https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 27 Sep 2026 10:57:08 +0000 https://vulnerability.circl.lu/sighting/0466f371-3b2b-45e8-983d-12486f8bbb8d/export {"uuid": "0466f371-3b2b-45e8-983d-12486f8bbb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/57024", "content": "My first CVE-2022\u201331289\nhttps://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T17:00:05.178391Z"} {"uuid": "0466f371-3b2b-45e8-983d-12486f8bbb8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/57024", "content": "My first CVE-2022\u201331289\nhttps://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T17:00:05.178391Z"} https://vulnerability.circl.lu/sighting/0466f371-3b2b-45e8-983d-12486f8bbb8d/export Sat, 05 Sep 2026 17:00:05 +0000 https://vulnerability.circl.lu/sighting/e4b3f7d9-9d0e-4a89-94aa-105e64ab0503/export {"uuid": "e4b3f7d9-9d0e-4a89-94aa-105e64ab0503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/57026", "content": "Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02Continue reading on Medium \u00bb (https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T17:00:05.133524Z"} {"uuid": "e4b3f7d9-9d0e-4a89-94aa-105e64ab0503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/57026", "content": "Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02Continue reading on Medium \u00bb (https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T17:00:05.133524Z"} https://vulnerability.circl.lu/sighting/e4b3f7d9-9d0e-4a89-94aa-105e64ab0503/export Sat, 05 Sep 2026 17:00:05 +0000 https://vulnerability.circl.lu/sighting/10ef6dfa-b931-4568-af06-5d4514f04800/export {"uuid": "10ef6dfa-b931-4568-af06-5d4514f04800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "seen", "source": "https://t.me/hacking_Attack/57026", "content": "Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02Continue reading on Medium \u00bb (https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.644673Z"} {"uuid": "10ef6dfa-b931-4568-af06-5d4514f04800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "seen", "source": "https://t.me/hacking_Attack/57026", "content": "Authentication Bypass on Sonatype Nexus Repository Manager OSS 3.37.3-02Continue reading on Medium \u00bb (https://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5)\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.644673Z"} https://vulnerability.circl.lu/sighting/10ef6dfa-b931-4568-af06-5d4514f04800/export Tue, 01 Sep 2026 20:01:36 +0000 https://vulnerability.circl.lu/sighting/ecaa8bb3-d804-4935-9f91-a5cb7aaf0cde/export {"uuid": "ecaa8bb3-d804-4935-9f91-a5cb7aaf0cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "seen", "source": "https://t.me/hacking_Attack/57024", "content": "My first CVE-2022\u201331289\nhttps://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.592267Z"} {"uuid": "ecaa8bb3-d804-4935-9f91-a5cb7aaf0cde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "seen", "source": "https://t.me/hacking_Attack/57024", "content": "My first CVE-2022\u201331289\nhttps://medium.com/@pmmali/my-first-cve-2022-31289-4081c57e90fb?source=rss------bug_bounty-5\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:36.592267Z"} https://vulnerability.circl.lu/sighting/ecaa8bb3-d804-4935-9f91-a5cb7aaf0cde/export Tue, 01 Sep 2026 20:01:36 +0000 https://vulnerability.circl.lu/sighting/f57753b0-ebcc-4cf3-be6a-c631d24850c5/export {"uuid": "f57753b0-ebcc-4cf3-be6a-c631d24850c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/44436", "content": "\u203c CVE-2022-31289 \u203c\n\nhttps://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. \u00c2\u00b6\u00c2\u00b6 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-14T20:18:25.000000Z"} {"uuid": "f57753b0-ebcc-4cf3-be6a-c631d24850c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31289", "type": "published-proof-of-concept", "source": "https://t.me/cibsecurity/44436", "content": "\u203c CVE-2022-31289 \u203c\n\nhttps://ossindex.sonatype.org/ Sonatype Nexus Repository Manager OSS 3.37.3-02 is affected by: Incorrect Access Control. The impact is: Authentication Bypass (remote). The component is: Admin Panel. The attack vector is: With the help of response manipulation Attacker can bypass the login panel and view the dashboard menus, No user interaction is required. \u00c2\u00b6\u00c2\u00b6 1. Go to https://nexus.e-goi.com 2. Click on the Sign In button. 3. Enter the password as admin:admin. 4. Intercept the request in Burp Suite. 5. Capture the Response of the Request. 6. Change the Status Code from 403 Forbidden to 200 OK. 7. You will see the dashboard which provides the admin access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-14T20:18:25.000000Z"} https://vulnerability.circl.lu/sighting/f57753b0-ebcc-4cf3-be6a-c631d24850c5/export Tue, 14 Jun 2022 20:18:25 +0000