https://vulnerability.circl.lu/sightings/feed 2026-08-11T12:48:58.880842+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/729de149-3f0a-4fad-a01c-a2c0939e155e/export 2026-08-11T12:48:58.905057+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "729de149-3f0a-4fad-a01c-a2c0939e155e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-08-02T00:01:22.386316Z"} 2026-08-02T00:01:22.386316+00:00 https://vulnerability.circl.lu/sighting/589e5f2b-41b0-4721-8b8d-ee78df69feb2/export 2026-08-11T12:48:58.908067+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "589e5f2b-41b0-4721-8b8d-ee78df69feb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-08-01T01:00:05.725102Z"} 2026-08-01T01:00:05.725102+00:00 https://vulnerability.circl.lu/sighting/c88f4c48-4995-4b69-8385-6732a3e885ae/export 2026-08-11T12:48:58.908232+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "c88f4c48-4995-4b69-8385-6732a3e885ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "seen", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-07-30T00:01:36.452257Z"} 2026-07-30T00:01:36.452257+00:00 https://vulnerability.circl.lu/sighting/0bd66de8-1dd5-41c8-b540-4afb00a72ca6/export 2026-08-11T12:48:58.908350+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "0bd66de8-1dd5-41c8-b540-4afb00a72ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "seen", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-07-29T12:00:57.847513Z"} 2026-07-29T12:00:57.847513+00:00 https://vulnerability.circl.lu/sighting/4d114797-51fe-43bc-a525-682d83bd0f07/export 2026-08-11T12:48:58.908456+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4d114797-51fe-43bc-a525-682d83bd0f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36664", "type": "seen", "source": "https://t.me/canyoupwnme/6838", "content": "Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability. CVE-2022-36664\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-36664", "creation_timestamp": "2022-12-27T05:56:59.000000Z"} 2022-12-27T05:56:59+00:00 https://vulnerability.circl.lu/sighting/b1b40979-80f5-470e-92f9-6a5fe4326280/export 2026-08-11T12:48:58.908574+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b1b40979-80f5-470e-92f9-6a5fe4326280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36664", "type": "seen", "source": "https://t.me/cibsecurity/55377", "content": "\u203c CVE-2022-36664 \u203c\n\nPassword Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T00:41:07.000000Z"} 2022-12-27T00:41:07+00:00 https://vulnerability.circl.lu/sighting/73f90a65-33dd-4224-9df6-3db09b68e431/export 2026-08-11T12:48:58.908684+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "73f90a65-33dd-4224-9df6-3db09b68e431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7034", "content": "#exploit\n1. CVE-2022-36663:\nInternal network scanner through Gluu IAM blind ssrf\nhttps://github.com/Qeisi/CVE-2022-36663-PoC\n\n2. CVE-2022-21970:\nMicrosoft Edge (Chromium-based) EoP Vulnerability\nhttps://github.com/Malwareman007/CVE-2022-21970\n\n3. CVE-2022-39197:\nCobaltStrike <= 4.7.1 RCE\nhttps://github.com/TheCryingGame/CVE-2022-39197-RCE", "creation_timestamp": "2022-10-23T19:30:28.000000Z"} 2022-10-23T19:30:28+00:00 https://vulnerability.circl.lu/sighting/dec93c47-0ea4-44b1-8a34-63a415ee6c22/export 2026-08-11T12:48:58.908784+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "dec93c47-0ea4-44b1-8a34-63a415ee6c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36661", "type": "seen", "source": "https://t.me/cibsecurity/49401", "content": "\u203c CVE-2022-36661 \u203c\n\nxhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-03T06:20:20.000000Z"} 2022-10-03T06:20:20+00:00 https://vulnerability.circl.lu/sighting/29e48fea-da5f-4d33-8970-8c388ab6d5ab/export 2026-08-11T12:48:58.908889+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "29e48fea-da5f-4d33-8970-8c388ab6d5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36669", "type": "seen", "source": "https://t.me/cibsecurity/49766", "content": "\u203c CVE-2022-36669 \u203c\n\nHospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:31.000000Z"} 2022-09-14T14:26:31+00:00 https://vulnerability.circl.lu/sighting/7edf9ef7-451b-482d-8950-34f55ac2c612/export 2026-08-11T12:48:58.908994+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "7edf9ef7-451b-482d-8950-34f55ac2c612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36668", "type": "seen", "source": "https://t.me/cibsecurity/49760", "content": "\u203c CVE-2022-36668 \u203c\n\nGarage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:24.000000Z"} 2022-09-14T14:26:24+00:00