<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/sightings/feed</id>
  <title>Most recent sightings.</title>
  <updated>2026-05-28T00:36:13.908333+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent sightings.</subtitle>
  <entry>
    <id>https://db.gcve.eu/sighting/d3772971-04c7-4d92-849b-8074daf68ce9/export</id>
    <title>d3772971-04c7-4d92-849b-8074daf68ce9</title>
    <updated>2026-05-28T00:36:14.258777+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "d3772971-04c7-4d92-849b-8074daf68ce9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34298", "type": "seen", "source": "https://t.me/cibsecurity/45016", "content": "\u203c CVE-2022-34298 \u203c\n\nThe NT auth module in OpenAM before 14.6.6 allows a \"replace Samba username attack.\"\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-23T20:36:03.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/d3772971-04c7-4d92-849b-8074daf68ce9/export"/>
    <published>2022-06-23T20:36:03+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/1371feba-409f-4b4b-828f-6124385e2cb7/export</id>
    <title>1371feba-409f-4b4b-828f-6124385e2cb7</title>
    <updated>2026-05-28T00:36:14.258727+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "1371feba-409f-4b4b-828f-6124385e2cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34296", "type": "seen", "source": "https://t.me/cibsecurity/45031", "content": "\u203c CVE-2022-34296 \u203c\n\nIn Zalando Skipper before 0.13.218, a query predicate could be bypassed via a prepared request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-23T20:42:48.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/1371feba-409f-4b4b-828f-6124385e2cb7/export"/>
    <published>2022-06-23T20:42:48+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/498291f5-6559-4cb6-8f2f-7e760f72e4cb/export</id>
    <title>498291f5-6559-4cb6-8f2f-7e760f72e4cb</title>
    <updated>2026-05-28T00:36:14.258651+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "498291f5-6559-4cb6-8f2f-7e760f72e4cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34290", "type": "seen", "source": "https://t.me/cibsecurity/45969", "content": "\u203c CVE-2022-34290 \u203c\n\nA vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. (FG-VD-22-055)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-12T14:20:09.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/498291f5-6559-4cb6-8f2f-7e760f72e4cb/export"/>
    <published>2022-07-12T14:20:09+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/9e61fbb3-5d94-401c-815d-4b2769dbf3a4/export</id>
    <title>9e61fbb3-5d94-401c-815d-4b2769dbf3a4</title>
    <updated>2026-05-28T00:36:14.258562+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "9e61fbb3-5d94-401c-815d-4b2769dbf3a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34291", "type": "seen", "source": "https://t.me/cibsecurity/45978", "content": "\u203c CVE-2022-34291 \u203c\n\nA vulnerability has been identified in PADS Standard/Plus Viewer (All versions). The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. (FG-VD-22-057, FG-VD-22-058, FG-VD-22-060)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-12T14:20:24.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/9e61fbb3-5d94-401c-815d-4b2769dbf3a4/export"/>
    <published>2022-07-12T14:20:24+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/ea45d458-4888-4249-b86d-7128d5d31d21/export</id>
    <title>ea45d458-4888-4249-b86d-7128d5d31d21</title>
    <updated>2026-05-28T00:36:14.258466+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "ea45d458-4888-4249-b86d-7128d5d31d21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34293", "type": "seen", "source": "https://t.me/cibsecurity/47753", "content": "\u203c CVE-2022-34293 \u203c\n\nwolfSSL before 5.4.0 allows remote attackers to cause a denial of service via DTLS because a check for return-routability can be skipped.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-08T20:24:26.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/ea45d458-4888-4249-b86d-7128d5d31d21/export"/>
    <published>2022-08-08T20:24:26+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/7a1103b3-e483-4e2b-b9a7-4c3263dd31d9/export</id>
    <title>7a1103b3-e483-4e2b-b9a7-4c3263dd31d9</title>
    <updated>2026-05-28T00:36:14.258366+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "7a1103b3-e483-4e2b-b9a7-4c3263dd31d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34294", "type": "seen", "source": "https://t.me/cibsecurity/48155", "content": "\u203c CVE-2022-34294 \u203c\n\ntotd 1.5.3 uses a fixed UDP source port in upstream queries sent to DNS resolvers. This allows DNS cache poisoning because there is not enough entropy to prevent traffic injection attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-15T16:37:48.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/7a1103b3-e483-4e2b-b9a7-4c3263dd31d9/export"/>
    <published>2022-08-15T16:37:48+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/9f445c5f-d3e0-403c-8ba9-6d45e1dea2c3/export</id>
    <title>9f445c5f-d3e0-403c-8ba9-6d45e1dea2c3</title>
    <updated>2026-05-28T00:36:14.258266+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "9f445c5f-d3e0-403c-8ba9-6d45e1dea2c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34297", "type": "seen", "source": "https://t.me/cibsecurity/54249", "content": "\u203c CVE-2022-34297 \u203c\n\nYii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-10T00:13:40.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/9f445c5f-d3e0-403c-8ba9-6d45e1dea2c3/export"/>
    <published>2022-12-10T00:13:40+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/435d0390-7871-48c2-bd2a-6b8fc4c365e2/export</id>
    <title>435d0390-7871-48c2-bd2a-6b8fc4c365e2</title>
    <updated>2026-05-28T00:36:14.258162+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "435d0390-7871-48c2-bd2a-6b8fc4c365e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34292", "type": "seen", "source": "https://t.me/cibsecurity/63013", "content": "\u203c CVE-2022-34292 \u203c\n\nDocker Desktop for Windows before 4.6.0 allows attackers to overwrite any file through a symlink attack on the hyperv/create dockerBackendV2 API by controlling the DataFolder parameter for DockerDesktop.vhdx, a similar issue to CVE-2022-31647.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T00:26:44.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/435d0390-7871-48c2-bd2a-6b8fc4c365e2/export"/>
    <published>2023-04-28T00:26:44+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/b7f5502a-c49b-4c5b-b485-80d0093f5d51/export</id>
    <title>b7f5502a-c49b-4c5b-b485-80d0093f5d51</title>
    <updated>2026-05-28T00:36:14.258022+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "b7f5502a-c49b-4c5b-b485-80d0093f5d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3429", "type": "seen", "source": "https://t.me/cibsecurity/73075", "content": "\u203c CVE-2022-3429 \u203c\n\nA denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-27T22:17:22.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/b7f5502a-c49b-4c5b-b485-80d0093f5d51/export"/>
    <published>2023-10-27T22:17:22+00:00</published>
  </entry>
  <entry>
    <id>https://db.gcve.eu/sighting/4ebf7cda-b995-4cf9-8e4b-a44d155ed59e/export</id>
    <title>4ebf7cda-b995-4cf9-8e4b-a44d155ed59e</title>
    <updated>2026-05-28T00:36:14.256553+00:00</updated>
    <author>
      <name>cedric</name>
      <uri>http://db.gcve.eu/user/cedric</uri>
    </author>
    <content>{"uuid": "4ebf7cda-b995-4cf9-8e4b-a44d155ed59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-34297", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12988", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-34297\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Yii Yii2 Gii through 2.2.4 allows stored XSS by injecting a payload into any field.\n\ud83d\udccf Published: 2022-12-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T20:25:45.861Z\n\ud83d\udd17 References:\n1. https://gist.github.com/be4r/b5c48d97ef6726d3ee37f995ee5aac81", "creation_timestamp": "2025-04-22T21:04:31.000000Z"}</content>
    <link href="https://db.gcve.eu/sighting/4ebf7cda-b995-4cf9-8e4b-a44d155ed59e/export"/>
    <published>2025-04-22T21:04:31+00:00</published>
  </entry>
</feed>
