https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Fri, 10 Jul 2026 07:54:38 +0000 https://vulnerability.circl.lu/sighting/c289d140-28ea-4f5a-83d3-5dc0a3dc84cc/export {"uuid": "c289d140-28ea-4f5a-83d3-5dc0a3dc84cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36786", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13909", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-36786\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: DLINK - DSL-224 Post-auth RCE.\nDLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API.\nIt is possible to inject a command through this interface that will run with ROOT permissions on the router.\n\n\n\ud83d\udccf Published: 2022-11-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:01:06.332Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-04-29T20:12:31.000000Z"} {"uuid": "c289d140-28ea-4f5a-83d3-5dc0a3dc84cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36786", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13909", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-36786\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: DLINK - DSL-224 Post-auth RCE.\nDLINK router version 3.0.8 has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API.\nIt is possible to inject a command through this interface that will run with ROOT permissions on the router.\n\n\n\ud83d\udccf Published: 2022-11-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T20:01:06.332Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-04-29T20:12:31.000000Z"} https://vulnerability.circl.lu/sighting/c289d140-28ea-4f5a-83d3-5dc0a3dc84cc/export Tue, 29 Apr 2025 20:12:31 +0000 https://vulnerability.circl.lu/sighting/dc292935-d164-4624-84f3-b3e1a082760b/export {"uuid": "dc292935-d164-4624-84f3-b3e1a082760b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36785", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-36785\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: \nD-Link \u2013 G integrated Access Device4 Information Disclosure & Authorization Bypass.\n*Information Disclosure \u2013 \nfile contains a URL with private IP at line 15 \"login.asp\" A. The\nwindow.location.href = http://192.168.1.1/setupWizard.asp\" http://192.168.1.1/setupWizard.asp\" ;\n\"admin\" \u2013 contains default username value \"login.asp\" B. While accessing the web interface, the login form at \n\n*Authorization Bypass \u2013 \nURL by \"setupWizard.asp' while it blocks direct access to \u2013 the web interface does not properly validate user identity variables values located at the client side, it is available to access it without a \"login_glag\" and \"login_status\" checking browser and to read the admin user credentials for the web interface.\n\n\n\n\n\ud83d\udccf Published: 2022-11-17T22:27:55.842Z\n\ud83d\udccf Modified: 2025-04-29T13:43:47.629Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-04-29T14:11:55.000000Z"} {"uuid": "dc292935-d164-4624-84f3-b3e1a082760b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36785", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13824", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-36785\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: \nD-Link \u2013 G integrated Access Device4 Information Disclosure & Authorization Bypass.\n*Information Disclosure \u2013 \nfile contains a URL with private IP at line 15 \"login.asp\" A. The\nwindow.location.href = http://192.168.1.1/setupWizard.asp\" http://192.168.1.1/setupWizard.asp\" ;\n\"admin\" \u2013 contains default username value \"login.asp\" B. While accessing the web interface, the login form at \n\n*Authorization Bypass \u2013 \nURL by \"setupWizard.asp' while it blocks direct access to \u2013 the web interface does not properly validate user identity variables values located at the client side, it is available to access it without a \"login_glag\" and \"login_status\" checking browser and to read the admin user credentials for the web interface.\n\n\n\n\n\ud83d\udccf Published: 2022-11-17T22:27:55.842Z\n\ud83d\udccf Modified: 2025-04-29T13:43:47.629Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-04-29T14:11:55.000000Z"} https://vulnerability.circl.lu/sighting/dc292935-d164-4624-84f3-b3e1a082760b/export Tue, 29 Apr 2025 14:11:55 +0000 https://vulnerability.circl.lu/sighting/e2351d52-8221-4b86-9e53-23a5a5aec0b5/export {"uuid": "e2351d52-8221-4b86-9e53-23a5a5aec0b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36788", "type": "seen", "source": "https://t.me/cibsecurity/62537", "content": "\u203c CVE-2022-36788 \u203c\n\nA heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-crafted STL file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-20T20:30:50.000000Z"} {"uuid": "e2351d52-8221-4b86-9e53-23a5a5aec0b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36788", "type": "seen", "source": "https://t.me/cibsecurity/62537", "content": "\u203c CVE-2022-36788 \u203c\n\nA heap-based buffer overflow vulnerability exists in the TriangleMesh clone functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially-crafted STL file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-20T20:30:50.000000Z"} https://vulnerability.circl.lu/sighting/e2351d52-8221-4b86-9e53-23a5a5aec0b5/export Thu, 20 Apr 2023 20:30:50 +0000 https://vulnerability.circl.lu/sighting/d9eeba03-02d9-4ebe-aa58-d6fc8e91eb97/export {"uuid": "d9eeba03-02d9-4ebe-aa58-d6fc8e91eb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36787", "type": "seen", "source": "https://t.me/cibsecurity/53123", "content": "\u203c CVE-2022-36787 \u203c\n\nWebvendome - Webvendome SQL Injection. SQL Injection in the Parameter \" DocNumber\" Request : Get Request : /webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T02:18:07.000000Z"} {"uuid": "d9eeba03-02d9-4ebe-aa58-d6fc8e91eb97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36787", "type": "seen", "source": "https://t.me/cibsecurity/53123", "content": "\u203c CVE-2022-36787 \u203c\n\nWebvendome - Webvendome SQL Injection. SQL Injection in the Parameter \" DocNumber\" Request : Get Request : /webvendome/showfiles.aspx?jobnumber=nullDoc Number=HERE.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T02:18:07.000000Z"} https://vulnerability.circl.lu/sighting/d9eeba03-02d9-4ebe-aa58-d6fc8e91eb97/export Fri, 18 Nov 2022 02:18:07 +0000 https://vulnerability.circl.lu/sighting/4848eaa7-1454-4dc3-bf59-569ba635e8ad/export {"uuid": "4848eaa7-1454-4dc3-bf59-569ba635e8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36784", "type": "seen", "source": "https://t.me/cibsecurity/53120", "content": "\u203c CVE-2022-36784 \u203c\n\nElsight \u00e2\u20ac\u201c Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T02:18:00.000000Z"} {"uuid": "4848eaa7-1454-4dc3-bf59-569ba635e8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36784", "type": "seen", "source": "https://t.me/cibsecurity/53120", "content": "\u203c CVE-2022-36784 \u203c\n\nElsight \u00e2\u20ac\u201c Elsight Halo Remote Code Execution (RCE) Elsight Halo web panel allows us to perform connection validation. through the POST request : /api/v1/nics/wifi/wlan0/ping we can abuse DESTINATION parameter and leverage it to remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T02:18:00.000000Z"} https://vulnerability.circl.lu/sighting/4848eaa7-1454-4dc3-bf59-569ba635e8ad/export Fri, 18 Nov 2022 02:18:00 +0000 https://vulnerability.circl.lu/sighting/1e45b8b9-9b8f-44f6-b34f-5e37d06570aa/export {"uuid": "1e45b8b9-9b8f-44f6-b34f-5e37d06570aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36786", "type": "seen", "source": "https://t.me/cibsecurity/53119", "content": "\u203c CVE-2022-36786 \u203c\n\nDLINK - DSL-224 Post-auth PCE. DLINK router has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T02:18:00.000000Z"} {"uuid": "1e45b8b9-9b8f-44f6-b34f-5e37d06570aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36786", "type": "seen", "source": "https://t.me/cibsecurity/53119", "content": "\u203c CVE-2022-36786 \u203c\n\nDLINK - DSL-224 Post-auth PCE. DLINK router has an interface where you can configure NTP servers (Network Time Protocol) via jsonrpc API. It is possible to inject a command through this interface that will run with ROOT permissions on the router.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-18T02:18:00.000000Z"} https://vulnerability.circl.lu/sighting/1e45b8b9-9b8f-44f6-b34f-5e37d06570aa/export Fri, 18 Nov 2022 02:18:00 +0000 https://vulnerability.circl.lu/sighting/9c023137-5342-42f3-86d9-da3e40f01fed/export {"uuid": "9c023137-5342-42f3-86d9-da3e40f01fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36789", "type": "seen", "source": "https://t.me/cibsecurity/52939", "content": "\u203c CVE-2022-36789 \u203c\n\nImproper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:55:14.000000Z"} {"uuid": "9c023137-5342-42f3-86d9-da3e40f01fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36789", "type": "seen", "source": "https://t.me/cibsecurity/52939", "content": "\u203c CVE-2022-36789 \u203c\n\nImproper access control in BIOS firmware for some Intel(R) NUC 10 Performance Kits and Intel(R) NUC 10 Performance Mini PCs before version FNCML357.0053 may allow a privileged user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:55:14.000000Z"} https://vulnerability.circl.lu/sighting/9c023137-5342-42f3-86d9-da3e40f01fed/export Sun, 13 Nov 2022 05:55:14 +0000 https://vulnerability.circl.lu/sighting/9c4108e9-a038-475d-b0cc-ed769a83e0a9/export {"uuid": "9c4108e9-a038-475d-b0cc-ed769a83e0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-3678", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_20/2022", "content": "", "creation_timestamp": "2022-11-01T17:25:50.000000Z"} {"uuid": "9c4108e9-a038-475d-b0cc-ed769a83e0a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-3678", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_20/2022", "content": "", "creation_timestamp": "2022-11-01T17:25:50.000000Z"} https://vulnerability.circl.lu/sighting/9c4108e9-a038-475d-b0cc-ed769a83e0a9/export Tue, 01 Nov 2022 17:25:50 +0000 https://vulnerability.circl.lu/sighting/facb5376-fa2f-45eb-8460-d28dc399b84f/export {"uuid": "facb5376-fa2f-45eb-8460-d28dc399b84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36783", "type": "seen", "source": "https://t.me/cibsecurity/52047", "content": "\u203c CVE-2022-36783 \u203c\n\nAlgoSec FireFlow Reflected Cross-Site-Scripting (RXSS): A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-25T20:40:42.000000Z"} {"uuid": "facb5376-fa2f-45eb-8460-d28dc399b84f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36783", "type": "seen", "source": "https://t.me/cibsecurity/52047", "content": "\u203c CVE-2022-36783 \u203c\n\nAlgoSec FireFlow Reflected Cross-Site-Scripting (RXSS): A malicious user injects JavaScript code into a parameter called IntersectudRule on the search/result.html page. The malicious user changes the request from POST to GET and sends the URL to another user (victim). JavaScript code is executed on the browser of the other user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-25T20:40:42.000000Z"} https://vulnerability.circl.lu/sighting/facb5376-fa2f-45eb-8460-d28dc399b84f/export Tue, 25 Oct 2022 20:40:42 +0000 https://vulnerability.circl.lu/sighting/208737d5-fdfd-453a-8448-6c1f88ead075/export {"uuid": "208737d5-fdfd-453a-8448-6c1f88ead075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36781", "type": "seen", "source": "https://t.me/cibsecurity/50628", "content": "\u203c CVE-2022-36781 \u203c\n\nWiseConnect - ScreenConnect Session Code Bypass. An attacker would have to use a proxy to monitor the traffic, and perform a brute force on the session code in order to get in. Sensitive data about the company , get in a session.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:33.000000Z"} {"uuid": "208737d5-fdfd-453a-8448-6c1f88ead075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36781", "type": "seen", "source": "https://t.me/cibsecurity/50628", "content": "\u203c CVE-2022-36781 \u203c\n\nWiseConnect - ScreenConnect Session Code Bypass. An attacker would have to use a proxy to monitor the traffic, and perform a brute force on the session code in order to get in. Sensitive data about the company , get in a session.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T00:34:33.000000Z"} https://vulnerability.circl.lu/sighting/208737d5-fdfd-453a-8448-6c1f88ead075/export Thu, 29 Sep 2022 00:34:33 +0000