https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Sun, 03 May 2026 11:58:14 +0000 https://db.gcve.eu/sighting/1c0e9a04-6bf8-4c2d-80a9-b606ca460f55/export {"uuid": "1c0e9a04-6bf8-4c2d-80a9-b606ca460f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4695", "type": "seen", "source": "https://t.me/cibsecurity/55424", "content": "\u203c CVE-2022-4695 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:46.000000Z"} {"uuid": "1c0e9a04-6bf8-4c2d-80a9-b606ca460f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4695", "type": "seen", "source": "https://t.me/cibsecurity/55424", "content": "\u203c CVE-2022-4695 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:46.000000Z"} https://db.gcve.eu/sighting/1c0e9a04-6bf8-4c2d-80a9-b606ca460f55/export Tue, 27 Dec 2022 18:13:46 +0000 https://db.gcve.eu/sighting/1daa796f-d408-4f39-b611-48490f611c19/export {"uuid": "1daa796f-d408-4f39-b611-48490f611c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46959", "type": "seen", "source": "https://t.me/cibsecurity/56824", "content": "\u203c CVE-2022-46959 \u203c\n\nAn issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T07:53:04.000000Z"} {"uuid": "1daa796f-d408-4f39-b611-48490f611c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46959", "type": "seen", "source": "https://t.me/cibsecurity/56824", "content": "\u203c CVE-2022-46959 \u203c\n\nAn issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T07:53:04.000000Z"} https://db.gcve.eu/sighting/1daa796f-d408-4f39-b611-48490f611c19/export Mon, 23 Jan 2023 07:53:04 +0000 https://db.gcve.eu/sighting/231fe61f-9499-4b13-b71a-6dbb0632c244/export {"uuid": "231fe61f-9499-4b13-b71a-6dbb0632c244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46957", "type": "seen", "source": "https://t.me/cibsecurity/56987", "content": "\u203c CVE-2022-46957 \u203c\n\nSourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:43:56.000000Z"} {"uuid": "231fe61f-9499-4b13-b71a-6dbb0632c244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46957", "type": "seen", "source": "https://t.me/cibsecurity/56987", "content": "\u203c CVE-2022-46957 \u203c\n\nSourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:43:56.000000Z"} https://db.gcve.eu/sighting/231fe61f-9499-4b13-b71a-6dbb0632c244/export Fri, 27 Jan 2023 00:43:56 +0000 https://db.gcve.eu/sighting/b9324c42-6add-4d65-90ab-68819480a809/export {"uuid": "b9324c42-6add-4d65-90ab-68819480a809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:19:39.520Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/sites/default/files/download/oretnom23/tracking.zip\n2. https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46957", "creation_timestamp": "2025-04-01T15:32:54.000000Z"} {"uuid": "b9324c42-6add-4d65-90ab-68819480a809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:19:39.520Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/sites/default/files/download/oretnom23/tracking.zip\n2. https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46957", "creation_timestamp": "2025-04-01T15:32:54.000000Z"} https://db.gcve.eu/sighting/b9324c42-6add-4d65-90ab-68819480a809/export Tue, 01 Apr 2025 15:32:54 +0000 https://db.gcve.eu/sighting/2e4ede04-3f0f-45ff-9b28-1b03b0ab740d/export {"uuid": "2e4ede04-3f0f-45ff-9b28-1b03b0ab740d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46959", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46959\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2023-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T14:11:53.604Z\n\ud83d\udd17 References:\n1. https://github.com/go-sonic/sonic/issues/56", "creation_timestamp": "2025-04-03T14:35:17.000000Z"} {"uuid": "2e4ede04-3f0f-45ff-9b28-1b03b0ab740d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46959", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46959\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2023-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T14:11:53.604Z\n\ud83d\udd17 References:\n1. https://github.com/go-sonic/sonic/issues/56", "creation_timestamp": "2025-04-03T14:35:17.000000Z"} https://db.gcve.eu/sighting/2e4ede04-3f0f-45ff-9b28-1b03b0ab740d/export Thu, 03 Apr 2025 14:35:17 +0000 https://db.gcve.eu/sighting/bcb7abab-c808-4a45-a944-6d23c3d65cbd/export {"uuid": "bcb7abab-c808-4a45-a944-6d23c3d65cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:31:22.323Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md", "creation_timestamp": "2025-04-07T19:45:38.000000Z"} {"uuid": "bcb7abab-c808-4a45-a944-6d23c3d65cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:31:22.323Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md", "creation_timestamp": "2025-04-07T19:45:38.000000Z"} https://db.gcve.eu/sighting/bcb7abab-c808-4a45-a944-6d23c3d65cbd/export Mon, 07 Apr 2025 19:45:38 +0000 https://db.gcve.eu/sighting/e055c9ad-43ea-4cef-9866-6b01ad9b42b4/export {"uuid": "e055c9ad-43ea-4cef-9866-6b01ad9b42b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46955", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46955\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:29:30.957Z\n\ud83d\udd17 References:\n1. https://www.github.com", "creation_timestamp": "2025-04-07T19:45:41.000000Z"} {"uuid": "e055c9ad-43ea-4cef-9866-6b01ad9b42b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46955", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46955\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:29:30.957Z\n\ud83d\udd17 References:\n1. https://www.github.com", "creation_timestamp": "2025-04-07T19:45:41.000000Z"} https://db.gcve.eu/sighting/e055c9ad-43ea-4cef-9866-6b01ad9b42b4/export Mon, 07 Apr 2025 19:45:41 +0000 https://db.gcve.eu/sighting/f95248fc-d0e1-4c2e-9ee6-9c2b12a29337/export {"uuid": "f95248fc-d0e1-4c2e-9ee6-9c2b12a29337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46956", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46956\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:27:36.707Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md", "creation_timestamp": "2025-04-07T19:45:43.000000Z"} {"uuid": "f95248fc-d0e1-4c2e-9ee6-9c2b12a29337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46956", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46956\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:27:36.707Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md", "creation_timestamp": "2025-04-07T19:45:43.000000Z"} https://db.gcve.eu/sighting/f95248fc-d0e1-4c2e-9ee6-9c2b12a29337/export Mon, 07 Apr 2025 19:45:43 +0000 https://db.gcve.eu/sighting/d32793f1-76db-42c1-a6b6-8c66cc6879ee/export {"uuid": "d32793f1-76db-42c1-a6b6-8c66cc6879ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46950", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46950\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:45:01.083Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md", "creation_timestamp": "2025-04-07T20:46:34.000000Z"} {"uuid": "d32793f1-76db-42c1-a6b6-8c66cc6879ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-46950", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46950\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:45:01.083Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md", "creation_timestamp": "2025-04-07T20:46:34.000000Z"} https://db.gcve.eu/sighting/d32793f1-76db-42c1-a6b6-8c66cc6879ee/export Mon, 07 Apr 2025 20:46:34 +0000 https://db.gcve.eu/sighting/2d023a2c-f482-4305-b630-d70bc7dba7e5/export {"uuid": "2d023a2c-f482-4305-b630-d70bc7dba7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4695", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4695\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:38:51.348Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e\n2. https://huntr.dev/bounties/2559d548-b847-40fb-94d6-18c1ad58b789", "creation_timestamp": "2025-04-09T20:48:25.000000Z"} {"uuid": "2d023a2c-f482-4305-b630-d70bc7dba7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4695", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4695\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:38:51.348Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e\n2. https://huntr.dev/bounties/2559d548-b847-40fb-94d6-18c1ad58b789", "creation_timestamp": "2025-04-09T20:48:25.000000Z"} https://db.gcve.eu/sighting/2d023a2c-f482-4305-b630-d70bc7dba7e5/export Wed, 09 Apr 2025 20:48:25 +0000