<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 26 May 2026 05:31:39 +0000</lastBuildDate>
    <item>
      <title>b902f559-a0e4-4302-8049-d6c0395ea9a5</title>
      <link>https://db.gcve.eu/sighting/b902f559-a0e4-4302-8049-d6c0395ea9a5/export</link>
      <description>{"uuid": "b902f559-a0e4-4302-8049-d6c0395ea9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48177", "type": "seen", "source": "https://t.me/cibsecurity/62210", "content": "\u203c CVE-2022-48177 \u203c\n\nX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:28.000000Z"}</description>
      <content:encoded>{"uuid": "b902f559-a0e4-4302-8049-d6c0395ea9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48177", "type": "seen", "source": "https://t.me/cibsecurity/62210", "content": "\u203c CVE-2022-48177 \u203c\n\nX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:28.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b902f559-a0e4-4302-8049-d6c0395ea9a5/export</guid>
      <pubDate>Sat, 15 Apr 2023 07:26:28 +0000</pubDate>
    </item>
    <item>
      <title>b41b5309-6b75-4504-9790-a5c82635292c</title>
      <link>https://db.gcve.eu/sighting/b41b5309-6b75-4504-9790-a5c82635292c/export</link>
      <description>{"uuid": "b41b5309-6b75-4504-9790-a5c82635292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48178", "type": "seen", "source": "https://t.me/cibsecurity/62217", "content": "\u203c CVE-2022-48178 \u203c\n\nX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:38.000000Z"}</description>
      <content:encoded>{"uuid": "b41b5309-6b75-4504-9790-a5c82635292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48178", "type": "seen", "source": "https://t.me/cibsecurity/62217", "content": "\u203c CVE-2022-48178 \u203c\n\nX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:38.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/b41b5309-6b75-4504-9790-a5c82635292c/export</guid>
      <pubDate>Sat, 15 Apr 2023 07:26:38 +0000</pubDate>
    </item>
    <item>
      <title>5389dbe4-51d5-404a-aa8c-6f0e3565280e</title>
      <link>https://db.gcve.eu/sighting/5389dbe4-51d5-404a-aa8c-6f0e3565280e/export</link>
      <description>{"uuid": "5389dbe4-51d5-404a-aa8c-6f0e3565280e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://t.me/ctinow/180718", "content": "https://ift.tt/Dvtk189\nCVE-2022-48174 | Oracle Communications Cloud Native Core Network Function Cloud Native Environment OSO out-of-bounds write", "creation_timestamp": "2024-02-07T14:46:51.000000Z"}</description>
      <content:encoded>{"uuid": "5389dbe4-51d5-404a-aa8c-6f0e3565280e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://t.me/ctinow/180718", "content": "https://ift.tt/Dvtk189\nCVE-2022-48174 | Oracle Communications Cloud Native Core Network Function Cloud Native Environment OSO out-of-bounds write", "creation_timestamp": "2024-02-07T14:46:51.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/5389dbe4-51d5-404a-aa8c-6f0e3565280e/export</guid>
      <pubDate>Wed, 07 Feb 2024 14:46:51 +0000</pubDate>
    </item>
    <item>
      <title>a5b6aaff-3439-4124-9147-65ffb946a22a</title>
      <link>https://db.gcve.eu/sighting/a5b6aaff-3439-4124-9147-65ffb946a22a/export</link>
      <description>{"uuid": "a5b6aaff-3439-4124-9147-65ffb946a22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "Telegram/I5NXyMjytHIYu-yIRizuBywJYFS7aYMm5NxfIk522dlINd0p", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}</description>
      <content:encoded>{"uuid": "a5b6aaff-3439-4124-9147-65ffb946a22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "Telegram/I5NXyMjytHIYu-yIRizuBywJYFS7aYMm5NxfIk522dlINd0p", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/a5b6aaff-3439-4124-9147-65ffb946a22a/export</guid>
      <pubDate>Thu, 06 Feb 2025 02:44:19 +0000</pubDate>
    </item>
    <item>
      <title>d462f723-8cb1-4e54-b859-38f9f912223f</title>
      <link>https://db.gcve.eu/sighting/d462f723-8cb1-4e54-b859-38f9f912223f/export</link>
      <description>{"uuid": "d462f723-8cb1-4e54-b859-38f9f912223f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48175", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9350", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48175\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request.\n\ud83d\udccf Published: 2023-01-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T14:13:24.627Z\n\ud83d\udd17 References:\n1. https://github.com/y1s3m0/vulnfind/blob/main/rukovoditel/rce_ajax_request.md", "creation_timestamp": "2025-03-28T14:27:33.000000Z"}</description>
      <content:encoded>{"uuid": "d462f723-8cb1-4e54-b859-38f9f912223f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48175", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9350", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48175\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request.\n\ud83d\udccf Published: 2023-01-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T14:13:24.627Z\n\ud83d\udd17 References:\n1. https://github.com/y1s3m0/vulnfind/blob/main/rukovoditel/rce_ajax_request.md", "creation_timestamp": "2025-03-28T14:27:33.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/d462f723-8cb1-4e54-b859-38f9f912223f/export</guid>
      <pubDate>Fri, 28 Mar 2025 14:27:33 +0000</pubDate>
    </item>
    <item>
      <title>89e235c3-6e46-4fb2-b1cf-9345a9a0158e</title>
      <link>https://db.gcve.eu/sighting/89e235c3-6e46-4fb2-b1cf-9345a9a0158e/export</link>
      <description>{"uuid": "89e235c3-6e46-4fb2-b1cf-9345a9a0158e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48176\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.\n\ud83d\udccf Published: 2023-01-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T14:12:40.732Z\n\ud83d\udd17 References:\n1. https://www.netgear.com/about/security/\n2. https://hdwsec.fr/blog/20221109-netgear/\n3. https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146", "creation_timestamp": "2025-03-28T14:27:34.000000Z"}</description>
      <content:encoded>{"uuid": "89e235c3-6e46-4fb2-b1cf-9345a9a0158e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48176\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.\n\ud83d\udccf Published: 2023-01-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T14:12:40.732Z\n\ud83d\udd17 References:\n1. https://www.netgear.com/about/security/\n2. https://hdwsec.fr/blog/20221109-netgear/\n3. https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146", "creation_timestamp": "2025-03-28T14:27:34.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/89e235c3-6e46-4fb2-b1cf-9345a9a0158e/export</guid>
      <pubDate>Fri, 28 Mar 2025 14:27:34 +0000</pubDate>
    </item>
    <item>
      <title>444ea9f7-80a1-4fcf-a62a-ae1e01e78f73</title>
      <link>https://db.gcve.eu/sighting/444ea9f7-80a1-4fcf-a62a-ae1e01e78f73/export</link>
      <description>{"uuid": "444ea9f7-80a1-4fcf-a62a-ae1e01e78f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4817", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4817\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc704708d598c60ac1881db7cf8e9c3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216988.\n\ud83d\udccf Published: 2022-12-28T18:22:43.535Z\n\ud83d\udccf Modified: 2025-04-10T16:39:50.756Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.216988\n2. https://vuldb.com/?ctiid.216988\n3. https://github.com/centic9/jgit-cookbook/pull/86\n4. https://github.com/centic9/jgit-cookbook/commit/b8cb29b43dc704708d598c60ac1881db7cf8e9c3", "creation_timestamp": "2025-04-10T16:49:21.000000Z"}</description>
      <content:encoded>{"uuid": "444ea9f7-80a1-4fcf-a62a-ae1e01e78f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4817", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4817\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc704708d598c60ac1881db7cf8e9c3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216988.\n\ud83d\udccf Published: 2022-12-28T18:22:43.535Z\n\ud83d\udccf Modified: 2025-04-10T16:39:50.756Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.216988\n2. https://vuldb.com/?ctiid.216988\n3. https://github.com/centic9/jgit-cookbook/pull/86\n4. https://github.com/centic9/jgit-cookbook/commit/b8cb29b43dc704708d598c60ac1881db7cf8e9c3", "creation_timestamp": "2025-04-10T16:49:21.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/444ea9f7-80a1-4fcf-a62a-ae1e01e78f73/export</guid>
      <pubDate>Thu, 10 Apr 2025 16:49:21 +0000</pubDate>
    </item>
    <item>
      <title>5b89cd11-55a5-4756-9025-9480358b1daf</title>
      <link>https://db.gcve.eu/sighting/5b89cd11-55a5-4756-9025-9480358b1daf/export</link>
      <description>{"uuid": "5b89cd11-55a5-4756-9025-9480358b1daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://gist.github.com/Ant0wan/47ec3e4d21f0d679eabde1000c04eb92", "content": "", "creation_timestamp": "2025-04-21T18:16:35.000000Z"}</description>
      <content:encoded>{"uuid": "5b89cd11-55a5-4756-9025-9480358b1daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://gist.github.com/Ant0wan/47ec3e4d21f0d679eabde1000c04eb92", "content": "", "creation_timestamp": "2025-04-21T18:16:35.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/5b89cd11-55a5-4756-9025-9480358b1daf/export</guid>
      <pubDate>Mon, 21 Apr 2025 18:16:35 +0000</pubDate>
    </item>
    <item>
      <title>4f5a1c00-9dc8-4fbb-bb86-4367de22b679</title>
      <link>https://db.gcve.eu/sighting/4f5a1c00-9dc8-4fbb-bb86-4367de22b679/export</link>
      <description>{"uuid": "4f5a1c00-9dc8-4fbb-bb86-4367de22b679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3maejvmc2ay2k", "content": "", "creation_timestamp": "2025-12-19T20:31:52.781222Z"}</description>
      <content:encoded>{"uuid": "4f5a1c00-9dc8-4fbb-bb86-4367de22b679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3maejvmc2ay2k", "content": "", "creation_timestamp": "2025-12-19T20:31:52.781222Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/4f5a1c00-9dc8-4fbb-bb86-4367de22b679/export</guid>
      <pubDate>Fri, 19 Dec 2025 20:31:52 +0000</pubDate>
    </item>
    <item>
      <title>6b87ad07-bb7f-49c2-b8bb-aaf4fea90f50</title>
      <link>https://db.gcve.eu/sighting/6b87ad07-bb7f-49c2-b8bb-aaf4fea90f50/export</link>
      <description>{"uuid": "6b87ad07-bb7f-49c2-b8bb-aaf4fea90f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}</description>
      <content:encoded>{"uuid": "6b87ad07-bb7f-49c2-b8bb-aaf4fea90f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/sighting/6b87ad07-bb7f-49c2-b8bb-aaf4fea90f50/export</guid>
      <pubDate>Thu, 12 Feb 2026 11:00:00 +0000</pubDate>
    </item>
  </channel>
</rss>
