https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 16 Jun 2026 22:21:00 +0000 https://vulnerability.circl.lu/sighting/460ea4a3-4e68-4fcd-8709-8eb10c56fdb4/export {"uuid": "460ea4a3-4e68-4fcd-8709-8eb10c56fdb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4356", "type": "seen", "source": "https://t.me/cibsecurity/55783", "content": "\u203c CVE-2022-4356 \u203c\n\nThe LetsRecover WordPress plugin through 1.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:30:01.000000Z"} {"uuid": "460ea4a3-4e68-4fcd-8709-8eb10c56fdb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4356", "type": "seen", "source": "https://t.me/cibsecurity/55783", "content": "\u203c CVE-2022-4356 \u203c\n\nThe LetsRecover WordPress plugin through 1.1.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T00:30:01.000000Z"} https://vulnerability.circl.lu/sighting/460ea4a3-4e68-4fcd-8709-8eb10c56fdb4/export Tue, 03 Jan 2023 00:30:01 +0000 https://vulnerability.circl.lu/sighting/ab9f8ff0-0e17-490f-8b92-d6c418af0c37/export {"uuid": "ab9f8ff0-0e17-490f-8b92-d6c418af0c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43569", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43569\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts that can lead to persistent cross-site scripting (XSS) in the object name of a Data Model.\n\n\ud83d\udccf Published: 2022-11-04T22:22:31.895Z\n\ud83d\udccf Modified: 2025-04-30T20:02:18.090Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1109.html\n2. https://research.splunk.com/application/062bff76-5f9c-496e-a386-cb1adcf69871/", "creation_timestamp": "2025-04-30T20:14:17.000000Z"} {"uuid": "ab9f8ff0-0e17-490f-8b92-d6c418af0c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43569", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43569\n\ud83d\udd25 CVSS Score: 8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, an authenticated user can inject and store arbitrary scripts that can lead to persistent cross-site scripting (XSS) in the object name of a Data Model.\n\n\ud83d\udccf Published: 2022-11-04T22:22:31.895Z\n\ud83d\udccf Modified: 2025-04-30T20:02:18.090Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1109.html\n2. https://research.splunk.com/application/062bff76-5f9c-496e-a386-cb1adcf69871/", "creation_timestamp": "2025-04-30T20:14:17.000000Z"} https://vulnerability.circl.lu/sighting/ab9f8ff0-0e17-490f-8b92-d6c418af0c37/export Wed, 30 Apr 2025 20:14:17 +0000 https://vulnerability.circl.lu/sighting/737e16be-c67a-4369-a354-685aa96f1b18/export {"uuid": "737e16be-c67a-4369-a354-685aa96f1b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43568\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.\n\n\ud83d\udccf Published: 2022-11-04T22:22:13.266Z\n\ud83d\udccf Modified: 2025-05-01T19:39:17.951Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1108.html\n2. https://research.splunk.com/application/d532d105-c63f-4049-a8c4-e249127ca425/", "creation_timestamp": "2025-05-01T20:15:50.000000Z"} {"uuid": "737e16be-c67a-4369-a354-685aa96f1b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43568", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43568\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, a View allows for a Reflected Cross Site Scripting via JavaScript Object Notation (JSON) in a query parameter when output_mode=radio.\n\n\ud83d\udccf Published: 2022-11-04T22:22:13.266Z\n\ud83d\udccf Modified: 2025-05-01T19:39:17.951Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1108.html\n2. https://research.splunk.com/application/d532d105-c63f-4049-a8c4-e249127ca425/", "creation_timestamp": "2025-05-01T20:15:50.000000Z"} https://vulnerability.circl.lu/sighting/737e16be-c67a-4369-a354-685aa96f1b18/export Thu, 01 May 2025 20:15:50 +0000 https://vulnerability.circl.lu/sighting/7d894c20-55a9-4372-8853-c505b0d3ae72/export {"uuid": "7d894c20-55a9-4372-8853-c505b0d3ae72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43562\n\ud83d\udd25 CVSS Score: 3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host header, which could let a remote authenticated user conduct various attacks against the system, including cross-site scripting and cache poisoning.\n\n\ud83d\udccf Published: 2022-11-04T22:19:11.815Z\n\ud83d\udccf Modified: 2025-05-05T20:37:25.294Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1102.html", "creation_timestamp": "2025-05-05T21:20:11.000000Z"} {"uuid": "7d894c20-55a9-4372-8853-c505b0d3ae72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43562", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14994", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43562\n\ud83d\udd25 CVSS Score: 3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.1.12, 8.2.9, and 9.0.2, Splunk Enterprise fails to properly validate and escape the Host header, which could let a remote authenticated user conduct various attacks against the system, including cross-site scripting and cache poisoning.\n\n\ud83d\udccf Published: 2022-11-04T22:19:11.815Z\n\ud83d\udccf Modified: 2025-05-05T20:37:25.294Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1102.html", "creation_timestamp": "2025-05-05T21:20:11.000000Z"} https://vulnerability.circl.lu/sighting/7d894c20-55a9-4372-8853-c505b0d3ae72/export Mon, 05 May 2025 21:20:11 +0000 https://vulnerability.circl.lu/sighting/96c3eb27-f09b-4309-a844-1ca4062fbd2c/export {"uuid": "96c3eb27-f09b-4309-a844-1ca4062fbd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43563\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will.\n\n\ud83d\udccf Published: 2022-11-04T22:19:55.669Z\n\ud83d\udccf Modified: 2025-05-05T20:36:39.876Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1103.html", "creation_timestamp": "2025-05-05T21:20:12.000000Z"} {"uuid": "96c3eb27-f09b-4309-a844-1ca4062fbd2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43563", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14995", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43563\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the rex search command handles field names lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will.\n\n\ud83d\udccf Published: 2022-11-04T22:19:55.669Z\n\ud83d\udccf Modified: 2025-05-05T20:36:39.876Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1103.html", "creation_timestamp": "2025-05-05T21:20:12.000000Z"} https://vulnerability.circl.lu/sighting/96c3eb27-f09b-4309-a844-1ca4062fbd2c/export Mon, 05 May 2025 21:20:12 +0000 https://vulnerability.circl.lu/sighting/905d220b-3b0f-4705-a405-c022be47968b/export {"uuid": "905d220b-3b0f-4705-a405-c022be47968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43565", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43565\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the \u2018tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. \n\n\ud83d\udccf Published: 2022-11-04T22:20:55.783Z\n\ud83d\udccf Modified: 2025-05-05T20:35:48.097Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1105.html", "creation_timestamp": "2025-05-05T21:20:13.000000Z"} {"uuid": "905d220b-3b0f-4705-a405-c022be47968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43565", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43565\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9 and 8.1.12, the way that the \u2018tstats command handles Javascript Object Notation (JSON) lets an attacker bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards . The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. \n\n\ud83d\udccf Published: 2022-11-04T22:20:55.783Z\n\ud83d\udccf Modified: 2025-05-05T20:35:48.097Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1105.html", "creation_timestamp": "2025-05-05T21:20:13.000000Z"} https://vulnerability.circl.lu/sighting/905d220b-3b0f-4705-a405-c022be47968b/export Mon, 05 May 2025 21:20:13 +0000 https://vulnerability.circl.lu/sighting/9279b971-5768-406d-a867-37dd31d13cc5/export {"uuid": "9279b971-5768-406d-a867-37dd31d13cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43566\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user\u2019s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards \u00a0in the Analytics Workspace. The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will.\n\n\ud83d\udccf Published: 2022-11-04T22:21:21.337Z\n\ud83d\udccf Modified: 2025-05-05T20:34:58.924Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1106.html\n2. https://research.splunk.com/application/b6d77c6c-f011-4b03-8650-8f10edb7c4a8/", "creation_timestamp": "2025-05-05T21:20:14.000000Z"} {"uuid": "9279b971-5768-406d-a867-37dd31d13cc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43566", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14997", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43566\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run risky commands using a more privileged user\u2019s permissions to bypass SPL safeguards for risky commands https://docs.splunk.com/Documentation/SplunkCloud/latest/Security/SPLsafeguards \u00a0in the Analytics Workspace. The vulnerability requires the attacker to phish the victim by tricking them into initiating a request within their browser. The attacker cannot exploit the vulnerability at will.\n\n\ud83d\udccf Published: 2022-11-04T22:21:21.337Z\n\ud83d\udccf Modified: 2025-05-05T20:34:58.924Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1106.html\n2. https://research.splunk.com/application/b6d77c6c-f011-4b03-8650-8f10edb7c4a8/", "creation_timestamp": "2025-05-05T21:20:14.000000Z"} https://vulnerability.circl.lu/sighting/9279b971-5768-406d-a867-37dd31d13cc5/export Mon, 05 May 2025 21:20:14 +0000 https://vulnerability.circl.lu/sighting/ca63cca2-db34-4d91-a3b2-800656f7f19b/export {"uuid": "ca63cca2-db34-4d91-a3b2-800656f7f19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43567", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43567\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.\n\n\ud83d\udccf Published: 2022-11-04T22:21:50.819Z\n\ud83d\udccf Modified: 2025-05-05T20:34:05.121Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1107.html\n2. https://research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/", "creation_timestamp": "2025-05-05T21:20:15.000000Z"} {"uuid": "ca63cca2-db34-4d91-a3b2-800656f7f19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43567", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14998", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-43567\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: In Splunk Enterprise versions below 8.2.9, 8.1.12, and 9.0.2, an authenticated user can run arbitrary operating system commands remotely through the use of specially crafted requests to the mobile alerts feature in the Splunk Secure Gateway app.\n\n\ud83d\udccf Published: 2022-11-04T22:21:50.819Z\n\ud83d\udccf Modified: 2025-05-05T20:34:05.121Z\n\ud83d\udd17 References:\n1. https://www.splunk.com/en_us/product-security/announcements/svd-2022-1107.html\n2. https://research.splunk.com/application/baa41f09-df48-4375-8991-520beea161be/", "creation_timestamp": "2025-05-05T21:20:15.000000Z"} https://vulnerability.circl.lu/sighting/ca63cca2-db34-4d91-a3b2-800656f7f19b/export Mon, 05 May 2025 21:20:15 +0000