<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-09-14T01:17:13.733447+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/8b16ad22-6c8d-4266-abfc-b764413e8e83/export</id>
    <title>8b16ad22-6c8d-4266-abfc-b764413e8e83</title>
    <updated>2026-09-14T01:17:13.760575+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "8b16ad22-6c8d-4266-abfc-b764413e8e83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6033", "content": "Atlassian Confluence hard-coded credential vulnerability is now listed in the CISA Known Exploited Vulnerabilities Catalog following reports of active exploitation.\nRead details: https://thehackernews.com/2022/07/cisa-warns-of-atlassian-confluence-hard.html\n\nMalware_analysis\nLockBit 3.0 Update:\nUnpicking the Ransomware\u2019s Latest Anti-Analysis and Evasion Techniques\nhttps://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques\n\nexploit\n1. CVE-2022-36946:\nLinux kernel panic in netfilter_queue\nhttps://github.com/Pwnzer0tt1/CVE-2022-36946\n2. CVE-2022-29593:\nAuthentication Bypass by Capture Replay (Dingtian-DT-R002)\nhttps://github.com/9lyph/CVE-2022-29593", "creation_timestamp": "2026-09-11T00:00:49.108411Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/8b16ad22-6c8d-4266-abfc-b764413e8e83/export"/>
    <published>2026-09-11T00:00:49.108411+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/9aebbea3-3dd9-4a9e-b7af-1301a83da642/export</id>
    <title>9aebbea3-3dd9-4a9e-b7af-1301a83da642</title>
    <updated>2026-09-14T01:17:13.763781+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "9aebbea3-3dd9-4a9e-b7af-1301a83da642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6033", "content": "Atlassian Confluence hard-coded credential vulnerability is now listed in the CISA Known Exploited Vulnerabilities Catalog following reports of active exploitation.\nRead details: https://thehackernews.com/2022/07/cisa-warns-of-atlassian-confluence-hard.html\n\nMalware_analysis\nLockBit 3.0 Update:\nUnpicking the Ransomware\u2019s Latest Anti-Analysis and Evasion Techniques\nhttps://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques\n\nexploit\n1. CVE-2022-36946:\nLinux kernel panic in netfilter_queue\nhttps://github.com/Pwnzer0tt1/CVE-2022-36946\n2. CVE-2022-29593:\nAuthentication Bypass by Capture Replay (Dingtian-DT-R002)\nhttps://github.com/9lyph/CVE-2022-29593", "creation_timestamp": "2026-09-10T07:00:04.643888Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/9aebbea3-3dd9-4a9e-b7af-1301a83da642/export"/>
    <published>2026-09-10T07:00:04.643888+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/cff506c0-f829-42ef-9ffb-4e92a37bea04/export</id>
    <title>cff506c0-f829-42ef-9ffb-4e92a37bea04</title>
    <updated>2026-09-14T01:17:13.763880+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "cff506c0-f829-42ef-9ffb-4e92a37bea04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "seen", "source": "https://t.me/cissp/6033", "content": "Atlassian Confluence hard-coded credential vulnerability is now listed in the CISA Known Exploited Vulnerabilities Catalog following reports of active exploitation.\nRead details: https://thehackernews.com/2022/07/cisa-warns-of-atlassian-confluence-hard.html\n\nMalware_analysis\nLockBit 3.0 Update:\nUnpicking the Ransomware\u2019s Latest Anti-Analysis and Evasion Techniques\nhttps://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques\n\nexploit\n1. CVE-2022-36946:\nLinux kernel panic in netfilter_queue\nhttps://github.com/Pwnzer0tt1/CVE-2022-36946\n2. CVE-2022-29593:\nAuthentication Bypass by Capture Replay (Dingtian-DT-R002)\nhttps://github.com/9lyph/CVE-2022-29593", "creation_timestamp": "2026-09-02T01:04:08.789530Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/cff506c0-f829-42ef-9ffb-4e92a37bea04/export"/>
    <published>2026-09-02T01:04:08.789530+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/4b88fda5-12d5-4a74-85da-2241341e4abc/export</id>
    <title>4b88fda5-12d5-4a74-85da-2241341e4abc</title>
    <updated>2026-09-14T01:17:13.763954+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "4b88fda5-12d5-4a74-85da-2241341e4abc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "seen", "source": "https://t.me/cissp/6033", "content": "Atlassian Confluence hard-coded credential vulnerability is now listed in the CISA Known Exploited Vulnerabilities Catalog following reports of active exploitation.\nRead details: https://thehackernews.com/2022/07/cisa-warns-of-atlassian-confluence-hard.html\n\nMalware_analysis\nLockBit 3.0 Update:\nUnpicking the Ransomware\u2019s Latest Anti-Analysis and Evasion Techniques\nhttps://www.sentinelone.com/labs/lockbit-3-0-update-unpicking-the-ransomwares-latest-anti-analysis-and-evasion-techniques\n\nexploit\n1. CVE-2022-36946:\nLinux kernel panic in netfilter_queue\nhttps://github.com/Pwnzer0tt1/CVE-2022-36946\n2. CVE-2022-29593:\nAuthentication Bypass by Capture Replay (Dingtian-DT-R002)\nhttps://github.com/9lyph/CVE-2022-29593", "creation_timestamp": "2026-09-01T17:00:26.431040Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/4b88fda5-12d5-4a74-85da-2241341e4abc/export"/>
    <published>2026-09-01T17:00:26.431040+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/db67264f-a68d-4954-9c0c-704bde04671b/export</id>
    <title>db67264f-a68d-4954-9c0c-704bde04671b</title>
    <updated>2026-09-14T01:17:13.764029+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "db67264f-a68d-4954-9c0c-704bde04671b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/389", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36946\nGithub: https://github.com/Pwnzer0tt1/CVE-2022-36946\nDescribe: \nnfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb-&amp;gt;len.", "creation_timestamp": "2026-08-02T00:01:12.715725Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/db67264f-a68d-4954-9c0c-704bde04671b/export"/>
    <published>2026-08-02T00:01:12.715725+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/499eba5f-7162-47b3-ab89-f89b06f4f87c/export</id>
    <title>499eba5f-7162-47b3-ab89-f89b06f4f87c</title>
    <updated>2026-09-14T01:17:13.764097+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "499eba5f-7162-47b3-ab89-f89b06f4f87c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/389", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36946\nGithub: https://github.com/Pwnzer0tt1/CVE-2022-36946\nDescribe: \nnfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb-&amp;gt;len.", "creation_timestamp": "2026-08-01T08:00:05.192010Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/499eba5f-7162-47b3-ab89-f89b06f4f87c/export"/>
    <published>2026-08-01T08:00:05.192010+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6f8e1656-32fd-4357-b3c3-c35d7411fdfc/export</id>
    <title>6f8e1656-32fd-4357-b3c3-c35d7411fdfc</title>
    <updated>2026-09-14T01:17:13.764163+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6f8e1656-32fd-4357-b3c3-c35d7411fdfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10252", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-36946*\nGithub: https://github.com/Pwnzer0tt1/CVE-2022-36946", "creation_timestamp": "2026-08-01T00:00:38.438535Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6f8e1656-32fd-4357-b3c3-c35d7411fdfc/export"/>
    <published>2026-08-01T00:00:38.438535+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/6790a2f8-adb8-4793-b848-83d0451d97bc/export</id>
    <title>6790a2f8-adb8-4793-b848-83d0451d97bc</title>
    <updated>2026-09-14T01:17:13.764228+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "6790a2f8-adb8-4793-b848-83d0451d97bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10252", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-36946*\nGithub: https://github.com/Pwnzer0tt1/CVE-2022-36946", "creation_timestamp": "2026-07-31T07:00:03.602713Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/6790a2f8-adb8-4793-b848-83d0451d97bc/export"/>
    <published>2026-07-31T07:00:03.602713+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/85465d40-8a94-4864-bd32-4c3dd77bf626/export</id>
    <title>85465d40-8a94-4864-bd32-4c3dd77bf626</title>
    <updated>2026-09-14T01:17:13.764293+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "85465d40-8a94-4864-bd32-4c3dd77bf626", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "seen", "source": "https://t.me/CVEhub/389", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36946\nGithub: https://github.com/Pwnzer0tt1/CVE-2022-36946\nDescribe: \nnfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb-&amp;gt;len.", "creation_timestamp": "2026-07-30T00:01:46.768080Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/85465d40-8a94-4864-bd32-4c3dd77bf626/export"/>
    <published>2026-07-30T00:01:46.768080+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/b35ffb2c-eec2-4045-859f-869ec1aafe95/export</id>
    <title>b35ffb2c-eec2-4045-859f-869ec1aafe95</title>
    <updated>2026-09-14T01:17:13.764364+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "b35ffb2c-eec2-4045-859f-869ec1aafe95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36946", "type": "seen", "source": "https://t.me/CVEhub/10252", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-36946*\nGithub: https://github.com/Pwnzer0tt1/CVE-2022-36946", "creation_timestamp": "2026-07-30T00:01:09.375920Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/b35ffb2c-eec2-4045-859f-869ec1aafe95/export"/>
    <published>2026-07-30T00:01:09.375920+00:00</published>
  </entry>
</feed>
