<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-05T19:57:20.729640+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/593a5773-8d53-4349-9ff5-f29e81b76bbb/export</id>
    <title>593a5773-8d53-4349-9ff5-f29e81b76bbb</title>
    <updated>2026-06-05T19:57:21.017806+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "593a5773-8d53-4349-9ff5-f29e81b76bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/5115", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (Dec 1-31)\nCVE-2021-44228 - Apache Log4j2\nCVE-2021-45046 - Apache Log4j DoS\nCVE-2021-42278, CVE-2021-42287 - AD Domain Services EoP Vulnerability\nCVE-2021-44832 - Apache Log4j 2.17.0\nCVE-2021-45105 - DoS via Uncontrolled Recursion in Log4j Strsubstitutor\nCVE-2021-43798 - Grafana 8.x Path Traversal\nCVE-2021-44077 - PreAuth RCE in ManageEngine ServiceDesk Plus\nCVE-2021-4422 - Log4j vulnerability\nCVE-2021-44515 - Zoho ManageEngine Desktop Central Pre-auth RCE", "creation_timestamp": "2024-10-21T16:08:53.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/593a5773-8d53-4349-9ff5-f29e81b76bbb/export"/>
    <published>2024-10-21T16:08:53+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ab8215ad-b576-437c-b7a3-da5300ee4d13/export</id>
    <title>ab8215ad-b576-437c-b7a3-da5300ee4d13</title>
    <updated>2026-06-05T19:57:21.017738+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ab8215ad-b576-437c-b7a3-da5300ee4d13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971193", "content": "", "creation_timestamp": "2024-12-24T20:25:40.214178Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ab8215ad-b576-437c-b7a3-da5300ee4d13/export"/>
    <published>2024-12-24T20:25:40.214178+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b6358f66-fe13-433e-b20c-e9d80e9026ec/export</id>
    <title>b6358f66-fe13-433e-b20c-e9d80e9026ec</title>
    <updated>2026-06-05T19:57:21.017671+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b6358f66-fe13-433e-b20c-e9d80e9026ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:32.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b6358f66-fe13-433e-b20c-e9d80e9026ec/export"/>
    <published>2025-02-23T02:10:32+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8be051ab-7071-441b-8fba-653547928424/export</id>
    <title>8be051ab-7071-441b-8fba-653547928424</title>
    <updated>2026-06-05T19:57:21.017591+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8be051ab-7071-441b-8fba-653547928424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48362\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)\n\ud83d\udccf Published: 2023-02-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T20:28:51.711Z\n\ud83d\udd17 References:\n1. https://srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop-central.html\n2. https://www.manageengine.com/products/desktop-central/cve-2022-48362.html", "creation_timestamp": "2025-03-11T20:41:22.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8be051ab-7071-441b-8fba-653547928424/export"/>
    <published>2025-03-11T20:41:22+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/90cdce91-3d98-46cc-a1dd-0a89d006f9b3/export</id>
    <title>90cdce91-3d98-46cc-a1dd-0a89d006f9b3</title>
    <updated>2026-06-05T19:57:21.017497+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "90cdce91-3d98-46cc-a1dd-0a89d006f9b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ec77d0042d7c1a9ad744520f5753d457", "content": "", "creation_timestamp": "2025-09-17T14:11:19.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/90cdce91-3d98-46cc-a1dd-0a89d006f9b3/export"/>
    <published>2025-09-17T14:11:19+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4a439897-085a-4e4b-9464-f1c14b934a76/export</id>
    <title>4a439897-085a-4e4b-9464-f1c14b934a76</title>
    <updated>2026-06-05T19:57:21.016724+00:00</updated>
    <author>
      <name>Cédric Bonhomme</name>
      <uri>https://vulnerability.circl.lu/user/cedric</uri>
    </author>
    <content>{"uuid": "4a439897-085a-4e4b-9464-f1c14b934a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2021-44515", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fcd27139-d47e-48b5-89cd-64db8ae08c48", "content": "", "creation_timestamp": "2026-02-02T12:28:30.729784Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4a439897-085a-4e4b-9464-f1c14b934a76/export"/>
    <published>2026-02-02T12:28:30.729784+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/e4f66034-5752-4758-9970-f3239e50543f/export</id>
    <title>e4f66034-5752-4758-9970-f3239e50543f</title>
    <updated>2026-06-05T19:57:21.016624+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "e4f66034-5752-4758-9970-f3239e50543f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/e4f66034-5752-4758-9970-f3239e50543f/export"/>
    <published>2026-03-24T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6b41dbf1-0ee8-419f-93d8-d5dd54f07a0c/export</id>
    <title>6b41dbf1-0ee8-419f-93d8-d5dd54f07a0c</title>
    <updated>2026-06-05T19:57:21.016492+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6b41dbf1-0ee8-419f-93d8-d5dd54f07a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6b41dbf1-0ee8-419f-93d8-d5dd54f07a0c/export"/>
    <published>2026-04-21T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/92c39eb6-92dd-49eb-aedb-67245e642748/export</id>
    <title>92c39eb6-92dd-49eb-aedb-67245e642748</title>
    <updated>2026-06-05T19:57:21.016160+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "92c39eb6-92dd-49eb-aedb-67245e642748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/92c39eb6-92dd-49eb-aedb-67245e642748/export"/>
    <published>2026-04-22T00:00:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/7b4fd5f7-8e69-4814-8ad3-43799d68dde3/export</id>
    <title>7b4fd5f7-8e69-4814-8ad3-43799d68dde3</title>
    <updated>2026-06-05T19:57:21.013000+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://vulnerability.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "7b4fd5f7-8e69-4814-8ad3-43799d68dde3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44515", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/7b4fd5f7-8e69-4814-8ad3-43799d68dde3/export"/>
    <published>2026-05-15T00:00:00+00:00</published>
  </entry>
</feed>
