<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-06T16:07:19.599985+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/34146c7b-f88b-4cf5-963d-7a75cdf07c7f/export</id>
    <title>34146c7b-f88b-4cf5-963d-7a75cdf07c7f</title>
    <updated>2026-06-06T16:07:19.958410+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "34146c7b-f88b-4cf5-963d-7a75cdf07c7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23631", "type": "seen", "source": "https://t.me/cibsecurity/37126", "content": "\u203c CVE-2022-23631 \u203c\n\nsuperjson is a program to allow JavaScript expressions to be serialized to a superset of JSON. In versions prior to 1.8.1 superjson allows input to run arbitrary code on any server using superjson input without prior authentication or knowledge. The only requirement is that the server implements at least one endpoint which uses superjson during request processing. This has been patched in superjson 1.8.1. Users are advised to update. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-10T00:13:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/34146c7b-f88b-4cf5-963d-7a75cdf07c7f/export"/>
    <published>2022-02-10T00:13:15+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/58fd9d34-4531-48c7-8253-aa9f0f4490c7/export</id>
    <title>58fd9d34-4531-48c7-8253-aa9f0f4490c7</title>
    <updated>2026-06-06T16:07:19.958278+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "58fd9d34-4531-48c7-8253-aa9f0f4490c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23631", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6398", "content": "#exploit\n1. Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706\nhttps://www.microsoft.com/security/blog/2022/07/13/uncovering-a-macos-app-sandbox-escape-vulnerability-a-deep-dive-into-cve-2022-26706\n\n2. CVE-2022-23631:\nRCE via Prototype Pollution in Blitz.js\nhttps://blog.sonarsource.com/blitzjs-prototype-pollution", "creation_timestamp": "2022-07-14T13:07:20.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/58fd9d34-4531-48c7-8253-aa9f0f4490c7/export"/>
    <published>2022-07-14T13:07:20+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/386fa62e-5e35-4ebb-8035-61e77256babb/export</id>
    <title>386fa62e-5e35-4ebb-8035-61e77256babb</title>
    <updated>2026-06-06T16:07:19.958124+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "386fa62e-5e35-4ebb-8035-61e77256babb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23631", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/333", "content": "CVE-2022-23631 : RCE via Prototype Pollution in Blitz.js\nhttps://blog.sonarsource.com/blitzjs-prototype-pollution", "creation_timestamp": "2022-07-16T23:53:49.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/386fa62e-5e35-4ebb-8035-61e77256babb/export"/>
    <published>2022-07-16T23:53:49+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c92045c2-e47a-4f69-95dc-3427bf2aa964/export</id>
    <title>c92045c2-e47a-4f69-95dc-3427bf2aa964</title>
    <updated>2026-06-06T16:07:19.956003+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c92045c2-e47a-4f69-95dc-3427bf2aa964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-23631", "type": "seen", "source": "https://t.me/ctinow/164845", "content": "https://ift.tt/49U3xKi\nCVE-2022-23631 Exploit", "creation_timestamp": "2024-01-09T08:16:10.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c92045c2-e47a-4f69-95dc-3427bf2aa964/export"/>
    <published>2024-01-09T08:16:10+00:00</published>
  </entry>
</feed>
