https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 21 Jul 2026 17:14:55 +0000 https://db.gcve.eu/sighting/3b6b94dc-1050-42ca-a18f-e4d36bdc4edd/export {"uuid": "3b6b94dc-1050-42ca-a18f-e4d36bdc4edd", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9c35ef38-7a67-4ff0-a3c5-5e29dcbbabb9", "content": "", "creation_timestamp": "2026-07-01T05:54:25.396037Z"} {"uuid": "3b6b94dc-1050-42ca-a18f-e4d36bdc4edd", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/9c35ef38-7a67-4ff0-a3c5-5e29dcbbabb9", "content": "", "creation_timestamp": "2026-07-01T05:54:25.396037Z"} https://db.gcve.eu/sighting/3b6b94dc-1050-42ca-a18f-e4d36bdc4edd/export Wed, 01 Jul 2026 05:54:25 +0000 https://db.gcve.eu/sighting/645760fb-b821-4eb2-ab2a-e27341f55d81/export {"uuid": "645760fb-b821-4eb2-ab2a-e27341f55d81", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3443862c-673b-48de-b75f-e76326586e24", "content": "", "creation_timestamp": "2026-06-19T12:42:32.710080Z"} {"uuid": "645760fb-b821-4eb2-ab2a-e27341f55d81", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/3443862c-673b-48de-b75f-e76326586e24", "content": "", "creation_timestamp": "2026-06-19T12:42:32.710080Z"} https://db.gcve.eu/sighting/645760fb-b821-4eb2-ab2a-e27341f55d81/export Fri, 19 Jun 2026 12:42:32 +0000 https://db.gcve.eu/sighting/a4bc2c1d-1f33-4b3a-8063-4f86dab52f9e/export {"uuid": "a4bc2c1d-1f33-4b3a-8063-4f86dab52f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"} {"uuid": "a4bc2c1d-1f33-4b3a-8063-4f86dab52f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40843", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"} https://db.gcve.eu/sighting/a4bc2c1d-1f33-4b3a-8063-4f86dab52f9e/export Wed, 25 Mar 2026 00:00:00 +0000 https://db.gcve.eu/sighting/b18563cf-7134-493d-9961-1b668dad6056/export {"uuid": "b18563cf-7134-493d-9961-1b668dad6056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16401", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body.\n\ud83d\udccf Published: 2022-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T20:08:42.532Z\n\ud83d\udd17 References:\n1. https://boschko.ca/tenda_ac1200_router/", "creation_timestamp": "2025-05-14T20:32:30.000000Z"} {"uuid": "b18563cf-7134-493d-9961-1b668dad6056", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40844", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16401", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40844\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Tenda (Shenzhen Tenda Technology Co., Ltd) AC1200 Router model W15Ev2 V15.11.0.10(1576), a Stored Cross Site Scripting (XSS) issue exists allowing an attacker to execute JavaScript code via the applications website filtering tab, specifically the URL body.\n\ud83d\udccf Published: 2022-11-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-14T20:08:42.532Z\n\ud83d\udd17 References:\n1. https://boschko.ca/tenda_ac1200_router/", "creation_timestamp": "2025-05-14T20:32:30.000000Z"} https://db.gcve.eu/sighting/b18563cf-7134-493d-9961-1b668dad6056/export Wed, 14 May 2025 20:32:30 +0000 https://db.gcve.eu/sighting/f8e317e9-c1d5-48a0-9fcd-496768217eb8/export {"uuid": "f8e317e9-c1d5-48a0-9fcd-496768217eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40840", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40840\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.\n\ud83d\udccf Published: 2022-11-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T20:56:47.819Z\n\ud83d\udd17 References:\n1. http://ndkadvancedcustomizationfields.com\n2. https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40840/poc.txt", "creation_timestamp": "2025-05-02T21:16:31.000000Z"} {"uuid": "f8e317e9-c1d5-48a0-9fcd-496768217eb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40840", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14609", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40840\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.\n\ud83d\udccf Published: 2022-11-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-02T20:56:47.819Z\n\ud83d\udd17 References:\n1. http://ndkadvancedcustomizationfields.com\n2. https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40840/poc.txt", "creation_timestamp": "2025-05-02T21:16:31.000000Z"} https://db.gcve.eu/sighting/f8e317e9-c1d5-48a0-9fcd-496768217eb8/export Fri, 02 May 2025 21:16:31 +0000 https://db.gcve.eu/sighting/b624131b-a8b6-4636-9fb2-c717428b95f4/export {"uuid": "b624131b-a8b6-4636-9fb2-c717428b95f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40849", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40849\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).\n\ud83d\udccf Published: 2022-12-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T20:23:24.602Z\n\ud83d\udd17 References:\n1. https://github.com/thinkcmf/thinkcmf/issues/737", "creation_timestamp": "2025-04-24T21:07:26.000000Z"} {"uuid": "b624131b-a8b6-4636-9fb2-c717428b95f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40849", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-40849\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).\n\ud83d\udccf Published: 2022-12-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T20:23:24.602Z\n\ud83d\udd17 References:\n1. https://github.com/thinkcmf/thinkcmf/issues/737", "creation_timestamp": "2025-04-24T21:07:26.000000Z"} https://db.gcve.eu/sighting/b624131b-a8b6-4636-9fb2-c717428b95f4/export Thu, 24 Apr 2025 21:07:26 +0000 https://db.gcve.eu/sighting/20a31e1e-4b44-448f-91e6-a38c8832e425/export {"uuid": "20a31e1e-4b44-448f-91e6-a38c8832e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40841", "type": "seen", "source": "https://t.me/cibsecurity/55059", "content": "\u203c CVE-2022-40841 \u203c\n\nA cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the \"htmlNodes\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T20:12:49.000000Z"} {"uuid": "20a31e1e-4b44-448f-91e6-a38c8832e425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40841", "type": "seen", "source": "https://t.me/cibsecurity/55059", "content": "\u203c CVE-2022-40841 \u203c\n\nA cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the \"htmlNodes\" parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T20:12:49.000000Z"} https://db.gcve.eu/sighting/20a31e1e-4b44-448f-91e6-a38c8832e425/export Wed, 21 Dec 2022 20:12:49 +0000 https://db.gcve.eu/sighting/bf69cdb8-c5f3-4360-9811-6b3f19925906/export {"uuid": "bf69cdb8-c5f3-4360-9811-6b3f19925906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40849", "type": "seen", "source": "https://t.me/cibsecurity/53751", "content": "\u203c CVE-2022-40849 \u203c\n\nThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-01T07:30:41.000000Z"} {"uuid": "bf69cdb8-c5f3-4360-9811-6b3f19925906", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40849", "type": "seen", "source": "https://t.me/cibsecurity/53751", "content": "\u203c CVE-2022-40849 \u203c\n\nThinkCMF version 6.0.7 is affected by Stored Cross-Site Scripting (XSS). An attacker who successfully exploited this vulnerability could inject a Persistent XSS payload in the Slideshow Management section that execute arbitrary JavaScript code on the client side, e.g., to steal the administrator's PHP session token (PHPSESSID).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-01T07:30:41.000000Z"} https://db.gcve.eu/sighting/bf69cdb8-c5f3-4360-9811-6b3f19925906/export Thu, 01 Dec 2022 07:30:41 +0000 https://db.gcve.eu/sighting/c5f7e622-2f20-4efc-9bd7-5dc120061fc3/export {"uuid": "c5f7e622-2f20-4efc-9bd7-5dc120061fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40842", "type": "seen", "source": "https://t.me/cibsecurity/53308", "content": "\u203c CVE-2022-40842 \u203c\n\nndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T07:12:55.000000Z"} {"uuid": "c5f7e622-2f20-4efc-9bd7-5dc120061fc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40842", "type": "seen", "source": "https://t.me/cibsecurity/53308", "content": "\u203c CVE-2022-40842 \u203c\n\nndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-22T07:12:55.000000Z"} https://db.gcve.eu/sighting/c5f7e622-2f20-4efc-9bd7-5dc120061fc3/export Tue, 22 Nov 2022 07:12:55 +0000 https://db.gcve.eu/sighting/0c293be1-612b-4856-b0dd-ae5a64654c8b/export {"uuid": "0c293be1-612b-4856-b0dd-ae5a64654c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4084", "type": "seen", "source": "https://t.me/cibsecurity/53215", "content": "\u203c CVE-2022-4084 \u203c\n\nA vulnerability has been found in Activity Log Plugin and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214051.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:18.000000Z"} {"uuid": "0c293be1-612b-4856-b0dd-ae5a64654c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4084", "type": "seen", "source": "https://t.me/cibsecurity/53215", "content": "\u203c CVE-2022-4084 \u203c\n\nA vulnerability has been found in Activity Log Plugin and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214051.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:18.000000Z"} https://db.gcve.eu/sighting/0c293be1-612b-4856-b0dd-ae5a64654c8b/export Sun, 20 Nov 2022 16:36:18 +0000