<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-04T19:16:59.722578+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5a361105-663d-41e3-a9e7-dd245df3526c/export</id>
    <title>5a361105-663d-41e3-a9e7-dd245df3526c</title>
    <updated>2026-05-04T19:17:00.085655+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5a361105-663d-41e3-a9e7-dd245df3526c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/weareaig/314", "content": "CVE-2022-45025\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025", "creation_timestamp": "2022-12-11T15:49:25.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5a361105-663d-41e3-a9e7-dd245df3526c/export"/>
    <published>2022-12-11T15:49:25+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fbc0a757-0875-4ced-8105-49536ea49830/export</id>
    <title>fbc0a757-0875-4ced-8105-49536ea49830</title>
    <updated>2026-05-04T19:17:00.085586+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fbc0a757-0875-4ced-8105-49536ea49830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/weareaig/12309", "content": "CVE-2022-45025\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025", "creation_timestamp": "2022-12-11T15:49:26.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fbc0a757-0875-4ced-8105-49536ea49830/export"/>
    <published>2022-12-11T15:49:26+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/43ceb83f-e9f4-4d7e-88fc-f743526aab34/export</id>
    <title>43ceb83f-e9f4-4d7e-88fc-f743526aab34</title>
    <updated>2026-05-04T19:17:00.085507+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "43ceb83f-e9f4-4d7e-88fc-f743526aab34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1740", "content": "CVE-2022-45025\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025", "creation_timestamp": "2022-12-12T14:05:55.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/43ceb83f-e9f4-4d7e-88fc-f743526aab34/export"/>
    <published>2022-12-12T14:05:55+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/049c0a53-cc93-4790-b8f2-8d4487c802cb/export</id>
    <title>049c0a53-cc93-4790-b8f2-8d4487c802cb</title>
    <updated>2026-05-04T19:17:00.085431+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "049c0a53-cc93-4790-b8f2-8d4487c802cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1754", "content": "#exploit\n1. CVE-2022-45025:\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n2. Exploring Chrome\u2019s CVE-2020-6418\nhttps://blog.haboob.sa/blog/exploring-chromes-cve-2020-6418-part1\n\n3. CVE-2022-39066:\nSQL Injection Vulnerability in ZTE MF286R\nhttps://github.com/v0lp3/CVE-2022-39066", "creation_timestamp": "2022-12-13T04:12:39.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/049c0a53-cc93-4790-b8f2-8d4487c802cb/export"/>
    <published>2022-12-13T04:12:39+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/25a6dc69-85e7-47e5-abda-03d317c7ec3a/export</id>
    <title>25a6dc69-85e7-47e5-abda-03d317c7ec3a</title>
    <updated>2026-05-04T19:17:00.085349+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "25a6dc69-85e7-47e5-abda-03d317c7ec3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7348", "content": "#exploit\n1. CVE-2022-45025:\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n2. Exploring Chrome\u2019s CVE-2020-6418\nhttps://blog.haboob.sa/blog/exploring-chromes-cve-2020-6418-part1\n\n3. CVE-2022-39066:\nSQL Injection Vulnerability in ZTE MF286R\nhttps://github.com/v0lp3/CVE-2022-39066", "creation_timestamp": "2022-12-13T11:01:01.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/25a6dc69-85e7-47e5-abda-03d317c7ec3a/export"/>
    <published>2022-12-13T11:01:01+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7e736162-8522-47e3-9884-3389cd4d76cb/export</id>
    <title>7e736162-8522-47e3-9884-3389cd4d76cb</title>
    <updated>2026-05-04T19:17:00.085248+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7e736162-8522-47e3-9884-3389cd4d76cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/4392", "content": "CVE-2022-45025 ( Command injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nGithub\n\n#POC  #Pdf\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-01-04T10:02:38.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7e736162-8522-47e3-9884-3389cd4d76cb/export"/>
    <published>2023-01-04T10:02:38+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/28653c1a-37ca-4406-a7d9-836cbdf8a268/export</id>
    <title>28653c1a-37ca-4406-a7d9-836cbdf8a268</title>
    <updated>2026-05-04T19:17:00.083367+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "28653c1a-37ca-4406-a7d9-836cbdf8a268", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/BABATATASASA/3436", "content": "\u200b\u200bCVE-2022-25765 \n\npdfkit Exploit Reverse Shell\n\npdfkit &amp;lt;0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u200b\u200bCVE-2022-45025\n\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n\u200b\u200bCVE-2022-36537\n\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n\u200b\u200bCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bCVE-2022-45771 - Pwndoc LFI to RCE\n\nPwndoc local file inclusion to remote code execution of Node.js code on the server.\n\nhttps://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE\n\n\u200b\u200bCVE-2022-46169\n\nCacti remote_agent.php Unauthenticated Command Injection.\n\nhttps://github.com/0xf4n9x/CVE-2022-46169\n\n\u200b\u200bCVE-2022-45451\n\nPoC for CVE-2022-45451 Acronis Arbitrary File Read\n\nhttps://github.com/alfarom256/CVE-2022-45451\n\nCVE-2022-28672\n\nThis bug was Use after Free caused by improper handling of javascript object memory references.\n\nhttps://github.com/hacksysteam/CVE-2022-28672\n\nUse after Free - RCE Exploit: https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672\n\n\u200b\u200bCVE-2003-0358\n\nBuffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges &amp;gt; via a long -s command line option.\n\nhttps://github.com/snowcra5h/CVE-2003-0358\n\n\u200b\u200bCVE-2022-39253\n\nDocker host file read\n\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc\n\n\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n\u200b\u200bCVE-2022-2602\n\nPoC Kernel Privilege Escalation Linux\n\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n\u200b\u200bEvilWfshbr\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation\n\nhttps://github.com/kkent030315/CVE-2022-42046\n\n\u200b\u200bCVE-2022-2602\n\nThis repository contains exploits for CVE-2022-2602. There are two versions of it:\n\n\u25ab\ufe0f Exploit using userfaultfd technique.\n\u25ab\ufe0f Exploit using inode locking technique.\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\n#cve #poc \n@pfkgit", "creation_timestamp": "2023-01-28T19:14:38.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/28653c1a-37ca-4406-a7d9-836cbdf8a268/export"/>
    <published>2023-01-28T19:14:38+00:00</published>
  </entry>
</feed>
