https://vulnerability.circl.lu/sightings/feed 2026-07-16T21:09:52.811330+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/e405f95a-e9ff-4c4f-97c9-ad058317547f/export 2026-07-16T21:09:52.829954+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e405f95a-e9ff-4c4f-97c9-ad058317547f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24562", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mpz2y2t6ri26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2022-24562: In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write\u2026\nCVSS 9.8 \u00b7 EPSS 53.9%\nhttps://beta.vulnsea.com/cve/CVE-2022-24562\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-06T21:48:28.565392Z"} 2026-07-06T21:48:28.565392+00:00 https://vulnerability.circl.lu/sighting/8d82310f-1025-498e-89a9-e915fca24367/export 2026-07-16T21:09:52.832073+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "8d82310f-1025-498e-89a9-e915fca24367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24563", "type": "seen", "source": "https://t.me/cibsecurity/38343", "content": "\u203c CVE-2022-24563 \u203c\n\nIn Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options\" via the intro_title and intro_image parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-03T07:25:47.000000Z"} 2022-03-03T07:25:47+00:00 https://vulnerability.circl.lu/sighting/62506fc9-740f-4088-87ba-aae53b892ad4/export 2026-07-16T21:09:52.832283+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "62506fc9-740f-4088-87ba-aae53b892ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24566", "type": "seen", "source": "https://t.me/cibsecurity/38001", "content": "\u203c CVE-2022-24566 \u203c\n\nIn Checkmk <=2.0.0p19 fixed in 2.0.0p20 and Checkmk <=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-24T18:14:55.000000Z"} 2022-02-24T18:14:55+00:00 https://vulnerability.circl.lu/sighting/ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0/export 2026-07-16T21:09:52.832477+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24564", "type": "seen", "source": "https://t.me/cibsecurity/37879", "content": "\u203c CVE-2022-24564 \u203c\n\nCheckmk <=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-22T02:11:39.000000Z"} 2022-02-22T02:11:39+00:00 https://vulnerability.circl.lu/sighting/f3be0afc-bade-43e2-9e4c-60fc7f050579/export 2026-07-16T21:09:52.832655+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f3be0afc-bade-43e2-9e4c-60fc7f050579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24568", "type": "seen", "source": "https://t.me/cibsecurity/37257", "content": "\u203c CVE-2022-24568 \u203c\n\nNovel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-10T22:14:12.000000Z"} 2022-02-10T22:14:12+00:00