https://vulnerability.circl.lu/sightings/feed 2026-05-04T17:34:47.724398+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/1faa0f2d-aa52-444b-b9c1-15ab642f34be/export 2026-05-04T17:34:48.098437+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "1faa0f2d-aa52-444b-b9c1-15ab642f34be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "seen", "source": "https://t.me/cibsecurity/38168", "content": "\u203c CVE-2022-26159 \u203c\n\nThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T07:22:54.000000Z"} 2022-02-28T07:22:54+00:00 https://vulnerability.circl.lu/sighting/0c311e4c-15ab-42e1-a887-54979ba12422/export 2026-05-04T17:34:48.098245+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "0c311e4c-15ab-42e1-a887-54979ba12422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/9317", "content": "https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML", "creation_timestamp": "2022-03-01T14:00:33.000000Z"} 2022-03-01T14:00:33+00:00 https://vulnerability.circl.lu/sighting/838f008a-34cc-4fdd-83e7-fc354ec7c3ee/export 2026-05-04T17:34:48.094671+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "838f008a-34cc-4fdd-83e7-fc354ec7c3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1577", "content": "CVE-2022-26159-Ametys-Autocompletion-XML\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 python \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Ametys CMS, \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 sqlite.\nhttps://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-05-19T05:00:27.000000Z"} 2022-05-19T05:00:27+00:00