https://db.gcve.eu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 26 May 2026 12:31:25 +0000 https://db.gcve.eu/sighting/96c558ed-788d-4aec-a593-5b816e69064f/export {"uuid": "96c558ed-788d-4aec-a593-5b816e69064f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48124", "type": "seen", "source": "https://t.me/cibsecurity/56757", "content": "\u203c CVE-2022-48124 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:35.000000Z"} {"uuid": "96c558ed-788d-4aec-a593-5b816e69064f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48124", "type": "seen", "source": "https://t.me/cibsecurity/56757", "content": "\u203c CVE-2022-48124 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:35.000000Z"} https://db.gcve.eu/sighting/96c558ed-788d-4aec-a593-5b816e69064f/export Fri, 20 Jan 2023 18:27:35 +0000 https://db.gcve.eu/sighting/ba53d3b5-49df-4e13-b876-a703ae377ed3/export {"uuid": "ba53d3b5-49df-4e13-b876-a703ae377ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48123", "type": "seen", "source": "https://t.me/cibsecurity/56758", "content": "\u203c CVE-2022-48123 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:36.000000Z"} {"uuid": "ba53d3b5-49df-4e13-b876-a703ae377ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48123", "type": "seen", "source": "https://t.me/cibsecurity/56758", "content": "\u203c CVE-2022-48123 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:36.000000Z"} https://db.gcve.eu/sighting/ba53d3b5-49df-4e13-b876-a703ae377ed3/export Fri, 20 Jan 2023 18:27:36 +0000 https://db.gcve.eu/sighting/08074968-4e47-4184-babc-a6fa8718deee/export {"uuid": "08074968-4e47-4184-babc-a6fa8718deee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48122", "type": "seen", "source": "https://t.me/cibsecurity/56760", "content": "\u203c CVE-2022-48122 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:38.000000Z"} {"uuid": "08074968-4e47-4184-babc-a6fa8718deee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48122", "type": "seen", "source": "https://t.me/cibsecurity/56760", "content": "\u203c CVE-2022-48122 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:38.000000Z"} https://db.gcve.eu/sighting/08074968-4e47-4184-babc-a6fa8718deee/export Fri, 20 Jan 2023 18:27:38 +0000 https://db.gcve.eu/sighting/ad81ff64-caed-4ab8-8d39-9407e8471869/export {"uuid": "ad81ff64-caed-4ab8-8d39-9407e8471869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48126", "type": "seen", "source": "https://t.me/cibsecurity/56761", "content": "\u203c CVE-2022-48126 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:39.000000Z"} {"uuid": "ad81ff64-caed-4ab8-8d39-9407e8471869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48126", "type": "seen", "source": "https://t.me/cibsecurity/56761", "content": "\u203c CVE-2022-48126 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:39.000000Z"} https://db.gcve.eu/sighting/ad81ff64-caed-4ab8-8d39-9407e8471869/export Fri, 20 Jan 2023 18:27:39 +0000 https://db.gcve.eu/sighting/a33fbca9-1d7d-4216-b2ec-48e06b171b44/export {"uuid": "a33fbca9-1d7d-4216-b2ec-48e06b171b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48123", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:26:58.233Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/15", "creation_timestamp": "2025-04-03T15:34:53.000000Z"} {"uuid": "a33fbca9-1d7d-4216-b2ec-48e06b171b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48123", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:26:58.233Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/15", "creation_timestamp": "2025-04-03T15:34:53.000000Z"} https://db.gcve.eu/sighting/a33fbca9-1d7d-4216-b2ec-48e06b171b44/export Thu, 03 Apr 2025 15:34:53 +0000 https://db.gcve.eu/sighting/21be5473-5220-4fce-a2ac-329cee814ba5/export {"uuid": "21be5473-5220-4fce-a2ac-329cee814ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48124", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48124\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:21:29.815Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/14", "creation_timestamp": "2025-04-03T15:35:04.000000Z"} {"uuid": "21be5473-5220-4fce-a2ac-329cee814ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48124", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48124\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:21:29.815Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/14", "creation_timestamp": "2025-04-03T15:35:04.000000Z"} https://db.gcve.eu/sighting/21be5473-5220-4fce-a2ac-329cee814ba5/export Thu, 03 Apr 2025 15:35:04 +0000 https://db.gcve.eu/sighting/ca8ed67a-62ab-4fb6-9ead-a9b95948a570/export {"uuid": "ca8ed67a-62ab-4fb6-9ead-a9b95948a570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48125", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:20:18.754Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/13", "creation_timestamp": "2025-04-03T15:35:11.000000Z"} {"uuid": "ca8ed67a-62ab-4fb6-9ead-a9b95948a570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48125", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:20:18.754Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/13", "creation_timestamp": "2025-04-03T15:35:11.000000Z"} https://db.gcve.eu/sighting/ca8ed67a-62ab-4fb6-9ead-a9b95948a570/export Thu, 03 Apr 2025 15:35:11 +0000 https://db.gcve.eu/sighting/23b3220c-fbb7-47f0-a064-00d2fcb6053c/export {"uuid": "23b3220c-fbb7-47f0-a064-00d2fcb6053c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:44:41.014Z\n\ud83d\udd17 References:\n1. https://github.com/kishan0725/Hospital-Management-System/issues/32", "creation_timestamp": "2025-04-03T16:35:12.000000Z"} {"uuid": "23b3220c-fbb7-47f0-a064-00d2fcb6053c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:44:41.014Z\n\ud83d\udd17 References:\n1. https://github.com/kishan0725/Hospital-Management-System/issues/32", "creation_timestamp": "2025-04-03T16:35:12.000000Z"} https://db.gcve.eu/sighting/23b3220c-fbb7-47f0-a064-00d2fcb6053c/export Thu, 03 Apr 2025 16:35:12 +0000 https://db.gcve.eu/sighting/3a40b09e-afa2-43a4-81d8-67b87cc45f41/export {"uuid": "3a40b09e-afa2-43a4-81d8-67b87cc45f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48121", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48121\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:41:00.759Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/16", "creation_timestamp": "2025-04-03T16:35:15.000000Z"} {"uuid": "3a40b09e-afa2-43a4-81d8-67b87cc45f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-48121", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48121\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:41:00.759Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/16", "creation_timestamp": "2025-04-03T16:35:15.000000Z"} https://db.gcve.eu/sighting/3a40b09e-afa2-43a4-81d8-67b87cc45f41/export Thu, 03 Apr 2025 16:35:15 +0000 https://db.gcve.eu/sighting/3628e45f-83b7-4722-8330-a681180822de/export {"uuid": "3628e45f-83b7-4722-8330-a681180822de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4812", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4812\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:42:45.508Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/33924891-5c36-4b46-b417-98eaab688c4c", "creation_timestamp": "2025-04-10T16:49:19.000000Z"} {"uuid": "3628e45f-83b7-4722-8330-a681180822de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4812", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4812\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:42:45.508Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/33924891-5c36-4b46-b417-98eaab688c4c", "creation_timestamp": "2025-04-10T16:49:19.000000Z"} https://db.gcve.eu/sighting/3628e45f-83b7-4722-8330-a681180822de/export Thu, 10 Apr 2025 16:49:19 +0000