<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 09 Jun 2026 02:04:20 +0000</lastBuildDate>
    <item>
      <title>7aef7c07-0baa-4196-89be-642973a9fc89</title>
      <link>https://vulnerability.circl.lu/sighting/7aef7c07-0baa-4196-89be-642973a9fc89/export</link>
      <description>{"uuid": "7aef7c07-0baa-4196-89be-642973a9fc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22929", "type": "seen", "source": "https://t.me/cibsecurity/35986", "content": "\u203c CVE-2022-22929 \u203c\n\nMCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-21T02:12:25.000000Z"}</description>
      <content:encoded>{"uuid": "7aef7c07-0baa-4196-89be-642973a9fc89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22929", "type": "seen", "source": "https://t.me/cibsecurity/35986", "content": "\u203c CVE-2022-22929 \u203c\n\nMCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-21T02:12:25.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7aef7c07-0baa-4196-89be-642973a9fc89/export</guid>
      <pubDate>Fri, 21 Jan 2022 02:12:25 +0000</pubDate>
    </item>
    <item>
      <title>32eec8d8-a271-4da4-aeb3-14faa47e9b19</title>
      <link>https://vulnerability.circl.lu/sighting/32eec8d8-a271-4da4-aeb3-14faa47e9b19/export</link>
      <description>{"uuid": "32eec8d8-a271-4da4-aeb3-14faa47e9b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22928", "type": "seen", "source": "https://t.me/cibsecurity/35988", "content": "\u203c CVE-2022-22928 \u203c\n\nMCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-21T02:12:29.000000Z"}</description>
      <content:encoded>{"uuid": "32eec8d8-a271-4da4-aeb3-14faa47e9b19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22928", "type": "seen", "source": "https://t.me/cibsecurity/35988", "content": "\u203c CVE-2022-22928 \u203c\n\nMCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-01-21T02:12:29.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/32eec8d8-a271-4da4-aeb3-14faa47e9b19/export</guid>
      <pubDate>Fri, 21 Jan 2022 02:12:29 +0000</pubDate>
    </item>
    <item>
      <title>f30000c5-b4cf-4062-b4ab-fd4d2934abe8</title>
      <link>https://vulnerability.circl.lu/sighting/f30000c5-b4cf-4062-b4ab-fd4d2934abe8/export</link>
      <description>{"uuid": "f30000c5-b4cf-4062-b4ab-fd4d2934abe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22922", "type": "seen", "source": "https://t.me/cibsecurity/37686", "content": "\u203c CVE-2022-22922 \u203c\n\nTP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-18T07:37:51.000000Z"}</description>
      <content:encoded>{"uuid": "f30000c5-b4cf-4062-b4ab-fd4d2934abe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-22922", "type": "seen", "source": "https://t.me/cibsecurity/37686", "content": "\u203c CVE-2022-22922 \u203c\n\nTP-Link TL-WA850RE Wi-Fi Range Extender before v6_200923 was discovered to use highly predictable and easily detectable session keys, allowing attackers to gain administrative privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-18T07:37:51.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f30000c5-b4cf-4062-b4ab-fd4d2934abe8/export</guid>
      <pubDate>Fri, 18 Feb 2022 07:37:51 +0000</pubDate>
    </item>
    <item>
      <title>33ba33e7-084e-4b3c-86c5-6f3f1ed2b920</title>
      <link>https://vulnerability.circl.lu/sighting/33ba33e7-084e-4b3c-86c5-6f3f1ed2b920/export</link>
      <description>{"uuid": "33ba33e7-084e-4b3c-86c5-6f3f1ed2b920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2292", "type": "seen", "source": "https://t.me/cibsecurity/45989", "content": "\u203c CVE-2022-2292 \u203c\n\nA vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input \"&amp;gt;alert(\"XSS\") leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-12T18:25:40.000000Z"}</description>
      <content:encoded>{"uuid": "33ba33e7-084e-4b3c-86c5-6f3f1ed2b920", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2292", "type": "seen", "source": "https://t.me/cibsecurity/45989", "content": "\u203c CVE-2022-2292 \u203c\n\nA vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input \"&amp;gt;alert(\"XSS\") leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-12T18:25:40.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/33ba33e7-084e-4b3c-86c5-6f3f1ed2b920/export</guid>
      <pubDate>Tue, 12 Jul 2022 18:25:40 +0000</pubDate>
    </item>
  </channel>
</rss>
