<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-06-02T13:07:04.971816+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/55fa0e2d-65a7-49ec-8da5-859ffea74060/export</id>
    <title>55fa0e2d-65a7-49ec-8da5-859ffea74060</title>
    <updated>2026-06-02T13:07:05.784270+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "55fa0e2d-65a7-49ec-8da5-859ffea74060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26887", "type": "seen", "source": "https://t.me/cibsecurity/39755", "content": "\u203c CVE-2022-26887 \u203c\n\nDelta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T20:11:28.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/55fa0e2d-65a7-49ec-8da5-859ffea74060/export"/>
    <published>2022-03-29T20:11:28+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/2406e22c-1625-4832-a1f2-3ac1cfc6dd29/export</id>
    <title>2406e22c-1625-4832-a1f2-3ac1cfc6dd29</title>
    <updated>2026-06-02T13:07:05.784217+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "2406e22c-1625-4832-a1f2-3ac1cfc6dd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26889", "type": "seen", "source": "https://t.me/cibsecurity/42132", "content": "\u203c CVE-2022-26889 \u203c\n\nThe lack of sanitization in a relative url path in a search parameter allows for arbitrary injection of external content in Splunk Enterprise versions before 8.1.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-07T02:42:27.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/2406e22c-1625-4832-a1f2-3ac1cfc6dd29/export"/>
    <published>2022-05-07T02:42:27+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/36134af3-c440-4086-93f7-8a5c3c9d448f/export</id>
    <title>36134af3-c440-4086-93f7-8a5c3c9d448f</title>
    <updated>2026-06-02T13:07:05.784137+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "36134af3-c440-4086-93f7-8a5c3c9d448f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2688", "type": "seen", "source": "https://t.me/cibsecurity/47701", "content": "\u203c CVE-2022-2688 \u203c\n\nA vulnerability was found in SourceCodester Expense Management System. It has been rated as critical. This issue affects the function fetch_report_credit of the file report.php of the component POST Parameter Handler. The manipulation of the argument from/to leads to sql injection. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-205811.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-06T22:21:53.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/36134af3-c440-4086-93f7-8a5c3c9d448f/export"/>
    <published>2022-08-06T22:21:53+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/29cfcbf6-accf-4feb-b09e-2022e557cf14/export</id>
    <title>29cfcbf6-accf-4feb-b09e-2022e557cf14</title>
    <updated>2026-06-02T13:07:05.784080+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "29cfcbf6-accf-4feb-b09e-2022e557cf14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26885", "type": "seen", "source": "https://t.me/cibsecurity/53481", "content": "\u203c CVE-2022-26885 \u203c\n\nWhen using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-24T18:14:35.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/29cfcbf6-accf-4feb-b09e-2022e557cf14/export"/>
    <published>2022-11-24T18:14:35+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/afcf96f5-126d-4307-9b62-098e9416f50d/export</id>
    <title>afcf96f5-126d-4307-9b62-098e9416f50d</title>
    <updated>2026-06-02T13:07:05.784021+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "afcf96f5-126d-4307-9b62-098e9416f50d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26888", "type": "seen", "source": "https://t.me/cibsecurity/58362", "content": "\u203c CVE-2022-26888 \u203c\n\nCross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable information disclosure via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T22:17:53.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/afcf96f5-126d-4307-9b62-098e9416f50d/export"/>
    <published>2023-02-16T22:17:53+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/6f847781-68b0-4b09-8eba-be8761bc605f/export</id>
    <title>6f847781-68b0-4b09-8eba-be8761bc605f</title>
    <updated>2026-06-02T13:07:05.783925+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "6f847781-68b0-4b09-8eba-be8761bc605f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26885", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13508", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-26885\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When using tasks to read config files, there is a risk of database password disclosure. We recommend you upgrade to version 2.0.6 or higher.\n\ud83d\udccf Published: 2022-11-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-25T18:17:36.266Z\n\ud83d\udd17 References:\n1. https://lists.apache.org/thread/z7084r9cs2r26cszkkgjqpb5bhnxqssp", "creation_timestamp": "2025-04-25T19:07:33.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/6f847781-68b0-4b09-8eba-be8761bc605f/export"/>
    <published>2025-04-25T19:07:33+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/fe418e99-9340-410b-8a96-98e9ce53064d/export</id>
    <title>fe418e99-9340-410b-8a96-98e9ce53064d</title>
    <updated>2026-06-02T13:07:05.779348+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "fe418e99-9340-410b-8a96-98e9ce53064d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26884", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcboyoyi2c", "content": "", "creation_timestamp": "2025-08-18T21:02:46.164229Z"}</content>
    <link href="https://db.gcve.eu/sighting/fe418e99-9340-410b-8a96-98e9ce53064d/export"/>
    <published>2025-08-18T21:02:46.164229+00:00</published>
  </entry>
</feed>
