<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Mon, 15 Jun 2026 04:19:44 +0000</lastBuildDate>
    <item>
      <title>a299fd5d-dd2c-4cfd-8204-746cf102f64e</title>
      <link>https://vulnerability.circl.lu/sighting/a299fd5d-dd2c-4cfd-8204-746cf102f64e/export</link>
      <description>{"uuid": "a299fd5d-dd2c-4cfd-8204-746cf102f64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43722", "type": "seen", "source": "https://t.me/cibsecurity/54439", "content": "\u203c CVE-2022-43722 \u203c\n\nA vulnerability has been identified in SICAM PAS/PQS (All versions &amp;lt; V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:28:11.000000Z"}</description>
      <content:encoded>{"uuid": "a299fd5d-dd2c-4cfd-8204-746cf102f64e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-43722", "type": "seen", "source": "https://t.me/cibsecurity/54439", "content": "\u203c CVE-2022-43722 \u203c\n\nA vulnerability has been identified in SICAM PAS/PQS (All versions &amp;lt; V7.0). Affected software does not properly secure a folder containing library files. This could allow an attacker to place a custom malicious DLL in this folder which is then run with SYSTEM rights when a service is started that requires this DLL. At the time of assigning the CVE, the affected firmware version of the component has already been superseded by succeeding mainline versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:28:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/a299fd5d-dd2c-4cfd-8204-746cf102f64e/export</guid>
      <pubDate>Tue, 13 Dec 2022 18:28:11 +0000</pubDate>
    </item>
    <item>
      <title>d46d0695-689b-42d0-b650-a7f0bd63934d</title>
      <link>https://vulnerability.circl.lu/sighting/d46d0695-689b-42d0-b650-a7f0bd63934d/export</link>
      <description>{"uuid": "d46d0695-689b-42d0-b650-a7f0bd63934d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4372", "type": "seen", "source": "https://t.me/cibsecurity/55756", "content": "\u203c CVE-2022-4372 \u203c\n\nThe Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by high privilege users such as admin by default. However, depending on the plugin configuration, other users, such as subscriber could exploit this as well\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T11:55:15.000000Z"}</description>
      <content:encoded>{"uuid": "d46d0695-689b-42d0-b650-a7f0bd63934d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4372", "type": "seen", "source": "https://t.me/cibsecurity/55756", "content": "\u203c CVE-2022-4372 \u203c\n\nThe Web Invoice WordPress plugin through 2.1.3 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL Injection exploitable by high privilege users such as admin by default. However, depending on the plugin configuration, other users, such as subscriber could exploit this as well\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T11:55:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/d46d0695-689b-42d0-b650-a7f0bd63934d/export</guid>
      <pubDate>Wed, 04 Jan 2023 11:55:15 +0000</pubDate>
    </item>
  </channel>
</rss>
