https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 17 Jul 2026 05:25:33 +0000 https://vulnerability.circl.lu/sighting/90b4c7cb-7cff-417a-a85f-55b73ea942f3/export {"uuid": "90b4c7cb-7cff-417a-a85f-55b73ea942f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"} {"uuid": "90b4c7cb-7cff-417a-a85f-55b73ea942f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"} https://vulnerability.circl.lu/sighting/90b4c7cb-7cff-417a-a85f-55b73ea942f3/export Thu, 23 Oct 2025 21:13:00 +0000 https://vulnerability.circl.lu/sighting/05d8bcb2-496f-4e21-8880-669b98cb9fab/export {"uuid": "05d8bcb2-496f-4e21-8880-669b98cb9fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:44.000000Z"} {"uuid": "05d8bcb2-496f-4e21-8880-669b98cb9fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:44.000000Z"} https://vulnerability.circl.lu/sighting/05d8bcb2-496f-4e21-8880-669b98cb9fab/export Sun, 23 Feb 2025 04:10:44 +0000 https://vulnerability.circl.lu/sighting/7f342706-4e26-40c7-83cc-396db9509231/export {"uuid": "7f342706-4e26-40c7-83cc-396db9509231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"} {"uuid": "7f342706-4e26-40c7-83cc-396db9509231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"} https://vulnerability.circl.lu/sighting/7f342706-4e26-40c7-83cc-396db9509231/export Thu, 06 Feb 2025 03:13:45 +0000 https://vulnerability.circl.lu/sighting/9cb91a02-7fdb-4877-ae5d-82ab54514bcb/export {"uuid": "9cb91a02-7fdb-4877-ae5d-82ab54514bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "https://t.me/cibsecurity/68865", "content": "\u203c CVE-2022-24989 \u203c\n\nTerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-20T22:41:28.000000Z"} {"uuid": "9cb91a02-7fdb-4877-ae5d-82ab54514bcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "https://t.me/cibsecurity/68865", "content": "\u203c CVE-2022-24989 \u203c\n\nTerraMaster NAS through 4.2.30 allows remote WAN attackers to execute arbitrary code as root via the raidtype and diskstring parameters for PHP Object Instantiation to the api.php?mobile/createRaid URI. (Shell metacharacters can be placed in raidtype because popen is used without any sanitization.) The credentials from CVE-2022-24990 exploitation can be used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-20T22:41:28.000000Z"} https://vulnerability.circl.lu/sighting/9cb91a02-7fdb-4877-ae5d-82ab54514bcb/export Sun, 20 Aug 2023 22:41:28 +0000 https://vulnerability.circl.lu/sighting/e4e8d8ad-afe9-40fa-9019-4ef0f6419ebd/export {"uuid": "e4e8d8ad-afe9-40fa-9019-4ef0f6419ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/terramaster_unauth_rce_cve_2022_24990.rb", "content": "", "creation_timestamp": "2023-06-13T19:50:28.000000Z"} {"uuid": "e4e8d8ad-afe9-40fa-9019-4ef0f6419ebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24989", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/terramaster_unauth_rce_cve_2022_24990.rb", "content": "", "creation_timestamp": "2023-06-13T19:50:28.000000Z"} https://vulnerability.circl.lu/sighting/e4e8d8ad-afe9-40fa-9019-4ef0f6419ebd/export Tue, 13 Jun 2023 19:50:28 +0000 https://vulnerability.circl.lu/sighting/be101bfc-486a-443f-8e27-0d5158484261/export {"uuid": "be101bfc-486a-443f-8e27-0d5158484261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24980", "type": "seen", "source": "https://t.me/cibsecurity/37815", "content": "\u203c CVE-2022-24980 \u203c\n\nAn issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This results in SSRF, allowing attackers to view the content of any file or webpage the webserver has access to.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-19T07:38:45.000000Z"} {"uuid": "be101bfc-486a-443f-8e27-0d5158484261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24980", "type": "seen", "source": "https://t.me/cibsecurity/37815", "content": "\u203c CVE-2022-24980 \u203c\n\nAn issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to this component. This results in SSRF, allowing attackers to view the content of any file or webpage the webserver has access to.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-19T07:38:45.000000Z"} https://vulnerability.circl.lu/sighting/be101bfc-486a-443f-8e27-0d5158484261/export Sat, 19 Feb 2022 07:38:45 +0000 https://vulnerability.circl.lu/sighting/ac081106-5023-4e7f-8bb9-28db927eb4c3/export {"uuid": "ac081106-5023-4e7f-8bb9-28db927eb4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24984", "type": "seen", "source": "https://t.me/cibsecurity/37639", "content": "\u203c CVE-2022-24984 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:40.000000Z"} {"uuid": "ac081106-5023-4e7f-8bb9-28db927eb4c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24984", "type": "seen", "source": "https://t.me/cibsecurity/37639", "content": "\u203c CVE-2022-24984 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:40.000000Z"} https://vulnerability.circl.lu/sighting/ac081106-5023-4e7f-8bb9-28db927eb4c3/export Thu, 17 Feb 2022 00:39:40 +0000 https://vulnerability.circl.lu/sighting/6b4f3b43-00d4-45a6-99bb-ebbaafdbf5eb/export {"uuid": "6b4f3b43-00d4-45a6-99bb-ebbaafdbf5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24985", "type": "seen", "source": "https://t.me/cibsecurity/37638", "content": "\u203c CVE-2022-24985 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:39.000000Z"} {"uuid": "6b4f3b43-00d4-45a6-99bb-ebbaafdbf5eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24985", "type": "seen", "source": "https://t.me/cibsecurity/37638", "content": "\u203c CVE-2022-24985 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 allows a remote authenticated attacker to bypass authentication and access the administrative section of other forms hosted on the same web server. This is relevant only when an organization hosts more than one of these forms on their server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:39.000000Z"} https://vulnerability.circl.lu/sighting/6b4f3b43-00d4-45a6-99bb-ebbaafdbf5eb/export Thu, 17 Feb 2022 00:39:39 +0000 https://vulnerability.circl.lu/sighting/89fcb8c3-f5d5-4187-a1e3-bdf37c9fed25/export {"uuid": "89fcb8c3-f5d5-4187-a1e3-bdf37c9fed25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24983", "type": "seen", "source": "https://t.me/cibsecurity/37635", "content": "\u203c CVE-2022-24983 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:35.000000Z"} {"uuid": "89fcb8c3-f5d5-4187-a1e3-bdf37c9fed25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24983", "type": "seen", "source": "https://t.me/cibsecurity/37635", "content": "\u203c CVE-2022-24983 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:35.000000Z"} https://vulnerability.circl.lu/sighting/89fcb8c3-f5d5-4187-a1e3-bdf37c9fed25/export Thu, 17 Feb 2022 00:39:35 +0000 https://vulnerability.circl.lu/sighting/362f51cc-0fa5-488c-bf99-9113b01545ab/export {"uuid": "362f51cc-0fa5-488c-bf99-9113b01545ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24984", "type": "seen", "source": "https://t.me/cibsecurity/37635", "content": "\u203c CVE-2022-24983 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:35.000000Z"} {"uuid": "362f51cc-0fa5-488c-bf99-9113b01545ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24984", "type": "seen", "source": "https://t.me/cibsecurity/37635", "content": "\u203c CVE-2022-24983 \u203c\n\nForms generated by JQueryForm.com before 2022-02-05 allow remote attackers to obtain the URI to any uploaded file by capturing the POST response. When chained with CVE-2022-24984, this could lead to unauthenticated remote code execution on the underlying web server. This occurs because the Unique ID field is contained in the POST response upon submitting a form.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-02-17T00:39:35.000000Z"} https://vulnerability.circl.lu/sighting/362f51cc-0fa5-488c-bf99-9113b01545ab/export Thu, 17 Feb 2022 00:39:35 +0000