https://vulnerability.circl.lu/sightings/feed 2026-06-15T12:41:56.504686+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/a299fd5d-dd2c-4cfd-8204-746cf102f64e/export 2026-06-15T12:41:56.877498+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a299fd5d-dd2c-4cfd-8204-746cf102f64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43722", "type": "seen", "source": "https://t.me/cibsecurity/54439", "content": "\u203c CVE-2022-43722 \u203c\n\nA vulnerability has been identified in SICAM PAS/PQS (All versions < V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:28:11.000000Z"} 2022-12-13T18:28:11+00:00 https://vulnerability.circl.lu/sighting/d46d0695-689b-42d0-b650-a7f0bd63934d/export 2026-06-15T12:41:56.875898+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "d46d0695-689b-42d0-b650-a7f0bd63934d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4372", "type": "seen", "source": "https://t.me/cibsecurity/55756", "content": "\u203c CVE-2022-4372 \u203c\n\nThe Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by high privilege users such as admin by default. However, depending on the plugin configuration, other users, such as subscriber could exploit this as well\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T11:55:15.000000Z"} 2023-01-04T11:55:15+00:00