{"vulnerability": "CVE-2022-3227", "sightings": [{"uuid": "bcbacfce-7209-41b6-986f-bf0df2422582", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:07.000000Z"}, {"uuid": "73f62045-d65b-42cb-b027-fc2440f8ffb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9715", "content": "\u25a0\u25a0\u25a0\u25a1\u25a1 CVE-2022-32276 Grafana PoC and detailed information.\n\nhttps://github.com/BrotherOfJhonny/grafana/blob/main/README.md", "creation_timestamp": "2022-06-09T07:54:37.000000Z"}, {"uuid": "fe0ab76f-a6e3-4d7e-bc6e-b59be0e183d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3227", "type": "seen", "source": "https://t.me/Dooztoria/22", "content": "\ud83c\udf65 Overview of Vulnerable Endpoints in WordPress Applications\n\n    cves               path\n \nCVE-2022-2864  includes/settings.php                               \nCVE-2022-3227  includes/class-searchwp-live-ajax-search.php       \nCVE-2022-2941  admin/class-wp-useronline-admin.php               \nspecifiNoted   includes/class-wpvivid-backup.php                      \nCVE-2022-2436  includes/class-download-manager.php               \nCVE-2022-25148 includes/class-wp-statistics-hits.php               \nCVE-2022-1476  lib/model/class-ai1wm-backups.php                   \nCVE-2022-0236  includes/classes/class-wpie-general.php           \nCVE-2022-1119  includes/ee-downloader.php                       \nCVE-2022-0888  includes/class-ninja-forms-file-uploads.php", "creation_timestamp": "2025-12-19T20:18:03.000000Z"}, {"uuid": "e9060bbc-744d-410e-9633-be9b00dc8d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "published-proof-of-concept", "source": "https://t.me/bhhub/793", "content": "#BugBountyTips of the Day\nYay, I was awarded 200$ bounty on @Bugcrowd  This one is my first bounty ever. It will motivate me a lot for my future journey.And specially thanks to @EmptyMahbob for always your support and @GodfatherOrwa for always sharing some unique tips.  #bugbounty #TogetherWeHitHarder  https://t.co/BNIXCsVpIt\n---\nPro tip for #bugbounty:  Go over all URLs to test at least three times, preferably on separate days.  On the first pass, I find the most stuff.  On the 2nd pass, I find most issues I missed.  On the 3rd pass, I barely find anything at all but still have usually missed a few. \ud83d\ude1c\ud83e\udd73\n---\nCVE-2022-32275 \ud83d\ude36  #BugBounty  https://t.co/h9MO9vKLro\n---\nFor Beginners  https://t.co/kUzws8Mxz1  #bugbountytips #infosec #cybersecurity\n---\nToday somehow popped a shell on the main application a major cryptocurrency exchange. The impact is as devastating as the Web3 bugs you could have seen recently on other programs. The report was sent to their security team. Web2 bugs are alive. #bugbounty  https://t.co/DrN23ItZxT", "creation_timestamp": "2022-06-08T13:37:04.000000Z"}, {"uuid": "e4298aae-d170-4244-b34f-53c9c55382f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "Telegram/R-HGiQTul2lcQLKBnhR-2gbWBVvSbjLi1y7N_WorJ6roN7X3", "content": "", "creation_timestamp": "2024-12-29T00:29:36.000000Z"}, {"uuid": "6f8428fb-6f45-4a1b-995f-c7b135a6e4d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "seen", "source": "https://t.me/proxy_bar/867", "content": "CVE-2022-32276\nGrafana\n\u041b\u043e\u043b, \u0441\u043c\u0435\u0448\u043d\u0430\u044f \u0434\u044b\u0440\u043a\u0430 ))\n*\n#grafana", "creation_timestamp": "2022-06-08T10:25:23.000000Z"}, {"uuid": "97582e0f-df4e-467e-8d57-4b8041332b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "published-proof-of-concept", "source": "Telegram/dGYKr-CEJaj2Y5w9uhvMbbhZyPmqzrLZ2aZCwD8vRhYsYg", "content": "", "creation_timestamp": "2022-06-08T11:00:18.000000Z"}, {"uuid": "6c986341-f10e-4d6e-8293-aab0cd377645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32277", "type": "seen", "source": "https://t.me/cibsecurity/49380", "content": "\u203c CVE-2022-32277 \u203c\n\nSquiz Matrix CMS 6.20 is vulnerable to an Insecure Direct Object Reference caused by failure to correctly validate authorization when submitting a request to change a user's contact details.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-07T00:13:31.000000Z"}, {"uuid": "5e7ff923-edf7-4272-aafb-250b242a4ca1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32274", "type": "seen", "source": "https://t.me/cibsecurity/46165", "content": "\u203c CVE-2022-32274 \u203c\n\nThe Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-13T18:26:25.000000Z"}, {"uuid": "d7984991-114a-4d9c-b67c-a98c46f6067c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32273", "type": "seen", "source": "https://t.me/cibsecurity/44052", "content": "\u203c CVE-2022-32273 \u203c\n\nAs a result of an observable discrepancy in returned messages, OPSWAT MetaDefender Core (MDCore) before 5.1.2 could allow an authenticated user to enumerate filenames on the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-08T20:32:35.000000Z"}, {"uuid": "f3a8964e-ca7c-4897-a715-e479f1b72d6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32278", "type": "seen", "source": "https://t.me/cibsecurity/44347", "content": "\u203c CVE-2022-32278 \u203c\n\nXFCE 4.16 allows attackers to execute arbitrary code because xdg-open can execute a .desktop file on an attacker-controlled FTP server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-14T02:18:17.000000Z"}, {"uuid": "f1eb964e-615c-42c0-81d5-b772867b2f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32276", "type": "seen", "source": "https://t.me/cibsecurity/44731", "content": "\u203c CVE-2022-32276 \u203c\n\n** DISPUTED ** Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor considers this a UI bug, not a vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-17T16:23:42.000000Z"}, {"uuid": "7d118739-e35f-44d9-ba14-f4f5a2b357ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32272", "type": "seen", "source": "https://t.me/cibsecurity/44104", "content": "\u203c CVE-2022-32272 \u203c\n\nOPSWAT MetaDefender Core (MDCore) before 5.1.2 has incorrect access control, resulting in privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-09T18:33:30.000000Z"}, {"uuid": "2179e570-16de-41e9-b46e-4d19947022fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "https://t.me/cibsecurity/43869", "content": "\u203c CVE-2022-32275 \u203c\n\nGrafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-06T22:30:08.000000Z"}, {"uuid": "d75d7dd9-996c-49b4-95b1-2c0b9ca8ba27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32270", "type": "seen", "source": "https://t.me/cibsecurity/43795", "content": "\u203c CVE-2022-32270 \u203c\n\nIn Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution. This occurs because it is possible to plant executables in the startup folder (DLL planting could also occur).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-03T12:26:23.000000Z"}, {"uuid": "7693ff14-e5ed-4048-a65a-b1cf578d85b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32271", "type": "seen", "source": "https://t.me/cibsecurity/43791", "content": "\u203c CVE-2022-32271 \u203c\n\nIn Real Player 20.0.8.310, there is a DCP:// URI Remote Arbitrary Code Execution Vulnerability. This is an internal URL Protocol used by Real Player to reference a file that contains an URL. It is possible to inject script code to arbitrary domains. It is also possible to reference arbitrary local files.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-11T23:44:22.000000Z"}, {"uuid": "205a6e64-f7bf-405f-943d-40d1d88ec071", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/6326", "content": "#Analytics\nTop 10 Most Used Vulns of the Month (June 1-30)\n\nCVE-2022-30190 - Follina exploit\nCVE-2022-26134 - OGNL injection in Atlassian Confluence Server/Data Center\nCVE-2022-26809 - Weakness in a core Windows 7/10/Srv19/22 component (RPC)\nCVE-2022-30075 - TP-Link AX50 Auth RCE\nCVE-2022-23222 - Linux Kernel eBPF LPE\nCVE-2022-32275 - Grafana 8.4.3 allows reading files\nCVE-2022-26937 - Windows NFS NLM Portmap Stack Buffer Overflow\nCVE-2022-23088 - Heap Overflow in FreeBSD Wi-Fi Stack\nCVE-2022-31626 - RCE in PHP <=7.4.29\nCVE-2022-30333 - Dir Traversal in rar", "creation_timestamp": "2024-10-12T06:49:41.000000Z"}, {"uuid": "f312f10b-c230-498c-9b9a-6978020f6451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-32275", "type": "seen", "source": "https://t.me/bhhub/892", "content": "#BugBountyTips of the Day\nYay, I was awarded 200$ bounty on @Bugcrowd  This one is my first bounty ever. It will motivate me a lot for my future journey.And specially thanks to @EmptyMahbob for always your support and @GodfatherOrwa for always sharing some unique tips.  #bugbounty #TogetherWeHitHarder  https://t.co/BNIXCsVpIt\n---\nPro tip for #bugbounty:  Go over all URLs to test at least three times, preferably on separate days.  On the first pass, I find the most stuff.  On the 2nd pass, I find most issues I missed.  On the 3rd pass, I barely find anything at all but still have usually missed a few. \ud83d\ude1c\ud83e\udd73\n---\nCVE-2022-32275 \ud83d\ude36  #BugBounty  https://t.co/h9MO9vKLro\n---\nFor Beginners  https://t.co/kUzws8Mxz1  #bugbountytips #infosec #cybersecurity\n---\nToday somehow popped a shell on the main application a major cryptocurrency exchange. The impact is as devastating as the Web3 bugs you could have seen recently on other programs. The report was sent to their security team. Web2 bugs are alive. #bugbounty  https://t.co/DrN23ItZxT", "creation_timestamp": "2022-06-08T13:37:04.000000Z"}]}