<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 16 Jul 2026 21:09:54 +0000</lastBuildDate>
    <item>
      <title>e405f95a-e9ff-4c4f-97c9-ad058317547f</title>
      <link>https://vulnerability.circl.lu/sighting/e405f95a-e9ff-4c4f-97c9-ad058317547f/export</link>
      <description>{"uuid": "e405f95a-e9ff-4c4f-97c9-ad058317547f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24562", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mpz2y2t6ri26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2022-24562: In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write\u2026\nCVSS 9.8 \u00b7 EPSS 53.9%\nhttps://beta.vulnsea.com/cve/CVE-2022-24562\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-06T21:48:28.565392Z"}</description>
      <content:encoded>{"uuid": "e405f95a-e9ff-4c4f-97c9-ad058317547f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24562", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mpz2y2t6ri26", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2022-24562: In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write\u2026\nCVSS 9.8 \u00b7 EPSS 53.9%\nhttps://beta.vulnsea.com/cve/CVE-2022-24562\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-06T21:48:28.565392Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e405f95a-e9ff-4c4f-97c9-ad058317547f/export</guid>
      <pubDate>Mon, 06 Jul 2026 21:48:28 +0000</pubDate>
    </item>
    <item>
      <title>8d82310f-1025-498e-89a9-e915fca24367</title>
      <link>https://vulnerability.circl.lu/sighting/8d82310f-1025-498e-89a9-e915fca24367/export</link>
      <description>{"uuid": "8d82310f-1025-498e-89a9-e915fca24367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24563", "type": "seen", "source": "https://t.me/cibsecurity/38343", "content": "\u203c CVE-2022-24563 \u203c\n\nIn Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&amp;amp;view=options\" via the intro_title and intro_image parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-03T07:25:47.000000Z"}</description>
      <content:encoded>{"uuid": "8d82310f-1025-498e-89a9-e915fca24367", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24563", "type": "seen", "source": "https://t.me/cibsecurity/38343", "content": "\u203c CVE-2022-24563 \u203c\n\nIn Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&amp;amp;view=options\" via the intro_title and intro_image parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-03T07:25:47.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/8d82310f-1025-498e-89a9-e915fca24367/export</guid>
      <pubDate>Thu, 03 Mar 2022 07:25:47 +0000</pubDate>
    </item>
    <item>
      <title>62506fc9-740f-4088-87ba-aae53b892ad4</title>
      <link>https://vulnerability.circl.lu/sighting/62506fc9-740f-4088-87ba-aae53b892ad4/export</link>
      <description>{"uuid": "62506fc9-740f-4088-87ba-aae53b892ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24566", "type": "seen", "source": "https://t.me/cibsecurity/38001", "content": "\u203c CVE-2022-24566 \u203c\n\nIn Checkmk &amp;lt;=2.0.0p19 fixed in 2.0.0p20 and Checkmk &amp;lt;=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-24T18:14:55.000000Z"}</description>
      <content:encoded>{"uuid": "62506fc9-740f-4088-87ba-aae53b892ad4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24566", "type": "seen", "source": "https://t.me/cibsecurity/38001", "content": "\u203c CVE-2022-24566 \u203c\n\nIn Checkmk &amp;lt;=2.0.0p19 fixed in 2.0.0p20 and Checkmk &amp;lt;=1.6.0p27 fixed in 1.6.0p28, the title of a Predefined condition is not properly escaped when shown as condition, which can result in Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-24T18:14:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/62506fc9-740f-4088-87ba-aae53b892ad4/export</guid>
      <pubDate>Thu, 24 Feb 2022 18:14:55 +0000</pubDate>
    </item>
    <item>
      <title>ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0</title>
      <link>https://vulnerability.circl.lu/sighting/ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0/export</link>
      <description>{"uuid": "ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24564", "type": "seen", "source": "https://t.me/cibsecurity/37879", "content": "\u203c CVE-2022-24564 \u203c\n\nCheckmk &amp;lt;=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-22T02:11:39.000000Z"}</description>
      <content:encoded>{"uuid": "ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24564", "type": "seen", "source": "https://t.me/cibsecurity/37879", "content": "\u203c CVE-2022-24564 \u203c\n\nCheckmk &amp;lt;=2.0.0p19 contains a Cross Site Scripting (XSS) vulnerability. While creating or editing a user attribute, the Help Text is subject to HTML injection, which can be triggered for editing a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-22T02:11:39.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/ddbcc5c4-3f7d-4e21-b0da-5713b59b56e0/export</guid>
      <pubDate>Tue, 22 Feb 2022 02:11:39 +0000</pubDate>
    </item>
    <item>
      <title>f3be0afc-bade-43e2-9e4c-60fc7f050579</title>
      <link>https://vulnerability.circl.lu/sighting/f3be0afc-bade-43e2-9e4c-60fc7f050579/export</link>
      <description>{"uuid": "f3be0afc-bade-43e2-9e4c-60fc7f050579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24568", "type": "seen", "source": "https://t.me/cibsecurity/37257", "content": "\u203c CVE-2022-24568 \u203c\n\nNovel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-10T22:14:12.000000Z"}</description>
      <content:encoded>{"uuid": "f3be0afc-bade-43e2-9e4c-60fc7f050579", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24568", "type": "seen", "source": "https://t.me/cibsecurity/37257", "content": "\u203c CVE-2022-24568 \u203c\n\nNovel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-10T22:14:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/f3be0afc-bade-43e2-9e4c-60fc7f050579/export</guid>
      <pubDate>Thu, 10 Feb 2022 22:14:12 +0000</pubDate>
    </item>
  </channel>
</rss>
