<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-17T15:25:04.673699+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/63053422-b5e0-4e4b-922b-a2a4e51c198d/export</id>
    <title>63053422-b5e0-4e4b-922b-a2a4e51c198d</title>
    <updated>2026-09-17T15:25:04.689578+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "63053422-b5e0-4e4b-922b-a2a4e51c198d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1026", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:00:06.934729Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/63053422-b5e0-4e4b-922b-a2a4e51c198d/export"/>
    <published>2026-09-16T10:00:06.934729+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6ae8decc-7b30-49f6-a956-d782e5cdd328/export</id>
    <title>6ae8decc-7b30-49f6-a956-d782e5cdd328</title>
    <updated>2026-09-17T15:25:04.692090+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6ae8decc-7b30-49f6-a956-d782e5cdd328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1026", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-12)", "content": "", "creation_timestamp": "2026-09-13T10:00:08.107799Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6ae8decc-7b30-49f6-a956-d782e5cdd328/export"/>
    <published>2026-09-13T10:00:08.107799+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/2698daaf-1a80-432d-86cb-cc076651efa6/export</id>
    <title>2698daaf-1a80-432d-86cb-cc076651efa6</title>
    <updated>2026-09-17T15:25:04.692261+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "2698daaf-1a80-432d-86cb-cc076651efa6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1057", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e7c25c61-277b-479a-ad87-5916a893ab5f", "content": "", "creation_timestamp": "2026-09-11T11:00:42.775421Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/2698daaf-1a80-432d-86cb-cc076651efa6/export"/>
    <published>2026-09-11T11:00:42.775421+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/03c649de-8d2f-4c4e-96c7-6da156f65a40/export</id>
    <title>03c649de-8d2f-4c4e-96c7-6da156f65a40</title>
    <updated>2026-09-17T15:25:04.692384+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "03c649de-8d2f-4c4e-96c7-6da156f65a40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1040", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5787", "content": "#exploit\n1. CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\n\n2. CVE-2022-1040:\nAuth bypass and RCE in webmin portal of Sophos Firewall\nhttps://github.com/cve-hunter/CVE-2022-1040-sophos-rce", "creation_timestamp": "2026-09-11T00:00:45.504515Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/03c649de-8d2f-4c4e-96c7-6da156f65a40/export"/>
    <published>2026-09-11T00:00:45.504515+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d7bf74ce-5e49-4f81-896e-5b0ee1b139b4/export</id>
    <title>d7bf74ce-5e49-4f81-896e-5b0ee1b139b4</title>
    <updated>2026-09-17T15:25:04.692507+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d7bf74ce-5e49-4f81-896e-5b0ee1b139b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1096", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel &amp;lt;5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-11T00:00:43.395482Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d7bf74ce-5e49-4f81-896e-5b0ee1b139b4/export"/>
    <published>2026-09-11T00:00:43.395482+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/c0f1e8e7-bbc7-48da-8bf6-bed6d9bb0fb5/export</id>
    <title>c0f1e8e7-bbc7-48da-8bf6-bed6d9bb0fb5</title>
    <updated>2026-09-17T15:25:04.692646+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "c0f1e8e7-bbc7-48da-8bf6-bed6d9bb0fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1015", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5695", "content": "Threat_Research\n1. New Milestones for Deep Panda:\nLog4Shell and Digitally Signed Fire Chili Rootkits\nhttps://www.fortinet.com/blog/threat-research/deep-panda-log4shell-fire-chili-rootkits\n\n2. Pwning a Cisco RV340 with a 4 bug chain exploit\nhttps://blog.relyze.com/2022/04/pwning-cisco-rv340-with-4-bug-chain.html\n\n3. CVE-2022-1015/1016:\nAn analysis of two new Linux vulnerabilities in nf_tables\nhttps://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016\n]-&amp;gt; PoC: https://github.com/pqlx/CVE-2022-1015", "creation_timestamp": "2026-09-11T00:00:42.904885Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/c0f1e8e7-bbc7-48da-8bf6-bed6d9bb0fb5/export"/>
    <published>2026-09-11T00:00:42.904885+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/46533d1a-0b58-414f-a01e-5d1df42b77eb/export</id>
    <title>46533d1a-0b58-414f-a01e-5d1df42b77eb</title>
    <updated>2026-09-17T15:25:04.692824+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "46533d1a-0b58-414f-a01e-5d1df42b77eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1015", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5695", "content": "Threat_Research\n1. New Milestones for Deep Panda:\nLog4Shell and Digitally Signed Fire Chili Rootkits\nhttps://www.fortinet.com/blog/threat-research/deep-panda-log4shell-fire-chili-rootkits\n\n2. Pwning a Cisco RV340 with a 4 bug chain exploit\nhttps://blog.relyze.com/2022/04/pwning-cisco-rv340-with-4-bug-chain.html\n\n3. CVE-2022-1015/1016:\nAn analysis of two new Linux vulnerabilities in nf_tables\nhttps://blog.dbouman.nl/2022/04/02/How-The-Tables-Have-Turned-CVE-2022-1015-1016\n]-&amp;gt; PoC: https://github.com/pqlx/CVE-2022-1015", "creation_timestamp": "2026-09-10T11:00:04.845594Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/46533d1a-0b58-414f-a01e-5d1df42b77eb/export"/>
    <published>2026-09-10T11:00:04.845594+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/f6c915d1-e6e6-41ad-83b0-b61c86a0dbcd/export</id>
    <title>f6c915d1-e6e6-41ad-83b0-b61c86a0dbcd</title>
    <updated>2026-09-17T15:25:04.692949+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "f6c915d1-e6e6-41ad-83b0-b61c86a0dbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1026", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:00:11.017719Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/f6c915d1-e6e6-41ad-83b0-b61c86a0dbcd/export"/>
    <published>2026-09-10T10:00:11.017719+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/11f7598e-2e40-4f97-9af9-d2a01f2a7093/export</id>
    <title>11f7598e-2e40-4f97-9af9-d2a01f2a7093</title>
    <updated>2026-09-17T15:25:04.693064+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "11f7598e-2e40-4f97-9af9-d2a01f2a7093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1096", "type": "seen", "source": "https://t.me/cissp/5722", "content": "Analytics\nTop 10 Most Used Vulns of the Month\n\nCVE-2022-1096 - Type Confusion in V8\nhttps://github.com/Maverick-cmd/Chrome-and-Edge-Version-Dumper\n\nCVE-2022-0847 - Dirty Pipe Vuln\n\nCVE-2022-0778 - OpenSSL Illegal x.509 certificate construction\n\nCVE-2022-0492 - Privilege escalation vuln causing container escape\nhttps://sysdig.com/blog/detecting-mitigating-cve-2022-0492-sysdig\n\nCVE-2022-22947 - Spring Cloud Gateway RCE\n\nCVE-2022-22963 - Spring Core RCE\n\nCVE-2022-25636 - net/netfilter/nf_dup_netdev.c in the Linux kernel &amp;lt;5.6.10 allows local users to gain privileges because of a heap out-of-bounds write\n\nCVE-2022-27254 - Vuln in Honda's Remote Keyless System\nhttps://github.com/nonamecoder/CVE-2022-27254\n\nCVE-2022-0609 - https://blog.google/threat-analysis-group/countering-threats-north-korea", "creation_timestamp": "2026-09-10T10:00:05.294714Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/11f7598e-2e40-4f97-9af9-d2a01f2a7093/export"/>
    <published>2026-09-10T10:00:05.294714+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/d586f765-5dd0-471b-adc4-89d686e6e81b/export</id>
    <title>d586f765-5dd0-471b-adc4-89d686e6e81b</title>
    <updated>2026-09-17T15:25:04.693183+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "d586f765-5dd0-471b-adc4-89d686e6e81b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1040", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5787", "content": "#exploit\n1. CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\n\n2. CVE-2022-1040:\nAuth bypass and RCE in webmin portal of Sophos Firewall\nhttps://github.com/cve-hunter/CVE-2022-1040-sophos-rce", "creation_timestamp": "2026-09-10T09:00:06.877315Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/d586f765-5dd0-471b-adc4-89d686e6e81b/export"/>
    <published>2026-09-10T09:00:06.877315+00:00</published>
  </entry>
</feed>
