https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 10:26:42 +0000 https://vulnerability.circl.lu/sighting/26ffd2ea-baf9-4aa3-9906-7a38c1d1a968/export {"uuid": "26ffd2ea-baf9-4aa3-9906-7a38c1d1a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22891", "type": "published-proof-of-concept", "source": "Telegram/hzUX5Z4uo0-P4BmQ24cBFoT_KuLR6K2llMGI-QCqbLel1qA", "content": "", "creation_timestamp": "2026-09-15T00:00:09.116886Z"} {"uuid": "26ffd2ea-baf9-4aa3-9906-7a38c1d1a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22891", "type": "published-proof-of-concept", "source": "Telegram/hzUX5Z4uo0-P4BmQ24cBFoT_KuLR6K2llMGI-QCqbLel1qA", "content": "", "creation_timestamp": "2026-09-15T00:00:09.116886Z"} https://vulnerability.circl.lu/sighting/26ffd2ea-baf9-4aa3-9906-7a38c1d1a968/export Tue, 15 Sep 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/85fd7ac6-8902-48eb-a290-477e3e87bb34/export {"uuid": "85fd7ac6-8902-48eb-a290-477e3e87bb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"h00die-gr3y \", \"Adhikara13\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Netis router MW5360 has a command injection vulnerability via the password parameter on the login page.\\n The vulnerability stems from improper handling of the \\\"password\\\" parameter within the router's web interface.\\n The router's login page authorization can be bypassed by simply deleting the authorization header,\\n leading to the vulnerability. All router firmware versions up to `V1.0.1.3442` are vulnerable.\\n Attackers can inject a command in the 'password' parameter, encoded in base64, to exploit the command injection\\n vulnerability. When exploited, this can lead to unauthorized command execution, potentially allowing the attacker\\n to take control of the router.\", \"disclosure_date\": \"2024-01-11\", \"fullname\": \"exploit/linux/http/netis_unauth_rce_cve_2024_22729\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Netis router MW5360 unauthenticated RCE.\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netis_unauth_rce_cve_2024_22729\", \"references\": [\"CVE-2024-22729\", \"URL-https://attackerkb.com/topics/MvCphsf4LN/cve-2024-22729\", \"URL-https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:48.022920Z"} {"uuid": "85fd7ac6-8902-48eb-a290-477e3e87bb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22729", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb", "content": "{\"aliases\": [], \"arch\": \"mipsle\", \"author\": [\"h00die-gr3y \", \"Adhikara13\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Netis router MW5360 has a command injection vulnerability via the password parameter on the login page.\\n The vulnerability stems from improper handling of the \\\"password\\\" parameter within the router's web interface.\\n The router's login page authorization can be bypassed by simply deleting the authorization header,\\n leading to the vulnerability. All router firmware versions up to `V1.0.1.3442` are vulnerable.\\n Attackers can inject a command in the 'password' parameter, encoded in base64, to exploit the command injection\\n vulnerability. When exploited, this can lead to unauthorized command execution, potentially allowing the attacker\\n to take control of the router.\", \"disclosure_date\": \"2024-01-11\", \"fullname\": \"exploit/linux/http/netis_unauth_rce_cve_2024_22729\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"Netis router MW5360 unauthenticated RCE.\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\", \"artifacts-on-disk\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/netis_unauth_rce_cve_2024_22729.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/netis_unauth_rce_cve_2024_22729\", \"references\": [\"CVE-2024-22729\", \"URL-https://attackerkb.com/topics/MvCphsf4LN/cve-2024-22729\", \"URL-https://github.com/adhikara13/CVE/blob/main/netis_MW5360/blind%20command%20injection%20in%20password%20parameter%20in%20initial%20settings.md\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:48.022920Z"} https://vulnerability.circl.lu/sighting/85fd7ac6-8902-48eb-a290-477e3e87bb34/export Tue, 08 Sep 2026 06:48:48 +0000 https://vulnerability.circl.lu/sighting/900c40df-d1d2-4f69-9fd7-357f96e013dc/export {"uuid": "900c40df-d1d2-4f69-9fd7-357f96e013dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:40.945187Z"} {"uuid": "900c40df-d1d2-4f69-9fd7-357f96e013dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:40.945187Z"} https://vulnerability.circl.lu/sighting/900c40df-d1d2-4f69-9fd7-357f96e013dc/export Fri, 04 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/e4d355c7-45f5-48a7-a741-6f2323f1642b/export {"uuid": "e4d355c7-45f5-48a7-a741-6f2323f1642b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:40.908075Z"} {"uuid": "e4d355c7-45f5-48a7-a741-6f2323f1642b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:40.908075Z"} https://vulnerability.circl.lu/sighting/e4d355c7-45f5-48a7-a741-6f2323f1642b/export Fri, 04 Sep 2026 00:00:40 +0000 https://vulnerability.circl.lu/sighting/b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec/export {"uuid": "b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:10.003236Z"} {"uuid": "b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:10.003236Z"} https://vulnerability.circl.lu/sighting/b7114b60-0ee5-4dbc-80d0-ae8b5ba154ec/export Fri, 04 Sep 2026 00:00:10 +0000 https://vulnerability.circl.lu/sighting/d0e7d7ae-e178-429a-a9b5-975d0ad569e4/export {"uuid": "d0e7d7ae-e178-429a-a9b5-975d0ad569e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:09.951345Z"} {"uuid": "d0e7d7ae-e178-429a-a9b5-975d0ad569e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:09.951345Z"} https://vulnerability.circl.lu/sighting/d0e7d7ae-e178-429a-a9b5-975d0ad569e4/export Fri, 04 Sep 2026 00:00:09 +0000 https://vulnerability.circl.lu/sighting/422faaae-4f68-47a2-9e80-6519cc1ccdcd/export {"uuid": "422faaae-4f68-47a2-9e80-6519cc1ccdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T23:00:05.473418Z"} {"uuid": "422faaae-4f68-47a2-9e80-6519cc1ccdcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131668", "content": "Critical Vulnerabilities in VMware EAP Uncovered\u200a\u2014\u200aUnraveling CVE-2024\u201322245\nhttps://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T23:00:05.473418Z"} https://vulnerability.circl.lu/sighting/422faaae-4f68-47a2-9e80-6519cc1ccdcd/export Thu, 03 Sep 2026 23:00:05 +0000 https://vulnerability.circl.lu/sighting/3ca843b2-8e1c-42f5-aef5-6c02d4e77666/export {"uuid": "3ca843b2-8e1c-42f5-aef5-6c02d4e77666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T23:00:05.432902Z"} {"uuid": "3ca843b2-8e1c-42f5-aef5-6c02d4e77666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22245", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/131670", "content": "Explore the critical security flaws of CVE-2024\u201322245 in VMware\u2019s Enhanced Authentication Plug-in (EAP), including arbitrary\u2026Continue reading on Medium \u00bb (https://medium.com/@elniak/critical-vulnerabilities-in-vmware-eap-uncovered-unraveling-cve-2024-22245-08746ff09907?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T23:00:05.432902Z"} https://vulnerability.circl.lu/sighting/3ca843b2-8e1c-42f5-aef5-6c02d4e77666/export Thu, 03 Sep 2026 23:00:05 +0000 https://vulnerability.circl.lu/sighting/65575cf3-d0dc-4f28-b868-df5add1875fe/export {"uuid": "65575cf3-d0dc-4f28-b868-df5add1875fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.305868Z"} {"uuid": "65575cf3-d0dc-4f28-b868-df5add1875fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139526", "content": "Exploiting CVE-2024\u201322274: A Deep Dive into VMware vCenter Server Vulnerabilities and Defense\u2026\nhttps://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T18:00:07.305868Z"} https://vulnerability.circl.lu/sighting/65575cf3-d0dc-4f28-b868-df5add1875fe/export Thu, 03 Sep 2026 18:00:07 +0000 https://vulnerability.circl.lu/sighting/9190b627-7b55-40d3-b015-073fd4e422cd/export {"uuid": "9190b627-7b55-40d3-b015-073fd4e422cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T18:00:07.263501Z"} {"uuid": "9190b627-7b55-40d3-b015-073fd4e422cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22274", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/139528", "content": "OverviewContinue reading on System Weakness \u00bb (https://systemweakness.com/exploiting-cve-2024-22274-a-deep-dive-into-vmware-vcenter-server-vulnerabilities-and-defense-5d79b44ed215?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T18:00:07.263501Z"} https://vulnerability.circl.lu/sighting/9190b627-7b55-40d3-b015-073fd4e422cd/export Thu, 03 Sep 2026 18:00:07 +0000