<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-16T21:06:20.767046+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b10c082c-8071-43da-9b50-c823d48c1df7/export</id>
    <title>b10c082c-8071-43da-9b50-c823d48c1df7</title>
    <updated>2026-06-16T21:06:21.120898+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b10c082c-8071-43da-9b50-c823d48c1df7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43589", "type": "seen", "source": "https://t.me/cibsecurity/53554", "content": "\u203c CVE-2022-43589 \u203c\n\nA null pointer dereference vulnerability exists in the handle_ioctl_8314C functionality of Callback technologies CBFS Filter 20.0.8317. A specially-crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-28T14:27:50.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b10c082c-8071-43da-9b50-c823d48c1df7/export"/>
    <published>2022-11-28T14:27:50+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/65c4eb7d-efe9-497b-8cd1-53b2214a4a05/export</id>
    <title>65c4eb7d-efe9-497b-8cd1-53b2214a4a05</title>
    <updated>2026-06-16T21:06:21.120824+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "65c4eb7d-efe9-497b-8cd1-53b2214a4a05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43588", "type": "seen", "source": "https://t.me/cibsecurity/53556", "content": "\u203c CVE-2022-43588 \u203c\n\nA null pointer dereference vulnerability exists in the handle_ioctl_83150 functionality of Callback technologies CBFS Filter 20.0.8317. A specially-crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-28T14:27:52.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/65c4eb7d-efe9-497b-8cd1-53b2214a4a05/export"/>
    <published>2022-11-28T14:27:52+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bb1d3d7f-d40b-4f4f-9962-d56d2d899648/export</id>
    <title>bb1d3d7f-d40b-4f4f-9962-d56d2d899648</title>
    <updated>2026-06-16T21:06:21.120746+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bb1d3d7f-d40b-4f4f-9962-d56d2d899648", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43581", "type": "seen", "source": "https://t.me/cibsecurity/54132", "content": "\u203c CVE-2022-43581 \u203c\n\nIBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-07T20:11:45.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bb1d3d7f-d40b-4f4f-9962-d56d2d899648/export"/>
    <published>2022-12-07T20:11:45+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ec24f040-9053-4fdb-8040-8bc6d4bd9278/export</id>
    <title>ec24f040-9053-4fdb-8040-8bc6d4bd9278</title>
    <updated>2026-06-16T21:06:21.120643+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ec24f040-9053-4fdb-8040-8bc6d4bd9278", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4358", "type": "seen", "source": "https://t.me/cibsecurity/55769", "content": "\u203c CVE-2022-4358 \u203c\n\nThe WP RSS By Publishers WordPress plugin through 0.1 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:26:42.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ec24f040-9053-4fdb-8040-8bc6d4bd9278/export"/>
    <published>2023-01-03T00:26:42+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a74e155a-3c4f-4758-bf6f-0e3aae754fd1/export</id>
    <title>a74e155a-3c4f-4758-bf6f-0e3aae754fd1</title>
    <updated>2026-06-16T21:06:21.118170+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a74e155a-3c4f-4758-bf6f-0e3aae754fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43581", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12958", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43581\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code.  IBM X-Force ID:  238805.\n\ud83d\udccf Published: 2022-12-07T17:07:51.028Z\n\ud83d\udccf Modified: 2025-04-22T19:53:08.017Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6844453\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/238805", "creation_timestamp": "2025-04-22T20:05:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a74e155a-3c4f-4758-bf6f-0e3aae754fd1/export"/>
    <published>2025-04-22T20:05:00+00:00</published>
  </entry>
</feed>
