<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-30T19:29:55.070431+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/d6aba443-fc34-4950-bdf5-6948196e53e8/export</id>
    <title>d6aba443-fc34-4950-bdf5-6948196e53e8</title>
    <updated>2026-05-30T19:29:55.414807+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "d6aba443-fc34-4950-bdf5-6948196e53e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26573", "type": "seen", "source": "https://t.me/cibsecurity/39566", "content": "\u203c CVE-2022-26573 \u203c\n\nMaccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T21:31:12.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/d6aba443-fc34-4950-bdf5-6948196e53e8/export"/>
    <published>2022-03-25T21:31:12+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/5fcb1369-3e96-42a2-9f61-6676e803eea5/export</id>
    <title>5fcb1369-3e96-42a2-9f61-6676e803eea5</title>
    <updated>2026-05-30T19:29:55.414750+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "5fcb1369-3e96-42a2-9f61-6676e803eea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26572", "type": "seen", "source": "https://t.me/cibsecurity/40112", "content": "\u203c CVE-2022-26572 \u203c\n\nXerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T22:27:55.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/5fcb1369-3e96-42a2-9f61-6676e803eea5/export"/>
    <published>2022-04-04T22:27:55+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/bac5d17d-50f1-4c46-b260-1c7159f95dab/export</id>
    <title>bac5d17d-50f1-4c46-b260-1c7159f95dab</title>
    <updated>2026-05-30T19:29:55.414670+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "bac5d17d-50f1-4c46-b260-1c7159f95dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2657", "type": "seen", "source": "https://t.me/cibsecurity/49287", "content": "\u203c CVE-2022-2657 \u203c\n\nThe Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors (reporter by the submitter) or update arbitrary order status (identified by WPScan when verifying the issue) for example. Other unauthenticated attacks are also possible, either directly or via CSRF\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-05T16:12:13.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/bac5d17d-50f1-4c46-b260-1c7159f95dab/export"/>
    <published>2022-09-05T16:12:13+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/460bd020-a7bd-4c20-a267-bb34a78e8f93/export</id>
    <title>460bd020-a7bd-4c20-a267-bb34a78e8f93</title>
    <updated>2026-05-30T19:29:55.413511+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>https://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "460bd020-a7bd-4c20-a267-bb34a78e8f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26579", "type": "seen", "source": "https://t.me/cibsecurity/54785", "content": "\u203c CVE-2022-26579 \u203c\n\nPAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 allows root privileged attackers to install an unsigned application by copying the APK to /data/app, setting the appropriate permissions and rebooting the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-17T00:24:36.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/460bd020-a7bd-4c20-a267-bb34a78e8f93/export"/>
    <published>2022-12-17T00:24:36+00:00</published>
  </entry>
</feed>
