https://vulnerability.circl.lu/sightings/feed 2026-10-11T21:40:16.596051+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/9af29fad-177e-44b6-9b04-8629e549b88e/export 2026-10-11T21:40:16.623789+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "9af29fad-177e-44b6-9b04-8629e549b88e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34047", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/63903", "content": "Exploit Collector\nWavlink WN530HG4 Password Disclosure\n\nhttps://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png \nWavlink WN530HG4 suffers from a password disclosure vulnerability.\n\nSHA-256 | 72bebf711fd5631d66be1c8329d791b3ee2a850669d29bee1a9d8e5eee53001d\n\nDownload\n# Exploit Title: Wavlink WN530HG4 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M30HG4.V5030.191116\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34047\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_address/set_safety.shtml?r=52300\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T14:00:04.520100Z"} 2026-09-05T14:00:04.520100+00:00 https://vulnerability.circl.lu/sighting/78416baa-20c1-4892-8a1e-44f95e6ebf1a/export 2026-10-11T21:40:16.628121+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "78416baa-20c1-4892-8a1e-44f95e6ebf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34046", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/63905", "content": "Exploit Collector\nWavlink WN533A8 Password Disclosure\n\nhttps://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png \nWavlink WN533A8 suffers from a password disclosure vulnerability.\n\nSHA-256 | 967e5d9bb7ba8f3b7aa6e0aab945794d32a8865342b72750bf2c2d2ff1033839\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34046\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_ADDRESS/sysinit.shtml\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T14:00:04.484943Z"} 2026-09-05T14:00:04.484943+00:00 https://vulnerability.circl.lu/sighting/caff56ea-6fff-47ef-9827-63585401119c/export 2026-10-11T21:40:16.628500+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "caff56ea-6fff-47ef-9827-63585401119c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34048", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/63899", "content": "Exploit Collector\nWavlink WN533A8 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWavlink WN533A8 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 48c5e34195262eb0f79803e13d423ea91d98f8a27b6999d304b3fe1661f90c4d\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Cross-Site Scripting (XSS)\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34048\n# Tested on: Windows\n\n# Poc code\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T14:00:04.398706Z"} 2026-09-05T14:00:04.398706+00:00 https://vulnerability.circl.lu/sighting/82b0b593-35d3-4c8c-a8d8-1aac6ea4cc5d/export 2026-10-11T21:40:16.628804+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "82b0b593-35d3-4c8c-a8d8-1aac6ea4cc5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34048", "type": "seen", "source": "https://t.me/hacking_Attack/63899", "content": "Exploit Collector\nWavlink WN533A8 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-4JQvP0m8T2k/WWlu48OEwdI/AAAAAAAAII8/Zf-K1JUBYisUlMBEUhCPF3Gl3BdQ2zG_gCLcBGAs/s1600/h103.png \nWavlink WN533A8 suffers from a cross site scripting vulnerability.\n\nSHA-256 | 48c5e34195262eb0f79803e13d423ea91d98f8a27b6999d304b3fe1661f90c4d\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Cross-Site Scripting (XSS)\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34048\n# Tested on: Windows\n\n# Poc code\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.687962Z"} 2026-09-01T20:01:32.687962+00:00 https://vulnerability.circl.lu/sighting/6de13bba-c71e-4c4b-a98e-56c9917d0256/export 2026-10-11T21:40:16.629064+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6de13bba-c71e-4c4b-a98e-56c9917d0256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34046", "type": "seen", "source": "https://t.me/hacking_Attack/63905", "content": "Exploit Collector\nWavlink WN533A8 Password Disclosure\n\nhttps://4.bp.blogspot.com/-qWHV3SrNBkU/WWlu99WsXjI/AAAAAAAAIJ4/a1ff3k5st1g65kjfNuwTJpgcbLEB4bHEACLcBGAs/s1600/h116.png \nWavlink WN533A8 suffers from a password disclosure vulnerability.\n\nSHA-256 | 967e5d9bb7ba8f3b7aa6e0aab945794d32a8865342b72750bf2c2d2ff1033839\n\nDownload\n# Exploit Title: Wavlink WN533A8 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M33A8.V5030.190716\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34046\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_ADDRESS/sysinit.shtml\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.507081Z"} 2026-09-01T20:01:32.507081+00:00 https://vulnerability.circl.lu/sighting/55953e01-0f30-4684-b3e6-5326958b0ef6/export 2026-10-11T21:40:16.629325+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "55953e01-0f30-4684-b3e6-5326958b0ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34047", "type": "seen", "source": "https://t.me/hacking_Attack/63903", "content": "Exploit Collector\nWavlink WN530HG4 Password Disclosure\n\nhttps://1.bp.blogspot.com/-HfAgGXf1DOw/WWlvbMysVAI/AAAAAAAAIPI/FubFag34U7YDsw4ZG5KiakYQR-P9HSuiwCLcBGAs/s1600/h72.png \nWavlink WN530HG4 suffers from a password disclosure vulnerability.\n\nSHA-256 | 72bebf711fd5631d66be1c8329d791b3ee2a850669d29bee1a9d8e5eee53001d\n\nDownload\n# Exploit Title: Wavlink WN530HG4 - Password Disclosure\n# Date: 2022-06-12\n# Exploit Author: Ahmed Alroky\n# Author Company : AIactive\n# Version: M30HG4.V5030.191116\n# Vendor home page : wavlink.com\n# Authentication Required: No\n# CVE : CVE-2022-34047\n# Tested on: Windows\n\n# Exploit\n\nview-source:http://IP_address/set_safety.shtml?r=52300\nsearch for var syspasswd=\"\nyou will find the username and the password\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:32.470976Z"} 2026-09-01T20:01:32.470976+00:00 https://vulnerability.circl.lu/sighting/7ef05063-5a99-4c2f-aa4b-85f62645c951/export 2026-10-11T21:40:16.629595+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "7ef05063-5a99-4c2f-aa4b-85f62645c951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3404", "type": "seen", "source": "https://t.me/cibsecurity/62012", "content": "\u203c CVE-2022-3404 \u203c\n\n** REJECT ** This candidate is unused by its CNA.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-13T00:24:20.000000Z"} 2023-04-13T00:24:20+00:00 https://vulnerability.circl.lu/sighting/b2eb53f6-5a6c-4399-b43e-d7c05d957b65/export 2026-10-11T21:40:16.629816+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b2eb53f6-5a6c-4399-b43e-d7c05d957b65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34046", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/46693", "content": "\u203c CVE-2022-34046 \u203c\n\nAn access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:18.000000Z"} 2022-07-20T20:12:18+00:00 https://vulnerability.circl.lu/sighting/a39125e6-d515-40af-8b04-7c1e6d178416/export 2026-10-11T21:40:16.629932+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "a39125e6-d515-40af-8b04-7c1e6d178416", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34045", "type": "seen", "source": "https://t.me/cibsecurity/46692", "content": "\u203c CVE-2022-34045 \u203c\n\nWavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:16.000000Z"} 2022-07-20T20:12:16+00:00 https://vulnerability.circl.lu/sighting/6d8d7a09-9e1d-4ceb-9bb2-f80c7ba4548d/export 2026-10-11T21:40:16.630047+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6d8d7a09-9e1d-4ceb-9bb2-f80c7ba4548d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-34047", "type": "seen", "source": "https://t.me/cibsecurity/46687", "content": "\u203c CVE-2022-34047 \u203c\n\nAn access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd].\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:10.000000Z"} 2022-07-20T20:12:10+00:00