code Execution (RCE) Vulnerability\nFor more information about this month\u2019s advisory, please refer to the following\nhttps://lnkd.in/eBy3f3Re\nOther vendors advisories\n\n================\nAtlassian\nAtlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Centre actively exploited in the wild to backdoor Internet-exposed servers. The zero-day (CVE-2022-26134) affects all supported versions of Confluence Server and Data Centre and allows unauthenticated attackers to gain remote code execution on unpatched servers.\nFor more information, please refer to this article\nhttps://lnkd.in/ek6vKfQm\n\nGoogle\nGoogle released an update for Google Chrome, The Stable channel has been updated to 102.0.5005.115 for Windows, Mac, and Linux which will roll out over the coming days/weeks.\nThis update includes 7 security fixes. Below, we highlight fixes that were contributed by external researchers, one of the fixed bugs was tracked as CVE-2022-2007 and ranked as High, the researcher who reported this bug got 10,000$ as a bounty by reporting this bug.\n\nRedhat\nRedhat released a set of security updates that address solutions for many flaws that ranked as high and medium, for a complete list of addressed vulnerabilities and their related advisories, Please refer to this\u00a0link\n\nOracle\nOracle recently released the following security and patch update advisories, we are following and keep you updated when oracle releases its mega security patches next July.\nhttps://lnkd.in/ehPBvZZ6\n\nhttps://lnkd.in/ewcFuGqi\n\n\nFollow your normal patch management process, and test the patches before being applied to production according to change management", "creation_timestamp": "2026-09-10T08:00:05.620492Z"} 2026-09-10T08:00:05.620492+00:00