https://vulnerability.circl.lu/sightings/feed 2026-07-12T22:27:03.805316+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/fbe284b5-381d-40cb-8437-11500a597003/export 2026-07-12T22:27:03.832853+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fbe284b5-381d-40cb-8437-11500a597003", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3835", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11521", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3835\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Kwayy HTML Sitemap WordPress plugin before 4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2022-12-26T12:28:18.345Z\n\ud83d\udccf Modified: 2025-04-11T23:12:28.122Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/514ffd28-f2c2-4c95-87b5-d05ce0746f89", "creation_timestamp": "2025-04-11T23:51:33.000000Z"} 2025-04-11T23:51:33+00:00 https://vulnerability.circl.lu/sighting/df29c16f-8025-4446-8d4f-2c0f358d2dfd/export 2026-07-12T22:27:03.836887+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df29c16f-8025-4446-8d4f-2c0f358d2dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3835", "type": "seen", "source": "https://t.me/cibsecurity/55348", "content": "\u203c CVE-2022-3835 \u203c\n\nThe Kwayy HTML Sitemap WordPress plugin before 4.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-26T16:40:45.000000Z"} 2022-12-26T16:40:45+00:00 https://vulnerability.circl.lu/sighting/f858552b-bb4d-4202-a3ce-5f1bf7db6cd0/export 2026-07-12T22:27:03.837066+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "f858552b-bb4d-4202-a3ce-5f1bf7db6cd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38355", "type": "seen", "source": "https://t.me/cibsecurity/54472", "content": "\u203c CVE-2022-38355 \u203c\n\nDaikin SVMPC1 version 2.1.22 and prior and SVMPC2 version 1.2.3 and prior are vulnerable to attackers with access to the local area network (LAN) to disclose sensitive information stored by the affected product without requiring authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T00:22:04.000000Z"} 2022-12-14T00:22:04+00:00 https://vulnerability.circl.lu/sighting/09d7c445-814e-41ee-bb9a-e61c05719404/export 2026-07-12T22:27:03.837202+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "09d7c445-814e-41ee-bb9a-e61c05719404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-38351", "type": "seen", "source": "https://t.me/cibsecurity/50092", "content": "\u203c CVE-2022-38351 \u203c\n\nA vulnerability in Suprema Bio Star 2 v2.8.16 allows attackers to escalate privileges to System Administrator via a crafted PUT request to the update profile page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-20T00:38:56.000000Z"} 2022-09-20T00:38:56+00:00