<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 04 May 2026 12:46:45 +0000</lastBuildDate>
    <item>
      <title>1faa0f2d-aa52-444b-b9c1-15ab642f34be</title>
      <link>https://vulnerability.circl.lu/sighting/1faa0f2d-aa52-444b-b9c1-15ab642f34be/export</link>
      <description>{"uuid": "1faa0f2d-aa52-444b-b9c1-15ab642f34be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "seen", "source": "https://t.me/cibsecurity/38168", "content": "\u203c CVE-2022-26159 \u203c\n\nThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T07:22:54.000000Z"}</description>
      <content:encoded>{"uuid": "1faa0f2d-aa52-444b-b9c1-15ab642f34be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "seen", "source": "https://t.me/cibsecurity/38168", "content": "\u203c CVE-2022-26159 \u203c\n\nThe auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml (and similar pathnames for other languages), which contain all characters typed by all users, including the content of private pages. For example, a private page may contain usernames, e-mail addresses, and possibly passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-28T07:22:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1faa0f2d-aa52-444b-b9c1-15ab642f34be/export</guid>
      <pubDate>Mon, 28 Feb 2022 07:22:54 +0000</pubDate>
    </item>
    <item>
      <title>0c311e4c-15ab-42e1-a887-54979ba12422</title>
      <link>https://vulnerability.circl.lu/sighting/0c311e4c-15ab-42e1-a887-54979ba12422/export</link>
      <description>{"uuid": "0c311e4c-15ab-42e1-a887-54979ba12422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/9317", "content": "https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML", "creation_timestamp": "2022-03-01T14:00:33.000000Z"}</description>
      <content:encoded>{"uuid": "0c311e4c-15ab-42e1-a887-54979ba12422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/9317", "content": "https://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML", "creation_timestamp": "2022-03-01T14:00:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/0c311e4c-15ab-42e1-a887-54979ba12422/export</guid>
      <pubDate>Tue, 01 Mar 2022 14:00:33 +0000</pubDate>
    </item>
    <item>
      <title>838f008a-34cc-4fdd-83e7-fc354ec7c3ee</title>
      <link>https://vulnerability.circl.lu/sighting/838f008a-34cc-4fdd-83e7-fc354ec7c3ee/export</link>
      <description>{"uuid": "838f008a-34cc-4fdd-83e7-fc354ec7c3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1577", "content": "CVE-2022-26159-Ametys-Autocompletion-XML\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 python \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Ametys CMS, \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 sqlite.\nhttps://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-05-19T05:00:27.000000Z"}</description>
      <content:encoded>{"uuid": "838f008a-34cc-4fdd-83e7-fc354ec7c3ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26159", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1577", "content": "CVE-2022-26159-Ametys-Autocompletion-XML\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 python \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0441\u0431\u0440\u043e\u0441\u0430 \u0432\u0441\u0435\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u0445\u0441\u044f \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Ametys CMS, \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 sqlite.\nhttps://github.com/p0dalirius/CVE-2022-26159-Ametys-Autocompletion-XML\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-05-19T05:00:27.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/838f008a-34cc-4fdd-83e7-fc354ec7c3ee/export</guid>
      <pubDate>Thu, 19 May 2022 05:00:27 +0000</pubDate>
    </item>
  </channel>
</rss>
