<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://vulnerability.circl.lu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-10-10T08:35:30.775245+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@circl.lu</email>
  </author>
  <link href="https://vulnerability.circl.lu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/697c1952-69ba-4da3-bc45-597a81532c0f/export</id>
    <title>697c1952-69ba-4da3-bc45-597a81532c0f</title>
    <updated>2026-10-10T08:35:30.792880+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "697c1952-69ba-4da3-bc45-597a81532c0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39066", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2633", "content": "#exploit\n1. CVE-2022-45025:\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\ud83d\udd17 See on Github \n\n2. Exploring Chrome\u2019s CVE-2020-6418\n\ud83d\udd17 See on Haboob\n\n3. CVE-2022-39066:\nSQL Injection Vulnerability in ZTE MF286R\n\ud83d\udd17 See on Github\n\n#Malware_analysis\n1. Drokbk Malware\n\ud83d\udd17 See on SecureWorks\n\n2. Typosquat/Ransomware Campaign in PyPI and NPM\n\ud83d\udd17 See on Pylum\n\n#tools\n#Offensive_security\n1. udhcpc process crash on BusyBox 1.24.2\n\ud83d\udd17 See on NccGroup\n\n2. Signing-key abuse and update exploitation framework\n\ud83d\udd17 See on Github\n\n3. A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods\n\ud83d\udd17 See on Github\n\n@zero0lab \ud83e\udd8a", "creation_timestamp": "2026-08-10T00:00:29.752103Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/697c1952-69ba-4da3-bc45-597a81532c0f/export"/>
    <published>2026-08-10T00:00:29.752103+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/a342e522-8fb7-4362-8195-1effba70284d/export</id>
    <title>a342e522-8fb7-4362-8195-1effba70284d</title>
    <updated>2026-10-10T08:35:30.794946+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "a342e522-8fb7-4362-8195-1effba70284d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39066", "type": "seen", "source": "https://t.me/onelab1337/2633", "content": "#exploit\n1. CVE-2022-45025:\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\ud83d\udd17 See on Github \n\n2. Exploring Chrome\u2019s CVE-2020-6418\n\ud83d\udd17 See on Haboob\n\n3. CVE-2022-39066:\nSQL Injection Vulnerability in ZTE MF286R\n\ud83d\udd17 See on Github\n\n#Malware_analysis\n1. Drokbk Malware\n\ud83d\udd17 See on SecureWorks\n\n2. Typosquat/Ransomware Campaign in PyPI and NPM\n\ud83d\udd17 See on Pylum\n\n#tools\n#Offensive_security\n1. udhcpc process crash on BusyBox 1.24.2\n\ud83d\udd17 See on NccGroup\n\n2. Signing-key abuse and update exploitation framework\n\ud83d\udd17 See on Github\n\n3. A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods\n\ud83d\udd17 See on Github\n\n@zero0lab \ud83e\udd8a", "creation_timestamp": "2026-08-09T04:23:35.341284Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/a342e522-8fb7-4362-8195-1effba70284d/export"/>
    <published>2026-08-09T04:23:35.341284+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/02765382-a797-44dc-9661-feadd2d74a8b/export</id>
    <title>02765382-a797-44dc-9661-feadd2d74a8b</title>
    <updated>2026-10-10T08:35:30.795056+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "02765382-a797-44dc-9661-feadd2d74a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39066", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/5804", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-39066\nGithub: https://github.com/v0lp3/CVE-2022-39066\nDescribe: \nThere is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.", "creation_timestamp": "2026-07-31T20:00:04.472767Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/02765382-a797-44dc-9661-feadd2d74a8b/export"/>
    <published>2026-07-31T20:00:04.472767+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/31df9fd6-d222-4b8a-a736-6c16b090fe8c/export</id>
    <title>31df9fd6-d222-4b8a-a736-6c16b090fe8c</title>
    <updated>2026-10-10T08:35:30.795136+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "31df9fd6-d222-4b8a-a736-6c16b090fe8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39066", "type": "seen", "source": "https://t.me/CVEhub/5804", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-39066\nGithub: https://github.com/v0lp3/CVE-2022-39066\nDescribe: \nThere is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the phonebook interface, an authenticated attacker could use the vulnerability to execute arbitrary SQL injection.", "creation_timestamp": "2026-07-29T12:00:53.140914Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/31df9fd6-d222-4b8a-a736-6c16b090fe8c/export"/>
    <published>2026-07-29T12:00:53.140914+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/bc9f3967-c093-432d-9416-98c6244e7935/export</id>
    <title>bc9f3967-c093-432d-9416-98c6244e7935</title>
    <updated>2026-10-10T08:35:30.795209+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "bc9f3967-c093-432d-9416-98c6244e7935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39064", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/761", "content": "\u0423\u043c\u043d\u044b\u0435 \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 IKEA \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b\n\n\u0428\u043b\u044e\u0437 \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f IKEA TR\u00c5DFRI, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432 \u0434\u043e\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0441\u0432\u0435\u0442\u043e\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Synopsys, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c IEEE 802.15.4 (Zigbee) \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f IKEA Home Smart, \u0442\u0430\u043a \u0438 \u043f\u0443\u043b\u044c\u0442\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u043c\u0438\u0433\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c.\n\n\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c Zigbee \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0440\u0430\u0434\u0438\u043e\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-39065 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 - CVE-2022-39064, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0447\u0443\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u0432 IKEA TR\u00c5DFRI. \n\n\u0427\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0438\u0442\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u0448\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting-gateway/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Ikea", "creation_timestamp": "2026-07-28T07:00:06.408110Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/bc9f3967-c093-432d-9416-98c6244e7935/export"/>
    <published>2026-07-28T07:00:06.408110+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/872f7eaf-2dfd-4f37-b839-009bba59f505/export</id>
    <title>872f7eaf-2dfd-4f37-b839-009bba59f505</title>
    <updated>2026-10-10T08:35:30.795301+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "872f7eaf-2dfd-4f37-b839-009bba59f505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39065", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/761", "content": "\u0423\u043c\u043d\u044b\u0435 \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 IKEA \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b\n\n\u0428\u043b\u044e\u0437 \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f IKEA TR\u00c5DFRI, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432 \u0434\u043e\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0441\u0432\u0435\u0442\u043e\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Synopsys, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c IEEE 802.15.4 (Zigbee) \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f IKEA Home Smart, \u0442\u0430\u043a \u0438 \u043f\u0443\u043b\u044c\u0442\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u043c\u0438\u0433\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c.\n\n\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c Zigbee \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0440\u0430\u0434\u0438\u043e\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-39065 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 - CVE-2022-39064, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0447\u0443\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u0432 IKEA TR\u00c5DFRI. \n\n\u0427\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0438\u0442\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u0448\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting-gateway/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Ikea", "creation_timestamp": "2026-07-28T07:00:06.352136Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/872f7eaf-2dfd-4f37-b839-009bba59f505/export"/>
    <published>2026-07-28T07:00:06.352136+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/753dbc35-782a-4bfa-8e55-459ae315e14c/export</id>
    <title>753dbc35-782a-4bfa-8e55-459ae315e14c</title>
    <updated>2026-10-10T08:35:30.795385+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "753dbc35-782a-4bfa-8e55-459ae315e14c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39064", "type": "seen", "source": "https://t.me/EchelonEyes/761", "content": "\u0423\u043c\u043d\u044b\u0435 \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 IKEA \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b\n\n\u0428\u043b\u044e\u0437 \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f IKEA TR\u00c5DFRI, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432 \u0434\u043e\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0441\u0432\u0435\u0442\u043e\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Synopsys, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c IEEE 802.15.4 (Zigbee) \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f IKEA Home Smart, \u0442\u0430\u043a \u0438 \u043f\u0443\u043b\u044c\u0442\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u043c\u0438\u0433\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c.\n\n\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c Zigbee \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0440\u0430\u0434\u0438\u043e\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-39065 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 - CVE-2022-39064, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0447\u0443\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u0432 IKEA TR\u00c5DFRI. \n\n\u0427\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0438\u0442\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u0448\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting-gateway/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Ikea", "creation_timestamp": "2026-07-26T02:02:38.077450Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/753dbc35-782a-4bfa-8e55-459ae315e14c/export"/>
    <published>2026-07-26T02:02:38.077450+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/afe6813a-1935-4555-a7bd-7692c0088952/export</id>
    <title>afe6813a-1935-4555-a7bd-7692c0088952</title>
    <updated>2026-10-10T08:35:30.795465+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "afe6813a-1935-4555-a7bd-7692c0088952", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39065", "type": "seen", "source": "https://t.me/EchelonEyes/761", "content": "\u0423\u043c\u043d\u044b\u0435 \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u0438\u0437 IKEA \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b\n\n\u0428\u043b\u044e\u0437 \u0438\u043d\u0442\u0435\u043b\u043b\u0435\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f IKEA TR\u00c5DFRI, \u043a\u0430\u043a \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432 \u0434\u043e\u043c\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0441\u0432\u0435\u0442\u043e\u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Synopsys, \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c IEEE 802.15.4 (Zigbee) \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0440\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u043a\u0430\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f IKEA Home Smart, \u0442\u0430\u043a \u0438 \u043f\u0443\u043b\u044c\u0442\u0430. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043b\u0430\u043c\u043f\u043e\u0447\u043a\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u043c\u0438\u0433\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0441\u0442\u0430\u043d\u0443\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0449\u043d\u043e\u0441\u0442\u044c.\n\n\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0439 \u0444\u0440\u0435\u0439\u043c Zigbee \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0448\u0438\u0440\u043e\u043a\u043e\u0432\u0435\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442 \u0431\u0443\u0434\u0443\u0442 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0440\u0430\u0434\u0438\u043e\u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430. \n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-39065 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 - CVE-2022-39064, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0447\u0443\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u0432 IKEA TR\u00c5DFRI. \n\n\u0427\u0442\u043e\u0431\u044b \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u0438\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0438 \u0437\u0430\u043d\u043e\u0432\u043e \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u0438\u0442\u0430\u043d\u0438\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u043c\u0435\u0448\u0430\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0443.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.synopsys.com/blogs/software-security/cyrc-advisory-ikea-tradfri-smart-lighting-gateway/\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Ikea", "creation_timestamp": "2026-07-26T02:02:38.031160Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/afe6813a-1935-4555-a7bd-7692c0088952/export"/>
    <published>2026-07-26T02:02:38.031160+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/fc3d0426-2a2e-4323-9f3b-70342cc5db75/export</id>
    <title>fc3d0426-2a2e-4323-9f3b-70342cc5db75</title>
    <updated>2026-10-10T08:35:30.795542+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "fc3d0426-2a2e-4323-9f3b-70342cc5db75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39069", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-39069\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content.\n\ud83d\udccf Published: 2022-11-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-01T14:08:18.523Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1026604", "creation_timestamp": "2025-05-01T14:15:15.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/fc3d0426-2a2e-4323-9f3b-70342cc5db75/export"/>
    <published>2025-05-01T14:15:15+00:00</published>
  </entry>
  <entry>
    <id>https://vulnerability.circl.lu/sighting/5e3d388b-3446-4129-b126-a254a768e325/export</id>
    <title>5e3d388b-3446-4129-b126-a254a768e325</title>
    <updated>2026-10-10T08:35:30.795626+00:00</updated>
    <author>
      <name>Automation user</name>
      <uri>https://cvepremium.circl.lu/user/automation</uri>
    </author>
    <content>{"uuid": "5e3d388b-3446-4129-b126-a254a768e325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-39067", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13792", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-39067\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: There is a buffer overflow vulnerability in ZTE MF286R. Due to lack of input validation on parameters of the wifi interface, an authenticated attacker could use the vulnerability to perform a denial of service attack.\n\ud83d\udccf Published: 2022-11-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T04:31:08.545Z\n\ud83d\udd17 References:\n1. https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1027784", "creation_timestamp": "2025-04-29T05:11:36.000000Z"}</content>
    <link href="https://vulnerability.circl.lu/sighting/5e3d388b-3446-4129-b126-a254a768e325/export"/>
    <published>2025-04-29T05:11:36+00:00</published>
  </entry>
</feed>
