https://vulnerability.circl.lu/sightings/feed 2026-09-17T15:59:36.238385+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c7071c40-8a66-46a5-bf4f-1ec30c672ecc/export 2026-09-17T15:59:36.255122+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c7071c40-8a66-46a5-bf4f-1ec30c672ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42899", "type": "published-proof-of-concept", "source": "Telegram/RatzSjoQ_9KseL5t0Zsf6XBMC79_XgMZEaYuLwoH6PmI9uE", "content": "", "creation_timestamp": "2026-09-15T00:00:27.593803Z"} 2026-09-15T00:00:27.593803+00:00 https://vulnerability.circl.lu/sighting/0520f4a0-4b38-4ef0-8088-e8b55ce2c8d8/export 2026-09-17T15:59:36.257301+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0520f4a0-4b38-4ef0-8088-e8b55ce2c8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42899", "type": "published-proof-of-concept", "source": "Telegram/RatzSjoQ_9KseL5t0Zsf6XBMC79_XgMZEaYuLwoH6PmI9uE", "content": "", "creation_timestamp": "2026-09-14T07:00:04.564836Z"} 2026-09-14T07:00:04.564836+00:00 https://vulnerability.circl.lu/sighting/98094466-cf15-4adb-87bb-c34631f6f38c/export 2026-09-17T15:59:36.257392+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "98094466-cf15-4adb-87bb-c34631f6f38c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42475", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6663", "content": "exploit\n1. CVE-2020-2546, CVE-2020-2915,\nCVE-2020-2801, CVE-2020-2798,\nCVE-2020-2883, CVE-2020-2884,\nCVE-2020-2950:\nWebLogic T3 payload exploit PoC python3\nhttps://github.com/hktalent/CVE_2020_2546\n\n2. Tips, Tricks, and Scripts for Linux Post Exploitation\nhttps://github.com/regorsec/Linux-Post-Exploitation\n\n3. CVE-2023-23488:\nUnauthenticated SQL Injection - Paid Memberships Pro < 2.9.8 (WordPress Plugin)\nhttps://github.com/r3nt0n/CVE-2023-23488-PoC\n\n4\ud83e\udd78. CVE-2023-23397:\nMicrosoft Outlook EoP Vulnerability\nhttps://www.mdsec.co.uk/2023/03/exploiting-cve-2023-23397-microsoft-outlook-elevation-of-privilege-vulnerability\n]-> 0-day: https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY\n\n5. Producing a PoC for CVE-2022-42475 (Fortinet RCE)\nhttps://blog.scrt.ch/2023/03/14/producing-a-poc-for-cve-2022-42475-fortinet-rce\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.25", "creation_timestamp": "2026-09-11T00:00:55.627986Z"} 2026-09-11T00:00:55.627986+00:00 https://vulnerability.circl.lu/sighting/e9e92591-9cb3-4726-b052-1eeac2291c53/export 2026-09-17T15:59:36.257470+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e9e92591-9cb3-4726-b052-1eeac2291c53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42475", "type": "exploited", "source": "https://t.me/cissp/6525", "content": "Researchers are warning of a new Chinese #malware called \"BOLDMOVE\" that exploited a recently discovered vulnerability in Fortinet FortiOS SSL-VPN (CVE-2022-42475) as a zero-day to attack government entities & managed service providers.\nhttps://thehackernews.com/2023/01/new-chinese-malware-spotted-exploiting.html\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.30", "creation_timestamp": "2026-09-11T00:00:53.436735Z"} 2026-09-11T00:00:53.436735+00:00 https://vulnerability.circl.lu/sighting/eda71b8a-0ae1-4dbb-bc65-3815fc93cdba/export 2026-09-17T15:59:36.257536+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "eda71b8a-0ae1-4dbb-bc65-3815fc93cdba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42475", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6490", "content": "Malware analysis\nAnalysis of CVE-2022-42475 - FortiOS - heap-based buffer overflow in SSLVPNd\nhttps://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.26", "creation_timestamp": "2026-09-11T00:00:52.906212Z"} 2026-09-11T00:00:52.906212+00:00 https://vulnerability.circl.lu/sighting/7269af99-3252-4ca6-8070-dff2d3b00e2e/export 2026-09-17T15:59:36.257610+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7269af99-3252-4ca6-8070-dff2d3b00e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42475", "type": "exploited", "source": "https://t.me/cissp/6475", "content": "A vulnerability (CVE-2022-42475) in FortiOS SSL-VPN was exploited by hackers as a \"zero-day\" to attack governments and large organizations before Fortinet fixed it.\nDetails: https://thehackernews.com/2023/01/fortios-flaw-exploited-as-zero-day-in.html\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.23", "creation_timestamp": "2026-09-11T00:00:52.812785Z"} 2026-09-11T00:00:52.812785+00:00 https://vulnerability.circl.lu/sighting/312a2c7a-24f8-416d-b19e-ca869f5bfc73/export 2026-09-17T15:59:36.257674+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "312a2c7a-24f8-416d-b19e-ca869f5bfc73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42703", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6441", "content": "exploit\n1. Exploiting CVE-2022-42703 - Bringing back the stack attack\nhttps://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html\n\n2. CVE-2022-36537:\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n3. Exploit collection for some Service DCOM Object local privalege escalation vulnerability\nhttps://github.com/zcgonvh/DCOMPotato\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.09.21", "creation_timestamp": "2026-09-11T00:00:52.408180Z"} 2026-09-11T00:00:52.408180+00:00 https://vulnerability.circl.lu/sighting/8740bf53-16d8-4472-9fc9-62e3a0b4678d/export 2026-09-17T15:59:36.257741+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8740bf53-16d8-4472-9fc9-62e3a0b4678d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42889", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6327", "content": "tools\nBlue Team Techniques\n1. A python script developed to process Windows memory images based on triage type\nhttps://github.com/CrowdStrike/SuperMem\n\n2. Script to handle CVE 2022-42889: removing the older version of Apache Commons Text 1.9 and replaces it with the newer version (1.10.0) in\u00a0JMETER_HOME/lib\u00a0folder\nhttps://github.com/QAInsights/cve-2022-42889-jmeter\n\n3. Powershell Exploit detection for Windows\nhttps://github.com/jake-k-38/win-ioc-detect\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.16", "creation_timestamp": "2026-09-11T00:00:50.814969Z"} 2026-09-11T00:00:50.814969+00:00 https://vulnerability.circl.lu/sighting/78eb363d-5ac9-4fe8-8f0f-c9a755db87d4/export 2026-09-17T15:59:36.257807+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "78eb363d-5ac9-4fe8-8f0f-c9a755db87d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42889", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6327", "content": "tools\nBlue Team Techniques\n1. A python script developed to process Windows memory images based on triage type\nhttps://github.com/CrowdStrike/SuperMem\n\n2. Script to handle CVE 2022-42889: removing the older version of Apache Commons Text 1.9 and replaces it with the newer version (1.10.0) in\u00a0JMETER_HOME/lib\u00a0folder\nhttps://github.com/QAInsights/cve-2022-42889-jmeter\n\n3. Powershell Exploit detection for Windows\nhttps://github.com/jake-k-38/win-ioc-detect\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.16", "creation_timestamp": "2026-09-10T06:00:06.008250Z"} 2026-09-10T06:00:06.008250+00:00 https://vulnerability.circl.lu/sighting/f507ab91-5002-4361-a80a-dc90a6c9c15f/export 2026-09-17T15:59:36.257870+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f507ab91-5002-4361-a80a-dc90a6c9c15f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-42475", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6490", "content": "Malware analysis\nAnalysis of CVE-2022-42475 - FortiOS - heap-based buffer overflow in SSLVPNd\nhttps://www.fortinet.com/blog/psirt-blogs/analysis-of-fg-ir-22-398-fortios-heap-based-buffer-overflow-in-sslvpnd\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.26", "creation_timestamp": "2026-09-10T04:00:04.760704Z"} 2026-09-10T04:00:04.760704+00:00