<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T09:12:22.407031+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/83793fb1-0be5-41c7-b928-1627850262ff/export</id>
    <title>83793fb1-0be5-41c7-b928-1627850262ff</title>
    <updated>2026-09-17T09:12:22.423641+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "83793fb1-0be5-41c7-b928-1627850262ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41082", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-14)", "content": "", "creation_timestamp": "2026-09-15T10:15:05.678807Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/83793fb1-0be5-41c7-b928-1627850262ff/export"/>
    <published>2026-09-15T10:15:05.678807+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/35572857-8a7b-46bc-a018-875baba1ee12/export</id>
    <title>35572857-8a7b-46bc-a018-875baba1ee12</title>
    <updated>2026-09-17T09:12:22.425613+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "35572857-8a7b-46bc-a018-875baba1ee12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41401", "type": "published-proof-of-concept", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-15T00:00:23.078201Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/35572857-8a7b-46bc-a018-875baba1ee12/export"/>
    <published>2026-09-15T00:00:23.078201+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e38594c0-3405-4ffa-ae16-4f95ae442252/export</id>
    <title>e38594c0-3405-4ffa-ae16-4f95ae442252</title>
    <updated>2026-09-17T09:12:22.425776+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e38594c0-3405-4ffa-ae16-4f95ae442252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41401", "type": "seen", "source": "Telegram/3MMbFueKHg37BFgH_ywUM_4BJMQza_SIx_NKgZuYC9XTFpk", "content": "", "creation_timestamp": "2026-09-14T03:00:13.190771Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e38594c0-3405-4ffa-ae16-4f95ae442252/export"/>
    <published>2026-09-14T03:00:13.190771+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4f65e7f2-7e7f-4dec-bf21-3a44c8fc128b/export</id>
    <title>4f65e7f2-7e7f-4dec-bf21-3a44c8fc128b</title>
    <updated>2026-09-17T09:12:22.425905+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4f65e7f2-7e7f-4dec-bf21-3a44c8fc128b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41082", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:05.973878Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4f65e7f2-7e7f-4dec-bf21-3a44c8fc128b/export"/>
    <published>2026-09-13T10:15:05.973878+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/706adfb9-c3ae-4dd1-95b4-60228e62996e/export</id>
    <title>706adfb9-c3ae-4dd1-95b4-60228e62996e</title>
    <updated>2026-09-17T09:12:22.426027+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "706adfb9-c3ae-4dd1-95b4-60228e62996e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41082", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "content": "", "creation_timestamp": "2026-09-11T10:15:03.790101Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/706adfb9-c3ae-4dd1-95b4-60228e62996e/export"/>
    <published>2026-09-11T10:15:03.790101+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/111368d4-0280-4900-8e1a-559e4b01e6d1/export</id>
    <title>111368d4-0280-4900-8e1a-559e4b01e6d1</title>
    <updated>2026-09-17T09:12:22.426143+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "111368d4-0280-4900-8e1a-559e4b01e6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41328", "type": "exploited", "source": "https://t.me/cissp/6661", "content": "Fortinet researchers have discovered an advanced and highly targeted threat actor that is exploiting a zero-day security vulnerability (CVE-2022-41328) in FortiOS. This flaw could potentially result in the execution of arbitrary code.\n\nLearn more: https://thehackernews.com/2023/03/fortinet-fortios-flaw-exploited-in.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.23", "creation_timestamp": "2026-09-11T00:00:55.249516Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/111368d4-0280-4900-8e1a-559e4b01e6d1/export"/>
    <published>2026-09-11T00:00:55.249516+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7a75cc44-2aaf-4157-8895-87bcbd27c581/export</id>
    <title>7a75cc44-2aaf-4157-8895-87bcbd27c581</title>
    <updated>2026-09-17T09:12:22.426264+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7a75cc44-2aaf-4157-8895-87bcbd27c581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41042", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6628", "content": "exploit\n1. CVE-2022-41042:\nHTML/JavaScript injection in MS SARIF viewer/MS Live Preview extension, Path traversal in the local HTTP server in MS Live Preview extension\nhttps://blog.trailofbits.com/2023/02/21/vscode-extension-escape-vulnerability\n\n2. CVE-2023-21839:\nVulnerability in the Oracle WebLogic Server\nhttps://github.com/Scarehehe/Weblogic-CVE-2023-21839\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.05", "creation_timestamp": "2026-09-11T00:00:54.867345Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7a75cc44-2aaf-4157-8895-87bcbd27c581/export"/>
    <published>2026-09-11T00:00:54.867345+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/733800b3-25ef-4bf6-ab51-9ca37a17803d/export</id>
    <title>733800b3-25ef-4bf6-ab51-9ca37a17803d</title>
    <updated>2026-09-17T09:12:22.426381+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "733800b3-25ef-4bf6-ab51-9ca37a17803d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41223", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-11T00:00:54.821502Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/733800b3-25ef-4bf6-ab51-9ca37a17803d/export"/>
    <published>2026-09-11T00:00:54.821502+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/be6c73e7-37e8-4929-88cf-d566b74d0d05/export</id>
    <title>be6c73e7-37e8-4929-88cf-d566b74d0d05</title>
    <updated>2026-09-17T09:12:22.426503+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "be6c73e7-37e8-4929-88cf-d566b74d0d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41352", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6357", "content": "exploit\n1. CVE-2022-41352:\nZimbra &amp;lt;9.0.0.p27 - RCE\nhttps://github.com/Cr4ckC4t/cve-2022-41352-zimbra-rce\n\n2. CVE-2022-3949:\nXSS in Simple Cashiering System\nhttps://github.com/maikroservice/CVE-2022-3949\n\n3. CVE-2022-31898:\nCommand injection for GL-iNet routers with firm. &amp;lt;3.215\nhttps://github.com/gigaryte/cve-2022-31898\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.23", "creation_timestamp": "2026-09-11T00:00:51.149601Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/be6c73e7-37e8-4929-88cf-d566b74d0d05/export"/>
    <published>2026-09-11T00:00:51.149601+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3bc4a236-c5ed-47d6-b33c-746c9e7e34f2/export</id>
    <title>3bc4a236-c5ed-47d6-b33c-746c9e7e34f2</title>
    <updated>2026-09-17T09:12:22.426636+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3bc4a236-c5ed-47d6-b33c-746c9e7e34f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41082", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6358", "content": "tools\nBlue Team Techniques\n1. Web cache poisoning vulnerability scanner\nhttps://github.com/Th0h0/autopoisoner\n\n2. Nmap scripts to detect exchange 0-day (CVE-2022-41082) vulnerability\nhttps://github.com/Diverto/nse-exchange\n\n3. Tool to automate open redirect detection at scale\nhttps://github.com/Th0h0/autoredirect\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.23", "creation_timestamp": "2026-09-11T00:00:51.087783Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3bc4a236-c5ed-47d6-b33c-746c9e7e34f2/export"/>
    <published>2026-09-11T00:00:51.087783+00:00</published>
  </entry>
</feed>
