https://vulnerability.circl.lu/sightings/feed 2026-09-17T19:30:25.897373+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/aa113383-e044-4bb6-9a1d-f24b8c4920f9/export 2026-09-17T19:30:25.918863+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "aa113383-e044-4bb6-9a1d-f24b8c4920f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21907", "type": "published-proof-of-concept", "source": "Telegram/cidJAxZvLTFZxSbxqLRVfcjDLusKBIeaDdCR21ALNkNvDiM", "content": "", "creation_timestamp": "2026-09-15T00:00:25.386767Z"} 2026-09-15T00:00:25.386767+00:00 https://vulnerability.circl.lu/sighting/d099836a-4604-4b42-996f-65bdae525651/export 2026-09-17T19:30:25.922282+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "d099836a-4604-4b42-996f-65bdae525651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21907", "type": "seen", "source": "Telegram/cidJAxZvLTFZxSbxqLRVfcjDLusKBIeaDdCR21ALNkNvDiM", "content": "", "creation_timestamp": "2026-09-14T08:00:05.158965Z"} 2026-09-14T08:00:05.158965+00:00 https://vulnerability.circl.lu/sighting/52a0b46d-5f60-4fe3-9985-a6f76b76795f/export 2026-09-17T19:30:25.922426+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "52a0b46d-5f60-4fe3-9985-a6f76b76795f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21587", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6601", "content": "exploit\n1. CVE-2023-25194:\nApache Kafka <3.4.0 - RCE\nhttps://github.com/ohnonoyesyes/CVE-2023-25194\n\n2. CVE-2022-21587:\nVulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (Upload)\nhttps://github.com/hieuminhnv/CVE-2022-21587-POC\n\n3. Dota 2 Under Attack:\nHow a V8 Bug Was Exploited in the Game\nhttps://decoded.avast.io/janvojtesek/dota-2-under-attack-how-a-v8-bug-was-exploited-in-the-game\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.23", "creation_timestamp": "2026-09-11T00:00:54.092260Z"} 2026-09-11T00:00:54.092260+00:00 https://vulnerability.circl.lu/sighting/196f9c30-7e89-46a8-8694-220ce33dc26d/export 2026-09-17T19:30:25.922542+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "196f9c30-7e89-46a8-8694-220ce33dc26d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21587", "type": "seen", "source": "https://t.me/cissp/6579", "content": "A new critical authentication vulnerability (CVE-2023-22501) has been discovered in Atlassian's Jira Service Management Server and Data Center products that could allow attackers to gain unauthorized access to vulnerable instances.\nRead: https://thehackernews.com/2023/02/atlassians-jira-software-found.html\n\nAttention: Cyber criminals are actively exploiting known vulnerabilities in Oracle E-Business Suite (CVE-2022-21587) and SugarCRM (CVE-2023-22952) systems. Update now!\nRead: https://thehackernews.com/2023/02/cisa-alert-oracle-e-business-suite-and.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.14", "creation_timestamp": "2026-09-11T00:00:53.961192Z"} 2026-09-11T00:00:53.961192+00:00 https://vulnerability.circl.lu/sighting/2ab624e8-4cac-4522-8693-274ea20b7c1c/export 2026-09-17T19:30:25.922663+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "2ab624e8-4cac-4522-8693-274ea20b7c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21894", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6050", "content": "exploit\n1. CVE-2022-29968:\nLinux Kernel io_uring Exploit\nhttps://github.com/jprx/CVE-2022-29968\n\n2. CVE-2022-21894:\nSecure Boot Security Feature Bypass Vulnerability\n(baton drop)\nhttps://github.com/Wack0/CVE-2022-21894\n\nRedTeam Tactics\n1. Attacking and Remediating Excessive Network Share Permissions in Active Directory Environments\nhttps://www.netspi.com/blog/technical/network-penetration-testing/network-share-permissions-powerhuntshares\n\nMalware_analysis\n1. VileRAT: DeathStalker\u2019s continuous strike at foreign and cryptocurrency exchanges\nhttps://securelist.com/vilerat-deathstalkers-continuous-strike/107075", "creation_timestamp": "2026-09-11T00:00:49.718909Z"} 2026-09-11T00:00:49.718909+00:00 https://vulnerability.circl.lu/sighting/56b83f8f-8a26-48ff-aa45-1778dfaf6a7d/export 2026-09-17T19:30:25.922769+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "56b83f8f-8a26-48ff-aa45-1778dfaf6a7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21445", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5954", "content": "exploit\n1. CVE-2022-21445:\n\"The Miracle Exploit\"\nhttps://peterjson.medium.com/miracle-one-vulnerability-to-rule-them-all-c3aed9edeea2\n\n2. CVE-2022-31626:\nRCE in PHP <=7.4.29\nhttps://github.com/CFandR-github/PHP-binary-bugs/tree/main/cve_2022_31626_remote_exploit\n\n\nRed Team Tactics\n1. Embedding Payloads and Bypassing Controls in Microsoft InfoPath\nhttps://spaceraccoon.dev/embedding-payloads-bypassing-controls-microsoft-infopath\n2. Exploiting vulnerabilities in iOS Application\nhttps://lonewolf-raj.medium.com/exploiting-vulnerabilities-in-ios-application-cf5718910c47", "creation_timestamp": "2026-09-11T00:00:47.034592Z"} 2026-09-11T00:00:47.034592+00:00 https://vulnerability.circl.lu/sighting/be7a8b0d-6092-4b08-bc38-09a9c086fb92/export 2026-09-17T19:30:25.922872+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be7a8b0d-6092-4b08-bc38-09a9c086fb92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21971", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5408", "content": "exploit\n\n1. CVE-2022-21974:\nRoaming Security Rights Management Services\nRemote Code Execution Vulnerability\nhttps://github.com/0vercl0k/CVE-2022-21974\n\n2. CVE-2022-21971:\nWindows Runtime RCE Vulnerability\nhttps://github.com/0vercl0k/CVE-2022-21971", "creation_timestamp": "2026-09-11T00:00:42.119413Z"} 2026-09-11T00:00:42.119413+00:00 https://vulnerability.circl.lu/sighting/3b1b261b-6551-4e90-b951-ede84c0a0ee3/export 2026-09-17T19:30:25.922973+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3b1b261b-6551-4e90-b951-ede84c0a0ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21974", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5408", "content": "exploit\n\n1. CVE-2022-21974:\nRoaming Security Rights Management Services\nRemote Code Execution Vulnerability\nhttps://github.com/0vercl0k/CVE-2022-21974\n\n2. CVE-2022-21971:\nWindows Runtime RCE Vulnerability\nhttps://github.com/0vercl0k/CVE-2022-21971", "creation_timestamp": "2026-09-11T00:00:42.061822Z"} 2026-09-11T00:00:42.061822+00:00 https://vulnerability.circl.lu/sighting/93392268-79ac-453e-b02e-f608da258afa/export 2026-09-17T19:30:25.923076+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "93392268-79ac-453e-b02e-f608da258afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21882", "type": "exploited", "source": "https://t.me/cissp/5318", "content": "CISA, the U.S. cybersecurity agency, has ordered all federal agencies to immediately and mandatorily secure their systems against an actively exploited vulnerability (CVE-2022-21882) in Microsoft Windows operating systems.\nDetails: https://thehackernews.com/2022/02/cisa-orders-federal-agencies-to-patch.html", "creation_timestamp": "2026-09-11T00:00:40.633973Z"} 2026-09-11T00:00:40.633973+00:00 https://vulnerability.circl.lu/sighting/dd63133b-14e7-4148-8ecd-958eed761f50/export 2026-09-17T19:30:25.923177+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dd63133b-14e7-4148-8ecd-958eed761f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-21907", "type": "seen", "source": "https://t.me/cissp/5114", "content": "First Microsoft Patch Tuesday update of 2022 fixes 96 new vulnerabilities, including a critical \"wormable\" Windows RCE vulnerability (CVE-2022-21907) in the HTTP Protocol Stack.\nRead details: https://thehackernews.com/2022/01/first-patch-tuesday-of-2022-brings-fix.html", "creation_timestamp": "2026-09-11T00:00:40.296033Z"} 2026-09-11T00:00:40.296033+00:00