<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 13 Jun 2026 04:32:45 +0000</lastBuildDate>
    <item>
      <title>5b8a00b5-a424-4da4-b728-1cbb098c854a</title>
      <link>https://vulnerability.circl.lu/sighting/5b8a00b5-a424-4da4-b728-1cbb098c854a/export</link>
      <description>{"uuid": "5b8a00b5-a424-4da4-b728-1cbb098c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40044", "type": "seen", "source": "https://t.me/cibsecurity/50519", "content": "\u203c CVE-2022-40044 \u203c\n\nCentreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:46.000000Z"}</description>
      <content:encoded>{"uuid": "5b8a00b5-a424-4da4-b728-1cbb098c854a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40044", "type": "seen", "source": "https://t.me/cibsecurity/50519", "content": "\u203c CVE-2022-40044 \u203c\n\nCentreon v20.10.18 was discovered to contain a cross-site scripting (XSS) vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:46.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/5b8a00b5-a424-4da4-b728-1cbb098c854a/export</guid>
      <pubDate>Mon, 26 Sep 2022 20:28:46 +0000</pubDate>
    </item>
    <item>
      <title>9548ea9f-2ff7-499b-8c09-603f0d8f9d61</title>
      <link>https://vulnerability.circl.lu/sighting/9548ea9f-2ff7-499b-8c09-603f0d8f9d61/export</link>
      <description>{"uuid": "9548ea9f-2ff7-499b-8c09-603f0d8f9d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40043", "type": "seen", "source": "https://t.me/cibsecurity/50520", "content": "\u203c CVE-2022-40043 \u203c\n\nCentreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:47.000000Z"}</description>
      <content:encoded>{"uuid": "9548ea9f-2ff7-499b-8c09-603f0d8f9d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40043", "type": "seen", "source": "https://t.me/cibsecurity/50520", "content": "\u203c CVE-2022-40043 \u203c\n\nCentreon v20.10.18 was discovered to contain a SQL injection vulnerability via the esc_name (Escalation Name) parameter at Configuration/Notifications/Escalations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T20:28:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/9548ea9f-2ff7-499b-8c09-603f0d8f9d61/export</guid>
      <pubDate>Mon, 26 Sep 2022 20:28:47 +0000</pubDate>
    </item>
    <item>
      <title>f4c1bc86-0b53-4e85-ab66-829412751b78</title>
      <link>https://vulnerability.circl.lu/sighting/f4c1bc86-0b53-4e85-ab66-829412751b78/export</link>
      <description>{"uuid": "f4c1bc86-0b53-4e85-ab66-829412751b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40047", "type": "seen", "source": "https://t.me/cibsecurity/51155", "content": "\u203c CVE-2022-40047 \u203c\n\nFlatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T22:26:20.000000Z"}</description>
      <content:encoded>{"uuid": "f4c1bc86-0b53-4e85-ab66-829412751b78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-40047", "type": "seen", "source": "https://t.me/cibsecurity/51155", "content": "\u203c CVE-2022-40047 \u203c\n\nFlatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T22:26:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f4c1bc86-0b53-4e85-ab66-829412751b78/export</guid>
      <pubDate>Tue, 11 Oct 2022 22:26:20 +0000</pubDate>
    </item>
    <item>
      <title>327ae170-f585-4252-b440-96b68e9b4d59</title>
      <link>https://vulnerability.circl.lu/sighting/327ae170-f585-4252-b440-96b68e9b4d59/export</link>
      <description>{"uuid": "327ae170-f585-4252-b440-96b68e9b4d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4004", "type": "seen", "source": "https://t.me/cibsecurity/54345", "content": "\u203c CVE-2022-4004 \u203c\n\nThe Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its \"donation_button_twilio_send_test_sms\" AJAX action, which may allow any users with an account on the affected site, like subscribers, to use the plugin's Twilio integration to send SMSes to arbitrary phone numbers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-12T20:21:09.000000Z"}</description>
      <content:encoded>{"uuid": "327ae170-f585-4252-b440-96b68e9b4d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4004", "type": "seen", "source": "https://t.me/cibsecurity/54345", "content": "\u203c CVE-2022-4004 \u203c\n\nThe Donation Button WordPress plugin through 4.0.0 does not properly check for privileges and nonce tokens in its \"donation_button_twilio_send_test_sms\" AJAX action, which may allow any users with an account on the affected site, like subscribers, to use the plugin's Twilio integration to send SMSes to arbitrary phone numbers.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-12T20:21:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/327ae170-f585-4252-b440-96b68e9b4d59/export</guid>
      <pubDate>Mon, 12 Dec 2022 20:21:09 +0000</pubDate>
    </item>
  </channel>
</rss>
