https://vulnerability.circl.lu/sightings/feed 2026-09-17T10:26:37.391779+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/26ffd2ea-baf9-4aa3-9906-7a38c1d1a968/export 2026-09-17T10:26:37.416666+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "26ffd2ea-baf9-4aa3-9906-7a38c1d1a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22891", "type": "published-proof-of-concept", "source": "Telegram/hzUX5Z4uo0-P4BmQ24cBFoT_KuLR6K2llMGI-QCqbLel1qA", "content": "", "creation_timestamp": "2026-09-15T00:00:09.116886Z"} 2026-09-15T00:00:09.116886+00:00 https://vulnerability.circl.lu/sighting/85fd7ac6-8902-48eb-a290-477e3e87bb34/export 2026-09-17T10:26:37.418487+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "85fd7ac6-8902-48eb-a290-477e3e87bb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"h00die-gr3y \", \"Adhikara13\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Netis router MW5360 has a command injection vulnerability via the password parameter on the login page.\\n The vulnerability stems from improper handling of the \\\"password\\\" parameter within the router's web interface.\\n The router's login page authorization can be bypassed by simply deleting the authorization header,\\n leading to the vulnerability. All router firmware versions up to `V1.0.1.3442` are vulnerable.\\n Attackers can inject a command in the 'password' parameter, encoded in base64, to exploit the command injection\\n vulnerability. When exploited, this can lead to unauthorized command execution, potentially allowing the attacker\\n to take control of the router.\", \"disclosure_date\": \"2024-01-11\", \"fullname\": \"exploit/linux/http/netis_unauth_rce_cve_2024_22729\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Netis router MW5360 unauthenticated RCE.\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netis_unauth_rce_cve_2024_22729\", \"references\": [\"CVE-2024-22729\", \"URL-https://attackerkb.com/topics/MvCphsf4LN/cve-2024-22729\", \"URL-https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:48.022920Z"} 2026-09-08T06:48:48.022920+00:00 https://vulnerability.circl.lu/sighting/900c40df-d1d2-4f69-9fd7-357f96e013dc/export 2026-09-17T10:26:37.418689+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "900c40df-d1d2-4f69-9fd7-357f96e013dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:40.945187Z"} 2026-09-04T00:00:40.945187+00:00 https://vulnerability.circl.lu/sighting/e4d355c7-45f5-48a7-a741-6f2323f1642b/export 2026-09-17T10:26:37.418821+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "e4d355c7-45f5-48a7-a741-6f2323f1642b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:40.908075Z"} 2026-09-04T00:00:40.908075+00:00 https://vulnerability.circl.lu/sighting/b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec/export 2026-09-17T10:26:37.418886+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:10.003236Z"} 2026-09-04T00:00:10.003236+00:00 https://vulnerability.circl.lu/sighting/d0e7d7ae-e178-429a-a9b5-975d0ad569e4/export 2026-09-17T10:26:37.418951+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d0e7d7ae-e178-429a-a9b5-975d0ad569e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:09.951345Z"} 2026-09-04T00:00:09.951345+00:00 https://vulnerability.circl.lu/sighting/422faaae-4f68-47a2-9e80-6519cc1ccdcd/export 2026-09-17T10:26:37.419016+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "422faaae-4f68-47a2-9e80-6519cc1ccdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T23:00:05.473418Z"} 2026-09-03T23:00:05.473418+00:00 https://vulnerability.circl.lu/sighting/3ca843b2-8e1c-42f5-aef5-6c02d4e77666/export 2026-09-17T10:26:37.419079+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "3ca843b2-8e1c-42f5-aef5-6c02d4e77666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T23:00:05.432902Z"} 2026-09-03T23:00:05.432902+00:00 https://vulnerability.circl.lu/sighting/65575cf3-d0dc-4f28-b868-df5add1875fe/export 2026-09-17T10:26:37.419148+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "65575cf3-d0dc-4f28-b868-df5add1875fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.305868Z"} 2026-09-03T18:00:07.305868+00:00 https://vulnerability.circl.lu/sighting/9190b627-7b55-40d3-b015-073fd4e422cd/export 2026-09-17T10:26:37.419212+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9190b627-7b55-40d3-b015-073fd4e422cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T18:00:07.263501Z"} 2026-09-03T18:00:07.263501+00:00