https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 26 May 2026 07:48:31 +0000 https://db.gcve.eu/sighting/9ad7bd88-cf04-41ab-8838-7b9b700ab084/export {"uuid": "9ad7bd88-cf04-41ab-8838-7b9b700ab084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25427", "type": "seen", "source": "https://t.me/cibsecurity/39274", "content": "\u203c CVE-2022-25427 \u203c\n\nTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T23:23:06.000000Z"} {"uuid": "9ad7bd88-cf04-41ab-8838-7b9b700ab084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25427", "type": "seen", "source": "https://t.me/cibsecurity/39274", "content": "\u203c CVE-2022-25427 \u203c\n\nTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T23:23:06.000000Z"} https://db.gcve.eu/sighting/9ad7bd88-cf04-41ab-8838-7b9b700ab084/export Fri, 18 Mar 2022 23:23:06 +0000 https://db.gcve.eu/sighting/c23aaaa1-8fbe-4e88-8825-303e91423da8/export {"uuid": "c23aaaa1-8fbe-4e88-8825-303e91423da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25429", "type": "seen", "source": "https://t.me/cibsecurity/39275", "content": "\u203c CVE-2022-25429 \u203c\n\nTenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T23:23:09.000000Z"} {"uuid": "c23aaaa1-8fbe-4e88-8825-303e91423da8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25429", "type": "seen", "source": "https://t.me/cibsecurity/39275", "content": "\u203c CVE-2022-25429 \u203c\n\nTenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T23:23:09.000000Z"} https://db.gcve.eu/sighting/c23aaaa1-8fbe-4e88-8825-303e91423da8/export Fri, 18 Mar 2022 23:23:09 +0000 https://db.gcve.eu/sighting/527e913e-e3a1-4df4-bf9d-04508d7ac47a/export {"uuid": "527e913e-e3a1-4df4-bf9d-04508d7ac47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25428", "type": "seen", "source": "https://t.me/cibsecurity/39280", "content": "\u203c CVE-2022-25428 \u203c\n\nTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T23:23:20.000000Z"} {"uuid": "527e913e-e3a1-4df4-bf9d-04508d7ac47a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25428", "type": "seen", "source": "https://t.me/cibsecurity/39280", "content": "\u203c CVE-2022-25428 \u203c\n\nTenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T23:23:20.000000Z"} https://db.gcve.eu/sighting/527e913e-e3a1-4df4-bf9d-04508d7ac47a/export Fri, 18 Mar 2022 23:23:20 +0000 https://db.gcve.eu/sighting/e5388a1a-7ae0-4ba6-9679-44b649e04b1a/export {"uuid": "e5388a1a-7ae0-4ba6-9679-44b649e04b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25420", "type": "seen", "source": "https://t.me/cibsecurity/39714", "content": "\u203c CVE-2022-25420 \u203c\n\nNTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:58.000000Z"} {"uuid": "e5388a1a-7ae0-4ba6-9679-44b649e04b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-25420", "type": "seen", "source": "https://t.me/cibsecurity/39714", "content": "\u203c CVE-2022-25420 \u203c\n\nNTT Resonant Incorporated goo blog App Web Application 1.0 is vulnerable to CLRF injection. This vulnerability allows attackers to execute arbitrary code via a crafted HTTP request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-29T07:40:58.000000Z"} https://db.gcve.eu/sighting/e5388a1a-7ae0-4ba6-9679-44b649e04b1a/export Tue, 29 Mar 2022 07:40:58 +0000 https://db.gcve.eu/sighting/20e6dc2e-44fc-404f-8030-a780d9bf98df/export {"uuid": "20e6dc2e-44fc-404f-8030-a780d9bf98df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2542", "type": "seen", "source": "https://t.me/cibsecurity/49331", "content": "\u203c CVE-2022-2542 \u203c\n\nThe uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the ~/app/sites/ajax/actions/keyword_save.php file that is called via the doAjax() function. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T22:13:18.000000Z"} {"uuid": "20e6dc2e-44fc-404f-8030-a780d9bf98df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-2542", "type": "seen", "source": "https://t.me/cibsecurity/49331", "content": "\u203c CVE-2022-2542 \u203c\n\nThe uContext for Clickbank plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including 3.9.1. This is due to missing nonce validation in the ~/app/sites/ajax/actions/keyword_save.php file that is called via the doAjax() function. This makes it possible for unauthenticated attackers to modify the plugin's settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T22:13:18.000000Z"} https://db.gcve.eu/sighting/20e6dc2e-44fc-404f-8030-a780d9bf98df/export Tue, 06 Sep 2022 22:13:18 +0000