https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 25 Jun 2026 20:20:06 +0000 https://vulnerability.circl.lu/sighting/1c6fdc7e-cc56-4e4d-85a7-c3957176954b/export {"uuid": "1c6fdc7e-cc56-4e4d-85a7-c3957176954b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24958", "type": "seen", "source": "https://t.me/cibsecurity/37271", "content": "\u203c CVE-2022-24958 \u203c\n\ndrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-11T12:28:22.000000Z"} {"uuid": "1c6fdc7e-cc56-4e4d-85a7-c3957176954b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24958", "type": "seen", "source": "https://t.me/cibsecurity/37271", "content": "\u203c CVE-2022-24958 \u203c\n\ndrivers/usb/gadget/legacy/inode.c in the Linux kernel through 5.16.8 mishandles dev->buf release.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-11T12:28:22.000000Z"} https://vulnerability.circl.lu/sighting/1c6fdc7e-cc56-4e4d-85a7-c3957176954b/export Fri, 11 Feb 2022 12:28:22 +0000 https://vulnerability.circl.lu/sighting/860e4d85-4f6e-43a8-8a29-fd1f874310e1/export {"uuid": "860e4d85-4f6e-43a8-8a29-fd1f874310e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24959", "type": "seen", "source": "https://t.me/cibsecurity/37274", "content": "\u203c CVE-2022-24959 \u203c\n\nAn issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-11T12:28:25.000000Z"} {"uuid": "860e4d85-4f6e-43a8-8a29-fd1f874310e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24959", "type": "seen", "source": "https://t.me/cibsecurity/37274", "content": "\u203c CVE-2022-24959 \u203c\n\nAn issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-11T12:28:25.000000Z"} https://vulnerability.circl.lu/sighting/860e4d85-4f6e-43a8-8a29-fd1f874310e1/export Fri, 11 Feb 2022 12:28:25 +0000 https://vulnerability.circl.lu/sighting/9f416ae3-8153-493f-833f-9d93bae98aee/export {"uuid": "9f416ae3-8153-493f-833f-9d93bae98aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24956", "type": "seen", "source": "https://t.me/cibsecurity/39712", "content": "\u203c CVE-2022-24956 \u203c\n\nAn issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:56.000000Z"} {"uuid": "9f416ae3-8153-493f-833f-9d93bae98aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24956", "type": "seen", "source": "https://t.me/cibsecurity/39712", "content": "\u203c CVE-2022-24956 \u203c\n\nAn issue was discovered in Shopware B2B-Suite through 4.4.1. The sort-by parameter of the search functionality of b2border and b2borderlist allows SQL injection. Possible techniques are boolean-based blind, time-based blind, and potentially stacked queries. The vulnerability allows a remote authenticated attacker to dump the underlying database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:56.000000Z"} https://vulnerability.circl.lu/sighting/9f416ae3-8153-493f-833f-9d93bae98aee/export Tue, 29 Mar 2022 07:40:56 +0000 https://vulnerability.circl.lu/sighting/1328b917-b083-4aea-a6b7-e53f0491e5da/export {"uuid": "1328b917-b083-4aea-a6b7-e53f0491e5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24957", "type": "seen", "source": "https://t.me/cibsecurity/39715", "content": "\u203c CVE-2022-24957 \u203c\n\nDHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will be attacked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:59.000000Z"} {"uuid": "1328b917-b083-4aea-a6b7-e53f0491e5da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24957", "type": "seen", "source": "https://t.me/cibsecurity/39715", "content": "\u203c CVE-2022-24957 \u203c\n\nDHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will be attacked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:59.000000Z"} https://vulnerability.circl.lu/sighting/1328b917-b083-4aea-a6b7-e53f0491e5da/export Tue, 29 Mar 2022 07:40:59 +0000 https://vulnerability.circl.lu/sighting/3334fea5-f2e7-4096-9d22-b08516a4dfa5/export {"uuid": "3334fea5-f2e7-4096-9d22-b08516a4dfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24950", "type": "seen", "source": "https://t.me/cibsecurity/48203", "content": "\u203c CVE-2022-24950 \u203c\n\nA race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:42.000000Z"} {"uuid": "3334fea5-f2e7-4096-9d22-b08516a4dfa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24950", "type": "seen", "source": "https://t.me/cibsecurity/48203", "content": "\u203c CVE-2022-24950 \u203c\n\nA race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId().\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:42.000000Z"} https://vulnerability.circl.lu/sighting/3334fea5-f2e7-4096-9d22-b08516a4dfa5/export Tue, 16 Aug 2022 07:38:42 +0000 https://vulnerability.circl.lu/sighting/0c7396eb-bfd3-4f44-9303-d94362aee44b/export {"uuid": "0c7396eb-bfd3-4f44-9303-d94362aee44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24951", "type": "seen", "source": "https://t.me/cibsecurity/48204", "content": "\u203c CVE-2022-24951 \u203c\n\nA race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:43.000000Z"} {"uuid": "0c7396eb-bfd3-4f44-9303-d94362aee44b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24951", "type": "seen", "source": "https://t.me/cibsecurity/48204", "content": "\u203c CVE-2022-24951 \u203c\n\nA race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T07:38:43.000000Z"} https://vulnerability.circl.lu/sighting/0c7396eb-bfd3-4f44-9303-d94362aee44b/export Tue, 16 Aug 2022 07:38:43 +0000 https://vulnerability.circl.lu/sighting/800b151d-2b87-4309-b61b-3e8b35d63465/export {"uuid": "800b151d-2b87-4309-b61b-3e8b35d63465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24952", "type": "seen", "source": "https://t.me/cibsecurity/48197", "content": "\u203c CVE-2022-24952 \u203c\n\nSeveral denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T11:02:25.000000Z"} {"uuid": "800b151d-2b87-4309-b61b-3e8b35d63465", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24952", "type": "seen", "source": "https://t.me/cibsecurity/48197", "content": "\u203c CVE-2022-24952 \u203c\n\nSeveral denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-05T11:02:25.000000Z"} https://vulnerability.circl.lu/sighting/800b151d-2b87-4309-b61b-3e8b35d63465/export Tue, 05 Sep 2023 11:02:25 +0000