<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T09:38:59.396880+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8bde78e5-be05-4ba6-bcb5-f3232c7241d1/export</id>
    <title>8bde78e5-be05-4ba6-bcb5-f3232c7241d1</title>
    <updated>2026-09-17T09:38:59.409983+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8bde78e5-be05-4ba6-bcb5-f3232c7241d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:15:11.314487Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8bde78e5-be05-4ba6-bcb5-f3232c7241d1/export"/>
    <published>2026-09-13T10:15:11.314487+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/55688b0c-5366-4d82-9376-3fa21344c6e8/export</id>
    <title>55688b0c-5366-4d82-9376-3fa21344c6e8</title>
    <updated>2026-09-17T09:38:59.411627+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "55688b0c-5366-4d82-9376-3fa21344c6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4978", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/remote_control_collection_rce.rb", "content": "{\"aliases\": [], \"arch\": \"x64, x86\", \"author\": [\"h00die\", \"H4rk3nz0\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module utilizes the Remote Control Server's, part\\n          of the Remote Control Collection by Steppschuh, protocol\\n          to deploy a payload and run it from the server.  This module will only deploy\\n          a payload if the server is set without a password (default).\\n          Tested against 3.1.1.12, current at the time of module writing\", \"disclosure_date\": \"2022-09-20\", \"fullname\": \"exploit/windows/misc/remote_control_collection_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"Remote Control Collection RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"screen-effects\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/misc/remote_control_collection_rce.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/misc/remote_control_collection_rce\", \"references\": [\"CVE-2022-4978\", \"URL-http://remote-control-collection.com\", \"URL-https://github.com/H4rk3nz0/PenTesting/blob/main/Exploits/remote%20control%20collection/remote-control-collection-rce.py\"], \"rport\": 1926, \"session_types\": false, \"targets\": [\"default\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:21.349084Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/55688b0c-5366-4d82-9376-3fa21344c6e8/export"/>
    <published>2026-09-08T06:52:21.349084+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c77db75d-4ab2-4f2d-b9b2-5013714296be/export</id>
    <title>c77db75d-4ab2-4f2d-b9b2-5013714296be</title>
    <updated>2026-09-17T09:38:59.411800+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c77db75d-4ab2-4f2d-b9b2-5013714296be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-05)", "content": "", "creation_timestamp": "2026-09-06T10:15:12.268328Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c77db75d-4ab2-4f2d-b9b2-5013714296be/export"/>
    <published>2026-09-06T10:15:12.268328+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/592f3eb8-a74e-4b4d-b112-95445e1de8c4/export</id>
    <title>592f3eb8-a74e-4b4d-b112-95445e1de8c4</title>
    <updated>2026-09-17T09:38:59.411928+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "592f3eb8-a74e-4b4d-b112-95445e1de8c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-02)", "content": "", "creation_timestamp": "2026-09-03T10:15:16.291529Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/592f3eb8-a74e-4b4d-b112-95445e1de8c4/export"/>
    <published>2026-09-03T10:15:16.291529+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1bcd67d1-970a-411f-abd2-3d7f8c12aec5/export</id>
    <title>1bcd67d1-970a-411f-abd2-3d7f8c12aec5</title>
    <updated>2026-09-17T09:38:59.412018+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1bcd67d1-970a-411f-abd2-3d7f8c12aec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:08.689796Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1bcd67d1-970a-411f-abd2-3d7f8c12aec5/export"/>
    <published>2026-09-02T10:15:08.689796+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/12d122ad-4528-470e-ad14-b2f38a154d71/export</id>
    <title>12d122ad-4528-470e-ad14-b2f38a154d71</title>
    <updated>2026-09-17T09:38:59.412076+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "12d122ad-4528-470e-ad14-b2f38a154d71", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4995", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6c3f6269-c541-42e3-9a57-51d5d82e6ce1", "content": "", "creation_timestamp": "2026-09-01T01:02:38.518085Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/12d122ad-4528-470e-ad14-b2f38a154d71/export"/>
    <published>2026-09-01T01:02:38.518085+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/08a5698e-8ca0-4586-8153-641d33ffbe56/export</id>
    <title>08a5698e-8ca0-4586-8153-641d33ffbe56</title>
    <updated>2026-09-17T09:38:59.412148+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "08a5698e-8ca0-4586-8153-641d33ffbe56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:19.661123Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/08a5698e-8ca0-4586-8153-641d33ffbe56/export"/>
    <published>2026-08-29T10:15:19.661123+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b60caacd-6155-41ab-9899-c04146d4c7cf/export</id>
    <title>b60caacd-6155-41ab-9899-c04146d4c7cf</title>
    <updated>2026-09-17T09:38:59.412215+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b60caacd-6155-41ab-9899-c04146d4c7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "content": "", "creation_timestamp": "2026-08-25T10:15:11.403873Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b60caacd-6155-41ab-9899-c04146d4c7cf/export"/>
    <published>2026-08-25T10:15:11.403873+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/1ce8525f-eb50-4278-870b-c8a5a5671906/export</id>
    <title>1ce8525f-eb50-4278-870b-c8a5a5671906</title>
    <updated>2026-09-17T09:38:59.412274+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "1ce8525f-eb50-4278-870b-c8a5a5671906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:15:19.058607Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/1ce8525f-eb50-4278-870b-c8a5a5671906/export"/>
    <published>2026-08-20T10:15:19.058607+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a0d2bbfc-6114-4552-a118-234197ca4fd8/export</id>
    <title>a0d2bbfc-6114-4552-a118-234197ca4fd8</title>
    <updated>2026-09-17T09:38:59.412337+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a0d2bbfc-6114-4552-a118-234197ca4fd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4984", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-17)", "content": "", "creation_timestamp": "2026-08-18T10:15:13.323252Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a0d2bbfc-6114-4552-a118-234197ca4fd8/export"/>
    <published>2026-08-18T10:15:13.323252+00:00</published>
  </entry>
</feed>
