<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-01T21:07:55.541154+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3c844d85-c177-4a7d-a930-a586562f7526/export</id>
    <title>3c844d85-c177-4a7d-a930-a586562f7526</title>
    <updated>2026-06-01T21:07:56.002704+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3c844d85-c177-4a7d-a930-a586562f7526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39974", "type": "seen", "source": "https://t.me/cibsecurity/50155", "content": "\u203c CVE-2022-39974 \u203c\n\nWASM3 v0.5.0 was discovered to contain a segmentation fault via the component op_Select_i32_srs in wasm3/source/m3_exec.h.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T22:39:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3c844d85-c177-4a7d-a930-a586562f7526/export"/>
    <published>2022-09-20T22:39:36+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4c604f59-0553-4fa4-aea1-78a84bbb766f/export</id>
    <title>4c604f59-0553-4fa4-aea1-78a84bbb766f</title>
    <updated>2026-06-01T21:07:56.002632+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4c604f59-0553-4fa4-aea1-78a84bbb766f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39975", "type": "seen", "source": "https://t.me/cibsecurity/50257", "content": "\u203c CVE-2022-39975 \u203c\n\nThe Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-22T07:11:52.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4c604f59-0553-4fa4-aea1-78a84bbb766f/export"/>
    <published>2022-09-22T07:11:52+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/017abe32-f134-4418-82c9-e9b0e7ad9920/export</id>
    <title>017abe32-f134-4418-82c9-e9b0e7ad9920</title>
    <updated>2026-06-01T21:07:56.002557+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "017abe32-f134-4418-82c9-e9b0e7ad9920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39978", "type": "seen", "source": "https://t.me/cibsecurity/52169", "content": "\u203c CVE-2022-39978 \u203c\n\nOnline Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the Product List module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-28T00:28:40.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/017abe32-f134-4418-82c9-e9b0e7ad9920/export"/>
    <published>2022-10-28T00:28:40+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9a7da05b-aca1-4e5c-bf11-5f907216c8f5/export</id>
    <title>9a7da05b-aca1-4e5c-bf11-5f907216c8f5</title>
    <updated>2026-06-01T21:07:56.002474+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9a7da05b-aca1-4e5c-bf11-5f907216c8f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39976", "type": "seen", "source": "https://t.me/cibsecurity/52180", "content": "\u203c CVE-2022-39976 \u203c\n\nSchool Activity Updates with SMS Notification v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /modules/announcement/index.php?view=edit&amp;amp;id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-28T00:28:56.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9a7da05b-aca1-4e5c-bf11-5f907216c8f5/export"/>
    <published>2022-10-28T00:28:56+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/64343eb2-f155-4f3d-b4e8-746a6df88c44/export</id>
    <title>64343eb2-f155-4f3d-b4e8-746a6df88c44</title>
    <updated>2026-06-01T21:07:56.002358+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "64343eb2-f155-4f3d-b4e8-746a6df88c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39977", "type": "seen", "source": "https://t.me/cibsecurity/52182", "content": "\u203c CVE-2022-39977 \u203c\n\nOnline Pet Shop We App v1.0 was discovered to contain an arbitrary file upload vulnerability via the Editing function in the User module. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file uploaded through the picture upload point.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-28T00:28:57.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/64343eb2-f155-4f3d-b4e8-746a6df88c44/export"/>
    <published>2022-10-28T00:28:57+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e7454444-8808-4cfc-9ca3-df23662fee02/export</id>
    <title>e7454444-8808-4cfc-9ca3-df23662fee02</title>
    <updated>2026-06-01T21:07:55.999506+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e7454444-8808-4cfc-9ca3-df23662fee02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39975", "type": "seen", "source": "https://t.me/arpsyndicate/3244", "content": "#ExploitObserverAlert\n\nCVE-2022-39975\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2022-39975. The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a \"Content Page\" type page, allowing attackers to view unpublished \"Content Page\" pages via URL manipulation.\n\nFIRST-EPSS: 0.000530000\nNVD-IS: 1.4\nNVD-ES: 2.8", "creation_timestamp": "2024-01-28T07:09:09.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e7454444-8808-4cfc-9ca3-df23662fee02/export"/>
    <published>2024-01-28T07:09:09+00:00</published>
  </entry>
</feed>
