<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-21T10:34:16.035123+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/280c5f51-bf13-4965-ac24-356f1e291cb6/export</id>
    <title>280c5f51-bf13-4965-ac24-356f1e291cb6</title>
    <updated>2026-06-21T10:34:16.320407+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "280c5f51-bf13-4965-ac24-356f1e291cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38125", "type": "seen", "source": "Telegram/L04jVa19Jjwg362SRT5EyVQCUps9MWTWWKLsbdUiA9EPdmLd", "content": "", "creation_timestamp": "2025-02-06T02:43:29.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/280c5f51-bf13-4965-ac24-356f1e291cb6/export"/>
    <published>2025-02-06T02:43:29+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/79fa4d23-553f-4917-a45b-aaac90e270cb/export</id>
    <title>79fa4d23-553f-4917-a45b-aaac90e270cb</title>
    <updated>2026-06-21T10:34:16.320271+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "79fa4d23-553f-4917-a45b-aaac90e270cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38120", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14365", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-38120\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: UPSMON PRO\u2019s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files.\n\ud83d\udccf Published: 2022-11-10T02:20:41.230Z\n\ud83d\udccf Modified: 2025-05-01T19:08:42.468Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6679-a0695-1.html", "creation_timestamp": "2025-05-01T19:14:42.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/79fa4d23-553f-4917-a45b-aaac90e270cb/export"/>
    <published>2025-05-01T19:14:42+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3ae4e4a1-d300-4cb7-8565-3f642c102cd2/export</id>
    <title>3ae4e4a1-d300-4cb7-8565-3f642c102cd2</title>
    <updated>2026-06-21T10:34:16.320111+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3ae4e4a1-d300-4cb7-8565-3f642c102cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38121", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14366", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-38121\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: UPSMON PRO configuration file stores user password in plaintext under public user directory. A remote attacker with general user privilege can access all users\u2018 and administrators' account names and passwords via this unprotected configuration file.\n\ud83d\udccf Published: 2022-11-10T02:20:42.270Z\n\ud83d\udccf Modified: 2025-05-01T19:07:59.479Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6680-af0aa-1.html", "creation_timestamp": "2025-05-01T19:14:43.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3ae4e4a1-d300-4cb7-8565-3f642c102cd2/export"/>
    <published>2025-05-01T19:14:43+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31d84779-4f9c-4a6e-a52a-10a2fb4fca5f/export</id>
    <title>31d84779-4f9c-4a6e-a52a-10a2fb4fca5f</title>
    <updated>2026-06-21T10:34:16.319979+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31d84779-4f9c-4a6e-a52a-10a2fb4fca5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38122", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14367", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-38122\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: UPSMON PRO transmits sensitive data in cleartext over HTTP protocol. An unauthenticated remote attacker can exploit this vulnerability to access sensitive data.\n\ud83d\udccf Published: 2022-11-10T02:20:43.297Z\n\ud83d\udccf Modified: 2025-05-01T19:07:13.585Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6681-e9650-1.html", "creation_timestamp": "2025-05-01T19:14:44.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31d84779-4f9c-4a6e-a52a-10a2fb4fca5f/export"/>
    <published>2025-05-01T19:14:44+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/3809298a-2a43-4041-941f-c1eaa50baca2/export</id>
    <title>3809298a-2a43-4041-941f-c1eaa50baca2</title>
    <updated>2026-06-21T10:34:16.319857+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "3809298a-2a43-4041-941f-c1eaa50baca2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38120", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/upsmon_traversal.rb", "content": "", "creation_timestamp": "2025-05-15T05:30:47.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/3809298a-2a43-4041-941f-c1eaa50baca2/export"/>
    <published>2025-05-15T05:30:47+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/0a4c3f4e-1b7b-4f36-945c-f979cdc396b8/export</id>
    <title>0a4c3f4e-1b7b-4f36-945c-f979cdc396b8</title>
    <updated>2026-06-21T10:34:16.319730+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "0a4c3f4e-1b7b-4f36-945c-f979cdc396b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38121", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/upsmon_traversal.rb", "content": "", "creation_timestamp": "2025-05-15T05:30:47.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/0a4c3f4e-1b7b-4f36-945c-f979cdc396b8/export"/>
    <published>2025-05-15T05:30:47+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/ed875557-ffa0-4dc7-9d87-0566e1b181e5/export</id>
    <title>ed875557-ffa0-4dc7-9d87-0566e1b181e5</title>
    <updated>2026-06-21T10:34:16.319572+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "ed875557-ffa0-4dc7-9d87-0566e1b181e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38120", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxth5rw2w", "content": "", "creation_timestamp": "2025-05-15T21:02:27.755155Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/ed875557-ffa0-4dc7-9d87-0566e1b181e5/export"/>
    <published>2025-05-15T21:02:27.755155+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/db9d778f-f268-429d-8c06-04d1e6d2f4e5/export</id>
    <title>db9d778f-f268-429d-8c06-04d1e6d2f4e5</title>
    <updated>2026-06-21T10:34:16.319417+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "db9d778f-f268-429d-8c06-04d1e6d2f4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38121", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtjqny2s", "content": "", "creation_timestamp": "2025-05-15T21:02:28.294177Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/db9d778f-f268-429d-8c06-04d1e6d2f4e5/export"/>
    <published>2025-05-15T21:02:28.294177+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/160ec17e-6977-4ddd-9e0a-6853945f0fab/export</id>
    <title>160ec17e-6977-4ddd-9e0a-6853945f0fab</title>
    <updated>2026-06-21T10:34:16.319251+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "160ec17e-6977-4ddd-9e0a-6853945f0fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38121", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/160ec17e-6977-4ddd-9e0a-6853945f0fab/export"/>
    <published>2025-10-23T21:13:00+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/72856188-fed4-493d-96d4-79fb877b017f/export</id>
    <title>72856188-fed4-493d-96d4-79fb877b017f</title>
    <updated>2026-06-21T10:34:16.317057+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "72856188-fed4-493d-96d4-79fb877b017f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38120", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/72856188-fed4-493d-96d4-79fb877b017f/export"/>
    <published>2025-10-23T21:13:00+00:00</published>
  </entry>
</feed>
