{"vulnerability": "2022-17", "sightings": [{"uuid": "df942f90-b25e-4678-9826-3aab3a8e07fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1736", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113920512182093088", "content": "", "creation_timestamp": "2025-01-31T02:04:25.788339Z"}, {"uuid": "396b6d8b-18ec-4b98-b784-6e3432ec5461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1736", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgywjhyov52t", "content": "", "creation_timestamp": "2025-01-31T02:15:47.416717Z"}, {"uuid": "5f698d32-9dce-4bd6-8c8f-0647b430b9a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgz2xzygav2w", "content": "", "creation_timestamp": "2025-01-31T03:35:33.861794Z"}, {"uuid": "4619429d-643f-4a3b-aeb9-794c12a95c72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "dae4e043-3389-4271-81e7-3e2b240a4aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1711", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-1711.yaml", "content": "", "creation_timestamp": "2025-05-01T10:53:42.000000Z"}, {"uuid": "3c9bd4c7-dc14-4b2f-8d6b-1b6dff6c611a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1711", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo7pvqz5ac2a", "content": "", "creation_timestamp": "2025-05-02T21:02:23.185383Z"}, {"uuid": "404422d6-d76a-4530-803c-821b7bad0add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-10)", "content": "", "creation_timestamp": "2025-05-10T00:00:00.000000Z"}, {"uuid": "eab6fe3f-e27d-4bfd-8248-9a3cb21c40d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "e92402ac-b04a-4e73-ad0b-3c8344ca18bd", "vulnerability": "CVE-2022-1703", "type": "exploited", "source": "https://www.cybereason.com/blog/ttp-briefing-q3-2025", "content": "", "creation_timestamp": "2025-10-26T22:32:42.135242Z"}, {"uuid": "451970e8-7ea3-4d8c-924f-b4bc04ce47ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1703", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3xrj3we2z26", "content": "", "creation_timestamp": "2025-10-24T21:02:33.122201Z"}, {"uuid": "b4d03cac-70f4-4574-a58c-e201af8579b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "seen", "source": "MISP/db121278-a8f5-4f36-a226-e45f3a86f55e", "content": "", "creation_timestamp": "2025-08-26T13:26:33.000000Z"}, {"uuid": "354ad83c-f792-4a13-9d7a-c697cc472a47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-01)", "content": "", "creation_timestamp": "2026-04-01T00:00:00.000000Z"}, {"uuid": "8ea66acc-a45f-4bb4-8cfb-11943bc88723", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-1705", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "e5ee4bf1-beb3-4554-97a9-74de654e2493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1729", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9628", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2022-1729: Linux Kernel Privilege Escalation Vulnerability \n\nhttps://securityonline.info/cve-2022-1729-linux-kernel-privilege-escalation-vulnerability/", "creation_timestamp": "2022-05-31T09:12:33.000000Z"}, {"uuid": "59673ce5-45e7-4923-b742-92115d4a4289", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mj3pexw3ow2q", "content": "", "creation_timestamp": "2026-04-09T21:02:35.311211Z"}, {"uuid": "bcc5510b-d3a6-4e34-8426-4435df73b476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11246", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 [CVE-2022-1786] A Journey To The Dawn.\n\nhttps://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2023-07-08T18:44:30.000000Z"}, {"uuid": "136bf7e7-c91d-4993-9273-e7962386adf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1736", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3552", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1736\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-01-31T02:15:28.440\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://bugs.launchpad.net/ubuntu/+source/gnome-remote-desktop/+bug/1973028\n2. https://ubuntu.com/security/CVE-2022-1736\n3. https://ubuntu.com/security/notices/USN-5430-1", "creation_timestamp": "2025-01-31T03:21:55.000000Z"}, {"uuid": "1614db3d-84ae-44e0-9524-c2c8007d44b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1736", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3568", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1736\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default.\n\ud83d\udccf Published: 2025-01-31T03:32:13Z\n\ud83d\udccf Modified: 2025-01-31T03:32:13Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2022-1736\n2. https://bugs.launchpad.net/ubuntu/+source/gnome-remote-desktop/+bug/1973028\n3. https://ubuntu.com/security/CVE-2022-1736\n4. https://ubuntu.com/security/notices/USN-5430-1", "creation_timestamp": "2025-01-31T04:12:58.000000Z"}, {"uuid": "9d9ef140-9c0d-42ac-8bfd-6b6e05f8ad0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1740", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12324", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1740\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tested version of Dominion Voting Systems ImageCast X\u2019s on-screen application hash display feature, audit log export, and application export functionality rely on self-attestation mechanisms. An attacker could leverage this vulnerability to disguise malicious applications on a device.\n\ud83d\udccf Published: 2022-06-24T15:00:27.003Z\n\ud83d\udccf Modified: 2025-04-17T18:46:49.242Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:07.000000Z"}, {"uuid": "290d5bcd-508c-4356-81fe-849565246208", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1742", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12323", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1742\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.\n\ud83d\udccf Published: 2022-06-24T15:00:26.248Z\n\ud83d\udccf Modified: 2025-04-17T18:46:56.195Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:06.000000Z"}, {"uuid": "8305802d-a47a-4120-926c-f312e5f8e4ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1747\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The authentication mechanism used by voters to activate a voting session on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker could leverage this vulnerability to print an arbitrary number of ballots without authorization.\n\ud83d\udccf Published: 2022-06-24T15:00:22.908Z\n\ud83d\udccf Modified: 2025-04-17T18:47:25.150Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:02.000000Z"}, {"uuid": "46852baa-602f-4713-8c3b-8a6dee0146b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1743", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12322", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1743\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS.\n\ud83d\udccf Published: 2022-06-24T15:00:25.427Z\n\ud83d\udccf Modified: 2025-04-17T18:47:03.677Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:05.000000Z"}, {"uuid": "bb6f3125-65a2-44a5-96df-a9643041b9ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1741", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12321", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1741\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code.\n\ud83d\udccf Published: 2022-06-24T15:00:24.654Z\n\ud83d\udccf Modified: 2025-04-17T18:47:11.112Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:04.000000Z"}, {"uuid": "4cac5dca-db86-4b12-bd31-6c60e678da4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1744", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12320", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1744\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Applications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.\n\ud83d\udccf Published: 2022-06-24T15:00:23.804Z\n\ud83d\udccf Modified: 2025-04-17T18:47:17.814Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:03.000000Z"}, {"uuid": "96e3c160-c3ad-4240-9e00-8772e2d83964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1739\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to detect tampering. An attacker could leverage this vulnerability to install malicious code, which could also be spread to other vulnerable ImageCast X devices via removable media.\n\ud83d\udccf Published: 2022-06-24T15:00:22.129Z\n\ud83d\udccf Modified: 2025-04-17T18:47:32.163Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:01.000000Z"}, {"uuid": "9a9b63cc-38b3-45c1-856a-a05387d1494f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1746", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12317", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1746\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.\n\ud83d\udccf Published: 2022-06-24T15:00:21.325Z\n\ud83d\udccf Modified: 2025-04-17T18:47:40.296Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-22-154-01", "creation_timestamp": "2025-04-17T18:58:00.000000Z"}, {"uuid": "b75f7328-7222-4156-893f-feac7a7f4fc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17179", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-1755\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks\n\ud83d\udccf Published: 2022-09-26T12:35:31.000Z\n\ud83d\udccf Modified: 2025-05-21T19:21:54.712Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/62b2548e-6b59-48b8-b1c2-9bd47e634982", "creation_timestamp": "2025-05-21T19:42:49.000000Z"}, {"uuid": "245de971-70ab-4ae2-9bfe-dbd65509f063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "seen", "source": "https://t.me/linkersec/194", "content": "[CVE-2022-1786] A Journey To The Dawn\n\nA thrilling article by kylebot about exploiting a race condition that leads to a double-free in the io_uring subsystem and winning a kCTF bounty.\n\nThe exploit uses novel techniques: overwriting binfmt structures instead of modprobe_path and using fork and msleep to safely return to userspace after executing a ROP chain.", "creation_timestamp": "2022-10-29T15:13:03.000000Z"}, {"uuid": "0c66b31b-852c-4534-8e07-db53ac49c361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1736", "type": "seen", "source": "https://t.me/cvedetector/16865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-1736 - Ubuntu Gnome-Control-Center Remote Desktop Sharing Default Enablement Weakness\", \n  \"Content\": \"CVE ID : CVE-2022-1736 \nPublished : Jan. 31, 2025, 2:15 a.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : Ubuntu's configuration of gnome-control-center allowed Remote Desktop Sharing to be enabled by default. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-31T04:29:39.000000Z"}, {"uuid": "2a9cb16a-6dd5-4789-8d79-6452d00ced5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1751", "type": "seen", "source": "https://t.me/cvedetector/3387", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-1751 - BluePoint VMubility Server-Side Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2022-1751 \nPublished : Aug. 17, 2024, 8:15 a.m. | 21\u00a0minutes ago \nDescription : The Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-17T10:37:31.000000Z"}, {"uuid": "ca9107c2-0e2a-40bf-a845-f7552656cab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1751", "type": "seen", "source": "https://t.me/CveExploits/11", "content": "\ud83d\udea8 CVE-2022-1751\nThe Skitter Slideshow plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.5.2 via the /image.php file. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.", "creation_timestamp": "2024-08-17T14:00:29.000000Z"}, {"uuid": "6ced50bc-50ee-4eb0-b079-f14112a3c293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1760", "type": "seen", "source": "https://t.me/ctinow/180038", "content": "https://ift.tt/jF5dTuv\nCVE-2022-1760 | Core Control Plugin up to 1.2.1 on WordPress Setting cross-site request forgery", "creation_timestamp": "2024-02-06T15:17:08.000000Z"}, {"uuid": "b4dbbd83-2247-4807-9a27-ea671ce55f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1760", "type": "seen", "source": "https://t.me/ctinow/172378", "content": "https://ift.tt/TOYNvxA\nCVE-2022-1760 Exploit", "creation_timestamp": "2024-01-23T23:16:19.000000Z"}, {"uuid": "5c80d816-793a-4a41-84f9-ddb421a3c713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1725", "type": "seen", "source": "https://t.me/cibsecurity/50712", "content": "\u203c CVE-2022-1725 \u203c\n\nNULL Pointer Dereference in GitHub repository vim/vim prior to 8.2.4959.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T07:51:03.000000Z"}, {"uuid": "5cf40dc2-64bf-4837-9780-868711c6b74f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1719", "type": "seen", "source": "https://t.me/cibsecurity/50675", "content": "\u203c CVE-2022-1719 \u203c\n\nReflected XSS on ticket filter function in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability is capable of executing a malicious javascript code in web page\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T07:44:57.000000Z"}, {"uuid": "87a96bc3-14df-4606-ad8e-c6d5f4be3ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1718", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/50655", "content": "\u203c CVE-2022-1718 \u203c\n\nThe trudesk application allows large characters to insert in the input field \"Full Name\" on the signup field which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request in GitHub repository polonel/trudesk prior to 1.2.2. This can lead to Denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-16T09:12:38.000000Z"}, {"uuid": "dd300238-347e-45cd-9677-baf8e55155a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1755", "type": "seen", "source": "https://t.me/cibsecurity/50467", "content": "\u203c CVE-2022-1755 \u203c\n\nThe SVG Support WordPress plugin before 2.5 does not properly handle SVG added via an URL, which could allow users with a role as low as author to perform Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:21:47.000000Z"}, {"uuid": "0963409c-3faf-4c7e-ba4b-17f7a7cbbe59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1738", "type": "seen", "source": "https://t.me/cibsecurity/51826", "content": "\u203c CVE-2022-1738 \u203c\n\nFuji Electric D300win prior to version 3.7.1.17 is vulnerable to an out-of-bounds read, which could allow an attacker to leak sensitive data from the process memory.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-19T22:15:38.000000Z"}, {"uuid": "5beb716b-ac49-4875-a1f9-958602a41fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1798", "type": "seen", "source": "https://t.me/cibsecurity/49847", "content": "\u203c CVE-2022-1798 \u203c\n\nA path traversal vulnerability in KubeVirt versions up to 0.56 (and 0.55.1) on all platforms allows a user able to configure the kubevirt to read arbitrary files on the host filesystem which are publicly readable or which are readable for UID 107 or GID 107. /proc/self/<> is not accessible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-15T20:28:00.000000Z"}, {"uuid": "258e309e-2780-48a3-a7f9-2ee5f1a6a729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1700", "type": "seen", "source": "https://t.me/cibsecurity/49599", "content": "\u203c CVE-2022-1700 \u203c\n\nImproper Restriction of XML External Entity Reference ('XXE') vulnerability in the Policy Engine of Forcepoint Data Loss Prevention (DLP), which is also leveraged by Forcepoint One Endpoint (F1E), Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20, 2022. The XML parser in the Policy Engine was found to be improperly configured to support external entities and external DTD (Document Type Definitions), which can lead to an XXE attack. This issue affects: Forcepoint Data Loss Prevention (DLP) versions prior to 8.8.2. Forcepoint One Endpoint (F1E) with Policy Engine versions prior to 8.8.2. Forcepoint Web Security Content Gateway versions prior to 8.5.5. Forcepoint Email Security with DLP enabled versions prior to 8.5.5. Forcepoint Cloud Security Gateway prior to June 20, 2022.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-12T22:29:33.000000Z"}, {"uuid": "9938552b-6c84-424e-b6ef-bb52d05db66d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1732", "type": "seen", "source": "https://t.me/cibsecurity/45917", "content": "\u203c CVE-2022-1732 \u203c\n\nThe Rename wp-login.php WordPress plugin through 2.6.0 does not have CSRF check in place when updating the secret login URL, which could allow attackers to make a logged in admin change them via a CSRF attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-11T16:19:27.000000Z"}, {"uuid": "216232b1-96d4-48d6-99d2-ac1c4ab934e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1766", "type": "seen", "source": "https://t.me/cibsecurity/46696", "content": "\u203c CVE-2022-1766 \u203c\n\nAnchore Enterprise anchorectl version 0.1.4 improperly stored credentials when generating a Software Bill of Materials. anchorectl will add the credentials used to access Anchore Enterprise API in the Software Bill of Materials (SBOM) generated by anchorectl. Users of anchorectl version 0.1.4 should upgrade to anchorectl version 0.1.5 to resolve this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-20T20:12:22.000000Z"}, {"uuid": "046ea9e3-e175-4dd9-9c88-8a529c95dd87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1748", "type": "seen", "source": "https://t.me/cibsecurity/48302", "content": "\u203c CVE-2022-1748 \u203c\n\nSofting OPC UA C++ Server SDK, Secure Integration Server, edgeConnector, edgeAggregator, OPC Suite, and uaGate are affected by a NULL pointer dereference vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-18T00:40:42.000000Z"}, {"uuid": "148e05dd-3bd5-443d-be21-15c2f39f3021", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1757", "type": "seen", "source": "https://t.me/cibsecurity/45918", "content": "\u203c CVE-2022-1757 \u203c\n\nThe Pagebar WordPress plugin through 2.65 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack. Furthermore, due to the lack of sanitisation in some of them, it could also lead to Stored XSS issues\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-11T16:19:28.000000Z"}, {"uuid": "0b05fa9e-33ff-4586-8fb1-3591b140bbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1794", "type": "seen", "source": "https://t.me/cibsecurity/45895", "content": "\u203c CVE-2022-1794 \u203c\n\nThe CODESYS OPC DA Server prior V3.5.18.20 stores PLC passwords as plain text in its configuration file so that it is visible to all authorized Microsoft Windows users of the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-11T14:19:05.000000Z"}, {"uuid": "0dede23d-04dc-4c4a-abd2-9633f602ccd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1704", "type": "seen", "source": "https://t.me/cibsecurity/47635", "content": "\u203c CVE-2022-1704 \u203c\n\nDue to an XML external entity reference, the software parses XML in the backup/restore functionality without XML security flags, which may lead to a XXE attack while restoring the backup.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-05T20:21:01.000000Z"}, {"uuid": "52e6284a-4a3c-48be-802a-19ab52737dc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1706", "type": "seen", "source": "https://t.me/cibsecurity/42847", "content": "\u203c CVE-2022-1706 \u203c\n\nA vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data confidentiality. Possible workaround is to not put secrets in the Ignition config.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T22:27:40.000000Z"}, {"uuid": "aaa908ce-9fdd-4c2c-8b38-46441036e816", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1799", "type": "seen", "source": "https://t.me/cibsecurity/47248", "content": "\u203c CVE-2022-1799 \u203c\n\nIncorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devices that are non-GMS. We recommend upgrading the SDK past the 2022-05-03 release.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-29T14:13:23.000000Z"}, {"uuid": "41819dc7-4859-4b02-987c-40184bc81c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1739", "type": "seen", "source": "https://t.me/cibsecurity/45084", "content": "\u203c CVE-2022-1739 \u203c\n\nThe tested version of Dominion Voting Systems ImageCast X does not validate application signatures to a trusted root certificate. Use of a trusted root certificate ensures software installed on a device is traceable to, or verifiable against, a cryptographic key provided by the manufacturer to detect tampering. An attacker could leverage this vulnerability to install malicious code, which could also be spread to other vulnerable ImageCast X devices via removable media.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-24T18:31:00.000000Z"}, {"uuid": "7d4764aa-95be-47d6-9898-6074ef7e773d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1745", "type": "seen", "source": "https://t.me/cibsecurity/45082", "content": "\u203c CVE-2022-1745 \u203c\n\nThe authentication mechanism used by technicians on the tested version of Dominion Voting Systems ImageCast X is susceptible to forgery. An attacker with physical access may use this to gain administrative privileges on a device and install malicious code or perform arbitrary administrative actions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-24T18:30:58.000000Z"}, {"uuid": "ece9bbac-dd17-4b17-9f61-55cf2dfbb538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1782", "type": "seen", "source": "https://t.me/cibsecurity/42919", "content": "\u203c CVE-2022-1782 \u203c\n\nCross-site Scripting (XSS) - Generic in GitHub repository erudika/para prior to v1.45.11.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-18T18:28:46.000000Z"}, {"uuid": "5731872c-b17f-4b1b-beaf-2e973328991d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1720", "type": "seen", "source": "https://t.me/cibsecurity/44830", "content": "\u203c CVE-2022-1720 \u203c\n\nBuffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capable of crashing the software, memory modification, and possible remote execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-20T18:26:34.000000Z"}, {"uuid": "171a668b-2b04-4fc6-aeb8-546d5fe3e96c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1783", "type": "seen", "source": "https://t.me/cibsecurity/43856", "content": "\u203c CVE-2022-1783 \u203c\n\nAn issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 14.9.5, all versions starting from 14.10 before 14.10.4, all versions starting from 15.0 before 15.0.1. It may be possible for malicious group maintainers to add new members to a project within their group, through the REST API, even after their group owner enabled a setting to prevent members from being added to projects within that group.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-07T08:16:44.000000Z"}, {"uuid": "3927d57d-6402-43f1-9b48-ed29177103fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1716", "type": "seen", "source": "https://t.me/cibsecurity/43754", "content": "\u203c CVE-2022-1716 \u203c\n\nAn attacker with physical access to the victim's device can bypass the application's password/pin lock to access user data. This is possible due to lack of adequate security controls to prevent dynamic code manipulation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-03T11:45:31.000000Z"}, {"uuid": "819038a4-2be5-4833-adb2-57cafbe079c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1709", "type": "seen", "source": "https://t.me/cibsecurity/43998", "content": "\u203c CVE-2022-1709 \u203c\n\nThe Throws SPAM Away WordPress plugin before 3.3.1 does not have CSRF checks in place when deleting comments (either all, spam, or pending), allowing attackers to make a logged in admin delete comments via a CSRF attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-08T14:45:42.000000Z"}, {"uuid": "c2ac3758-6d1d-4b88-a2b1-b925acb0334f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1708", "type": "seen", "source": "https://t.me/cibsecurity/43947", "content": "\u203c CVE-2022-1708 \u203c\n\nA vulnerability was found in CRI-O that causes memory or disk space exhaustion on the node for anyone with access to the Kube API. The ExecSync request runs commands in a container and logs the output of the command. This output is then read by CRI-O after command execution, and it is read in a manner where the entire file corresponding to the output of the command is read in. Thus, if the output of the command is large it is possible to exhaust the memory or the disk space of the node when CRI-O reads the output of the command. The highest threat from this vulnerability is system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-07T22:31:22.000000Z"}, {"uuid": "e938f95e-0032-4542-b75b-1d2ffd0e6857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1797", "type": "seen", "source": "https://t.me/cibsecurity/43700", "content": "\u203c CVE-2022-1797 \u203c\n\nA malformed Class 3 common industrial protocol message with a cached connection can cause a denial-of-service condition in Rockwell Automation Logix Controllers, resulting in a major nonrecoverable fault. If the target device becomes unavailable, a user would have to clear the fault and redownload the user project file to bring the device back online.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-02T18:36:01.000000Z"}, {"uuid": "1e0400c0-8eae-487a-b059-32c3d60e0782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1775", "type": "seen", "source": "https://t.me/cibsecurity/43118", "content": "\u203c CVE-2022-1775 \u203c\n\nWeak Password Requirements in GitHub repository polonel/trudesk prior to 1.2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-21T02:31:12.000000Z"}, {"uuid": "eeb08549-16d0-4ee3-a2f3-8638e1a120ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1735", "type": "seen", "source": "https://t.me/cibsecurity/42855", "content": "\u203c CVE-2022-1735 \u203c\n\nClassic Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T22:27:52.000000Z"}, {"uuid": "382ec0af-ce93-401b-8f3a-e2768a651c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1774", "type": "seen", "source": "https://t.me/cibsecurity/42962", "content": "\u203c CVE-2022-1774 \u203c\n\nExposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.0.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T00:28:48.000000Z"}, {"uuid": "05d0f6ac-afe9-4d26-a4d8-e1ce1aaf4e7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1746", "type": "seen", "source": "https://t.me/cibsecurity/45099", "content": "\u203c CVE-2022-1746 \u203c\n\nThe authentication mechanism used by poll workers to administer voting using the tested version of Dominion Voting Systems ImageCast X can expose cryptographic secrets used to protect election information. An attacker could leverage this vulnerability to gain access to sensitive information and perform privileged actions, potentially affecting other election equipment.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-24T18:31:19.000000Z"}, {"uuid": "57591044-f0f7-47fa-be17-e66dfac681c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1715", "type": "seen", "source": "https://t.me/cibsecurity/42684", "content": "\u203c CVE-2022-1715 \u203c\n\nAccount Takeover in GitHub repository neorazorx/facturascripts prior to 2022.07.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-13T20:27:06.000000Z"}, {"uuid": "3ada5b39-6492-49ae-a90e-50a2e7da748b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1742", "type": "seen", "source": "https://t.me/cibsecurity/45094", "content": "\u203c CVE-2022-1742 \u203c\n\nThe tested version of Dominion Voting Systems ImageCast X allows for rebooting into Android Safe Mode, which allows an attacker to directly access the operating system. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-24T18:31:14.000000Z"}, {"uuid": "239047af-77dc-4a07-b04f-681e7dea4902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1744", "type": "seen", "source": "https://t.me/cibsecurity/45091", "content": "\u203c CVE-2022-1744 \u203c\n\nApplications on the tested version of Dominion Voting Systems ImageCast X can execute code with elevated privileges by exploiting a system level service. An attacker could leverage this vulnerability to escalate privileges on a device and/or install malicious code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-24T18:31:11.000000Z"}, {"uuid": "85b1a814-852e-4738-8c8b-8cf9b7fedd3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1741", "type": "seen", "source": "https://t.me/cibsecurity/45090", "content": "\u203c CVE-2022-1741 \u203c\n\nThe tested version of Dominion Voting Systems ImageCast X has a Terminal Emulator application which could be leveraged by an attacker to gain elevated privileges on a device and/or install malicious code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-24T18:31:10.000000Z"}, {"uuid": "76473ff6-5422-425d-b58c-3bce0adc75ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1771", "type": "seen", "source": "https://t.me/cibsecurity/42967", "content": "\u203c CVE-2022-1771 \u203c\n\nStack-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T00:28:56.000000Z"}, {"uuid": "76a02a22-900b-4337-9c67-e8ccbdd8b846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1730", "type": "seen", "source": "https://t.me/cibsecurity/42988", "content": "\u203c CVE-2022-1730 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository jgraph/drawio prior to 18.0.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T18:29:48.000000Z"}, {"uuid": "3a3c7e36-ff0b-49af-ab03-73bc789d4ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1726", "type": "seen", "source": "https://t.me/cibsecurity/42745", "content": "\u203c CVE-2022-1726 \u203c\n\nBootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-16T18:26:38.000000Z"}, {"uuid": "bc8fcec4-f339-4d90-99d7-9ebf4f2d8502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1752", "type": "seen", "source": "https://t.me/cibsecurity/43131", "content": "\u203c CVE-2022-1752 \u203c\n\nUnrestricted Upload of File with Dangerous Type in GitHub repository polonel/trudesk prior to 1.2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-21T07:44:54.000000Z"}, {"uuid": "5dff7120-e383-4118-9b5a-60d02fd51cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1785", "type": "seen", "source": "https://t.me/cibsecurity/42978", "content": "\u203c CVE-2022-1785 \u203c\n\nOut-of-bounds Write in GitHub repository vim/vim prior to 8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-19T16:29:29.000000Z"}, {"uuid": "b22a1649-86b5-4409-8ed7-dbe9e16ccee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1770", "type": "seen", "source": "https://t.me/cibsecurity/43082", "content": "\u203c CVE-2022-1770 \u203c\n\nImproper Privilege Management in GitHub repository polonel/trudesk prior to 1.2.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-20T22:30:52.000000Z"}, {"uuid": "5236941f-3ff9-4da7-91ee-3a44e8c3a8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1767", "type": "seen", "source": "https://t.me/cibsecurity/42930", "content": "\u203c CVE-2022-1767 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-18T20:28:41.000000Z"}, {"uuid": "48d965bc-3b1e-4778-8d98-a425cd0af641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1702", "type": "seen", "source": "https://t.me/cibsecurity/42701", "content": "\u203c CVE-2022-1702 \u203c\n\nSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions accept a user-controlled input that specifies a link to an external site and uses that link in a redirect which leads to Open redirection vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-14T00:27:29.000000Z"}, {"uuid": "bbf653e3-213a-4f3e-8ddb-3f0f90c56500", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1734", "type": "seen", "source": "https://t.me/cibsecurity/42941", "content": "\u203c CVE-2022-1734 \u203c\n\nA flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-18T20:28:55.000000Z"}, {"uuid": "0958fa91-2772-4ce4-9af2-af1919176a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1727", "type": "seen", "source": "https://t.me/cibsecurity/42914", "content": "\u203c CVE-2022-1727 \u203c\n\nImproper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-18T18:28:40.000000Z"}, {"uuid": "2596332f-c7c6-48dc-9cdd-9b0fe07b34e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1795", "type": "seen", "source": "https://t.me/cibsecurity/42912", "content": "\u203c CVE-2022-1795 \u203c\n\nUse After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-18T18:28:38.000000Z"}, {"uuid": "1c94949b-66a6-4fd4-9cf6-6d4e9324cd17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1711", "type": "seen", "source": "https://t.me/cibsecurity/42803", "content": "\u203c CVE-2022-1711 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T16:27:24.000000Z"}, {"uuid": "51cbcd02-9bef-4c4a-9bc0-f9244977717a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1723", "type": "seen", "source": "https://t.me/cibsecurity/42797", "content": "\u203c CVE-2022-1723 \u203c\n\nServer-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T12:27:16.000000Z"}, {"uuid": "d62ac70f-2f98-41f3-8f03-710651d21411", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1753", "type": "seen", "source": "https://t.me/cibsecurity/42796", "content": "\u203c CVE-2022-1753 \u203c\n\nA vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument group_id allows posting messages in other groups. It is possible to launch the attack remotely but it might require authentication. A video explaining the attack has been disclosed to the public.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T12:27:14.000000Z"}, {"uuid": "bc27ce5a-7bbb-47b0-82fc-b3d0c8153b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1769", "type": "seen", "source": "https://t.me/cibsecurity/42843", "content": "\u203c CVE-2022-1769 \u203c\n\nBuffer Over-read in GitHub repository vim/vim prior to 8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T20:27:56.000000Z"}, {"uuid": "a32ed74b-aa8a-437d-8ee5-f3d952814c92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1733", "type": "seen", "source": "https://t.me/cibsecurity/42842", "content": "\u203c CVE-2022-1733 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-17T20:27:55.000000Z"}, {"uuid": "cf220102-5a5b-4f46-90f9-f24c6eb0b5b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1701", "type": "seen", "source": "https://t.me/cibsecurity/42699", "content": "\u203c CVE-2022-1701 \u203c\n\nSonicWall SMA1000 series firmware 12.4.0, 12.4.1-02965 and earlier versions uses a shared and hard-coded encryption key to store data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-14T00:27:25.000000Z"}, {"uuid": "1b9c1e42-eece-47b1-86df-d9c34170cc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1731", "type": "seen", "source": "https://t.me/cibsecurity/42767", "content": "\u203c CVE-2022-1731 \u203c\n\nMetasonic Doc WebClient 7.0.14.0 / 7.0.12.0 / 7.0.3.0 is vulnerable to a SQL injection attack in the username field. SSO or System authentication are required to be enabled for vulnerable conditions to exist.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-16T22:26:34.000000Z"}, {"uuid": "9aa1bca7-0260-4da4-98d6-62cb9a4ce1de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1728", "type": "seen", "source": "https://t.me/cibsecurity/42749", "content": "\u203c CVE-2022-1728 \u203c\n\nAllowing long password leads to denial of service in polonel/trudesk in GitHub repository polonel/trudesk prior to 1.2.2. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-16T18:26:46.000000Z"}, {"uuid": "30f2ebaa-976c-45e0-a607-e14138138814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1722", "type": "seen", "source": "https://t.me/cibsecurity/42746", "content": "\u203c CVE-2022-1722 \u203c\n\nSSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal link-local IPv6 addresses\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-16T18:26:39.000000Z"}, {"uuid": "1343bb3e-92cb-4aba-be70-20ec3b10c9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1713", "type": "seen", "source": "https://t.me/cibsecurity/42737", "content": "\u203c CVE-2022-1713 \u203c\n\nSSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-16T18:26:30.000000Z"}, {"uuid": "9a2ac96b-3804-4161-970b-21cb2ba6081c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1749", "type": "seen", "source": "https://t.me/cibsecurity/44308", "content": "\u203c CVE-2022-1749 \u203c\n\nThe WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T18:18:13.000000Z"}, {"uuid": "3d121a22-fc2d-4a6d-b0f1-3e53664bc505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1777", "type": "seen", "source": "https://t.me/cibsecurity/44276", "content": "\u203c CVE-2022-1777 \u203c\n\nThe Filr WordPress plugin before 1.2.2.1 does not have authorisation check in two of its AJAX actions, allowing them to be called by any authenticated users, such as subscriber. They are are protected with a nonce, however the nonce is leaked on the dashboard. This could allow them to upload arbitrary HTML files as well as delete all files or arbitrary ones.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:17:07.000000Z"}, {"uuid": "a6300134-b59d-4bcb-aebd-9917ade28b4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1761", "type": "seen", "source": "https://t.me/cibsecurity/44275", "content": "\u203c CVE-2022-1761 \u203c\n\nThe Peter\u00c3\u00a2\u00e2\u201a\u00ac\u00e2\u201e\u00a2s Collaboration E-mails WordPress plugin through 2.2.0 is vulnerable to CSRF due to missing nonce checks. This allows the change of its settings, which can be used to lower the required user level, change texts, the used email address and more.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:17:05.000000Z"}, {"uuid": "8dc631de-f9f8-495b-bff7-90b67f2156fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1764", "type": "seen", "source": "https://t.me/cibsecurity/44270", "content": "\u203c CVE-2022-1764 \u203c\n\nThe WP-chgFontSize WordPress plugin through 1.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:16:57.000000Z"}, {"uuid": "9db73e47-75b1-4016-816c-6288615bc992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1772", "type": "seen", "source": "https://t.me/cibsecurity/44266", "content": "\u203c CVE-2022-1772 \u203c\n\nThe Google Places Reviews WordPress plugin before 2.0.0 does not properly escape its Google API key setting, which is reflected on the site's administration panel. A malicious administrator could abuse this bug, in a multisite WordPress configuration, to trick super-administrators into viewing the booby-trapped payload and taking over their account.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:16:54.000000Z"}, {"uuid": "fff139ed-b547-429b-89f8-d889bfcf9189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1788", "type": "seen", "source": "https://t.me/cibsecurity/44265", "content": "\u203c CVE-2022-1788 \u203c\n\nDue to missing checks the Change Uploaded File Permissions WordPress plugin through 4.0.0 is vulnerable to CSRF attacks. This can be used to change the file and folder permissions of any folder. This could be problematic when specific files like ini files are made readable for everyone due to this.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:16:53.000000Z"}, {"uuid": "c38bd05f-8b0e-458b-9c43-2f5a5da7ef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1787", "type": "seen", "source": "https://t.me/cibsecurity/44267", "content": "\u203c CVE-2022-1787 \u203c\n\nThe Sideblog WordPress plugin through 6.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:16:55.000000Z"}, {"uuid": "8e7312ac-055c-4131-ad44-a3ae8af3bc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1781", "type": "seen", "source": "https://t.me/cibsecurity/44285", "content": "\u203c CVE-2022-1781 \u203c\n\nThe postTabs WordPress plugin through 2.10.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack, which also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:22:57.000000Z"}, {"uuid": "2c0f0ea6-abde-4cfa-8eba-3752c97a8e49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1780", "type": "seen", "source": "https://t.me/cibsecurity/44283", "content": "\u203c CVE-2022-1780 \u203c\n\nThe LaTeX for WordPress plugin through 3.4.10 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack which could also lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:17:14.000000Z"}, {"uuid": "876f9650-bf52-4b50-a17a-5483b5a013fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1779", "type": "seen", "source": "https://t.me/cibsecurity/44282", "content": "\u203c CVE-2022-1779 \u203c\n\nThe Auto Delete Posts WordPress plugin through 1.3.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and delete specific posts, categories and attachments at once.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-13T16:17:13.000000Z"}, {"uuid": "f182088b-0e92-4148-bcd0-ba7423776634", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1773", "type": "seen", "source": "https://t.me/cibsecurity/44278", "content": "\u203c CVE-2022-1773 \u203c\n\nThe WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T14:04:16.000000Z"}, {"uuid": "8dc1c1a7-663b-498f-87ce-258dc1ce679b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2785", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-08-02T22:20:56.292460Z"}, {"uuid": "442cbb16-5d76-4340-b0f0-fa0f0440c04c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2785", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-08-03T00:44:20.888118Z"}, {"uuid": "69bd85d0-6998-4dd9-b717-c82ac919b311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3586", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-08-03T01:59:19.663947Z"}, {"uuid": "d67a1be4-17b5-4952-9b66-9c6c10bb90da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7027", "content": "#exploit\nCVE-2022-1786:\nLPE to root vua UAF in the io_uring subsystem\nhttps://blog.kylebot.net/2022/10/16/CVE-2022-1786", "creation_timestamp": "2022-10-22T13:07:01.000000Z"}, {"uuid": "f0083977-75a9-46d8-ae1a-35068d41d6b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3586", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-08-02T16:02:13.871768Z"}, {"uuid": "30643976-2567-41e2-9ac1-381b6f3c9584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "7915a819-e2a3-4d32-b7c6-71cbe0d718ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-1798", "type": "published-proof-of-concept", "source": "https://github.com/google/security-research/security/advisories/GHSA-cvx8-ppmc-78hm", "content": "", "creation_timestamp": "2022-08-09T00:43:58.000000Z"}, {"uuid": "9c5efd4d-a0ad-4f8e-ae4b-acabddd1c8e2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a92d177e-a80e-4730-b448-3a23dba57eda", "content": "", "creation_timestamp": "2026-06-19T12:45:36.404213Z"}, {"uuid": "4498c05c-5a10-42a1-b4d5-f5f3d38e3819", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1703", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97993af8-2a1a-4f2b-bc31-5dfc7b29936f", "content": "", "creation_timestamp": "2026-06-19T12:45:49.811084Z"}, {"uuid": "d4262c58-abfe-4dcd-80ba-ef95b3d79f14", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1768", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fb9d7ef6-5b5f-4753-adc0-202dab8463bb", "content": "", "creation_timestamp": "2026-06-23T14:03:05.269818Z"}, {"uuid": "6e7b028f-efda-49f7-92ef-08aa8fdd6c62", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-1768", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5d30223a-ed8d-4c31-9d5b-c8921b252ff7", "content": "", "creation_timestamp": "2026-06-30T09:23:40.921444Z"}, {"uuid": "8decb56c-dfbb-4ba8-aac4-d0048c7f3ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "seen", "source": "https://t.me/reverseame/2785", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-07-29T12:02:38.147485Z"}, {"uuid": "4212ecc9-a703-43b2-bf63-f72b17dc9e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "seen", "source": "https://t.me/reverseame/3586", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-07-29T12:02:27.972693Z"}, {"uuid": "53d4d2aa-1e45-4e60-9fc1-15f4876cea82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "seen", "source": "https://t.me/reverseame/2785", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-07-30T00:02:34.521353Z"}, {"uuid": "86a3409f-71db-4f3f-8bf7-a89733a7b9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1786", "type": "seen", "source": "https://t.me/reverseame/3586", "content": "[CVE-2022-1786] A Journey To The Dawn https://blog.kylebot.net/2022/10/16/CVE-2022-1786/", "creation_timestamp": "2026-07-30T00:02:28.901806Z"}, {"uuid": "afd0f26d-37b4-4c69-8585-414daf47e13b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1784", "type": "seen", "source": "https://t.me/hacking_Attack/54329", "content": "CVE-2022\u20131784 The Ssrf\nhttps://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5\n\nIn this write up i am going to tell you about this awesome ssrf found by Hexatron rewarded with 900$ bountyContinue reading on Medium \u00bb (https://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:37.811193Z"}, {"uuid": "b457a437-4515-4a36-932d-51dece855133", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1784", "type": "seen", "source": "https://t.me/hacking_Attack/54329", "content": "CVE-2022\u20131784 The Ssrf\nhttps://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5\n\nIn this write up i am going to tell you about this awesome ssrf found by Hexatron rewarded with 900$ bountyContinue reading on Medium \u00bb (https://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:48.321918Z"}, {"uuid": "3e1ae7d1-8863-490a-a2cf-66d600216596", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1784", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/54329", "content": "CVE-2022\u20131784 The Ssrf\nhttps://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5\n\nIn this write up i am going to tell you about this awesome ssrf found by Hexatron rewarded with 900$ bountyContinue reading on Medium \u00bb (https://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T19:00:03.307426Z"}, {"uuid": "2fba4e0b-2862-4d30-ad81-4e2bcb9f4856", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1784", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/54329", "content": "CVE-2022\u20131784 The Ssrf\nhttps://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5\n\nIn this write up i am going to tell you about this awesome ssrf found by Hexatron rewarded with 900$ bountyContinue reading on Medium \u00bb (https://medium.com/@CVE_Writeups/cve-2022-1784-the-ssrf-57b8f0584fb0?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:38.093825Z"}]}