https://vulnerability.circl.lu/sightings/feed 2026-05-04T11:13:13.559681+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/ade50f4b-cf20-4857-8c81-f4ce15c4244a/export 2026-05-04T11:13:13.888506+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "ade50f4b-cf20-4857-8c81-f4ce15c4244a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/cibsecurity/56250", "content": "\u203c CVE-2022-4700 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:49.000000Z"} 2023-01-10T20:28:49+00:00 https://vulnerability.circl.lu/sighting/5016846d-7cbd-41d8-a0b5-005af7cc0a1b/export 2026-05-04T11:13:13.888384+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "5016846d-7cbd-41d8-a0b5-005af7cc0a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/cibsecurity/57284", "content": "\u203c CVE-2022-47002 \u203c\n\nA vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:06.000000Z"} 2023-02-01T16:14:06+00:00 https://vulnerability.circl.lu/sighting/02e293f7-79d5-4093-8a96-852184886dc5/export 2026-05-04T11:13:13.888260+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "02e293f7-79d5-4093-8a96-852184886dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "seen", "source": "https://t.me/cibsecurity/57305", "content": "\u203c CVE-2022-47003 \u203c\n\nA vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:29:35.000000Z"} 2023-02-01T16:29:35+00:00 https://vulnerability.circl.lu/sighting/07aba7b6-2423-4d82-bd22-339ba06d96d3/export 2026-05-04T11:13:13.888128+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "07aba7b6-2423-4d82-bd22-339ba06d96d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"} 2023-03-13T13:17:14+00:00 https://vulnerability.circl.lu/sighting/27fdc679-1d97-49e9-8a03-c57ded029b5e/export 2026-05-04T11:13:13.888009+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "27fdc679-1d97-49e9-8a03-c57ded029b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"} 2023-03-13T13:17:14+00:00 https://vulnerability.circl.lu/sighting/0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09/export 2026-05-04T11:13:13.887889+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/arpsyndicate/1691", "content": "#ExploitObserverAlert\n\nCVE-2022-4700\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-4700. The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-11T02:48:51.000000Z"} 2023-12-11T02:48:51+00:00 https://vulnerability.circl.lu/sighting/e8b5142e-8875-4333-9401-0fe5512edb91/export 2026-05-04T11:13:13.887770+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "e8b5142e-8875-4333-9401-0fe5512edb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/ctinow/157636", "content": "https://ift.tt/hIPO237\nCVE-2022-47002 Exploit", "creation_timestamp": "2023-12-21T12:18:50.000000Z"} 2023-12-21T12:18:50+00:00 https://vulnerability.circl.lu/sighting/bc17287a-f46f-45b2-b287-c59ebd421815/export 2026-05-04T11:13:13.887593+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "bc17287a-f46f-45b2-b287-c59ebd421815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"} 2024-09-27T18:36:12+00:00 https://vulnerability.circl.lu/sighting/dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3/export 2026-05-04T11:13:13.884654+00:00 Automation user http://vulnerability.circl.lu/user/automation {"uuid": "dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"} 2024-09-27T18:36:12+00:00