<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 26 May 2026 22:29:29 +0000</lastBuildDate>
    <item>
      <title>4db96d78-90dc-4df8-8bc1-040e3f01cdf3</title>
      <link>https://db.gcve.eu/sighting/4db96d78-90dc-4df8-8bc1-040e3f01cdf3/export</link>
      <description>{"uuid": "4db96d78-90dc-4df8-8bc1-040e3f01cdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38362", "type": "seen", "source": "https://t.me/cibsecurity/48223", "content": "\u203c CVE-2022-38362 \u203c\n\nApache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T18:39:07.000000Z"}</description>
      <content:encoded>{"uuid": "4db96d78-90dc-4df8-8bc1-040e3f01cdf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38362", "type": "seen", "source": "https://t.me/cibsecurity/48223", "content": "\u203c CVE-2022-38362 \u203c\n\nApache Airflow Docker's Provider prior to 3.0.0 shipped with an example DAG that was vulnerable to (authenticated) remote code exploit of code on the Airflow worker host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-16T18:39:07.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/4db96d78-90dc-4df8-8bc1-040e3f01cdf3/export</guid>
      <pubDate>Tue, 16 Aug 2022 18:39:07 +0000</pubDate>
    </item>
    <item>
      <title>d3893a91-62bc-4914-9b68-443fecbdf263</title>
      <link>https://db.gcve.eu/sighting/d3893a91-62bc-4914-9b68-443fecbdf263/export</link>
      <description>{"uuid": "d3893a91-62bc-4914-9b68-443fecbdf263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38367", "type": "seen", "source": "https://t.me/cibsecurity/49299", "content": "\u203c CVE-2022-38367 \u203c\n\nThe Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-08T00:31:35.000000Z"}</description>
      <content:encoded>{"uuid": "d3893a91-62bc-4914-9b68-443fecbdf263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38367", "type": "seen", "source": "https://t.me/cibsecurity/49299", "content": "\u203c CVE-2022-38367 \u203c\n\nThe Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-08T00:31:35.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d3893a91-62bc-4914-9b68-443fecbdf263/export</guid>
      <pubDate>Thu, 08 Sep 2022 00:31:35 +0000</pubDate>
    </item>
    <item>
      <title>ae0e4f1b-b9f9-465d-a3d7-14d8e628c886</title>
      <link>https://db.gcve.eu/sighting/ae0e4f1b-b9f9-465d-a3d7-14d8e628c886/export</link>
      <description>{"uuid": "ae0e4f1b-b9f9-465d-a3d7-14d8e628c886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38362", "type": "seen", "source": "https://t.me/ctinow/68265", "content": "Internet Bug Bounty: CVE-2022-38362: Apache Airflow Docker Provider &amp;lt;3.0 RCE vulnerability in example dag\n\nhttps://ift.tt/IVXMqKA", "creation_timestamp": "2022-10-10T22:26:50.000000Z"}</description>
      <content:encoded>{"uuid": "ae0e4f1b-b9f9-465d-a3d7-14d8e628c886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-38362", "type": "seen", "source": "https://t.me/ctinow/68265", "content": "Internet Bug Bounty: CVE-2022-38362: Apache Airflow Docker Provider &amp;lt;3.0 RCE vulnerability in example dag\n\nhttps://ift.tt/IVXMqKA", "creation_timestamp": "2022-10-10T22:26:50.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/ae0e4f1b-b9f9-465d-a3d7-14d8e628c886/export</guid>
      <pubDate>Mon, 10 Oct 2022 22:26:50 +0000</pubDate>
    </item>
    <item>
      <title>b075ae60-3cbc-4eef-b12c-a28c600694cf</title>
      <link>https://db.gcve.eu/sighting/b075ae60-3cbc-4eef-b12c-a28c600694cf/export</link>
      <description>{"uuid": "b075ae60-3cbc-4eef-b12c-a28c600694cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3836", "type": "seen", "source": "https://t.me/ctinow/173003", "content": "https://ift.tt/dyDt0pR\nCVE-2022-3836 Exploit", "creation_timestamp": "2024-01-24T19:16:32.000000Z"}</description>
      <content:encoded>{"uuid": "b075ae60-3cbc-4eef-b12c-a28c600694cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3836", "type": "seen", "source": "https://t.me/ctinow/173003", "content": "https://ift.tt/dyDt0pR\nCVE-2022-3836 Exploit", "creation_timestamp": "2024-01-24T19:16:32.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b075ae60-3cbc-4eef-b12c-a28c600694cf/export</guid>
      <pubDate>Wed, 24 Jan 2024 19:16:32 +0000</pubDate>
    </item>
    <item>
      <title>1fc754e5-e6ed-4b59-bc6f-37fbb2deff32</title>
      <link>https://db.gcve.eu/sighting/1fc754e5-e6ed-4b59-bc6f-37fbb2deff32/export</link>
      <description>{"uuid": "1fc754e5-e6ed-4b59-bc6f-37fbb2deff32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3836", "type": "seen", "source": "https://t.me/ctinow/180045", "content": "https://ift.tt/sUjXDeI\nCVE-2022-3836 | Seed Social Plugin up to 2.0.3 on WordPress Setting cross site scripting", "creation_timestamp": "2024-02-06T15:17:16.000000Z"}</description>
      <content:encoded>{"uuid": "1fc754e5-e6ed-4b59-bc6f-37fbb2deff32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3836", "type": "seen", "source": "https://t.me/ctinow/180045", "content": "https://ift.tt/sUjXDeI\nCVE-2022-3836 | Seed Social Plugin up to 2.0.3 on WordPress Setting cross site scripting", "creation_timestamp": "2024-02-06T15:17:16.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/1fc754e5-e6ed-4b59-bc6f-37fbb2deff32/export</guid>
      <pubDate>Tue, 06 Feb 2024 15:17:16 +0000</pubDate>
    </item>
    <item>
      <title>873045bf-fa8c-4b86-bde5-5074310d8128</title>
      <link>https://db.gcve.eu/sighting/873045bf-fa8c-4b86-bde5-5074310d8128/export</link>
      <description>{"uuid": "873045bf-fa8c-4b86-bde5-5074310d8128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3836", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18093", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3836\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2024-01-16T15:50:49.665Z\n\ud83d\udccf Modified: 2025-06-11T17:13:32.562Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/64e144fb-aa9f-4cfe-9c44-a4e1fa2e8dd5/", "creation_timestamp": "2025-06-11T17:34:20.000000Z"}</description>
      <content:encoded>{"uuid": "873045bf-fa8c-4b86-bde5-5074310d8128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-3836", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18093", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3836\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Seed Social WordPress plugin before 2.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2024-01-16T15:50:49.665Z\n\ud83d\udccf Modified: 2025-06-11T17:13:32.562Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/64e144fb-aa9f-4cfe-9c44-a4e1fa2e8dd5/", "creation_timestamp": "2025-06-11T17:34:20.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/873045bf-fa8c-4b86-bde5-5074310d8128/export</guid>
      <pubDate>Wed, 11 Jun 2025 17:34:20 +0000</pubDate>
    </item>
  </channel>
</rss>
