https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 11 Aug 2026 12:48:58 +0000 https://vulnerability.circl.lu/sighting/729de149-3f0a-4fad-a01c-a2c0939e155e/export {"uuid": "729de149-3f0a-4fad-a01c-a2c0939e155e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-08-02T00:01:22.386316Z"} {"uuid": "729de149-3f0a-4fad-a01c-a2c0939e155e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-08-02T00:01:22.386316Z"} https://vulnerability.circl.lu/sighting/729de149-3f0a-4fad-a01c-a2c0939e155e/export Sun, 02 Aug 2026 00:01:22 +0000 https://vulnerability.circl.lu/sighting/589e5f2b-41b0-4721-8b8d-ee78df69feb2/export {"uuid": "589e5f2b-41b0-4721-8b8d-ee78df69feb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-08-01T01:00:05.725102Z"} {"uuid": "589e5f2b-41b0-4721-8b8d-ee78df69feb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-08-01T01:00:05.725102Z"} https://vulnerability.circl.lu/sighting/589e5f2b-41b0-4721-8b8d-ee78df69feb2/export Sat, 01 Aug 2026 01:00:05 +0000 https://vulnerability.circl.lu/sighting/c88f4c48-4995-4b69-8385-6732a3e885ae/export {"uuid": "c88f4c48-4995-4b69-8385-6732a3e885ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "seen", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-07-30T00:01:36.452257Z"} {"uuid": "c88f4c48-4995-4b69-8385-6732a3e885ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "seen", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-07-30T00:01:36.452257Z"} https://vulnerability.circl.lu/sighting/c88f4c48-4995-4b69-8385-6732a3e885ae/export Thu, 30 Jul 2026 00:01:36 +0000 https://vulnerability.circl.lu/sighting/0bd66de8-1dd5-41c8-b540-4afb00a72ca6/export {"uuid": "0bd66de8-1dd5-41c8-b540-4afb00a72ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "seen", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-07-29T12:00:57.847513Z"} {"uuid": "0bd66de8-1dd5-41c8-b540-4afb00a72ca6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "seen", "source": "https://t.me/CVEhub/3876", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36663\nGithub: https://github.com/Qeisi/CVE-2022-36663-PoC\nDescribe: \nGluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.", "creation_timestamp": "2026-07-29T12:00:57.847513Z"} https://vulnerability.circl.lu/sighting/0bd66de8-1dd5-41c8-b540-4afb00a72ca6/export Wed, 29 Jul 2026 12:00:57 +0000 https://vulnerability.circl.lu/sighting/4d114797-51fe-43bc-a525-682d83bd0f07/export {"uuid": "4d114797-51fe-43bc-a525-682d83bd0f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36664", "type": "seen", "source": "https://t.me/canyoupwnme/6838", "content": "Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability. CVE-2022-36664\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-36664", "creation_timestamp": "2022-12-27T05:56:59.000000Z"} {"uuid": "4d114797-51fe-43bc-a525-682d83bd0f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36664", "type": "seen", "source": "https://t.me/canyoupwnme/6838", "content": "Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability. CVE-2022-36664\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-36664", "creation_timestamp": "2022-12-27T05:56:59.000000Z"} https://vulnerability.circl.lu/sighting/4d114797-51fe-43bc-a525-682d83bd0f07/export Tue, 27 Dec 2022 05:56:59 +0000 https://vulnerability.circl.lu/sighting/b1b40979-80f5-470e-92f9-6a5fe4326280/export {"uuid": "b1b40979-80f5-470e-92f9-6a5fe4326280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36664", "type": "seen", "source": "https://t.me/cibsecurity/55377", "content": "\u203c CVE-2022-36664 \u203c\n\nPassword Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T00:41:07.000000Z"} {"uuid": "b1b40979-80f5-470e-92f9-6a5fe4326280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36664", "type": "seen", "source": "https://t.me/cibsecurity/55377", "content": "\u203c CVE-2022-36664 \u203c\n\nPassword Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T00:41:07.000000Z"} https://vulnerability.circl.lu/sighting/b1b40979-80f5-470e-92f9-6a5fe4326280/export Tue, 27 Dec 2022 00:41:07 +0000 https://vulnerability.circl.lu/sighting/73f90a65-33dd-4224-9df6-3db09b68e431/export {"uuid": "73f90a65-33dd-4224-9df6-3db09b68e431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7034", "content": "#exploit\n1. CVE-2022-36663:\nInternal network scanner through Gluu IAM blind ssrf\nhttps://github.com/Qeisi/CVE-2022-36663-PoC\n\n2. CVE-2022-21970:\nMicrosoft Edge (Chromium-based) EoP Vulnerability\nhttps://github.com/Malwareman007/CVE-2022-21970\n\n3. CVE-2022-39197:\nCobaltStrike <= 4.7.1 RCE\nhttps://github.com/TheCryingGame/CVE-2022-39197-RCE", "creation_timestamp": "2022-10-23T19:30:28.000000Z"} {"uuid": "73f90a65-33dd-4224-9df6-3db09b68e431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36663", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7034", "content": "#exploit\n1. CVE-2022-36663:\nInternal network scanner through Gluu IAM blind ssrf\nhttps://github.com/Qeisi/CVE-2022-36663-PoC\n\n2. CVE-2022-21970:\nMicrosoft Edge (Chromium-based) EoP Vulnerability\nhttps://github.com/Malwareman007/CVE-2022-21970\n\n3. CVE-2022-39197:\nCobaltStrike <= 4.7.1 RCE\nhttps://github.com/TheCryingGame/CVE-2022-39197-RCE", "creation_timestamp": "2022-10-23T19:30:28.000000Z"} https://vulnerability.circl.lu/sighting/73f90a65-33dd-4224-9df6-3db09b68e431/export Sun, 23 Oct 2022 19:30:28 +0000 https://vulnerability.circl.lu/sighting/dec93c47-0ea4-44b1-8a34-63a415ee6c22/export {"uuid": "dec93c47-0ea4-44b1-8a34-63a415ee6c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36661", "type": "seen", "source": "https://t.me/cibsecurity/49401", "content": "\u203c CVE-2022-36661 \u203c\n\nxhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-03T06:20:20.000000Z"} {"uuid": "dec93c47-0ea4-44b1-8a34-63a415ee6c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36661", "type": "seen", "source": "https://t.me/cibsecurity/49401", "content": "\u203c CVE-2022-36661 \u203c\n\nxhyve commit dfbe09b was discovered to contain a NULL pointer dereference via the component vi_pci_read(). This vulnerability allows attackers to cause a Denial of Service via unspecified vectors.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-03T06:20:20.000000Z"} https://vulnerability.circl.lu/sighting/dec93c47-0ea4-44b1-8a34-63a415ee6c22/export Mon, 03 Oct 2022 06:20:20 +0000 https://vulnerability.circl.lu/sighting/29e48fea-da5f-4d33-8970-8c388ab6d5ab/export {"uuid": "29e48fea-da5f-4d33-8970-8c388ab6d5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36669", "type": "seen", "source": "https://t.me/cibsecurity/49766", "content": "\u203c CVE-2022-36669 \u203c\n\nHospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:31.000000Z"} {"uuid": "29e48fea-da5f-4d33-8970-8c388ab6d5ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36669", "type": "seen", "source": "https://t.me/cibsecurity/49766", "content": "\u203c CVE-2022-36669 \u203c\n\nHospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:31.000000Z"} https://vulnerability.circl.lu/sighting/29e48fea-da5f-4d33-8970-8c388ab6d5ab/export Wed, 14 Sep 2022 14:26:31 +0000 https://vulnerability.circl.lu/sighting/7edf9ef7-451b-482d-8950-34f55ac2c612/export {"uuid": "7edf9ef7-451b-482d-8950-34f55ac2c612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36668", "type": "seen", "source": "https://t.me/cibsecurity/49760", "content": "\u203c CVE-2022-36668 \u203c\n\nGarage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:24.000000Z"} {"uuid": "7edf9ef7-451b-482d-8950-34f55ac2c612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36668", "type": "seen", "source": "https://t.me/cibsecurity/49760", "content": "\u203c CVE-2022-36668 \u203c\n\nGarage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-14T14:26:24.000000Z"} https://vulnerability.circl.lu/sighting/7edf9ef7-451b-482d-8950-34f55ac2c612/export Wed, 14 Sep 2022 14:26:24 +0000