https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sat, 04 Jul 2026 21:12:38 +0000 https://vulnerability.circl.lu/sighting/a4f964ea-1ecd-4d8b-9241-cb262d937831/export {"uuid": "a4f964ea-1ecd-4d8b-9241-cb262d937831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3714", "type": "seen", "source": "https://t.me/cibsecurity/52139", "content": "\u203c CVE-2022-3714 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/view_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-212346 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-27T14:28:20.000000Z"} {"uuid": "a4f964ea-1ecd-4d8b-9241-cb262d937831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3714", "type": "seen", "source": "https://t.me/cibsecurity/52139", "content": "\u203c CVE-2022-3714 \u203c\n\nA vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/view_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-212346 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-27T14:28:20.000000Z"} https://vulnerability.circl.lu/sighting/a4f964ea-1ecd-4d8b-9241-cb262d937831/export Thu, 27 Oct 2022 14:28:20 +0000 https://vulnerability.circl.lu/sighting/165d8776-8131-4191-9155-14014ff5a607/export {"uuid": "165d8776-8131-4191-9155-14014ff5a607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37140", "type": "seen", "source": "https://t.me/cibsecurity/49761", "content": "\u203c CVE-2022-37140 \u203c\n\nPayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:26.000000Z"} {"uuid": "165d8776-8131-4191-9155-14014ff5a607", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37140", "type": "seen", "source": "https://t.me/cibsecurity/49761", "content": "\u203c CVE-2022-37140 \u203c\n\nPayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:26.000000Z"} https://vulnerability.circl.lu/sighting/165d8776-8131-4191-9155-14014ff5a607/export Wed, 14 Sep 2022 14:26:26 +0000 https://vulnerability.circl.lu/sighting/f23f65e6-5610-4a6e-9c5a-706c6e1def46/export {"uuid": "f23f65e6-5610-4a6e-9c5a-706c6e1def46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37149", "type": "seen", "source": "https://t.me/cibsecurity/49055", "content": "\u203c CVE-2022-37149 \u203c\n\nWAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-30T18:35:37.000000Z"} {"uuid": "f23f65e6-5610-4a6e-9c5a-706c6e1def46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37149", "type": "seen", "source": "https://t.me/cibsecurity/49055", "content": "\u203c CVE-2022-37149 \u203c\n\nWAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vulnerability allows attackers to execute arbitrary commands via the username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-30T18:35:37.000000Z"} https://vulnerability.circl.lu/sighting/f23f65e6-5610-4a6e-9c5a-706c6e1def46/export Tue, 30 Aug 2022 18:35:37 +0000