<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Sat, 30 May 2026 19:28:20 +0000</lastBuildDate>
    <item>
      <title>d6aba443-fc34-4950-bdf5-6948196e53e8</title>
      <link>https://db.gcve.eu/sighting/d6aba443-fc34-4950-bdf5-6948196e53e8/export</link>
      <description>{"uuid": "d6aba443-fc34-4950-bdf5-6948196e53e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26573", "type": "seen", "source": "https://t.me/cibsecurity/39566", "content": "\u203c CVE-2022-26573 \u203c\n\nMaccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T21:31:12.000000Z"}</description>
      <content:encoded>{"uuid": "d6aba443-fc34-4950-bdf5-6948196e53e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26573", "type": "seen", "source": "https://t.me/cibsecurity/39566", "content": "\u203c CVE-2022-26573 \u203c\n\nMaccms v10 was discovered to contain multiple reflected cross-site scripting (XSS) vulnerabilities in /admin.php/admin/art/data.html via the select and input parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-25T21:31:12.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d6aba443-fc34-4950-bdf5-6948196e53e8/export</guid>
      <pubDate>Fri, 25 Mar 2022 21:31:12 +0000</pubDate>
    </item>
    <item>
      <title>5fcb1369-3e96-42a2-9f61-6676e803eea5</title>
      <link>https://db.gcve.eu/sighting/5fcb1369-3e96-42a2-9f61-6676e803eea5/export</link>
      <description>{"uuid": "5fcb1369-3e96-42a2-9f61-6676e803eea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26572", "type": "seen", "source": "https://t.me/cibsecurity/40112", "content": "\u203c CVE-2022-26572 \u203c\n\nXerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T22:27:55.000000Z"}</description>
      <content:encoded>{"uuid": "5fcb1369-3e96-42a2-9f61-6676e803eea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26572", "type": "seen", "source": "https://t.me/cibsecurity/40112", "content": "\u203c CVE-2022-26572 \u203c\n\nXerox ColorQube 8580 was discovered to contain an access control issue which allows attackers to print, view the status, and obtain sensitive information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-04T22:27:55.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/5fcb1369-3e96-42a2-9f61-6676e803eea5/export</guid>
      <pubDate>Mon, 04 Apr 2022 22:27:55 +0000</pubDate>
    </item>
    <item>
      <title>bac5d17d-50f1-4c46-b260-1c7159f95dab</title>
      <link>https://db.gcve.eu/sighting/bac5d17d-50f1-4c46-b260-1c7159f95dab/export</link>
      <description>{"uuid": "bac5d17d-50f1-4c46-b260-1c7159f95dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2657", "type": "seen", "source": "https://t.me/cibsecurity/49287", "content": "\u203c CVE-2022-2657 \u203c\n\nThe Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors (reporter by the submitter) or update arbitrary order status (identified by WPScan when verifying the issue) for example. Other unauthenticated attacks are also possible, either directly or via CSRF\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-05T16:12:13.000000Z"}</description>
      <content:encoded>{"uuid": "bac5d17d-50f1-4c46-b260-1c7159f95dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2657", "type": "seen", "source": "https://t.me/cibsecurity/49287", "content": "\u203c CVE-2022-2657 \u203c\n\nThe Multivendor Marketplace Solution for WooCommerce WordPress plugin before 3.8.12 is lacking authorisation and CSRF in multiple AJAX actions, which could allow any authenticated users, such as subscriber to call them and suspend vendors (reporter by the submitter) or update arbitrary order status (identified by WPScan when verifying the issue) for example. Other unauthenticated attacks are also possible, either directly or via CSRF\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-05T16:12:13.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/bac5d17d-50f1-4c46-b260-1c7159f95dab/export</guid>
      <pubDate>Mon, 05 Sep 2022 16:12:13 +0000</pubDate>
    </item>
    <item>
      <title>460bd020-a7bd-4c20-a267-bb34a78e8f93</title>
      <link>https://db.gcve.eu/sighting/460bd020-a7bd-4c20-a267-bb34a78e8f93/export</link>
      <description>{"uuid": "460bd020-a7bd-4c20-a267-bb34a78e8f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26579", "type": "seen", "source": "https://t.me/cibsecurity/54785", "content": "\u203c CVE-2022-26579 \u203c\n\nPAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 allows root privileged attackers to install an unsigned application by copying the APK to /data/app, setting the appropriate permissions and rebooting the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-17T00:24:36.000000Z"}</description>
      <content:encoded>{"uuid": "460bd020-a7bd-4c20-a267-bb34a78e8f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-26579", "type": "seen", "source": "https://t.me/cibsecurity/54785", "content": "\u203c CVE-2022-26579 \u203c\n\nPAX Technology A930 PayDroid 7.1.1 Virgo V04.4.02 20211201 allows root privileged attackers to install an unsigned application by copying the APK to /data/app, setting the appropriate permissions and rebooting the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-17T00:24:36.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/460bd020-a7bd-4c20-a267-bb34a78e8f93/export</guid>
      <pubDate>Sat, 17 Dec 2022 00:24:36 +0000</pubDate>
    </item>
  </channel>
</rss>
