<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-03T10:12:35.972303+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/1c0e9a04-6bf8-4c2d-80a9-b606ca460f55/export</id>
    <title>1c0e9a04-6bf8-4c2d-80a9-b606ca460f55</title>
    <updated>2026-05-03T10:12:36.273961+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1c0e9a04-6bf8-4c2d-80a9-b606ca460f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4695", "type": "seen", "source": "https://t.me/cibsecurity/55424", "content": "\u203c CVE-2022-4695 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:46.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1c0e9a04-6bf8-4c2d-80a9-b606ca460f55/export"/>
    <published>2022-12-27T18:13:46+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1daa796f-d408-4f39-b611-48490f611c19/export</id>
    <title>1daa796f-d408-4f39-b611-48490f611c19</title>
    <updated>2026-05-03T10:12:36.273912+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1daa796f-d408-4f39-b611-48490f611c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46959", "type": "seen", "source": "https://t.me/cibsecurity/56824", "content": "\u203c CVE-2022-46959 \u203c\n\nAn issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T07:53:04.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1daa796f-d408-4f39-b611-48490f611c19/export"/>
    <published>2023-01-23T07:53:04+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/231fe61f-9499-4b13-b71a-6dbb0632c244/export</id>
    <title>231fe61f-9499-4b13-b71a-6dbb0632c244</title>
    <updated>2026-05-03T10:12:36.273862+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "231fe61f-9499-4b13-b71a-6dbb0632c244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46957", "type": "seen", "source": "https://t.me/cibsecurity/56987", "content": "\u203c CVE-2022-46957 \u203c\n\nSourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:43:56.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/231fe61f-9499-4b13-b71a-6dbb0632c244/export"/>
    <published>2023-01-27T00:43:56+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/b9324c42-6add-4d65-90ab-68819480a809/export</id>
    <title>b9324c42-6add-4d65-90ab-68819480a809</title>
    <updated>2026-05-03T10:12:36.273810+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "b9324c42-6add-4d65-90ab-68819480a809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:19:39.520Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/sites/default/files/download/oretnom23/tracking.zip\n2. https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46957", "creation_timestamp": "2025-04-01T15:32:54.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/b9324c42-6add-4d65-90ab-68819480a809/export"/>
    <published>2025-04-01T15:32:54+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/2e4ede04-3f0f-45ff-9b28-1b03b0ab740d/export</id>
    <title>2e4ede04-3f0f-45ff-9b28-1b03b0ab740d</title>
    <updated>2026-05-03T10:12:36.273758+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "2e4ede04-3f0f-45ff-9b28-1b03b0ab740d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46959", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46959\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2023-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T14:11:53.604Z\n\ud83d\udd17 References:\n1. https://github.com/go-sonic/sonic/issues/56", "creation_timestamp": "2025-04-03T14:35:17.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/2e4ede04-3f0f-45ff-9b28-1b03b0ab740d/export"/>
    <published>2025-04-03T14:35:17+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/bcb7abab-c808-4a45-a944-6d23c3d65cbd/export</id>
    <title>bcb7abab-c808-4a45-a944-6d23c3d65cbd</title>
    <updated>2026-05-03T10:12:36.273703+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "bcb7abab-c808-4a45-a944-6d23c3d65cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:31:22.323Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md", "creation_timestamp": "2025-04-07T19:45:38.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/bcb7abab-c808-4a45-a944-6d23c3d65cbd/export"/>
    <published>2025-04-07T19:45:38+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/e055c9ad-43ea-4cef-9866-6b01ad9b42b4/export</id>
    <title>e055c9ad-43ea-4cef-9866-6b01ad9b42b4</title>
    <updated>2026-05-03T10:12:36.273646+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "e055c9ad-43ea-4cef-9866-6b01ad9b42b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46955", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46955\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:29:30.957Z\n\ud83d\udd17 References:\n1. https://www.github.com", "creation_timestamp": "2025-04-07T19:45:41.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/e055c9ad-43ea-4cef-9866-6b01ad9b42b4/export"/>
    <published>2025-04-07T19:45:41+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/f95248fc-d0e1-4c2e-9ee6-9c2b12a29337/export</id>
    <title>f95248fc-d0e1-4c2e-9ee6-9c2b12a29337</title>
    <updated>2026-05-03T10:12:36.273586+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "f95248fc-d0e1-4c2e-9ee6-9c2b12a29337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46956", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46956\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:27:36.707Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md", "creation_timestamp": "2025-04-07T19:45:43.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/f95248fc-d0e1-4c2e-9ee6-9c2b12a29337/export"/>
    <published>2025-04-07T19:45:43+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/d32793f1-76db-42c1-a6b6-8c66cc6879ee/export</id>
    <title>d32793f1-76db-42c1-a6b6-8c66cc6879ee</title>
    <updated>2026-05-03T10:12:36.273505+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "d32793f1-76db-42c1-a6b6-8c66cc6879ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46950", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46950\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:45:01.083Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md", "creation_timestamp": "2025-04-07T20:46:34.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/d32793f1-76db-42c1-a6b6-8c66cc6879ee/export"/>
    <published>2025-04-07T20:46:34+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/2d023a2c-f482-4305-b630-d70bc7dba7e5/export</id>
    <title>2d023a2c-f482-4305-b630-d70bc7dba7e5</title>
    <updated>2026-05-03T10:12:36.272304+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "2d023a2c-f482-4305-b630-d70bc7dba7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4695", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4695\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:38:51.348Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e\n2. https://huntr.dev/bounties/2559d548-b847-40fb-94d6-18c1ad58b789", "creation_timestamp": "2025-04-09T20:48:25.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/2d023a2c-f482-4305-b630-d70bc7dba7e5/export"/>
    <published>2025-04-09T20:48:25+00:00</published>
  </entry>
</feed>
