<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-04T09:48:48.750847+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/000a3f5c-d3a1-4778-b866-d938019f37f7/export</id>
    <title>000a3f5c-d3a1-4778-b866-d938019f37f7</title>
    <updated>2026-05-04T09:48:49.137211+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "000a3f5c-d3a1-4778-b866-d938019f37f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47648", "type": "seen", "source": "https://t.me/cibsecurity/57814", "content": "\u203c CVE-2022-47648 \u203c\n\nBosch Security Systems B420 firmware 02.02.0001 employs IP based authorization in its authentication mechanism, allowing attackers to access the device as long as they are on the same network as a legitimate user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T00:25:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/000a3f5c-d3a1-4778-b866-d938019f37f7/export"/>
    <published>2023-02-09T00:25:19+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4cb2aa69-1963-49bc-853c-8c8c8d43e9e7/export</id>
    <title>4cb2aa69-1963-49bc-853c-8c8c8d43e9e7</title>
    <updated>2026-05-04T09:48:49.137102+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4cb2aa69-1963-49bc-853c-8c8c8d43e9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4764", "type": "seen", "source": "https://t.me/cibsecurity/58569", "content": "\u203c CVE-2022-4764 \u203c\n\nThe Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:41.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4cb2aa69-1963-49bc-853c-8c8c8d43e9e7/export"/>
    <published>2023-02-21T12:16:41+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/389398d7-8825-402d-9860-7812d0cc641f/export</id>
    <title>389398d7-8825-402d-9860-7812d0cc641f</title>
    <updated>2026-05-04T09:48:49.134460+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>http://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "389398d7-8825-402d-9860-7812d0cc641f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4764", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7375", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4764\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-21T08:50:55.747Z\n\ud83d\udccf Modified: 2025-03-12T20:26:35.473Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/788c6aa2-14cc-411f-95e8-5994f8c82d70", "creation_timestamp": "2025-03-12T20:42:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/389398d7-8825-402d-9860-7812d0cc641f/export"/>
    <published>2025-03-12T20:42:36+00:00</published>
  </entry>
</feed>
