<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 06 Jun 2026 23:12:42 +0000</lastBuildDate>
    <item>
      <title>7e5a90f1-a037-4623-9592-c8851742c481</title>
      <link>https://vulnerability.circl.lu/sighting/7e5a90f1-a037-4623-9592-c8851742c481/export</link>
      <description>{"uuid": "7e5a90f1-a037-4623-9592-c8851742c481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22064", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/665", "content": "#cryptography\n#WLAN_Security\n\"Diffie Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments (CVE-2024-22064)\", 2024.", "creation_timestamp": "2024-07-31T12:00:34.000000Z"}</description>
      <content:encoded>{"uuid": "7e5a90f1-a037-4623-9592-c8851742c481", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22064", "type": "published-proof-of-concept", "source": "https://t.me/Kelvinseccommunity/665", "content": "#cryptography\n#WLAN_Security\n\"Diffie Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments (CVE-2024-22064)\", 2024.", "creation_timestamp": "2024-07-31T12:00:34.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7e5a90f1-a037-4623-9592-c8851742c481/export</guid>
      <pubDate>Wed, 31 Jul 2024 12:00:34 +0000</pubDate>
    </item>
    <item>
      <title>8194b6dc-3f9d-456c-833e-7bf80da2838d</title>
      <link>https://vulnerability.circl.lu/sighting/8194b6dc-3f9d-456c-833e-7bf80da2838d/export</link>
      <description>{"uuid": "8194b6dc-3f9d-456c-833e-7bf80da2838d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22064", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10911", "content": "#cryptography\n#WLAN_Security\n\"Diffie Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments (CVE-2024-22064)\", 2024.", "creation_timestamp": "2024-07-31T23:46:54.000000Z"}</description>
      <content:encoded>{"uuid": "8194b6dc-3f9d-456c-833e-7bf80da2838d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22064", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/10911", "content": "#cryptography\n#WLAN_Security\n\"Diffie Hellman Picture Show: Key Exchange Stories from Commercial VoWiFi Deployments (CVE-2024-22064)\", 2024.", "creation_timestamp": "2024-07-31T23:46:54.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8194b6dc-3f9d-456c-833e-7bf80da2838d/export</guid>
      <pubDate>Wed, 31 Jul 2024 23:46:54 +0000</pubDate>
    </item>
    <item>
      <title>7123d6bd-f889-4f76-b454-499a1d6815c7</title>
      <link>https://vulnerability.circl.lu/sighting/7123d6bd-f889-4f76-b454-499a1d6815c7/export</link>
      <description>{"uuid": "7123d6bd-f889-4f76-b454-499a1d6815c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22069", "type": "seen", "source": "https://t.me/cvedetector/2759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22069 - \"ZTE ZXV10 XT802/ET301 Permissive Password Reset Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-22069 \nPublished : Aug. 8, 2024, 8:15 a.m. | 44\u00a0minutes ago \nDescription : There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T11:22:38.000000Z"}</description>
      <content:encoded>{"uuid": "7123d6bd-f889-4f76-b454-499a1d6815c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22069", "type": "seen", "source": "https://t.me/cvedetector/2759", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22069 - \"ZTE ZXV10 XT802/ET301 Permissive Password Reset Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-22069 \nPublished : Aug. 8, 2024, 8:15 a.m. | 44\u00a0minutes ago \nDescription : There is a permission and access control vulnerability of ZTE's ZXV10 XT802/ET301 product.Attackers with common permissions can log in the terminal web and change the password of the administrator illegally by intercepting requests to change the passwords. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-08T11:22:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7123d6bd-f889-4f76-b454-499a1d6815c7/export</guid>
      <pubDate>Thu, 08 Aug 2024 11:22:38 +0000</pubDate>
    </item>
    <item>
      <title>da1ab26b-57b5-47e4-ae83-23ab51a855f4</title>
      <link>https://vulnerability.circl.lu/sighting/da1ab26b-57b5-47e4-ae83-23ab51a855f4/export</link>
      <description>{"uuid": "da1ab26b-57b5-47e4-ae83-23ab51a855f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22068", "type": "seen", "source": "https://t.me/cvedetector/7573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22068 - ZTE ZXR10 Privilege Escalation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-22068 \nPublished : Oct. 10, 2024, 9:15 a.m. | 18\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T11:44:11.000000Z"}</description>
      <content:encoded>{"uuid": "da1ab26b-57b5-47e4-ae83-23ab51a855f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22068", "type": "seen", "source": "https://t.me/cvedetector/7573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22068 - ZTE ZXR10 Privilege Escalation Bypass\", \n  \"Content\": \"CVE ID : CVE-2024-22068 \nPublished : Oct. 10, 2024, 9:15 a.m. | 18\u00a0minutes ago \nDescription : Improper Privilege Management vulnerability in ZTE ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series on 64 bit allows Functionality Bypass.This issue affects ZXR10 1800-2S series ,ZXR10 2800-4,ZXR10 3800-8,ZXR10 160 series: V4.00.10 and earlier. \nSeverity: 6.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-10T11:44:11.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/da1ab26b-57b5-47e4-ae83-23ab51a855f4/export</guid>
      <pubDate>Thu, 10 Oct 2024 11:44:11 +0000</pubDate>
    </item>
    <item>
      <title>df334196-55aa-4d56-9602-55a4cd669daf</title>
      <link>https://vulnerability.circl.lu/sighting/df334196-55aa-4d56-9602-55a4cd669daf/export</link>
      <description>{"uuid": "df334196-55aa-4d56-9602-55a4cd669daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22065", "type": "seen", "source": "https://t.me/cvedetector/9243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22065 - \"ZTE MF258 Pro Command Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-22065 \nPublished : Oct. 29, 2024, 2:15 a.m. | 31\u00a0minutes ago \nDescription : There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:53:59.000000Z"}</description>
      <content:encoded>{"uuid": "df334196-55aa-4d56-9602-55a4cd669daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22065", "type": "seen", "source": "https://t.me/cvedetector/9243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22065 - \"ZTE MF258 Pro Command Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2024-22065 \nPublished : Oct. 29, 2024, 2:15 a.m. | 31\u00a0minutes ago \nDescription : There is a command injection vulnerability in ZTE MF258 Pro product. Due to insufficient validation of Ping Diagnosis interface parameter, an authenticated attacker could use the vulnerability to execute arbitrary commands. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-29T03:53:59.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/df334196-55aa-4d56-9602-55a4cd669daf/export</guid>
      <pubDate>Tue, 29 Oct 2024 03:53:59 +0000</pubDate>
    </item>
    <item>
      <title>7008d532-dd74-4f05-93e8-5d865f1abb8f</title>
      <link>https://vulnerability.circl.lu/sighting/7008d532-dd74-4f05-93e8-5d865f1abb8f/export</link>
      <description>{"uuid": "7008d532-dd74-4f05-93e8-5d865f1abb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113502637848785199", "content": "", "creation_timestamp": "2024-11-18T06:53:29.416709Z"}</description>
      <content:encoded>{"uuid": "7008d532-dd74-4f05-93e8-5d865f1abb8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22067", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113502637848785199", "content": "", "creation_timestamp": "2024-11-18T06:53:29.416709Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7008d532-dd74-4f05-93e8-5d865f1abb8f/export</guid>
      <pubDate>Mon, 18 Nov 2024 06:53:29 +0000</pubDate>
    </item>
    <item>
      <title>1b471841-b403-4b08-8e32-fbfaddecf821</title>
      <link>https://vulnerability.circl.lu/sighting/1b471841-b403-4b08-8e32-fbfaddecf821/export</link>
      <description>{"uuid": "1b471841-b403-4b08-8e32-fbfaddecf821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22067", "type": "seen", "source": "https://t.me/cvedetector/11292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22067 - ZTE NH8091 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22067 \nPublished : Nov. 18, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker may exploit the vulnerability to execute arbitrary commands. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T09:01:15.000000Z"}</description>
      <content:encoded>{"uuid": "1b471841-b403-4b08-8e32-fbfaddecf821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22067", "type": "seen", "source": "https://t.me/cvedetector/11292", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22067 - ZTE NH8091 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22067 \nPublished : Nov. 18, 2024, 7:15 a.m. | 34\u00a0minutes ago \nDescription : ZTE NH8091 product has an improper permission control vulnerability. Due to improper permission control of the Web module interface, an authenticated attacker may exploit the vulnerability to execute arbitrary commands. \nSeverity: 6.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Nov 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-11-18T09:01:15.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1b471841-b403-4b08-8e32-fbfaddecf821/export</guid>
      <pubDate>Mon, 18 Nov 2024 09:01:15 +0000</pubDate>
    </item>
    <item>
      <title>bc9aeab4-9157-4cee-89ea-eed459863324</title>
      <link>https://vulnerability.circl.lu/sighting/bc9aeab4-9157-4cee-89ea-eed459863324/export</link>
      <description>{"uuid": "bc9aeab4-9157-4cee-89ea-eed459863324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741096299871629", "content": "", "creation_timestamp": "2024-12-30T09:36:36.639426Z"}</description>
      <content:encoded>{"uuid": "bc9aeab4-9157-4cee-89ea-eed459863324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113741096299871629", "content": "", "creation_timestamp": "2024-12-30T09:36:36.639426Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/bc9aeab4-9157-4cee-89ea-eed459863324/export</guid>
      <pubDate>Mon, 30 Dec 2024 09:36:36 +0000</pubDate>
    </item>
    <item>
      <title>8de84a5d-9a85-43db-8f8a-3de6d9d3c61a</title>
      <link>https://vulnerability.circl.lu/sighting/8de84a5d-9a85-43db-8f8a-3de6d9d3c61a/export</link>
      <description>{"uuid": "8de84a5d-9a85-43db-8f8a-3de6d9d3c61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://t.me/cvedetector/13930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22063 - ZTE Corporation ZENIC ONE R58 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22063 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:09.000000Z"}</description>
      <content:encoded>{"uuid": "8de84a5d-9a85-43db-8f8a-3de6d9d3c61a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://t.me/cvedetector/13930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-22063 - ZTE Corporation ZENIC ONE R58 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-22063 \nPublished : Dec. 30, 2024, 10:15 a.m. | 29\u00a0minutes ago \nDescription : The ZENIC ONE R58 products by ZTE Corporation have a command injection vulnerability. An authenticated attacker can exploit this vulnerability to tamper with messages, inject malicious code, and subsequently launch attacks on related devices. \nSeverity: 7.6 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-30T11:47:09.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8de84a5d-9a85-43db-8f8a-3de6d9d3c61a/export</guid>
      <pubDate>Mon, 30 Dec 2024 11:47:09 +0000</pubDate>
    </item>
    <item>
      <title>8c49d7f6-b2d1-4ccd-bf7e-c65155c51ffe</title>
      <link>https://vulnerability.circl.lu/sighting/8c49d7f6-b2d1-4ccd-bf7e-c65155c51ffe/export</link>
      <description>{"uuid": "8c49d7f6-b2d1-4ccd-bf7e-c65155c51ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-fc19b140-3532de2b8eab5714", "content": "", "creation_timestamp": "2025-02-05T09:05:16.360558Z"}</description>
      <content:encoded>{"uuid": "8c49d7f6-b2d1-4ccd-bf7e-c65155c51ffe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-22063", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-fc19b140-3532de2b8eab5714", "content": "", "creation_timestamp": "2025-02-05T09:05:16.360558Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8c49d7f6-b2d1-4ccd-bf7e-c65155c51ffe/export</guid>
      <pubDate>Wed, 05 Feb 2025 09:05:16 +0000</pubDate>
    </item>
  </channel>
</rss>
