{"metadata": {"vulnerability": "CVE-2022-1388", "count": 424, "kinds": {"milestone": 6, "sighting": 368, "kev": 17, "other": 33}}, "data": [{"timestamp": "2022-04-19T00:00:00Z", "date_only": false, "value": "2022-04-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-1388", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-05-04T00:00:00Z", "date_only": false, "value": "2022-05-04T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-05-04T00:00:00Z", "date_only": false, "value": "2022-05-04T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / f5", "record": "CVE-2022-1388", "field": "containers.cna.datePublic"}, {"timestamp": "2022-05-04T14:00:00Z", "date_only": false, "value": "2022-05-04T14:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-1388", "record": "GSD-2022-1388", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-05-05T00:00:00Z", "date_only": false, "value": "2022-05-05T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-05-05T00:00:00Z", "date_only": false, "value": "2022-05-05T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-419", "record": "CERTFR-2022-AVI-419", "field": "last_revision_date"}, {"timestamp": "2022-05-05T00:00:00Z", "date_only": false, "value": "2022-05-05T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-419", "record": "CERTFR-2022-AVI-419", "field": "initial_release_date"}, {"timestamp": "2022-05-05T00:00:00Z", "date_only": false, "value": "2022-05-05T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-419", "record": "CERTFR-2022-AVI-419", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-05T04:00:00Z", "date_only": false, "value": "2022-05-05T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=800", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "808e9777-bae4-488c-b1d2-474fe6e57660", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=800"}, {"timestamp": "2022-05-05T04:41:10Z", "date_only": false, "value": "2022-05-05T04:41:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2149", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7bbf2860-7e64-4f84-a3d4-a0b18f00a801", "content": "WATCH OUT! F5 warns of a new critical BIG-IP remote code execution vulnerability (CVE-2022-1388) due to missing authentication checks that could allow attackers to gain control of affected systems.\n\nDetails: https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html", "url": "https://t.me/thehackernews/2149"}, {"timestamp": "2022-05-05T05:09:26Z", "date_only": false, "value": "2022-05-05T05:09:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ShlezySec_Channel/223", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4caf75bd-31b6-4228-b6ba-6cca224bf353", "content": "\u05d0\u05d6\u05d4\u05e8\u05d4!  F5 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d7\u05d3\u05e9\u05d4 \u05e9\u05dc \u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 BIG-IP (CVE-2022-1388) \u05e2\u05e7\u05d1 \u05d1\u05d3\u05d9\u05e7\u05d5\u05ea \u05d0\u05d9\u05de\u05d5\u05ea \u05d7\u05e1\u05e8\u05d5\u05ea \u05e9\u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05dc\u05d4\u05e9\u05d9\u05d2 \u05e9\u05dc\u05d9\u05d8\u05d4 \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05d4\u05de\u05d5\u05e9\u05e4\u05e2\u05d5\u05ea.\n\n \u05e4\u05e8\u05d8\u05d9\u05dd: https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html", "url": "https://t.me/ShlezySec_Channel/223"}, {"timestamp": "2022-05-05T07:52:31Z", "date_only": false, "value": "2022-05-05T07:52:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityIL/12196", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9d395bf2-06b3-4669-9f8b-27a5472005d2", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8 BIG-IP \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea F5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d0 \u05de\u05d6\u05d5\u05d4\u05d4 \u05dc\u05d4\u05e9\u05d9\u05d2 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05e0\u05d9\u05d4\u05d5\u05dc \u05e2\u05dc \u05d4\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2022-1388 \u05e7\u05d9\u05d1\u05dc\u05d4 \u05d3\u05d9\u05e8\u05d5\u05d2 \u05e1\u05d9\u05db\u05d5\u05df - 9.8, \u05db\u05e9\u05d2\u05dd \u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d1\u05d0\u05e8\u05d4\"\u05d1 \u05de\u05d5\u05e6\u05d9\u05d0\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0.\n\n\u05d7\u05d1\u05e8\u05ea F5 \u05e9\u05d7\u05e8\u05e8\u05d4 \u05d2\u05e8\u05e1\u05d4 \u05d4\u05e1\u05d5\u05d2\u05e8\u05ea \u05d0\u05ea \u05d4\u05e4\u05d9\u05e8\u05e6\u05d4 (\u05ea\u05de\u05d5\u05e0\u05d4 \u05de\u05e6\"\u05d1)\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \n\nhttps://t.me/CyberSecurityIL/1900\n\nhttps://www.bleepingcomputer.com/news/security/f5-warns-of-critical-big-ip-rce-bug-allowing-device-takeover/", "url": "https://t.me/CyberSecurityIL/12196"}, {"timestamp": "2022-05-05T10:43:02Z", "date_only": false, "value": "2022-05-05T10:43:02.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2914", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "21196e8d-9ead-490c-a90f-e3d6a73c190e", "content": "\u034fF5 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1388 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS v3 9,8 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0432 BIG-IP, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 iControl REST \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 iControl REST \u0432 BIG-IP. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e CVE-2022-1388\u00a0\u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 BIG-IQ, F5OS-A, F5OS-C \u0438 Traffic SDC.\n\n\u0418\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u0431\u0430\u043b\u043b\u044b CVSS \u043e\u0442 8 \u0434\u043e 9. \u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2022-25946 \u0438 CVE-2022-27806, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 \u00ab\u0440\u0435\u0436\u0438\u043c\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u00bb, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u0445 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2022-28707, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u00ab\u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438\u00bb \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS-\u0430\u0442\u0430\u043a, XSS-\u0430\u0442\u0430\u043a, \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u041c\u043d\u043e\u0433\u0438\u0435 DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u00ab\u0441\u0440\u0435\u0434\u043d\u044f\u044f\u00bb \u0438\u043b\u0438 \u00ab\u043d\u0438\u0437\u043a\u0430\u044f\u00bb.\n\nF5 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 v17.0.0, v16.1.2.2, v15.1.5.1, v14.1.4.6 \u0438 v13.1.5, \u0430 \u0442\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 iControl REST \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 httpd BIG-IP.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e 16 142 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0421\u0428\u0410, \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u041a\u0438\u0442\u0430\u0439, \u0418\u043d\u0434\u0438\u044f, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u044f \u0438 \u042f\u043f\u043e\u043d\u0438\u044f.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BIG-IP, \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b. \u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 F5 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 3 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.", "url": "https://t.me/true_secator/2914"}, {"timestamp": "2022-05-05T16:18:04.472Z", "date_only": false, "value": "2022-05-05T16:18:04.472Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-1388", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-05-05T17:15:00Z", "date_only": false, "value": "2022-05-05T17:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MRPH-RVC3-CV97", "record": "GHSA-MRPH-RVC3-CV97", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-05-05T17:15:00Z", "date_only": false, "value": "2022-05-05T17:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-1388", "record": "GSD-2022-1388", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-05-05T17:15:10.570Z", "date_only": false, "value": "2022-05-05T17:15:10.570000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_release_date.data.4.date"}, {"timestamp": "2022-05-05T17:15:10.570Z", "date_only": false, "value": "2022-05-05T17:15:10.570", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-1388", "record": "FKIE_CVE-2022-1388", "field": "published"}, {"timestamp": "2022-05-05T21:07:13Z", "date_only": false, "value": "2022-05-05T21:07:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ckuRED/137", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cebbac8f-1c91-44bf-b199-24bffc150e96", "content": "Zero-Day: Critical F5 BIG-IP flaw allows device takeover (CVE-2022-1388).\n\nhttps://www.helpnetsecurity.com/2022/05/05/cve-2022-1388/", "url": "https://t.me/ckuRED/137"}, {"timestamp": "2022-05-05T21:07:19Z", "date_only": false, "value": "2022-05-05T21:07:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cKure/9469", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "27a40a15-f92c-473f-a20c-5588869790d1", "content": "Zero-Day: Critical F5 BIG-IP flaw allows device takeover (CVE-2022-1388).\n\nhttps://www.helpnetsecurity.com/2022/05/05/cve-2022-1388/", "url": "https://t.me/cKure/9469"}, {"timestamp": "2022-05-06T00:00:39Z", "date_only": false, "value": "2022-05-06T00:00:39Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MRPH-RVC3-CV97", "record": "GHSA-MRPH-RVC3-CV97", "field": "published"}, {"timestamp": "2022-05-06T12:18:06Z", "date_only": false, "value": "2022-05-06T12:18:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2031", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e4d4054e-5fc1-44f4-b103-ee7f8c32f3ac", "content": "#exploit\n + CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\n\n + CVE-2022-1040:\nAuth bypass and RCE in webmin portal of Sophos Firewall\nhttps://github.com/cve-hunter/CVE-2022-1040-sophos-rce\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2031"}, {"timestamp": "2022-05-07T00:00:00Z", "date_only": true, "value": "2022-05-07", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-35519", "record": "CNVD-2022-35519", "field": "openTime"}, {"timestamp": "2022-05-07T00:00:00Z", "date_only": true, "value": "2022-05-07", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-35519", "record": "CNVD-2022-35519", "field": "submitTime"}, {"timestamp": "2022-05-07T09:42:21Z", "date_only": false, "value": "2022-05-07T09:42:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ptswarm/124", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "11bd180d-79e4-4589-84ae-10fa8a00ca2c", "content": "\ud83d\udd25 We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.\n\nPatch ASAP!", "url": "https://t.me/ptswarm/124"}, {"timestamp": "2022-05-08T11:45:11Z", "date_only": false, "value": "2022-05-08T11:45:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2111", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2de60352-1e1c-4794-8c27-8ba6b4d088f8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl Rest API exposed RCE Check\nURL\uff1ahttps://github.com/bytecaps/F5-BIG-IP-RCE-Check\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2111"}, {"timestamp": "2022-05-08T12:45:03Z", "date_only": false, "value": "2022-05-08T12:45:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberGovIL/1450", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2a3c404f-db9e-486e-afd0-86c8c0d5a35a", "content": "Com16245 | \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 BigIP \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea F5\n\n\u05d7\u05d1\u05e8\u05ea F5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e2\u05e9\u05e8\u05d5\u05ea \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05e6\u05d9\u05d5\u05d3 \u05de\u05e1\u05d5\u05d2 BigIP \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4. \u05db\u05df \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05de\u05e1\u05e4\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd.\n\n18 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05de\u05e1\u05d5\u05d5\u05d2\u05d5\u05ea \u05d1\u05e1\u05d9\u05d5\u05d5\u05d2 \u05d2\u05d1\u05d5\u05d4. \u05de\u05ea\u05d5\u05db\u05df, \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d0\u05d7\u05ea \u05de\u05e1\u05d5\u05d5\u05d2\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea (CVE-2022-1388).\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d0\u05ea \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05d4\u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9\u05d9\u05dd \u05dc\u05e6\u05d9\u05d5\u05d3 \u05e9\u05d1\u05e8\u05e9\u05d5\u05ea\u05db\u05dd, \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05e0\u05dd \u05d1\u05d4\u05e7\u05d3\u05dd \u05d4\u05d0\u05e4\u05e9\u05e8\u05d9.", "url": "https://t.me/CyberGovIL/1450"}, {"timestamp": "2022-05-08T19:19:19Z", "date_only": false, "value": "2022-05-08T19:19:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BleepingComputer/12006", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "26d5971a-1b61-4158-8604-cb98810b5cbc", "content": "Latest news and stories from BleepingComputer.com\nExploits created for critical F5 BIG-IP flaw, install patch immediately\n\nSecurity researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability. [...]", "url": "https://t.me/BleepingComputer/12006"}, {"timestamp": "2022-05-09T06:20:58Z", "date_only": false, "value": "2022-05-09T06:20:58.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/9487", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6a4da04e-7653-44bf-aeba-ac61a50d08f5", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability.\n\nCVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing an attacker to gain initial access and take control of an affected system.\n\nhttps://thehackernews.com/2022/05/researchers-develop-rce-exploit-for.html?m=1", "url": "https://t.me/cKure/9487"}, {"timestamp": "2022-05-09T07:45:33Z", "date_only": false, "value": "2022-05-09T07:45:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2121", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5c9165d4-fe0f-477e-8b05-fb47566c83bc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-1388_F5_BIG-IP\nURL\uff1ahttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2121"}, {"timestamp": "2022-05-09T08:29:55Z", "date_only": false, "value": "2022-05-09T08:29:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2124", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "efa33468-4b8a-4053-9b6b-7312bb4872b5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aK23605346: BIG-IP iControl REST vulnerability CVE-2022-1388\nURL\uff1ahttps://github.com/numanturle/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2124"}, {"timestamp": "2022-05-09T09:37:37Z", "date_only": false, "value": "2022-05-09T09:37:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2125", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "28c6f7c6-6014-45dc-bc0d-7a550630008d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-1388_F5_BIG-IP\nURL\uff1ahttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2125"}, {"timestamp": "2022-05-09T10:00:18Z", "date_only": false, "value": "2022-05-09T10:00:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2126", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7545f13c-d43a-4586-ba56-94e6a645d4b7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP RCE \u6279\u91cf\u68c0\u6d4b\nURL\uff1ahttps://github.com/bytecaps/CVE-2022-1388-EXP\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2126"}, {"timestamp": "2022-05-09T10:15:23Z", "date_only": false, "value": "2022-05-09T10:15:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2127", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cf1ada1d-b240-4c1c-aa1a-25ce93e9107f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1abatch scan CVE-2022-1388\nURL\uff1ahttps://github.com/yukar1z0e/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2127"}, {"timestamp": "2022-05-09T10:53:49Z", "date_only": false, "value": "2022-05-09T10:53:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2128", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0e0b5a68-140e-452f-b9df-e4f137199b7f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 Big IP unauth remote code execution\nURL\uff1ahttps://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2128"}, {"timestamp": "2022-05-09T11:26:21Z", "date_only": false, "value": "2022-05-09T11:26:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/51553", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "20618416-b23e-4725-89a7-f58c7e9b68fb", "content": "Experts developed exploits for CVE-2022-1388 RCE in F5 BIG-IP products\n\nhttps://ift.tt/qIpiVJc", "url": "https://t.me/ctinow/51553"}, {"timestamp": "2022-05-09T12:32:05Z", "date_only": false, "value": "2022-05-09T12:32:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/82", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9bc993b6-05a0-4e61-92ef-45e3df1b81ad", "content": "https://github.com/bytecaps/CVE-2022-1388-EXP", "url": "https://t.me/CNArsenal/82"}, {"timestamp": "2022-05-09T12:47:45Z", "date_only": false, "value": "2022-05-09T12:47:45.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2047", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2f96a609-894f-41cc-994c-46a3250cc0ae", "content": "#CVE-2022\n\nPoC for CVE-2022-1388_F5_BIG-IP\n\nhttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2047"}, {"timestamp": "2022-05-09T13:49:59Z", "date_only": false, "value": "2022-05-09T13:49:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2049", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "31965b44-5756-46d8-8916-cb6d5921443b", "content": "#CVE-2022\n\nPoC for CVE-2022-1388_F5_BIG-IP\n\nhttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2049"}, {"timestamp": "2022-05-09T13:55:56Z", "date_only": false, "value": "2022-05-09T13:55:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2050", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "23b50b1d-5c07-416c-b627-5f38b571668b", "content": "#CVE-2022\n\nbatch scan CVE-2022-1388\n\nhttps://github.com/yukar1z0e/CVE-2022-1388\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2050"}, {"timestamp": "2022-05-09T14:00:01Z", "date_only": false, "value": "2022-05-09T14:00:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2051", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "913a2db0-4ec0-4b60-a5f4-e9636f7a73ca", "content": "#CVE-2022\n\nCVE-2022-1388 F5 Big IP unauth remote code execution\n\nhttps://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2051"}, {"timestamp": "2022-05-09T14:07:53Z", "date_only": false, "value": "2022-05-09T14:07:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2132", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "41ecae76-4cd1-410f-9831-99419c0fd789", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/Al1ex/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2132"}, {"timestamp": "2022-05-09T14:07:58Z", "date_only": false, "value": "2022-05-09T14:07:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2133", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "fd186bb1-06a8-46d1-a6b0-da8a7e298624", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u7ed5\u8fc7\n\u63cf\u8ff0\uff1aF5 BIG-IP iControl REST\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\nURL\uff1ahttps://github.com/Henry4E36/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#\u7ed5\u8fc7", "url": "https://t.me/GithubRedTeam/2133"}, {"timestamp": "2022-05-09T14:38:06Z", "date_only": false, "value": "2022-05-09T14:38:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2134", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "99047fe2-be7b-4fe8-ae1f-9b18720efc10", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u7ed5\u8fc7\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\nURL\uff1ahttps://github.com/savior-only/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#\u7ed5\u8fc7", "url": "https://t.me/GithubRedTeam/2134"}, {"timestamp": "2022-05-09T15:24:33Z", "date_only": false, "value": "2022-05-09T15:24:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/12010", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "37fdb76f-858d-482d-8c29-b8eafb9c4992", "content": "Latest news and stories from BleepingComputer.com\nHackers exploiting critical F5 BIG-IP flaw to drop backdoors\n\nThreat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]", "url": "https://t.me/BleepingComputer/12010"}, {"timestamp": "2022-05-09T15:28:12Z", "date_only": false, "value": "2022-05-09T15:28:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2135", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cf9c09b5-1187-4fd3-8522-591c6336f0a7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388\nURL\uff1ahttps://github.com/saucer-man/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2135"}, {"timestamp": "2022-05-09T15:39:10Z", "date_only": false, "value": "2022-05-09T15:39:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2136", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a6d301ba-c9fe-4b62-a7db-ed5147cd5ba3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aF5 BIG-IP RCE exploitation (CVE-2022-1388)\nURL\uff1ahttps://github.com/alt3kx/CVE-2022-1388_PoC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2136"}, {"timestamp": "2022-05-09T15:49:34Z", "date_only": false, "value": "2022-05-09T15:49:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2137", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "83a50597-0e72-49c5-9d8f-98b7b1b91131", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 POC exploit\nURL\uff1ahttps://github.com/superzerosec/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2137"}, {"timestamp": "2022-05-09T17:04:49Z", "date_only": false, "value": "2022-05-09T17:04:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Blue_Hat_Hackers_Community/20", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "70e3cf95-4218-4ced-b0e1-cb1dfbd4065d", "content": "#CVE\nCVE-2022-1388\nF5 BIG-IP Unauthenticated \n#RCE Vulnerability\n\n#POC\nUse POST request to execute \"cat /etc/passwd\" command\n\n\nShodan Query:\nhttp.title:\"BIG-IP®-+Redirect\" +\"Server\" \n \nLink:\nhttps://github.com/projectdiscovery/nuclei-templates/pull/4303/files\n\nInformation:\n\nhttps://github.com/NafisiAslH/KnowledgeSharing/blob/main/CyberSecurity/Web/CVEs/CVE-2022/CVE-2022-1388/README.md\n\n#Cyber #CyberSecurity #CyberAttack #InfoSec #Hacking #BugBounty", "url": "https://t.me/Blue_Hat_Hackers_Community/20"}, {"timestamp": "2022-05-09T19:04:50Z", "date_only": false, "value": "2022-05-09T19:04:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BlueRedTeam/2054", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "778ba099-4b09-4c65-81c2-627e8036eadf", "content": "#CVE-2022\n\nF5 BIG-IP RCE exploitation (CVE-2022-1388)\n\nhttps://github.com/alt3kx/CVE-2022-1388_PoC\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2054"}, {"timestamp": "2022-05-09T19:44:29Z", "date_only": false, "value": "2022-05-09T19:44:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2055", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4de3fbf1-a418-415c-a517-f5d98700a463", "content": "#CVE-2022\n\nCVE-2022-1388 POC exploit\n\nhttps://github.com/superzerosec/CVE-2022-1388\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2055"}, {"timestamp": "2022-05-09T20:05:04Z", "date_only": false, "value": "2022-05-09T20:05:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2141", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ce5c6083-9857-4ae3-bafc-013b5f7e688d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPOC for CVE-2022-1388\nURL\uff1ahttps://github.com/horizon3ai/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2141"}, {"timestamp": "2022-05-09T23:27:53Z", "date_only": false, "value": "2022-05-09T23:27:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/12014", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d868adc4-6d08-43ae-945b-426ea7f863ed", "content": "Latest news and stories from BleepingComputer.com\nHackers exploiting critical F5 BIG-IP bug, public exploits released\n\nThreat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]", "url": "https://t.me/BleepingComputer/12014"}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-1388", "field": "timestamps.asserted_at", "uuid": "fa406e77-1021-4831-a8dc-9ed81cfa9941", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-1388", "field": "timestamps.asserted_at", "uuid": "6bba823a-5346-4038-8567-e6170d5860e2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": true, "value": "2022-05-10", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-1388", "field": "containers.adp.1.metrics.1.other.content.dateAdded"}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-1388", "field": "evidence.0.details.added_date", "uuid": "6bba823a-5346-4038-8567-e6170d5860e2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": true, "value": "2022-05-10", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-1388", "field": "evidence.0.details.date_added", "uuid": "fa406e77-1021-4831-a8dc-9ed81cfa9941", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-1388", "field": "timestamps.first_seen_at", "uuid": "fa406e77-1021-4831-a8dc-9ed81cfa9941", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-1388", "field": "timestamps.first_seen_at", "uuid": "6bba823a-5346-4038-8567-e6170d5860e2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-1388", "field": "status.status_updated_at", "uuid": "fa406e77-1021-4831-a8dc-9ed81cfa9941", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-1388", "field": "status.status_updated_at", "uuid": "6bba823a-5346-4038-8567-e6170d5860e2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-05-10T00:00:00Z", "date_only": false, "value": "2022-05-10T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-1388", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-05-10T02:00:28Z", "date_only": false, "value": "2022-05-10T02:00:28.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/42220", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7b5003c2-adcd-47cf-b77e-28bd57c7d0fe", "content": "\ud83d\udd74 How to Check if Your F5 BIG-IP Device Is Vulnerable \ud83d\udd74\n\nThis Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "url": "https://t.me/cibsecurity/42220"}, {"timestamp": "2022-05-10T03:01:53Z", "date_only": false, "value": "2022-05-10T03:01:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/bigip_cve_2022_1388", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0ff539f6-5bee-43bd-8e05-02bb7c4d20c6", "url": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/bigip_cve_2022_1388"}, {"timestamp": "2022-05-10T04:15:43Z", "date_only": false, "value": "2022-05-10T04:15:43.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2142", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e308459a-0793-4e59-b320-03ed52598cfb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-22965\u5199\u5165\u51b0\u874ewebshell\u811a\u672c\nURL\uff1ahttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-CVE-2022-1388-BIG-IP-iControl-REST\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2142"}, {"timestamp": "2022-05-10T04:33:17Z", "date_only": false, "value": "2022-05-10T04:33:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/537", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a4a9a100-18d8-4ac3-978d-89ee274ff5a8", "content": "\u200bCVE-2022-1388\n\nBIG-IP iControl REST vulnerability CVE-2022-1388\n\nhttps://github.com/numanturle/CVE-2022-1388", "url": "https://t.me/crackcodes/537"}, {"timestamp": "2022-05-10T04:48:33Z", "date_only": false, "value": "2022-05-10T04:48:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2143", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f4139777-383a-4fc3-9015-03036ada24fc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aReverse Shell for CVE-2022-1388\nURL\uff1ahttps://github.com/qusaialhaddad/F5-BigIP-CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2143"}, {"timestamp": "2022-05-10T05:16:57Z", "date_only": false, "value": "2022-05-10T05:16:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2144", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e7c90e7e-878b-4b6c-a658-9401f899544b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE\nURL\uff1ahttps://github.com/0xf4n9x/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2144"}, {"timestamp": "2022-05-10T05:41:02Z", "date_only": false, "value": "2022-05-10T05:41:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SdOo1Ob4oTCP8b2jAyMRAXhNY9Lx0czLNybVsdtPLwr-PQ", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3fd6cbb6-7275-42be-991a-fabf74551cda"}, {"timestamp": "2022-05-10T08:19:54Z", "date_only": false, "value": "2022-05-10T08:19:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2145", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "045b6768-d5b0-4b3e-bb18-646f02b1fc88", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388-EXP\u53ef\u6279\u91cf\u5b9e\u73b0\u653b\u51fb\nURL\uff1ahttps://github.com/LinJacck/CVE-2022-1388-EXP\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2145"}, {"timestamp": "2022-05-10T08:49:25Z", "date_only": false, "value": "2022-05-10T08:49:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2146", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0197de0c-cb09-44a7-bd80-b115fa4df5e4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aK23605346: BIG-IP iControl REST vulnerability CVE-2022-1388\nURL\uff1ahttps://github.com/shamo0/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2146"}, {"timestamp": "2022-05-10T08:51:47Z", "date_only": false, "value": "2022-05-10T08:51:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/51633", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "bb13e732-ece5-4d49-a1a7-027157c96795", "content": "Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG-IP\n\nhttps://ift.tt/elor4Jw", "url": "https://t.me/ctinow/51633"}, {"timestamp": "2022-05-10T10:21:47Z", "date_only": false, "value": "2022-05-10T10:21:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1508", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "322d4b30-317a-4fd4-85b9-99f1ae08bab4", "content": "Twitter \u0433\u0440\u0435\u043c\u0438\u0442 \u043e  CVE-2022-1388 \u043e\u043d\u0430 \u0436\u0435 RCE \u0432 F5 BIG-IP(\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439). \n\u0412\u0441\u0451 \u0433\u0435\u043d\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u0441\u0442\u044b\u043c, POST \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 JSON...\ud83e\udd2d\n\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0431\u0435\u0436\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 IP \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ;) \n\ncat ips.txt | while read ip; do curl -su admin -H \"Content-Type: application/json\" http://$ip/mgmt/tm/util/bash -d '{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}';done\n\n\u043d\u0443 \u0438 \u0441\u0430\u043c PoC  \u0434\u043b\u044f \u0442\u0435\u0445 \u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e", "url": "https://t.me/poxek/1508"}, {"timestamp": "2022-05-10T12:58:22Z", "date_only": false, "value": "2022-05-10T12:58:22.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/829", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b95defae-67b3-424b-8938-4da4e3df10e3", "content": "CVE-2022-1388\nINFO\nusage:\n/home/dev# python3 CVE-2022-1388.py -t 192.168.0.221 -c id\n\n#exploit #rce", "url": "https://t.me/proxy_bar/829"}, {"timestamp": "2022-05-10T13:37:04Z", "date_only": false, "value": "2022-05-10T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/852", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1f77bf14-ffaa-48ae-86c6-75e1ade9f1e9", "content": "#BugBountyTips of the Day\n#CVE-2022-1388: F5 BIG-IP is great \ud83d\udd25   #infosec #bugbounty  https://t.co/0lPNO9RVfa\n---\nNeed to resolve a massive list of subdomains, but the lack of enough resolvers is slowing you down?  Presenting the most exhaustive list of reliable DNS resolvers with more than 9000 validated nameservers!   https://t.co/LyWNpMb7Gq  #infosec #recon #bugbountytips #redteam\n---\nExploit F5 Big IP  Using Curl   CVE-2022-1388   cat ips.txt | while read ip; do curl -su admin -H \"Content-Type: application/json\"  http://$ip/mgmt/tm/util/bash -d '{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}';done  did i miss something ?   #bugbountytip  #bugbonty  #infosec  https://t.co/2QAxOCpI5C\n---\nF5 BIG-IP Remote Command Execution 401 bypass X-Forwarded-For: 127.0.0.1 #bugbountytip #bugbountytips #F5 #CyberSecurity  https://t.co/kqD5rTN1ri\n---\nScan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0   Template PR:  https://t.co/SgK8VtT5PB  Advisory:  https://t.co/DIihNIfm4X  #hackwithautomation #security #bugbounty #appsec  https://t.co/DGjjpYK6Jj\n---\nIDOR is my favourite..\u2764\ufe0f I found another IDOR another with high severity. Just needed to change last one digit of organization id & was able send message to every user of other org.  #bugbounty #bugcrowd #pentest #informationsecurity  https://t.co/CfN9pM0wDL\n---\n#PoC for CVE-2022-1388 is out, grab it here! Added #shodan query!  https://t.co/grsBLUt8eL #bugbounty #bugbountytips #infosec #cybersecurity  https://t.co/WP8oje5Kh9\n---\nPOC, CVE-2022-1388  F5 Big-IP RCE #bugbounty #nday  https://t.co/VLt2UjEWkf\n---\n#CVE CVE-2022-1388 F5 BIG-IP Unauthenticated #RCE Vulnerability  #POC Use POST request to execute \"cat /etc/passwd\" command  #Shodan:   http.title:\"BIG-IP®-+Redirect\" +\"Server\"    #Nuclei:  https://t.co/p5gwsejbck  #Cyber #CyberSecurity #CyberAttack #InfoSec #Hacking #BugBounty  https://t.co/ob1znAKymd\n---\nCVE-2022-1388 #POC  POST /mgmt/tm/util/bash HTTP/1.1 Host:  https://t.co/0914iS1U74 Content-Length: 115 Connection: Keep-Alive Content-Length: 0 Cache-Control: max-age=0 X-F5-Auth-Token: Authorization: Basic YWRtaW46  { \"command\":\"run\", \"utilCmdArgs\":\"-c id\" }  #bugbounty #infosec\n---\n========= Master XSS   =========  Share this with your friends \ud83d\ude00  Tags: #cybersecurity #hacking #bugbounty #xss #masterXSS #infosec #offsec #labs  Check :\ud83e\uddf50/n \ud83d\udc47\n---\n\u270b Stop scrolling!  \ud83d\udc40 On the hunt for #BugBountyTips? \ud83d\udcdd: @alexander_pick  https://t.co/ShYkhK3SQP", "url": "https://t.me/bhhub/852"}, {"timestamp": "2022-05-10T14:53:47Z", "date_only": false, "value": "2022-05-10T14:53:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2149", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ba6d16e6-58bc-4f6c-8253-b3c8a8e82960", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aBIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388\nURL\uff1ahttps://github.com/TomArni680/CVE-2022-1388-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2149"}, {"timestamp": "2022-05-10T15:11:05Z", "date_only": false, "value": "2022-05-10T15:11:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MrVGunz/142", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8b8d40c0-fb3a-49eb-8044-d40e31238cdb", "content": "CVE-2022-1388 : F5 BIG-IP RCE ( CHECK & EXP ) \nhttps://github.com/bytecaps/CVE-2022-1388-EXP", "url": "https://t.me/MrVGunz/142"}, {"timestamp": "2022-05-10T15:47:21Z", "date_only": false, "value": "2022-05-10T15:47:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2150", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "bf35fc2f-316c-4707-9709-1b7dc06b4c2c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aA Test API for testing the POC against CVE-2022-1388\nURL\uff1ahttps://github.com/bandit92/CVE2022-1388_TestAPI\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2150"}, {"timestamp": "2022-05-10T16:13:34Z", "date_only": false, "value": "2022-05-10T16:13:34.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AdyNAi0r3oFp3TC3Wq-MQ5z1bTXQSODGOLYdLTDL5o1NBQ", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "28c06e91-8f14-4672-bb4d-dda56d1a8ef9"}, {"timestamp": "2022-05-10T18:39:01Z", "date_only": false, "value": "2022-05-10T18:39:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2061", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6bdb020b-506f-4b86-81e3-89b70a56d574", "content": "#CVE-2022\n\nBIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388\n\nhttps://github.com/TomArni680/CVE-2022-1388-POC\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2061"}, {"timestamp": "2022-05-10T18:50:04Z", "date_only": false, "value": "2022-05-10T18:50:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2062", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "114d64d6-c5c2-4689-820d-39120306d196", "content": "#CVE-2022\n\nA Test API for testing the POC against CVE-2022-1388\n\nhttps://github.com/bandit92/CVE2022-1388_TestAPI\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2062"}, {"timestamp": "2022-05-11T00:00:00Z", "date_only": false, "value": "2022-05-11T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-004", "record": "CERTFR-2022-ALE-004", "field": "initial_release_date"}, {"timestamp": "2022-05-11T00:00:00Z", "date_only": false, "value": "2022-05-11T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-004", "record": "CERTFR-2022-ALE-004", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-11T02:39:31Z", "date_only": false, "value": "2022-05-11T02:39:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/550", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ee6d36ce-2a99-4050-9593-36d3cf9cb4d1", "content": "https://www.hackbyte.org/f5-big-ip-rce-cve-2022-1388-vulnerability-analysis/", "url": "https://t.me/crackcodes/550"}, {"timestamp": "2022-05-11T13:05:36Z", "date_only": false, "value": "2022-05-11T13:05:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/47406", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d39788aa-768b-462c-9a50-baa0be0bcb7b", "content": "Critical Vulnerability Exploited to 'Destroy' BIG-IP Appliances\nhttps://www.securityweek.com/critical-vulnerability-exploited-destroy-big-ip-appliances\n\nThe recently patched F5 BIG-IP vulnerability tracked as CVE-2022-1388 is being increasingly exploited by threat actors, including to \u201cdestroy\u201d affected appliances.\nread more (https://www.securityweek.com/critical-vulnerability-exploited-destroy-big-ip-appliances)", "url": "https://t.me/information_security_channel/47406"}, {"timestamp": "2022-05-11T13:50:09Z", "date_only": false, "value": "2022-05-11T13:50:09.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d04c7e03-aa92-4ecb-9ad7-e8b93329324e", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0ea9c339-7518-434e-baa2-c3de99146159"}, {"timestamp": "2022-05-11T14:08:55Z", "date_only": false, "value": "2022-05-11T14:08:55.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dc5dec87-8eb7-4855-96f4-0e71761ad952", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "671c3251-9058-4431-bb2d-c42d21b43e4d"}, {"timestamp": "2022-05-11T15:37:35Z", "date_only": false, "value": "2022-05-11T15:37:35.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/12035", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "041a0f4d-6f7b-447f-90aa-e8c639ff93d2", "content": "Latest news and stories from BleepingComputer.com\nCISA tells federal agencies to fix actively exploited F5 BIG-IP bug\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. [...]", "url": "https://t.me/BleepingComputer/12035"}, {"timestamp": "2022-05-11T19:38:01Z", "date_only": false, "value": "2022-05-11T19:38:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/2930", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3313e71e-ecb7-48a3-af0e-a6385e60e366", "content": "\u034f\u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u043a\u0442\u043e \u043d\u0435 \u0443\u0441\u043f\u0435\u043b, \u0442\u043e\u0442 \u043e\u043f\u043e\u0437\u0434\u0430\u043b. \u041c\u044b \u0443\u0436\u0435 \u043d\u0435 \u0440\u0430\u0437 \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u0445 \u043d\u0435\u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 72 \u0447\u0430\u0441\u043e\u0432 \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC.\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0437\u043b\u0430\u044f \u0440\u043e\u043b\u044c \u0438 \u0447\u0435\u0440\u0435\u0434\u0430 \u043d\u0435\u043e\u0431\u0440\u0430\u0442\u0438\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u043e\u0431\u0440\u0443\u0448\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 F5 BIG-IP.\n\n\u0421\u0442\u043e\u0438\u043b\u043e F5 Networks \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 CVE-2022-1388 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSSv3 9,8 - \u0431\u0430\u0433\u043e\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 iControl REST, \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC).\n\n\u0422\u0430\u043a, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a, 9 \u043c\u0430\u044f 2022 \u0433., Horizon3 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u043e\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 root. \u0414\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \u0438\u0445 \u043d\u0430 Twitter \u0438 GitHub, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 Positive Technologies.\n\n\u0412\u0441\u0435 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u043a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0431\u043b\u0430\u0433\u0438\u043c\u0438, \u043d\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 BinaryEdge \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0439 F5 BIG-IP. \u0418\u0437-\u0437\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0442\u043e\u0433\u043e \u0444\u0430\u043a\u0442\u0430, \u0447\u0442\u043e \u043e\u043d \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u0435\u0449\u0435 \u0440\u0430\u0441\u0442\u0438. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441\u0443\u0433\u0443\u0431\u043e \u0432\u0430\u043d\u0434\u0430\u043b\u044c\u043d\u043e\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0446\u0435\u043b\u044c\u044e \u0441\u0442\u0435\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0434\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u00abrm -rf /*\u00bb \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 BIG-IP \u0438 \u0432\u0441\u0435 \u0447\u0442\u043e \u0431\u044b\u043b\u043e \"\u043d\u0430\u0436\u0438\u0442\u043e \u043d\u0435\u043f\u043e\u0441\u0438\u043b\u044c\u043d\u044b\u043c \u0442\u0440\u0443\u0434\u043e\u043c\" \u0438\u0441\u043f\u0430\u0440\u0438\u043b\u043e\u0441\u044c \u0432 \u043e\u0434\u043d\u043e\u0447\u0430\u0441\u044c\u0435. \u0411\u043e\u043b\u0435\u0435 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 SSH.\n\n\u0418\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 F5 \u043f\u0440\u0438\u0437\u0432\u0430\u043b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0414\u043b\u044f \u0442\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f iControl REST \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f REST \u043a iControl \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e BIG-IP httpd.", "url": "https://t.me/true_secator/2930"}, {"timestamp": "2022-05-11T19:38:13Z", "date_only": false, "value": "2022-05-11T19:38:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2162", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "66fd7dad-8f4d-4b3e-87eb-bf981b49125e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 Scanner\nURL\uff1ahttps://github.com/EvilLizard666/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2162"}, {"timestamp": "2022-05-11T19:48:24Z", "date_only": false, "value": "2022-05-11T19:48:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2163", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "039a602e-3be0-45a4-9d0d-7c5be83d4c79", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThis repository conssists of the python exploit code for CVE-2022-1388( F5's BIG-IP RCE) \nURL\uff1ahttps://github.com/omnigodz/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2163"}, {"timestamp": "2022-05-11T20:19:47Z", "date_only": false, "value": "2022-05-11T20:19:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2164", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "eecd56c6-5953-47b6-836a-c4ff74b6c9dc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388\nURL\uff1ahttps://github.com/mr-vill4in/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2164"}, {"timestamp": "2022-05-11T23:27:15Z", "date_only": false, "value": "2022-05-11T23:27:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_icontrol_rce.rb", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8f5162b9-9eba-4040-9aa4-31dd5863eaf8", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_icontrol_rce.rb"}, {"timestamp": "2022-05-11T23:51:37Z", "date_only": false, "value": "2022-05-11T23:51:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/51807", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f83f1a8b-34a7-4a6c-90b6-93b008880288", "content": "CISA adds CVE-2022-1388 flaw in F5 BIG-IP to its Known Exploited Vulnerabilities Catalog\n\nhttps://ift.tt/ztZTs9C", "url": "https://t.me/ctinow/51807"}, {"timestamp": "2022-05-12T08:56:27Z", "date_only": false, "value": "2022-05-12T08:56:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oAOFeKxMa58I8_xH59aqOqeu7F81dBARYhLFqtTNfjxNYQ", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b91983e6-013b-4cea-98b6-dece60d846ba"}, {"timestamp": "2022-05-12T12:25:47Z", "date_only": false, "value": "2022-05-12T12:25:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2172", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "029afe2f-2ffc-4906-91ba-e48c6a797e86", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aNuclei Template for CVE-2022-1388\nURL\uff1ahttps://github.com/SecTheBit/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2172"}, {"timestamp": "2022-05-12T13:37:04Z", "date_only": false, "value": "2022-05-12T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/854", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f27da7e6-2e08-4203-a983-ff94308434db", "content": "#BugBountyTips of the Day\nBug: Stored XSS   Tried to input XSS payload through proxy.  Phone Number Field- Through Browser: Only Numeric Digits allowed (Alphabet and Special Characters Blocked)  Through Burp Proxy: 123\"><svg+onload=prompt(document.domain)> (Stored XSS)  #bugbounty #cybersecurity #pentest  https://t.co/fsBO67bRoT\n---\nI struggled with big scope targets so I started using Xmind's @Jhaddix  techniques 2 days ago.  So far: 1 P1 5 P3 (2 duplicated) 29 P4  Helps with your organization, your note process, and believe it or not, your overall understanding of the target!  Thanks @Jhaddix  #BugBounty  https://t.co/aMw8QOZAHV\n---\n\ud83d\udd25 Bug Hunter's Methodology: Application Hacking v1  #NahamCon2022 slides by @Jhaddix  * Tech profiling * Finding CVEs & misconfigs * Port scanning * Content discovery * Spidering * Analyzing JavaScript & params  +tons of tools for \u261d\ufe0f  #bugbountytips   https://t.co/ts4uSTr70I\n---\nAnd this is why I love FOSS, there are a couple of guys out there working on exciting new things for reconftw just for fun:  \ud83d\udd25 The desired web GUI for reconftw will become real \ud83d\udd25  Big shoutout to the authors @_luriel and @mx61tt   #reconftw #bugbounty #recon #hacking  https://t.co/JVfazKCBQM\n---\nQuick Recon \ud83d\udd25\ud83d\udd25 cat roots | assetfinder | naabu -silent -passive |  httpx -silent -nc -p 80,443,8080,8443,8888 | aquatone   https://t.co/hdOk5rvwYV #bugbountytips #bugbountytip #bugbounty\n---\nA few days ago I wrote about my recent finding. Worth $4000. I was not active on Twitter so sharing today #bugbounty  https://t.co/oUBEDLNcFP\n---\nIOS Pentesting resources- ## General - Blogs, Papers and Books   - [Basic iOS Apps Security Testing lab]( https://t.co/rDYzwaE0j6) - [IOS Application security \u2013 Setting up a mobile pentesting platform]( https://t.co/bYEP8m5XsB)  #bugbounty #bugbountytips  1/n\n---\nHave you ever get bounty by using default credentials?  Read this thread \ud83d\udd25    #bugbountytips   \ud83e\uddf5\ud83d\udc47\ud83c\udffb\n---\n https://t.co/5dlSaaMmjg  #bugbountytips #bugbounty #infosec\n---\nExploited F5 BIG-IP CVE-2022-1388 (RCE Vulnerability) Will share the steps soon!  #bugbounty #infosec #cybersecurity  https://t.co/C38epKnf2B", "url": "https://t.me/bhhub/854"}, {"timestamp": "2022-05-12T20:34:34Z", "date_only": false, "value": "2022-05-12T20:34:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/12343", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3f2b225e-ff12-4d0c-9363-f0547423e076", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 F5 BIG-IP \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 F5 BIG-IP, CVE-2022-1388, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0446\u0435\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\nhttps://xakep.ru/2022/05/12/f5-destructive-attacks/", "url": "https://t.me/xakep_ru/12343"}, {"timestamp": "2022-05-12T21:16:58Z", "date_only": false, "value": "2022-05-12T21:16:58.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ax2j-jpCa8bY74M9pRF2-ncOiQcq6T7gP1Uo314jCgIH94U", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8c8079f9-9b17-4bbb-b527-5e66254788fa"}, {"timestamp": "2022-05-13T05:00:31Z", "date_only": false, "value": "2022-05-13T05:00:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1532", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b425e102-1eaf-4d14-b8c4-5eb81a68767c", "content": "CVE-2022-1388 (F5)\n\u041f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 bash \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 CVE-2022-1388 (F5)\nhttps://github.com/jheeree/CVE-2022-1388-checker\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1532"}, {"timestamp": "2022-05-13T08:42:53Z", "date_only": false, "value": "2022-05-13T08:42:53.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ptswarm/125", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0ad8b1da-df72-470a-997f-26402ace3cb7", "content": "\ud83d\ude0e F5 BIG-IP RCE (CVE-2022-1388). How it works.", "url": "https://t.me/ptswarm/125"}, {"timestamp": "2022-05-13T10:22:36Z", "date_only": false, "value": "2022-05-13T10:22:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2178", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e1454dd0-4325-4153-b98c-635fd0a3d9ff", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTool for CVE-2022-1388 \nURL\uff1ahttps://github.com/justakazh/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2178"}, {"timestamp": "2022-05-13T13:41:01Z", "date_only": false, "value": "2022-05-13T13:41:01.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/1537", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "28a3581b-7498-4dc3-a5d4-56f04d184d10", "content": "Mindmap F5 BIG-IP RCE (CVE-2022-1388). How it works.\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1\ufe0f", "url": "https://t.me/poxek/1537"}, {"timestamp": "2022-05-14T13:36:16Z", "date_only": false, "value": "2022-05-14T13:36:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/5bRz0_95f_9ZOs2D4-KvUSqehN_Sr5GPomGKCAnkVFAzrr79", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f09ec463-d6f8-4467-8c3a-f5bc5af90c21"}, {"timestamp": "2022-05-14T13:37:04Z", "date_only": false, "value": "2022-05-14T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/856", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "17f6433d-f20a-47da-bd0f-4b8223716b52", "content": "#BugBountyTips of the Day\nThis is the cutest video I've received from my #bugbounty friends. Thank you all for your wishes. Much love everyone. This community is AWESOME. \u2764\ufe0f  https://t.co/07aQXlgBw7\n---\nJust Tool for checking and exploit BIG-IP iControl REST vulnerability CVE-2022-1388 (RCE) mode: - single - mass  Link:  https://t.co/epzOzfkwnS LAB:  https://t.co/snsnEgMKpa  #CVE #CVE20221388 #F5 #bugbounty #bugbountytips #infosec #zeroday #0day  https://t.co/RlqQJs75Sy\n---\nHere is my first valid \"Exceptional\" report on @intigriti \ud83d\udd25  Found a public Jenkins instance with enabled /script (developer console). This means it runs directly RCE on the application.  shodan dork: ssl:target 200  http.title:\"Dashboard [Jenkins]\" #bugbounty #bugbountytips  https://t.co/2dvH1gRi64\n---\nUnauthorized  {\u201cid\u201d:111}\u27f6 401 Unauthorized {\u201cid\u201d:{\u201cid\u201d:111}} \u27f6 200 OK POST /api/get_profile Content-Type: application/json {\u201cuser_id\u201d:<attacker_id>,\u201duser_id\u201d:<victim\u2019s_id>} GET /api_v1/messages?user_id=VICTIM_ID \u27f6 401  #bugbounty #bugbountytips  1/n", "url": "https://t.me/bhhub/856"}, {"timestamp": "2022-05-14T19:26:32Z", "date_only": false, "value": "2022-05-14T19:26:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2187", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4e8b9fd6-7eda-4477-bf29-d10f24afe68a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aAn improved Proof of Concept for CVE-2022-1388 w/ Interactive Shell\nURL\uff1ahttps://github.com/PsychoSec2/CVE-2022-1388-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2187"}, {"timestamp": "2022-05-14T20:49:13Z", "date_only": false, "value": "2022-05-14T20:49:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2188", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1350100b-bc08-41cf-b564-f7bfb2515a54", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aAn improved Proof of Concept for CVE-2022-1388 w/ Interactive Shell.        No reverse tcp required!\nURL\uff1ahttps://github.com/LudovicPatho/CVE-2022-26923_AD-Certificate-Services\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2188"}, {"timestamp": "2022-05-15T00:26:32Z", "date_only": false, "value": "2022-05-15T00:26:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2189", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "510091fc-929b-4ccd-a091-1fe29a517ec7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aAn improved Proof of Concept for CVE-2022-1388 w/ Interactive Shell.        No reverse tcp required!\nURL\uff1ahttps://github.com/ahsentekdemir/CVE-2022-28346\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2189"}, {"timestamp": "2022-05-15T02:33:36Z", "date_only": false, "value": "2022-05-15T02:33:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2192", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "96dac888-4bf2-4aeb-9e3f-986715603399", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-1388_F5_BIG-IP\nURL\uff1ahttps://github.com/sherlocksecurity/CVE-2022-1388-Exploit-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2192"}, {"timestamp": "2022-05-15T09:02:53Z", "date_only": false, "value": "2022-05-15T09:02:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2196", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0910b868-bfd9-48a9-a6d2-36794a30c3c1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aImproved POC for CVE-2022-1388 that affects multiple F5 products.\nURL\uff1ahttps://github.com/iveresk/cve-2022-1388-iveresk-command-shell\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2196"}, {"timestamp": "2022-05-16T00:00:00Z", "date_only": false, "value": "2022-05-16T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-05-16T01:08:42Z", "date_only": false, "value": "2022-05-16T01:08:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2199", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "324043cf-dc40-4e5a-a2ce-72a91a3c48cc", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388_goby_pocsuite3\nURL\uff1ahttps://github.com/hou5/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2199"}, {"timestamp": "2022-05-16T13:37:05Z", "date_only": false, "value": "2022-05-16T13:37:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/858", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1c30ab26-2cfb-426d-a30d-519537d0c4af", "content": "#BugBountyTips of the Day\n(Forensicator - Powershell Script To Aid Live Forensics & Incidence Response) -  https://t.co/AgcfEBrdwF #infosec #netsec #pentest #cybersecurity #bugbounty  https://t.co/Q7cdVK2Lfs\n---\nActive Directory Privilege Escalation Hardening  #infosec #cybersecurity #cybersecuritytips  #pentesting #oscp #redteam  #informationsecurity  #cissp #CyberSec #networking #networksecurity #CheatSheet #infosecurity #bugbountytips  https://t.co/W0rlIDyhmB\n---\nIncident Response Cheat Sheet  #infosec #cybersecurity #cybersecuritytips  #pentesting #oscp #redteam  #informationsecurity  #cissp #CyberSec #networking #networksecurity #CheatSheet #infosecurity #bugbountytips  https://t.co/AEYuem3Tur\n---\n403 Forbidden bypass \ud83d\udd25\ud83d\udd25  GET /admin ==> 403 Forbidden GET /blablabal/%2e%2e/admin ==> 200 OK GET /blablabal/..;/admin ==> 200 OK  GET /blablabal/;/admin ==> 200 OK GET /blablabal/admin/..;/ ==> 200 OK GET /admin?access=1 ==> 200 OK   #bugbountytips #bugbountytip #bugbounty\n---\n\u2694\ufe0f List of Top 25 parameters for finding:  - XSS - SSRF - LFI - SQLi - RCE - Open Redirects   https://t.co/FP4Ykz63Tm  Useful for fuzzing.  #bugbounty #infosec #cybsersecurity #redteam #pentesting  https://t.co/6jP6ghzoIT\n---\nSome endpoint bypasses \u2705: #bugbountytips #infosec  https://t.co/pfEvLjTz2g\n---\nLog files to check for valuable information & clear  system logs. - Here is a small list of UNIX locations to modify/view while you're on a machine. - #CyberSecurity #infosec #CTF #bugbounty  https://t.co/NvvkZ719HZ\n---\nCVE-2022-30525 PoC  #bugbounty  https://t.co/x9gfuFeR9a\n---\n#infosec #bugbounty #redteam  https://t.co/fJq6T5nj5x\n---\n#PoC for CVE-2022-1388 is out, grab it here! Added #shodan query!   https://t.co/nX4FufMyI4   #bugbounty #bugbountytips #infosec #cybersecurity  https://t.co/BbYx6mkrSl\n---\nResolving at 22K qps from a single host. Not bad, uh?  This is from a second iteration of permutations and alterations using puredns and the @trick3st resolvers lists  #recon #hacking #bugbounty  https://t.co/9y1bHgAD4w", "url": "https://t.me/bhhub/858"}, {"timestamp": "2022-05-16T14:07:29Z", "date_only": false, "value": "2022-05-16T14:07:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2205", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ea9a3bbe-b417-449c-a3e6-00d0931b42b5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388-PocExp,\u65b0\u589e\u4e86\u591a\u7ebf\u7a0b,F5 BIG-IP RCE exploitation\nURL\uff1ahttps://github.com/aodsec/CVE-2022-1388-PocExp\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2205"}, {"timestamp": "2022-05-17T04:13:06Z", "date_only": false, "value": "2022-05-17T04:13:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2211", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "69047844-dec6-468f-86dc-49aa4567e622", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388\nURL\uff1ahttps://github.com/getdrive/F5-BIG-IP-exploit\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2211"}, {"timestamp": "2022-05-17T10:56:01Z", "date_only": false, "value": "2022-05-17T10:56:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2212", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "08a71cf4-a83b-4cb1-b1b6-3b8c1f1f25a5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust\nURL\uff1ahttps://github.com/aancw/CVE-2022-1388-rs\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2212"}, {"timestamp": "2022-05-17T12:02:08Z", "date_only": false, "value": "2022-05-17T12:02:08.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thebugbountyhunter/6256", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0f61b4a2-36e0-43e3-93f6-22a77c0c5358", "content": "F5 BIG-IP Critical Vulnerability Exploited By Attackers To Gain Unauthenticated RCE https://fourcore.io/blogs/f5-big-ip-cve-2022-1388-unauthenticated-rce-exploited-by-attackers", "url": "https://t.me/thebugbountyhunter/6256"}, {"timestamp": "2022-05-18T16:06:02Z", "date_only": false, "value": "2022-05-18T16:06:02.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/12088", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "910a18ac-727a-420a-ba9e-727208980266", "content": "Latest news and stories from BleepingComputer.com\nCISA shares guidance to block ongoing F5 BIG-IP attacks\n\nIn a joint advisory issued today,\u00a0CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active\u00a0attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). [...]", "url": "https://t.me/BleepingComputer/12088"}, {"timestamp": "2022-05-22T13:34:02Z", "date_only": false, "value": "2022-05-22T13:34:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2259", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d981973b-2267-42e7-8ec6-d00ff0570649", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust \nURL\uff1ahttps://github.com/XmasSnowISBACK/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2259"}, {"timestamp": "2022-05-22T15:58:56Z", "date_only": false, "value": "2022-05-22T15:58:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2094", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "269b492b-c14d-4fdd-82ff-622c4613512f", "content": "#CVE-2022\n\nCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust \n\nhttps://github.com/XmasSnowISBACK/CVE-2022-1388\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2094"}, {"timestamp": "2022-05-23T01:09:44Z", "date_only": false, "value": "2022-05-23T01:09:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/osintflow/242", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2249fbc7-42aa-4d7e-b3cc-ed00df8fa10d", "content": "\ud83d\ude0e F5 BIG-IP RCE (CVE-2022-1388). How it works.", "url": "https://t.me/osintflow/242"}, {"timestamp": "2022-05-28T14:29:21Z", "date_only": false, "value": "2022-05-28T14:29:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2308", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0e002cd3-a273-4843-bd9f-f28ca5e0d271", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\nURL\uff1ahttps://github.com/west9b/F5-BIG-IP-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2308"}, {"timestamp": "2022-05-28T16:30:21Z", "date_only": false, "value": "2022-05-28T16:30:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2109", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "55b88899-dc63-45e2-beb0-6cc67be9c73d", "content": "#CVE-2022\nCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\n\nhttps://github.com/west9b/F5-BIG-IP-POC\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2109"}, {"timestamp": "2022-05-30T16:59:03Z", "date_only": false, "value": "2022-05-30T16:59:03.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/90590", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b0e10b9c-6ff4-4c1f-933c-e57b9aab7314", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"Sinister.ly\",\n  \"Threat Actor\": \"PYA\",\n  \"Content\": \"iSleep Exploit Kit Source Code CVE-2022-1388 $2500 only 4 copies available.\",\n  \"Detection Date\": \"30 May 2022 16:47\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "url": "https://t.me/breachdetector/90590"}, {"timestamp": "2022-05-31T00:00:00Z", "date_only": true, "value": "2022-05-31", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-1388", "field": "evidence.0.details.due_date", "uuid": "fa406e77-1021-4831-a8dc-9ed81cfa9941", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-06-10T13:37:04Z", "date_only": false, "value": "2022-06-10T13:37:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/bhhub/795", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ac2ae5c9-1404-4ace-b937-c5c2634127d8", "content": "#BugBountyTips of the Day\nA simple and an easy finding on @Hacker0x01   While fuzzing, server-status endpoint was forbidden (403)  Just added this header in request :   X-Forwarded-For: 127.0.0.1 and I was able to bypass the forbidden (403) url or page.  @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/Ut6PGmFTky\n---\nNew web #pentesting video is live on the methodology of testing File Upload dialogues which can lead to stored HTML injection, XSS, XXE, SSRF, and RCE.  The goal is to bypass or trick the content \"restrictions\".   #bugbountytips #infosec #bugbounty   https://t.co/vSZ1Beg4JV\n---\nAlways wanted this \"Hacking Hackers\" badge. Finally got it !!  @Hacker0x01   Now Next goal is to participate in Live Hacking Events, hopefully I get a chance this year :)  #TogetherWeHitHarder #bugbounty #cybersecurity  https://t.co/aaY5IdLyhW\n---\nYay, I was awarded $200 bounty on @Hacker0x01   @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/l9zE6zwKr2\n---\nCVE-2022-1388: F5 BIG-IP \ud83d\udd25   #infosec #bugbounty  https://t.co/UbXXvL9j9L", "url": "https://t.me/bhhub/795"}, {"timestamp": "2022-06-10T13:37:04Z", "date_only": false, "value": "2022-06-10T13:37:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/894", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b1e7e088-1b8a-4b6e-a22f-62de648b20f6", "content": "#BugBountyTips of the Day\nA simple and an easy finding on @Hacker0x01   While fuzzing, server-status endpoint was forbidden (403)  Just added this header in request :   X-Forwarded-For: 127.0.0.1 and I was able to bypass the forbidden (403) url or page.  @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/Ut6PGmFTky\n---\nNew web #pentesting video is live on the methodology of testing File Upload dialogues which can lead to stored HTML injection, XSS, XXE, SSRF, and RCE.  The goal is to bypass or trick the content \"restrictions\".   #bugbountytips #infosec #bugbounty   https://t.co/vSZ1Beg4JV\n---\nAlways wanted this \"Hacking Hackers\" badge. Finally got it !!  @Hacker0x01   Now Next goal is to participate in Live Hacking Events, hopefully I get a chance this year :)  #TogetherWeHitHarder #bugbounty #cybersecurity  https://t.co/aaY5IdLyhW\n---\nYay, I was awarded $200 bounty on @Hacker0x01   @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/l9zE6zwKr2\n---\nCVE-2022-1388: F5 BIG-IP \ud83d\udd25   #infosec #bugbounty  https://t.co/UbXXvL9j9L", "url": "https://t.me/bhhub/894"}, {"timestamp": "2022-06-20T02:00:06Z", "date_only": false, "value": "2022-06-20T02:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2541", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "bde64bb0-9c6a-4df2-b499-c96c3ba61a00", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint\nURL\uff1ahttps://github.com/Chocapikk/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2541"}, {"timestamp": "2022-06-24T01:06:29Z", "date_only": false, "value": "2022-06-24T01:06:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2566", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "616abc61-c1b0-4c1a-a15c-2a8ec66a05ce", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aMass-Exploit-CVE-2022-1388\nURL\uff1ahttps://github.com/electr0lulz/Mass-CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2566"}, {"timestamp": "2022-07-01T15:01:21Z", "date_only": false, "value": "2022-07-01T15:01:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/poxek/1880", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "47bc8222-65ac-4c0a-a965-0ae470dbf100", "content": "CVE-2022-1388 Poc by PsychoSec\n\u0423\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u044b\u0439 POC \u0434\u043b\u044f CVE-2022-1388, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 F5. \u042d\u0442\u043e \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Horizon3 Proof of Concept \u0434\u043b\u044f CVE-2022-1388. \u042d\u0442\u0430 \u0432\u0435\u0440\u0441\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\nhttps://github.com/PsychoSec2/CVE-2022-1388-POC\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1880"}, {"timestamp": "2022-07-01T18:22:21Z", "date_only": false, "value": "2022-07-01T18:22:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2618", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1148bb48-ee6f-47de-8470-182a19985841", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for exploiting CVE-2022-1388 on BIG IP F5\nURL\uff1ahttps://github.com/Luchoane/CVE-2022-1388_refresh\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2618"}, {"timestamp": "2022-07-04T07:12:00Z", "date_only": false, "value": "2022-07-04T07:12:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/2635", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "865dadc9-9ebf-41d6-8ddf-ddb30212a8e2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388, bypassing iControl REST authentication\nURL\uff1ahttps://github.com/jbharucha05/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/2635"}, {"timestamp": "2022-07-05T11:01:33Z", "date_only": false, "value": "2022-07-05T11:01:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/poxek/1913", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c7d95d28-72b9-48aa-be26-48402e2af3ff", "content": "F5 BIG-IP RCE Check\nhttps://github.com/bytecaps/CVE-2022-1388-EXP\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/1913"}, {"timestamp": "2022-07-13T13:02:16Z", "date_only": false, "value": "2022-07-13T13:02:16.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2e18104e-c147-4b60-9570-fbe9e46ba484"}, {"timestamp": "2022-07-17T15:01:16Z", "date_only": false, "value": "2022-07-17T15:01:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2017", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b594cde0-7d3c-43f6-b411-d8d1d3c553d7", "content": "How does it work?\nCVE-2022-1388\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "url": "https://t.me/poxek/2017"}, {"timestamp": "2022-07-27T05:52:24Z", "date_only": false, "value": "2022-07-27T05:52:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2048", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7dafe296-c8e7-4973-8745-8cf8bb47f444", "content": "#CVE-2022\n\nK23605346: BIG-IP iControl REST vulnerability CVE-2022-1388\n\nhttps://github.com/numanturle/CVE-2022-1388\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2048"}, {"timestamp": "2022-07-27T13:35:05Z", "date_only": false, "value": "2022-07-27T13:35:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3223", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ccd9ae97-fc04-4742-adf3-7dfa8b23b6d1", "content": "\u0423 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0449\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435.\n\n\u041d\u043e\u0432\u044b\u0439\u00a0\u043e\u0442\u0447\u0435\u0442 \u0437\u0430 2022 \u0433\u043e\u0434 Palo Alto Unit 42 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u043e\u0432\u044b\u0439 CVE \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\nPalo Alto Unit 42 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u041f\u041e \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f RCE. \n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0430.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043d\u0438\u0437\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0435\u0434\u0443\u0442 \u043c\u043e\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0438 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0434\u0430\u044e\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0422\u0430\u043a, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1388 \u0432 F5 BIG-IP \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 4 \u043c\u0430\u044f 2022 \u0433\u043e\u0434\u0430, \u0438, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0441\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 2552 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0435 Palo Alto, \u0441\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0438\u0438 2022\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 ProxyShell (CVE-2021-34473, CVE-2021-34523 \u0438 CVE-2021-31207), \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043e 55% \u043e\u0442 \u043e\u0431\u0449\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u043b\u0441\u044f Log4Shell \u0441 14%, \u0434\u0430\u043b\u0435\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 CVE SonicWall \u2014 7%, ProxyLogon \u2014 5%, \u0430 RCE \u0432\u00a0Zoho ManageEngine ADSelfService Plus \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0432 3% \u0441\u043b\u0443\u0447\u0430\u0435\u0432.\n\n\u041a\u0430\u043a \u0432\u0438\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u0432 \u043e\u0431\u044a\u0435\u043c\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0435 \u0441\u0430\u043c\u044b\u0435 \u0441\u0432\u0435\u0436\u0438\u0435, \u0430 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442\u0441\u044f \u0447\u0430\u0449\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0438\u043b\u0438 \u0441\u0432\u0435\u0436\u0435\u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u041f\u041e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0434\u043d\u0443 \u0442\u0440\u0435\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439.\n\n\u0412 37% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0444\u0438\u0448\u0438\u043d\u0433 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\u00a0\u0412 15% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u043b\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u0443\u043f \u0438\u043d\u0441\u0430\u0439\u0434\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 10% \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0412\u044b\u0432\u043e\u0434\u044b \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0441\u0430\u043c\u0438: \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430.", "url": "https://t.me/true_secator/3223"}, {"timestamp": "2022-07-28T07:20:54Z", "date_only": false, "value": "2022-07-28T07:20:54.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/SecLabNews/12481", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cc6f0f14-bc78-4524-8cc9-5b2d7c0ce79c", "content": "\u0423 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0449\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435.\n\n\u041d\u043e\u0432\u044b\u0439\u00a0\u043e\u0442\u0447\u0435\u0442 \u0437\u0430 2022 \u0433\u043e\u0434 Palo Alto Unit 42 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u043e\u0432\u044b\u0439 CVE \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\nPalo Alto Unit 42 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u041f\u041e \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f RCE. \n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0430.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043d\u0438\u0437\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0435\u0434\u0443\u0442 \u043c\u043e\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0438 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0434\u0430\u044e\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0422\u0430\u043a, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1388 \u0432 F5 BIG-IP \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 4 \u043c\u0430\u044f 2022 \u0433\u043e\u0434\u0430, \u0438, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0441\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 2552 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0435 Palo Alto, \u0441\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0438\u0438 2022\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 ProxyShell (CVE-2021-34473, CVE-2021-34523 \u0438 CVE-2021-31207), \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043e 55% \u043e\u0442 \u043e\u0431\u0449\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u043b\u0441\u044f Log4Shell \u0441 14%, \u0434\u0430\u043b\u0435\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 CVE SonicWall \u2014 7%, ProxyLogon \u2014 5%, \u0430 RCE \u0432\u00a0Zoho ManageEngine ADSelfService Plus \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0432 3% \u0441\u043b\u0443\u0447\u0430\u0435\u0432.\n\n\u041a\u0430\u043a \u0432\u0438\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u0432 \u043e\u0431\u044a\u0435\u043c\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0435 \u0441\u0430\u043c\u044b\u0435 \u0441\u0432\u0435\u0436\u0438\u0435, \u0430 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442\u0441\u044f \u0447\u0430\u0449\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0438\u043b\u0438 \u0441\u0432\u0435\u0436\u0435\u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u041f\u041e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0434\u043d\u0443 \u0442\u0440\u0435\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439.\n\n\u0412 37% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0444\u0438\u0448\u0438\u043d\u0433 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\u00a0\u0412 15% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u043b\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u0443\u043f \u0438\u043d\u0441\u0430\u0439\u0434\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 10% \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0412\u044b\u0432\u043e\u0434\u044b \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0441\u0430\u043c\u0438: \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430.", "url": "https://t.me/SecLabNews/12481"}, {"timestamp": "2022-08-26T07:00:04Z", "date_only": false, "value": "2022-08-26T07:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2366", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b9ea81a0-f1c4-4c25-976f-b89ddf08a558", "content": "#\u041f\u041e #CVE #POC\n\nBIG-IP iControl REST RCE \nCVE-2022-1388\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b.", "url": "https://t.me/poxek/2366"}, {"timestamp": "2022-09-16T00:00:00Z", "date_only": false, "value": "2022-09-16T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-004", "record": "CERTFR-2022-ALE-004", "field": "last_revision_date"}, {"timestamp": "2022-09-16T00:00:00Z", "date_only": false, "value": "2022-09-16T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2022-ALE-004", "record": "CERTFR-2022-ALE-004", "field": "revisions.1.revision_date"}, {"timestamp": "2022-09-30T08:50:28Z", "date_only": false, "value": "2022-09-30T08:50:28.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/b7effe8d-f245-44fd-94ef-5f2f693cfb06", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a1c4d259-c028-4791-86f8-d2a4ddd4d636"}, {"timestamp": "2022-10-21T13:46:39Z", "date_only": false, "value": "2022-10-21T13:46:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3592", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "43f7714a-8377-4aeb-95db-8d78edadc4e2", "content": "F5 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n\u0414\u0435\u0441\u044f\u0442\u0438\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0\u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0435 \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0438\u043b\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443, \u0435\u0441\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u0436\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433\u0443 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 DoS.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0442\u0440\u0438 \u0438\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043c\u043e\u0434\u0443\u043b\u044f\u043c\u0438 NGINX \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0420\u0435\u0439\u0442\u0438\u043d\u0433 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 F5OS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f F5 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 1 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2023 \u0433\u043e\u0434\u0430. \u0412 \u0434\u0432\u0443\u0445 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0430\u0435 \u0438 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043e 50 \u0438 21 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c BIG-IP \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n\u0421\u0430\u043c\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2022-1388, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f\u00a0\u0432\u044b\u0432\u043e\u0434\u0430 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 BIG-IP.", "url": "https://t.me/true_secator/3592"}, {"timestamp": "2022-10-23T13:37:25Z", "date_only": false, "value": "2022-10-23T13:37:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/vxunderground/1297", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "81f5e2e4-60c1-4066-bfb0-15c073e1051e", "content": "We've updated the vx-underground APT collection. \n\n2013.03.20/The Teamspy Story\n2013.03.20/Teamspy - Technical Report\n2016.03.02/New self\u2011protecting USB trojan able to avoid detection\n2019.04.10/Gaza Cybergang Group1, operation SneakyPastes\n2017.04.13/Teamspy - A deeper look into malware abusing TeamViewer\n2017.04.14/PlexingEagle: A surprise encounter with a Telco APT\n2019.11.05/DarkUniverse \u2013 the mysterious APT framework #27\n2022.04.06/Continued Targeting of Indian Power Grid Assets by Chinese State-Sponsored Activity Group\n2022.09.15/F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech\n2022.09.30/Amazon\u2011themed campaigns of Lazarus in the Netherlands and Belgium\n2022.10.11/The Russian SpyAgent (Teamspy) \u2013 a Decade Later and RAT Tools Remain at Risk\n2022.10.12/WIP19 Espionage | New Chinese APT Targets IT Service Providers and Telcos With Signed Malware\n2022.10.12/Winnti APT group docks in Sri Lanka for new campaign\n2022.10.13/Budworm: Espionage Group Returns to Targeting U.S. Organizations\n2022.10.13/Alchimist: A new attack framework in Chinese for Mac, Linux and Windows\n2022.10.14/New \u201cPrestige\u201d ransomware impacts organizations in Ukraine and Poland\n2022.10.17/DiceyF deploys GamePlayerFramework in online casino development studio\n2022.10.18/Unknown Actor: Powershell Backdoor disguising itself as part of a Windows update process\n2022.10.18/Spyder Loader: Malware Seen in Recent Campaign Targeting Organizations in Hong Kong (Winnti)\n2022.10.20/Domestic Kitten campaign spying on Iranian citizens with new FurBall malware\n2022.10.21/WarHawk: the New Backdoor in the Arsenal of the SideWinder APT Group\n\nCheck it out here: https://vx-underground.org/malware.html", "url": "https://t.me/vxunderground/1297"}, {"timestamp": "2022-10-25T12:20:51Z", "date_only": false, "value": "2022-10-25T12:20:51.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3117", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9ad964e8-0660-4b97-bfa9-1925e10dc8a9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1acURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/On-Cyber-War/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3117"}, {"timestamp": "2022-10-25T12:55:52Z", "date_only": false, "value": "2022-10-25T12:55:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3119", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "38f7db36-cbb2-4c6d-812d-261a59cf0c46", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1acURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/OnCyberWar/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3119"}, {"timestamp": "2022-10-25T13:16:18Z", "date_only": false, "value": "2022-10-25T13:16:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3118", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "21cb3b76-2580-4980-a1c9-62aec793cb6a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1acURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/OnCyberWar/CVE-2022-1388-BIG-IP-REST-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3118"}, {"timestamp": "2022-11-29T06:36:16Z", "date_only": false, "value": "2022-11-29T06:36:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1190", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3cff0b1c-b4f1-4ee2-a409-c6cc16e0c1ff", "content": "\u0420\u0430\u043d\u043e\u0432\u0430\u0442\u043e, \u043d\u043e \u0442\u0430\u043a\u0438 \u0434\u0430\n\u0422\u041e\u041f 10 \u0438\u0437 2022\n\n1. Follina (CVE-2022-30190)\n2. Log4Shell (CVE-2021-44228)\n3. Spring4Shell (CVE-2022-22965)\n4. F5 BIG-IP (CVE-2022-1388)\n5. Google Chrome zero-day (CVE-2022-0609)\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882)\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040)\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352)\n9. Atlassian Confluence RCE flaw (CVE-2022-26134)\n10. Zyxel RCE vulnerability (CVE-2022-30525)", "url": "https://t.me/proxy_bar/1190"}, {"timestamp": "2022-11-29T07:00:36Z", "date_only": false, "value": "2022-11-29T07:00:36.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/monkey_hacker/28", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "01975ae1-b7aa-4ca6-8f8c-9dfd2e3be77e", "content": "\u0420\u0430\u043d\u043e\u0432\u0430\u0442\u043e, \u043d\u043e \u0442\u0430\u043a\u0438 \u0434\u0430\n\u0422\u041e\u041f 10 \u0438\u0437 2022\n\n1. Follina (CVE-2022-30190)\n2. Log4Shell (CVE-2021-44228)\n3. Spring4Shell (CVE-2022-22965)\n4. F5 BIG-IP (CVE-2022-1388)\n5. Google Chrome zero-day (CVE-2022-0609)\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882)\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040)\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352)\n9. Atlassian Confluence RCE flaw (CVE-2022-26134)\n10. Zyxel RCE vulnerability (CVE-2022-30525)", "url": "https://t.me/monkey_hacker/28"}, {"timestamp": "2022-12-05T04:24:48Z", "date_only": false, "value": "2022-12-05T04:24:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Al5s1pu9DlCNMnH7rJt2q5NFKP_tt6i0TJLpRuR3HfdnDhA", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ae818478-860a-49ff-b387-ce9467cb8e42"}, {"timestamp": "2022-12-06T17:10:12Z", "date_only": false, "value": "2022-12-06T17:10:12.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/8yasABRsBeQ7_fA7ekcVN5-Bf6YalSSK4RwFtvSF2nNKkrM", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "53a5e2ae-faa6-4473-8a82-fe63c59a59ef"}, {"timestamp": "2022-12-16T15:56:36Z", "date_only": false, "value": "2022-12-16T15:56:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/package_security/17", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5bffb0a4-74b5-40f1-baae-d017e1356ad9", "content": "\u200b\ud83c\udfc6 \u0418\u0442\u043e\u0433\u0438 \u0433\u043e\u0434\u0430\n\n\u041d\u0430\u0441\u0442\u0430\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u0435.\n2\u043a22 \u0433\u043e\u0434 \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a \u043a\u043e\u043d\u0446\u0443, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u043f\u043e\u0440\u0430 \u043f\u043e\u0434\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0442\u043e\u0433\u0438.\n\n\u0423 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432, \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430, \u0438\u0442\u043e\u0433\u0438 \u0441\u0432\u043e\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u0440\u0436\u0438\u0442\u0435 \u0422\u041e\u041f-10 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Cyber Threat Intelligence:\n\n1. Follina (CVE-2022-30190) \n\n2. Log4Shell (CVE-2021-44228) \n\n3. Spring4Shell (CVE-2022-22965) \n\n4. F5 BIG-IP (CVE-2022-1388) \n\n5. Google Chrome zero-day (CVE-2022-0609) \n\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882) \n\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040) \n\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352) \n\n9. Atlassian Confluence RCE flaw (CVE-2022-26134) \n\n10. Zyxel RCE vulnerability (CVE-2022-30525)\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b, \u0431\u0435\u0440\u0435\u0433\u0438\u0442\u0435 \u0441\u0435\u0431\u044f \u0438 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\nP.S. \u041d\u0438\u0436\u0435 \u0435\u0441\u0442\u044c \u043f\u0438\u043a\u0447\u0430 \u0441 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u044b\u043c\u0438 \u0438\u043a\u043e\u043d\u043a\u0430\u043c\u0438\n\n#\u041f\u043e\u043b\u0435\u0437\u043d\u043e\u0435\n\n\u041f\u0430\u043a\u0435\u0442 \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438", "url": "https://t.me/package_security/17"}, {"timestamp": "2022-12-21T16:27:48Z", "date_only": false, "value": "2022-12-21T16:27:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/1915", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "eae2ec87-d644-4f79-894e-dcac9c38d2a9", "content": "#Analytics\nTop 10 most exploited vulnerabilities in 2022\n\n1. CVE-2022-30190: MS Office \"Follina\"\n\n2. CVE-2021-44228: Apache Log4Shell\n\n3. CVE-2022-22965: Spring4Shell\n\n4. CVE-2022-1388: F5 BIG-IP\n\n5. CVE-2022-0609: Google Chrome zero-day\nhttps://blog.google/threat-analysis-group/countering-threats-north-korea\n6. CVE-2017-11882: Old but not forgotten - MS Office bug\n\n7. CVE-2022-41082, CVE-2022-41040: ProxyNotShell\n\n8. CVE-2022-27925, CVE-2022-41352: Zimbra Collaboration Suite bugs\n\n\n9. CVE-2022-26134: Atlassian Confluence RCE flaw  \n\n10. CVE-2022-30525: Zyxel RCE vulnerability", "url": "https://t.me/crackcodes/1915"}, {"timestamp": "2022-12-25T04:55:31Z", "date_only": false, "value": "2022-12-25T04:55:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3628", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "42287d9d-4c0d-44f9-be62-bf538006c757", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aRed Team\n\u63cf\u8ff0\uff1a-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams\nURL\uff1ahttps://github.com/vaelwolf/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#Red Team", "url": "https://t.me/GithubRedTeam/3628"}, {"timestamp": "2022-12-25T08:18:33Z", "date_only": false, "value": "2022-12-25T08:18:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3630", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6d477c9c-683f-4ed2-b94c-c49761c66ac1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aRed Team\n\u63cf\u8ff0\uff1a-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams\nURL\uff1ahttps://github.com/Ignitetechnologies/Credential-Dumping\n\n\u6807\u7b7e\uff1a#Red Team", "url": "https://t.me/GithubRedTeam/3630"}, {"timestamp": "2023-01-04T10:02:38Z", "date_only": false, "value": "2023-01-04T10:02:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/LearnExploit/4351", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cfd52562-9076-48be-8732-5a4ca7d32b61", "content": "1. Follina (CVE-2022-30190)\n\n2. Log4Shell (CVE-2021-44228)\n\n3. Spring4Shell (CVE-2022-22965)\n\n4. F5 BIG-IP (CVE-2022-1388)\n\n5. Google Chrome zero-day (CVE-2022-0609)\n\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882)\n\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040)\n\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352)\n\n9. Atlassian Confluence RCE flaw (CVE-2022-26134)\n\n10. Zyxel RCE vulnerability (CVE-2022-30525)\n\n#Exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4351"}, {"timestamp": "2023-01-18T13:54:27Z", "date_only": false, "value": "2023-01-18T13:54:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/2081", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2873837b-2a2c-461a-a25c-7cfaca2fad14", "content": "\u200b\u26a1\ufe0f\u0411\u0435\u043b\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043d\u0443\u0434\u044f\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 ManageEngine \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\ud83d\udcac \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Horizon3 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho ManageEngine. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043e\u043d\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0432\u044b\u043b\u043e\u0436\u0438\u0442\u044c \u0435\u0433\u043e \u0432 \u0441\u0435\u0442\u044c, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0422\u0430\u043a, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u0435\u043b\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0445\u043e\u0442\u044f\u0442 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u00ab\u0437\u0430\u043b\u0430\u0442\u0430\u043b\u0438\u00bb \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-47966. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ManageEngine, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0432\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ManageEngine. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zoho \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0438\u0437 \u043d\u0438\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Horizon3\u2019s Attack Team \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 Zoho, \u0447\u0442\u043e \u043e\u043d\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0425\u043e\u0442\u044f \u043e\u043d\u0438 \u0435\u0449\u0435 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u0449\u0438\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IOC), Horizon3 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0436\u0435 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0415\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 ManageEngine ServiceDesk Plus.\n\n\u0414\u0436\u0435\u0439\u043c\u0441 \u0425\u043e\u0440\u0441\u043c\u0430\u043d, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 Horizon3, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 10% \u0432\u0441\u0435\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a CVE-2022-47966.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 GreyNoise, \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u0443\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u0432\u043e\u0438\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 RCE, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u0432\u043e\u0439 PoC-\u043a\u043e\u0434.\n\n\u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Horizon3 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nCVE-2022-28219 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zoho ManageEngine ADAudit Plus, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Active Directory.\nCVE-2022-1388 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 F5 BIG-IP.\nCVE-2022-22972 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\u0416\u0451\u0441\u0442\u043a\u043e, \u043d\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u2014 \u043f\u043e\u0441\u043b\u0435 \u0443\u043b\u044c\u0442\u0438\u043c\u0430\u0442\u0443\u043c\u0430, \u0432\u044b\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u043c\u043e\u0436\u043d\u043e \u043d\u0435 \u0441\u043e\u043c\u043d\u0435\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043b\u044e\u0431\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043a\u0440\u0430\u0442\u0447\u0430\u0439\u0448\u0438\u0435 \u0441\u0440\u043e\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b #ManageEngine #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/2081"}, {"timestamp": "2023-01-18T19:01:11Z", "date_only": false, "value": "2023-01-18T19:01:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bfty_pqfqcPbz91gEtAMgSGk978oZn33tjSdCgHLZMU6wcc", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3454d9ca-fe4f-44c5-bf6a-cd4af8472b99"}, {"timestamp": "2023-01-24T00:00:00Z", "date_only": false, "value": "2023-01-24T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_update_date.data.0.date"}, {"timestamp": "2023-01-29T12:39:05Z", "date_only": false, "value": "2023-01-29T12:39:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2566", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4a01e20c-0aca-4708-a49c-34aa5f6bd49c", "content": "#Red_Team\n-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams\n\nhttps://github.com/vaelwolf/CVE-2022-1388\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2566"}, {"timestamp": "2023-03-15T23:04:30Z", "date_only": false, "value": "2023-03-15T23:04:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/218164", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "17659f55-2ad6-4cc9-ad80-c58f6f9c3d89", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"F5 BIG-IP iControl REST RCE - CVE-2022-1388\", \n  \"author\": \" (Will Graham)\",\n  \"Detection Date\": \"15 Mar 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/218164"}, {"timestamp": "2023-05-05T17:24:10Z", "date_only": false, "value": "2023-05-05T17:24:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/jokerplstaeen/16429", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f1623810-ae25-4890-a032-cfbd561e8045", "content": "\u200f\ud83d\udca5 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \"CVE-2022-1388\"\ud83e\udeb2\ud83e\uddd1\u200d\ud83d\udcbb\n\u0623\u062d\u064a\u0627\u0646\u0627\u064b \u0646\u0633\u0645\u0639 \u0623\u062e\u0628\u0627\u0631 \u0645\u062b\u0644 \u0627\u0644\u062e\u0628\u0631 \u0627\u0644\u062a\u0627\u0644\u064a:\n\n\u25aa\ufe0f\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 F5 Big-IP \u0628\u0631\u0642\u0645: 1388-2022-CVE \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u062e\u062a\u0631\u0642 \u0641\u064a \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0639\u0646 \u0628\u0639\u062f\u060c \u0648\u062a\u0645 \u0625\u0639\u0637\u0627\u0621 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0642\u064a\u064a\u0645 \u062e\u0637\u0648\u0631\u0629 10/10.\n\n\ud83d\udccd\u0639\u0644\u0649 \u0645\u0627\u0630\u0627 \u064a\u062f\u0644 \u0647\u0630\u0627 \u0627\u0644\u0631\u0642\u0645\u061f \u0648\u0645\u0627 \u0647\u0648 \u0645\u0639\u0646\u0627\u0647\u061f.. \"CVE-2022-1388\"\n\n\ud83d\udccd\u0627\u0644 \"CVE-2022-1388\" \u0647\u0648 \u0627\u062e\u062a\u0635\u0627\u0631 \u0644 Common Vulnerabilities and Exposures \u0648\u0647\u0648 \u0645\u0648\u0642\u0639 \u0639\u0627\u0644\u0645\u064a \u0644\u062a\u0639\u0631\u064a\u0641 \u0648\u0641\u0647\u0631\u0633\u0629 \u062c\u0645\u064a\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0648\u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647\u0627 \u0639\u0644\u0646\u0627\u064b \u0648\u0646\u0634\u0631\u0647\u0627 \u0648\u064a\u0648\u062c\u062f \u0644\u0643\u0644 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0645\u0643\u062a\u0634\u0641\u0629 \u0645\u0639\u0631\u0641 \u0631\u0642\u0645\u064a \u0641\u0631\u064a\u062f (CVE-YYY-NNNN)\n\n\ud83d\udccd\u0648\u0647\u064a \u0633\u0646\u0629 \u0627\u0644\u0646\u0634\u0631 \u0623\u0648 \u0627\u0644\u0633\u0646\u0629 \u0627\u0644\u062a\u064a \u0627\u0643\u062a\u0634\u0641\u062a \u0641\u064a\u0647\u0627 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u062b\u0627\u0644:\n\n\"Stuxnet Worm: CVE-2010-2772\"\n\u25aa\ufe0f\u0647\u0646\u0627 \u0641\u0627\u064a\u0631\u0648\u0633 \"\u0633\u062a\u0648\u0643\u0633\u0646\u062a\" \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647 \u0641\u064a 2010.\n\n\"WannaCry: CVE-2017-0144\"\n\u25aa\ufe0f\u0647\u0646\u0627 \u0647\u062c\u0648\u0645 \u0644\u0644\u0641\u062f\u064a\u0629 \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647 \u0641\u064a 2017.\n\n\ud83d\udccd\u064a\u0639\u062a\u0628\u0631 \u0627\u0644 \"CVE-2022-1388\" \u0647\u0648 \u0645\u0639\u0631\u0641 \u0631\u0642\u0645\u064a CVE \u0641\u0631\u064a\u062f \u0644\u0644\u062b\u063a\u0631\u0629\u060c \u0644\u0627 \u064a\u062a\u0643\u0631\u0631 \u064a\u062a\u0643\u0648\u0646 \u0645\u0646 4 \u0623\u0631\u0642\u0627\u0645\u060c \u0648\u0623\u062d\u064a\u0627\u0646\u0627\u064b \u0625\u0644\u0649 5 \u0623\u06487 \u0623\u0631\u0642\u0627\u0645 \u0647\u0630\u0627 \u0627\u0644\u0631\u0642\u0645 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0648\u0635\u0641 \u0644\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0644\u062a\u0627\u0631\u064a\u062e \u0648\u0622\u062e\u0631 \u062a\u062d\u0631\u064a\u0631\u060c \u0648\u0646\u0648\u0639 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0648\u0645\u0627 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0645\u062a\u0636\u0631\u0631\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u0645\u0628\u0627\u0634\u0631\u0629 \u0623\u0648 \u063a\u064a\u0631 \u0645\u0628\u0627\u0634\u0631\u0629 \u0648\u0627\u0644\u0645\u0631\u0627\u062c\u0639 \u0648\u062a\u0635\u0646\u064a\u0641 \u062e\u0637\u0648\u0631\u0629 \u0627\u0644\u062b\u063a\u0631\u0629.", "url": "https://t.me/jokerplstaeen/16429"}, {"timestamp": "2023-06-12T21:30:57Z", "date_only": false, "value": "2023-06-12T21:30:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/osintflow_team/220", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "57118631-5dc4-4066-a0eb-61f45e0fc487", "content": "\ud83d\ude0e F5 BIG-IP RCE (CVE-2022-1388). How it works.", "url": "https://t.me/osintflow_team/220"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f7cef93e-144e-499b-bec7-70b6245da89b"}, {"timestamp": "2023-08-07T10:20:52Z", "date_only": false, "value": "2023-08-07T10:20:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/kasperskyb2b/786", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b7d04c4f-76bd-437e-b3ac-df49e114065a", "content": "\u2705 \u0413\u043b\u0430\u0432\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0442\u0447\u0451\u0442 CISA \u0438 \u0438\u0445 \u0430\u043d\u0433\u043b\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0441\u043e\u044e\u0437\u043d\u0438\u043a\u043e\u0432\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0433\u043e\u0434\u0430 \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u043e\u0432, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 2022 \u0433\u043e\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 12 \u043c\u0435\u0441\u044f\u0446\u0435\u0432, \u043d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u0443\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b. \u041d\u0430\u0447\u043d\u0451\u043c \u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043e\u0442\u0447\u0451\u0442\u0430 \u00ab\u043f\u044f\u0442\u0438\u0433\u043b\u0430\u0437\u044b\u0445\u00bb, \u043f\u043e\u0441\u0432\u044f\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \n\n\u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0432\u044b\u0432\u043e\u0434 \u043d\u0435 \u043d\u043e\u0432 \u2014 \u0441\u0430\u043c\u044b\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f 0day \u0438\u043b\u0438 1day. \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0433\u043e\u0434 \u0438\u043b\u0438 \u0434\u0432\u0430, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 PoC \u043d\u0430 Github, \u0434\u0430\u0432\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0430\u0442\u0447\u0430\u043c\u0438, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043b\u0438\u043a\u0432\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.  \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0442\u0440\u0443\u0434\u043d\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044f\u0445.\n\n\u0422\u043e\u043f-12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2018-13379 \u0432 Fortinet SSL VPN, \u0442\u0440\u0438 CVE 2021 \u0433\u043e\u0434\u0430, \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 ProxyShell, CVE-2021-40539 \u0432 Zoho ManageEngine, CVE-2021-26084 \u0438 -26134 \u0432 Confluence, CVE-2021-44228 Log4Shell, CVE-2022-22954 \u0438 -22960 \u0432 VMWare, CVE-2022-1388 \u0432 F5 BIG-IP,  CVE-2022-30190 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Windows, MSDT.\n\n\u0415\u0449\u0451 \u0442\u0440\u0438 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 (\u0430\u043d\u0433\u043b). \u0422\u0430\u043c \u0436\u0435 \u0434\u0430\u043d\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u043d\u044f\u0442\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b:\n\n\ud83d\udd18\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439\n\ud83d\udd18\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439\n\ud83d\udd18\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u0430\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0441\u0435\u0442\u0438\n\ud83d\udd18\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0441\u043e\u0432\u0435\u0442\u044b @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/786"}, {"timestamp": "2023-08-10T00:00:00Z", "date_only": false, "value": "2023-08-10T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_release_date.data.3.date"}, {"timestamp": "2023-08-10T03:10:00Z", "date_only": false, "value": "2023-08-10T03:10:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_update_date.data.3.date"}, {"timestamp": "2023-10-13T09:19:46Z", "date_only": false, "value": "2023-10-13T09:19:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/358103", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e0014687-2c8b-46b6-bf39-72ced63f4d28", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2022-1388: F5 BIG-IP'te Kimlik Do\u011frulama Atlatma (Bypass)\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"13 Oct 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/358103"}, {"timestamp": "2023-10-13T09:20:19Z", "date_only": false, "value": "2023-10-13T09:20:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/breachdetector/358116", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0d6a8d0a-2899-42c5-bbb6-7791b54d508f", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2022-1388: What is Authentication Bypass in F5 BIG-IP?\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"13 Oct 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/358116"}, {"timestamp": "2023-10-14T14:57:37Z", "date_only": false, "value": "2023-10-14T14:57:37+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-1388", "field": "timestamps.asserted_at", "uuid": "b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:37Z", "date_only": false, "value": "2023-10-14T14:57:37+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-1388", "field": "timestamps.first_seen_at", "uuid": "b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-18T00:25:05.758Z", "date_only": false, "value": "2023-10-18T00:25:05.758Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / f5", "record": "CVE-2022-1388", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-10-21T12:53:45Z", "date_only": false, "value": "2023-10-21T12:53:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/avleonovrus/46", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d88bae1f-5c2c-4506-9ee9-50a7ecb12c1c", "content": "\u0412\u043e\u0442 \u0442\u0443\u0442 Palo Alto \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442 \u0437\u0430\u043d\u044f\u0442\u043d\u043e\u0435: \u0447\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u043e  \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE. \u041f\u0440\u044f\u043c \u0432\u043e\u0442 \u0442\u0430\u043a:\n\n\"The 2022 Attack Surface Management Threat Report found that attackers typically start scanning for vulnerabilities within 15 minutes of a CVE being announced\".\n\n\u041a\u0430\u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u044d\u0442\u0438 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u0440\u043e\u0434\u0435 \u043d\u0438\u0433\u0434\u0435 \u043d\u0435 \u043f\u0438\u0448\u0443\u0442. \u041d\u043e \u0432\u0438\u0434\u0438\u043c\u043e \u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u0441\u0435\u043a\u0430\u0442\u044c \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u0445/ids \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u0442\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u044d\u0442\u043e \u0441 \u0434\u0430\u0442\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0447\u0435\u0440\u0435\u0437 5 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0443 \u0438 \u0437\u0430 10 \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0434\u0432\u0435 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\"For example, Palo Alto Networks released a Threat Prevention signature for the F5 BIG-IP Authentication Bypass Vulnerability (CVE-2022-1388), and within just 10 hours, the signature triggered 2,552 times due to vulnerability scanning and active exploitation attempts\".\n\n\u041a\u0440\u0443\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u043e \u0432\u0441\u0435-\u0442\u0430\u043a\u0438 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0443 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0441\u0440\u0430\u0437\u0443, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u0448\u043b\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u043a\u0430\u043d\u044b \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0432\u0430\u0442\u043e. \n\n\u041d\u043e \u043d\u0435 \u0441\u0443\u0442\u044c. \u041d\u0435 \u0442\u0430\u043a \u0432\u0430\u0436\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0447\u0435\u0440\u0435\u0437 15 \u043c\u0438\u043d\u0443\u0442 \u0441\u043a\u0430\u043d\u044b \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442\u0441\u044f \u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0436\u0435. \u0424\u0430\u043a\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044b \u043d\u043e\u0432\u043e\u0441\u0442\u043d\u043e\u0439 \u043f\u043e\u0442\u043e\u043a \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0418 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u043a\u0430\u043d\u0438\u0442\u044c \u0432\u0430\u0448 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0447\u0430\u0449\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435, \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u043c \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u0435. \n\n\u0418 \u0447\u0442\u043e\u0431\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u0438\u0433\u0440\u0430\u0442\u044c \u0441\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0434\u043e\u0433\u043e\u043d\u044f\u043b\u043a\u0438 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u044d\u0442\u043e \u0437\u043d\u0430\u0442\u044c \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043b\u0443\u0447\u0448\u0435, \u0447\u0435\u043c \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c. \u041f\u043e\u043d\u0438\u043c\u0430\u0442\u044c \u0437\u0430\u0447\u0435\u043c \u0442\u043e\u0442 \u0438\u043b\u0438 \u0438\u043d\u043e\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u043d\u0443\u0436\u0435\u043d. \u041f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0440\u0430\u0442\u044c\u0441\u044f  \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0415\u0441\u043b\u0438 \u0435\u0441\u0442\u044c \u043a\u0430\u043a\u043e\u0435-\u0442\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435, \u0442\u043e \u0438\u043c\u0435\u0442\u044c \u0432 \u0432\u0438\u0434\u0443, \u0447\u0442\u043e \u0438\u0445 \u0431\u0443\u0434\u0443\u0442 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043a\u0430\u0442\u044c \u0438 \u043b\u043e\u043c\u0430\u0442\u044c. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u0442\u044c \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0434\u0435\u0442\u0435\u043a\u0442\u044b \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u0432 \u0441\u043a\u0430\u043d\u0435\u0440\u0430\u0445 \u0438 \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u0432\u0435\u0440\u0435\u0449\u0430\u0442\u044c \u0432 \u0421\u041c\u0418. \n\n\u0421\u043a\u0430\u0437\u0430\u0442\u044c-\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043f\u0440\u043e\u0449\u0435, \u0447\u0435\u043c \u0441\u0434\u0435\u043b\u0430\u0442\u044c. \n\n@avleonovrus #VMnews #PaloAlto #F5", "url": "https://t.me/avleonovrus/46"}, {"timestamp": "2023-10-27T14:49:00Z", "date_only": false, "value": "2023-10-27T14:49:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/itsec_news/3549", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f8fa5f2f-4f12-4181-92d2-dc7e4bf1763c", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 BIG-IP \u043e\u0442 F5 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcac \u0422\u0440\u0430\u043d\u0441\u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f F5, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 BIG-IP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-46747 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0432 9,8 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0431\u0430\u043b\u043b\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u041c\u0430\u0439\u043a\u043b\u0443 \u0412\u0435\u0431\u0435\u0440\u0443 \u0438 \u0422\u043e\u043c\u0430\u0441\u0443 \u0425\u0435\u043d\u0434\u0440\u0438\u043a\u0441\u043e\u043d\u0443 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Praetorian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u0441 \u043d\u044e\u0430\u043d\u0441\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u044b CVE-2023-46747.\n\nF5 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430: \u00ab\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 / \u0438\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0431\u044b\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BIG-IP:\n\n17.1.0 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 17.1.0.3 + Hotfix-BIGIP-17.1.0.3.0.75.4-ENG);\n\n16.1.0 - 16.1.4 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 16.1.4.1 + Hotfix-BIGIP-16.1.4.1.0.50.5-ENG);\n\n15.1.0 - 15.1.10 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG);\n\n14.1.0 - 14.1.5 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 14.1.5.6 + Hotfix-BIGIP-14.1.5.6.0.10.6-ENG);\n\n13.1.0 - 13.1.5 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG);\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 F5 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 , \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 14.1.0. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0430\u043a\u0446\u0435\u043d\u0442, \u0447\u0442\u043e \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 BIG-IP \u043d\u0438\u0436\u0435 14.1.0 \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0449\u0451 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 BIG-IP. \u0421\u0430\u043c \u0441\u043a\u0440\u0438\u043f\u0442 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0432\u0435\u0442\u044b:\n\n\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 ;\n\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f .\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2023-46747 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 BIG-IP TMUI \u043f\u043e\u0441\u043b\u0435 CVE-2020-5902 \u0438 CVE-2022-1388 .\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/3549"}, {"timestamp": "2023-11-02T00:00:00Z", "date_only": false, "value": "2023-11-02T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_update_date.data.1.date"}, {"timestamp": "2023-11-02T01:54:00Z", "date_only": false, "value": "2023-11-02T01:54Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-1388", "record": "GSD-2022-1388", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-27T23:06:54Z", "date_only": false, "value": "2023-11-27T23:06:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/608", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "70a8885a-f19c-4342-ad52-c3d0834273d3", "content": "#ExploitObserverAlert\n\nCVE-2022-1388\n\nDESCRIPTION: Exploit Observer has 212 entries related to CVE-2022-1388. On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated\n\nFIRST-EPSS: 0.973550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/608"}, {"timestamp": "2023-12-05T05:52:38Z", "date_only": false, "value": "2023-12-05T05:52:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1404", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8d5b66fa-dd0f-4d0a-b979-f2718c09a75a", "content": "#ExploitObserverAlert\n\nCVE-2022-1388\n\nDESCRIPTION: Exploit Observer has 212 entries related to CVE-2022-1388. On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated\n\nFIRST-EPSS: 0.973550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1404"}, {"timestamp": "2023-12-13T01:19:28.468Z", "date_only": false, "value": "2023-12-13T01:19:28.468229Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-1388", "record": "GSD-2022-1388", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-04T07:56:36Z", "date_only": false, "value": "2024-01-04T07:56:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5952", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f4d9c2f3-7302-4481-af09-57c3c63c5437", "content": "#exploit\n1. CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\nhttps://github.com/nvk0x/CVE-2022-1388-exploit\n\n2. CVE-2022-1040:\nSophos XG Firewall Authentication bypass\nhttps://blog.viettelcybersecurity.com/cve-2022-1040-sophos-xg-firewall-authentication-bypass\n]-> https://github.com/cve-hunter/CVE-2022-1040-sophos-rce", "url": "https://t.me/CyberSecurityTechnologies/5952"}, {"timestamp": "2024-04-02T20:37:29Z", "date_only": false, "value": "2024-04-02T20:37:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wa8ZW6LlH2CSReRVP7_r4oS2w-UuM2LGYmNQxJpE8RqzeIE", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3d30eb5e-1d13-4a56-8286-a9ef67532756"}, {"timestamp": "2024-04-02T20:37:30Z", "date_only": false, "value": "2024-04-02T20:37:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LockBitRaasRansomware/14396", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "96cba424-a7ab-4f8d-92cc-7717141d16a8", "url": "https://t.me/LockBitRaasRansomware/14396"}, {"timestamp": "2024-08-01T09:30:49Z", "date_only": false, "value": "2024-08-01T09:30:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/openSource3/252", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c6ca1d82-0efd-4784-8903-71a72d8c58fd", "content": "CVE ID : CVE-2022-1388\nSystem : BIG-IP \nType : Broken access control\n\nExploit \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n \n\npython CVE-2022-1388.py", "url": "https://t.me/openSource3/252"}, {"timestamp": "2024-08-03T00:03:06.011Z", "date_only": false, "value": "2024-08-03T00:03:06.011Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-1388", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-29T06:28:53Z", "date_only": false, "value": "2024-08-29T06:28:53.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ARC15INFO/477", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "663495b4-8f57-4db4-ab80-5abd4d44e8aa", "content": "CVE-2022-1388_F5_BIG-IP\n\nhttps://github.com/bytecaps/CVE-2022-1388-EXP\n\nhttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE", "url": "https://t.me/ARC15INFO/477"}, {"timestamp": "2024-09-12T10:33:13Z", "date_only": false, "value": "2024-09-12T10:33:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dcf911ee-17b3-4902-aa15-4ecabf2e40ce", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "de49d0c5-9978-44ac-8414-1ed991f09e0c"}, {"timestamp": "2024-10-11T03:03:25Z", "date_only": false, "value": "2024-10-11T03:03:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityTechnologies/7395", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3aec5fae-7acd-4d2b-8dee-9add2491182c", "content": "#Analytics\nTop 10 most exploited vulnerabilities in 2022\n\n1. CVE-2022-30190: MS Office \"Follina\"\n2. CVE-2021-44228: Apache Log4Shell\n3. CVE-2022-22965: Spring4Shell\n4. CVE-2022-1388: F5 BIG-IP\n5. CVE-2022-0609: Google Chrome 0-day\n6. CVE-2017-11882: MS Office RCE\n7. CVE-2022-41082, CVE-2022-41040: ProxyNotShell\n8. CVE-2022-27925, CVE-2022-41352: Zimbra Collaboration Suite bugs\n9. CVE-2022-26134: Atlassian Confluence RCE\n10. CVE-2022-30525: Zyxel RCE vulnerability", "url": "https://t.me/CyberSecurityTechnologies/7395"}, {"timestamp": "2024-10-25T00:00:00Z", "date_only": false, "value": "2024-10-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4fba2ff1-cae0-40bf-8f27-4b6190182e01"}, {"timestamp": "2024-10-27T00:00:00Z", "date_only": false, "value": "2024-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f8e8f5cb-8b6b-4860-9e26-ca560c69b6b1"}, {"timestamp": "2024-11-05T00:00:00Z", "date_only": false, "value": "2024-11-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-05)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "00562563-236e-417e-9f5a-6853bcdadc12"}, {"timestamp": "2024-12-01T00:00:00Z", "date_only": false, "value": "2024-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7b283a7c-b4cf-48dc-b6e9-ab5b0dd9701c"}, {"timestamp": "2024-12-07T00:00:00Z", "date_only": false, "value": "2024-12-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9bf51233-2189-4a5e-b523-146a31bada4e"}, {"timestamp": "2024-12-15T00:00:00Z", "date_only": false, "value": "2024-12-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6e836eb5-875c-426e-983d-edf47de99412"}, {"timestamp": "2024-12-24T00:00:00Z", "date_only": false, "value": "2024-12-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-24)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a6b87258-ab48-4722-a546-4360d734a320"}, {"timestamp": "2024-12-24T20:30:55.192Z", "date_only": false, "value": "2024-12-24T20:30:55.192533Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971544", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e5501338-8f68-4742-8a93-450f1dbe8edb", "url": "https://feedsin.space/feed/CISAKevBot/items/2971544"}, {"timestamp": "2024-12-27T00:00:00Z", "date_only": false, "value": "2024-12-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ffb95576-6a5c-49c6-9b44-ec7246f46d5f"}, {"timestamp": "2024-12-31T00:00:00Z", "date_only": false, "value": "2024-12-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "fb39273c-7511-4608-aae5-a9df48c2e79c"}, {"timestamp": "2025-01-01T00:00:00Z", "date_only": false, "value": "2025-01-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-01)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c76209f4-a68a-4723-a106-47abfd9a221a"}, {"timestamp": "2025-01-12T00:00:00Z", "date_only": false, "value": "2025-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-12)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4e720ed0-3467-4519-bb17-083015b92a61"}, {"timestamp": "2025-01-15T00:00:00Z", "date_only": false, "value": "2025-01-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-15)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "81284a76-3de1-4af5-b4f4-855d026aa061"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c0d5a7f1-cec8-4ac1-bf71-7433bc7484b3"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b42ae300-17b4-4b3c-8d79-8641aeaa3dda"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b6e7747a-f7c7-4bb5-8623-ddee99b37f86"}, {"timestamp": "2025-01-27T00:00:00Z", "date_only": false, "value": "2025-01-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "edad4d2d-6e7a-4645-b766-2fd331398b48"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cd737d4f-db37-4b62-a799-f5d041ee864d"}, {"timestamp": "2025-01-28T00:00:00Z", "date_only": false, "value": "2025-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a45b049c-ad48-4ade-811d-edd2a3d4e868"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b4ed4108-f72c-4f8e-b4b0-6d0c7b1c8b5b"}, {"timestamp": "2025-01-29T00:00:00Z", "date_only": false, "value": "2025-01-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "648d69a1-be44-49c5-b382-1896db9b147d"}, {"timestamp": "2025-01-29T16:42:46.747Z", "date_only": false, "value": "2025-01-29T16:42:46.747460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfzwn6if2q", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c3b00e72-e526-4f26-a003-ea9eb8f64593", "url": "https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfzwn6if2q"}, {"timestamp": "2025-01-29T20:27:21.338Z", "date_only": false, "value": "2025-01-29T20:27:21.338441Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-1388", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-29T20:27:21.338Z", "date_only": false, "value": "2025-01-29T20:27:21.338441Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-1388", "record": "FKIE_CVE-2022-1388", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-01T00:00:00Z", "date_only": false, "value": "2025-02-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5099f1c3-e544-456e-8a9d-aa7bb97d7cfb"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c6d29e14-562a-4199-99ea-d9f0d48f0f24"}, {"timestamp": "2025-02-09T00:00:00Z", "date_only": false, "value": "2025-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7b8ef4bd-ad7c-41a2-a685-11ebce824364"}, {"timestamp": "2025-02-13T00:00:00Z", "date_only": false, "value": "2025-02-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "644ce02f-3ec7-48fb-8b57-dd3cf6a87490"}, {"timestamp": "2025-02-14T00:00:00Z", "date_only": false, "value": "2025-02-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4c90ebd1-6429-4e49-a734-0ceff429dd9a"}, {"timestamp": "2025-02-15T00:00:00Z", "date_only": false, "value": "2025-02-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3ab39f1a-0c6b-4256-b409-5edc38d22c46"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "396cec36-3380-4427-95e4-c93a149d2078"}, {"timestamp": "2025-02-16T00:00:00Z", "date_only": false, "value": "2025-02-16T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2c6adebb-95df-4cf7-8253-394f9bb35984"}, {"timestamp": "2025-02-18T00:00:00Z", "date_only": false, "value": "2025-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "bc037853-cb25-4b1e-b035-59f207750bcf"}, {"timestamp": "2025-02-21T00:00:00Z", "date_only": false, "value": "2025-02-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6c05cac7-da88-40ae-aac8-f628faf244d1"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6fb90716-5c40-4c8d-9299-cc824dbc10f6"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2763e17e-9231-4d5d-b504-4931849c0f62"}, {"timestamp": "2025-02-23T02:10:33Z", "date_only": false, "value": "2025-02-23T02:10:33.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8428fb99-53d9-45c3-bbe7-9cdb0454ec72"}, {"timestamp": "2025-02-23T04:10:42Z", "date_only": false, "value": "2025-02-23T04:10:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8fbd2c05-4b1b-4007-911e-f29f944b9456"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "16956349-9886-4bd0-8b2f-36b06cefd96f"}, {"timestamp": "2025-02-24T00:00:00Z", "date_only": false, "value": "2025-02-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "90b60760-6ca2-41b6-a4d1-b01ea9acc531"}, {"timestamp": "2025-02-25T00:00:00Z", "date_only": false, "value": "2025-02-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "405e9efd-f4ca-4f65-a96e-9408e28d3784"}, {"timestamp": "2025-02-28T00:00:00Z", "date_only": false, "value": "2025-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "408b2c4c-f0c2-48ad-9a58-fbc1c10e1b80"}, {"timestamp": "2025-02-28T23:49:13.272Z", "date_only": false, "value": "2025-02-28T23:49:13.272798Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7a538af8-6ccd-4858-a008-daf6f5adf2b7", "url": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca"}, {"timestamp": "2025-03-01T00:00:00Z", "date_only": false, "value": "2025-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7d4ec4b0-807a-4b99-b405-c521d5368c8f"}, {"timestamp": "2025-03-04T00:00:00Z", "date_only": false, "value": "2025-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7b3d693b-4629-4fe7-954c-276ebb230b01"}, {"timestamp": "2025-03-07T00:00:00Z", "date_only": false, "value": "2025-03-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6ff9faf2-d818-4131-8acd-a1bed93650c7"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d80ed28b-9583-44ea-a404-6c57a7f41748"}, {"timestamp": "2025-03-08T00:00:00Z", "date_only": false, "value": "2025-03-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "fea8d69f-1bdf-48da-9cfe-a274600444d9"}, {"timestamp": "2025-03-10T00:00:00Z", "date_only": false, "value": "2025-03-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-10)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c46cbb05-11e6-49b4-b38b-815f3cd85034"}, {"timestamp": "2025-03-11T00:00:00Z", "date_only": false, "value": "2025-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "dd6e5b85-ead9-4d3d-9f8b-2a2e5a775921"}, {"timestamp": "2025-03-12T00:00:00Z", "date_only": false, "value": "2025-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "17ad9713-1626-4543-bc86-9d0bd820115f"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6e8b4a24-c4fd-4181-b3bc-b2d58bf76a78"}, {"timestamp": "2025-03-16T00:00:00Z", "date_only": false, "value": "2025-03-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "653eadd0-7954-4f2c-be60-46131df62da0"}, {"timestamp": "2025-03-17T00:00:00Z", "date_only": false, "value": "2025-03-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d1bc2194-fb8d-48da-a115-c51e4293099e"}, {"timestamp": "2025-03-21T00:00:00Z", "date_only": false, "value": "2025-03-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0503b2d0-1a16-4e85-8bab-d2f9ab622142"}, {"timestamp": "2025-03-23T00:00:00Z", "date_only": false, "value": "2025-03-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0409b9c8-6766-405e-808f-b404ed3eea63"}, {"timestamp": "2025-03-28T00:00:00Z", "date_only": false, "value": "2025-03-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0fc5342e-7494-47b2-b645-46159763373e"}, {"timestamp": "2025-04-03T00:00:00Z", "date_only": false, "value": "2025-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7941d51b-e62d-49d0-b3e9-c4c4a83915be"}, {"timestamp": "2025-04-05T00:00:00Z", "date_only": false, "value": "2025-04-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2aaf9b17-8d4e-4e85-bb7e-4b400e1a78b2"}, {"timestamp": "2025-04-06T00:00:00Z", "date_only": false, "value": "2025-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "785de003-044a-4114-a15f-09acc8c239b7"}, {"timestamp": "2025-04-14T00:00:00Z", "date_only": false, "value": "2025-04-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "298a6021-72d5-4613-a64e-6df68914805f"}, {"timestamp": "2025-04-18T00:00:00Z", "date_only": false, "value": "2025-04-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "89050c49-8893-423f-beb3-612e43e93503"}, {"timestamp": "2025-04-22T00:00:00Z", "date_only": false, "value": "2025-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "737a1d98-7566-4987-b717-5b08fb2dead0"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1244", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8974c0ea-72a4-4ae6-a867-2f1b32ba7a41", "content": "wget https://raw.githubusercontent.com/SecTheBit/CVE-2022-1388/main/bigip.yaml\nhttps://github.com/rafaelwdornelas/my-nuclei-templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/trungkay2/Nuclei-template\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/1dayluo/My-Nuclei-Templates\nhttps://github.com/topscoder/nuclei-wordfence-cve\nhttps://github.com/drfabiocastro/certwatcher-templates\nhttps://github.com/erickfernandox/nuclei-templates\nhttps://github.com/damon-sec/Nuclei-templates-Collection\nhttps://github.com/ptyspawnbinbash/template-enhancer\nhttps://github.com/abbycantcode/Nuclei-Template\nhttps://github.com/ayadim/Nuclei-bug-hunter\nhttps://github.com/pacho15/mynuclei_templates\nhttps://github.com/soumya123raj/Nuclei\nhttps://github.com/soapffz/myown-nuclei-poc\nhttps://github.com/zer0yu/Open-PoC\nhttps://github.com/SumedhDawadi/Custom-Nuclei-Template\nhttps://github.com/coldrainh/nuclei-ByMyself\nhttps://github.com/binod235/nuclei-templates-and-reports\nhttps://github.com/mbskter/Masscan2Httpx2Nuclei-Xray\nhttps://github.com/luck-ying/Library-YAML-POC\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/mastersir-lab/nuclei-yaml-poc\nhttps://github.com/SirAppSec/nuclei-template-generator-log4j\nhttps://github.com/souzomain/mytemplates\nhttps://github.com/ricardomaia/nuclei-template-generator-for-wordpress-plugins\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/UltimateSec/ultimaste-nuclei-templates\nhttps://github.com/h0tak88r/nuclei_templates\n# https://github.com/0XParthJ/Nuclei-Templates\n# https://github.com/1dayluo/My-Nuclei-Templates\n# https://github.com/Aituglo/nuclei-templates\n# https://github.com/ChiaraNRTT96/BountySkill\n# https://github.com/Linuxinet/nuclei-templates\n# https://github.com/Nithissh0708/Custom-Nuclei-Templates\n# https://github.com/abbycantcode/Nuclei-Template\n# https://github.com/foulenzer/foulenzer-templates\n# https://github.com/joanbono/nuclei-templates\n# https://github.com/pacho15/mynuclei_templates\n# https://github.com/themastersunil/Nuclei-TamplatesBackup.git\n# https://github.com/themastersunil/nucleiDB\n# https://github.com/trungkay2/Nuclei-template\n# https://github.com/shubham-rooter/Nuclei-Template-Collection\nhttps://github.com/0xElkot/My-Nuclei-Templates\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/10kHacktech/nuclei_templates\nhttps://github.com/2jung/nuclei-templates\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template\nhttps://github.com/ChristianWeiler/custom-nuclei-templates\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/Elsfa7-110/log4jNuclei\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/Facucuervo87/openssl-3.0.4-template\nhttps://github.com/GlennPegden2/misc-nuclei-scripts\nhttps://github.com/Hack4rLIFE/CVE-2022-42889\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/Lu3ky13/Authorization-Nuclei-Templates\nhttps://github.com/MikeeI/nuclei-templates\nhttps://github.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed\nhttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/Saboor-Hakimi/CVE-2023-23752\nhttps://github.com/SecTheBit/CVE-2022-1388\nhttps://github.com/T4t4ru/nuclei-templates\nhttps://github.com/aels/CVE-2022-37042\nhttps://github.com/akincibor/CVE-2022-27925\nhttps://github.com/al4xs/nuclei-templates\nhttps://github.com/am0nt31r0/custom-nuclei-templates", "url": "https://t.me/AGENTZSECURITY/1244"}, {"timestamp": "2025-04-22T02:52:21Z", "date_only": false, "value": "2025-04-22T02:52:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/AGENTZSECURITY/1250", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "915c698d-b60d-472f-bc41-bc944a5a5138", "content": "https://github.com/abbycantcode/Nuclei-Template\nhttps://github.com/foulenzer/foulenzer-templates\nhttps://github.com/joanbono/nuclei-templates\nhttps://github.com/pacho15/mynuclei_templates\nhttps://github.com/themastersunil/Nuclei-TamplatesBackup.git\nhttps://github.com/themastersunil/nucleiDB\nhttps://github.com/trungkay2/Nuclei-template\nhttps://github.com/shubham-rooter/Nuclei-Template-Collection\nhttps://gist.github.com/0x240x23elu\nhttps://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31\nhttps://github.com/0x71rex/0-Nuclei-Templates\nhttps://github.com/0x727/ObserverWard_0x727\nhttps://github.com/0xAwali/Virtual-Host\nhttps://github.com/0xElkot/My-Nuclei-Templates\nhttps://github.com/0xKayala/Custom-Nuclei-Templates\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/10kHacktech/nuclei_templates\nhttps://github.com/1in9e/my-nuclei-templates\nhttps://github.com/2jung/nuclei-templates\nhttps://github.com/5cr1pt/templates\nhttps://github.com/ARPSyndicate/kenzer-templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/AshiqurEmon/nuclei_templates.git\nhttps://github.com/BagheeraAltered/FuzzingTemplate\nhttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template\nhttps://github.com/CharanRayudu/Custom-Nuclei-Templates\nhttps://github.com/ChristianWeiler/custom-nuclei-templates\nhttps://github.com/Dalaho-bangin/my_nuclei_templates\nhttps://github.com/Dalaho-bangin/nuclei-templates2\nhttps://github.com/Deep2142004/Nuclei-Templates\nhttps://github.com/Deepparasiya/Nuclei-Templates\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/DrakenKun-cyber/Templates\nhttps://github.com/Elsfa7-110/log4jNuclei\nhttps://github.com/Elsfa7-110/mynuclei-templates\nhttps://github.com/Erenlancaster/CVE-2021-46704\nhttps://github.com/Esonhugh/public-nuclei-template\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/Facucuervo87/openssl-3.0.4-template\nhttps://github.com/GlennPegden2/misc-nuclei-scripts\nhttps://github.com/Gotcha-1G/CVE-2022-42889\nhttps://github.com/Hack4rLIFE/CVE-2022-42889\nhttps://github.com/Harish4948/Nuclei-Templates\nhttps://github.com/HernanRodriguez1/ScanReflectedSSTI\nhttps://github.com/HideNsec/nuclei-bitrix-templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/JoshMorrison99/url-based-nuclei-templates\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/Lu3ky13/Authorization-Nuclei-Templates\nhttps://github.com/MR-pentestGuy/nuclei-templates\nhttps://github.com/MikeeI/nuclei-templates\nhttps://github.com/Mr-B0hl00l/nuclei-templates\nhttps://github.com/Mr-xn/CVE-2023-23333\nhttps://github.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed\nhttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/NitinYadav00/My-Nuclei-Templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/Pavan-Alapati/nuclei-templates\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/R-s0n/Custom_Vuln_Scan_Templates\nhttps://github.com/Rabb1ter/nuclei-templates\nhttps://github.com/RajaUzairAbdullah/nuclei-templates\nhttps://github.com/Red-Darkin/Custom-Nuclei-Templates\nhttps://github.com/Saboor-Hakimi/CVE-2023-23752\nhttps://github.com/Saimonkabir/Nuclei-Templates\nhttps://github.com/Saptak9983/Nuclei-Template\nhttps://github.com/SecTheBit/CVE-2022-1388\nhttps://github.com/Shakilll/my_nuclei_templates\nhttps://github.com/ShangRui-hash/my-nuclei-templates", "url": "https://t.me/AGENTZSECURITY/1250"}, {"timestamp": "2025-04-25T03:05:23Z", "date_only": false, "value": "2025-04-25T03:05:23.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/l4SX0qh_U06RJ4fTj6g-Xt-ri88LJ4geHlPZZORXMtv3qR25lA", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a730bcc4-28b0-44e4-9847-cfb6dc9918a2"}, {"timestamp": "2025-04-26T00:00:00Z", "date_only": false, "value": "2025-04-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f1ba3c9a-ee1f-4dc0-8f6f-588d3d63c669"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1d3da7f9-4d4a-4c65-9c97-806cbcbb6ce6"}, {"timestamp": "2025-04-29T00:00:00Z", "date_only": false, "value": "2025-04-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b5f56c3e-9235-452f-95bb-ff8f9b64c01e"}, {"timestamp": "2025-04-30T00:00:00Z", "date_only": false, "value": "2025-04-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "37c037ed-faf4-4e4c-9780-1a31795ab3ff"}, {"timestamp": "2025-05-04T00:00:00Z", "date_only": false, "value": "2025-05-04T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7d027d9f-e570-4825-8486-e796896c4513"}, {"timestamp": "2025-05-11T00:00:00Z", "date_only": false, "value": "2025-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "99ebfaad-be2f-4a97-8c44-12647c2a6068"}, {"timestamp": "2025-05-17T00:00:00Z", "date_only": false, "value": "2025-05-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "649bca13-4878-48dd-85ee-327edba0eb36"}, {"timestamp": "2025-05-19T00:00:00Z", "date_only": false, "value": "2025-05-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "73e4e6db-1a9c-41d1-a4ca-b38d3b88401c"}, {"timestamp": "2025-05-21T00:00:00Z", "date_only": false, "value": "2025-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7ec0d2bf-19e9-421c-a268-3122553c8aee"}, {"timestamp": "2025-05-22T00:00:00Z", "date_only": false, "value": "2025-05-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5afd1570-7773-458d-a94b-4c3701d64a8d"}, {"timestamp": "2025-05-23T00:00:00Z", "date_only": false, "value": "2025-05-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8a186c8b-cfaf-4652-951e-55f4ef750a2e"}, {"timestamp": "2025-05-24T00:00:00Z", "date_only": false, "value": "2025-05-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "26eebb0c-865f-47d2-86ca-c9a8e48192dd"}, {"timestamp": "2025-05-25T00:00:00Z", "date_only": false, "value": "2025-05-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "82b73792-8a82-42e2-aa5a-3da7688a001f"}, {"timestamp": "2025-05-26T00:00:00Z", "date_only": false, "value": "2025-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d7684d1c-88cd-4cd1-bebc-a31aed93f0ad"}, {"timestamp": "2025-05-27T00:00:00Z", "date_only": false, "value": "2025-05-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c4800510-cea8-4ef6-8080-7a30bc30844b"}, {"timestamp": "2025-05-28T00:00:00Z", "date_only": false, "value": "2025-05-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "011e9d13-2300-460f-8f35-aab4eba14034"}, {"timestamp": "2025-06-01T00:00:00Z", "date_only": false, "value": "2025-06-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-01)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1fdf4acd-4002-43a7-a512-f306f2c9efac"}, {"timestamp": "2025-06-05T00:00:00Z", "date_only": false, "value": "2025-06-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1d1f13e8-b44f-4e0f-8222-25863285318d"}, {"timestamp": "2025-06-07T00:00:00Z", "date_only": false, "value": "2025-06-07T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "861d6f35-adc4-4f47-bfc4-b730dc2cedcf"}, {"timestamp": "2025-06-08T00:00:00Z", "date_only": false, "value": "2025-06-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1585128d-dc79-4d0b-83a4-d65502628195"}, {"timestamp": "2025-06-09T00:00:00Z", "date_only": false, "value": "2025-06-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d2aa4c11-05fa-466e-98f6-90ce1eb93189"}, {"timestamp": "2025-06-10T00:00:00Z", "date_only": false, "value": "2025-06-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "84d67cbf-36e2-4859-906f-0ea36d62b09e"}, {"timestamp": "2025-06-11T00:00:00Z", "date_only": false, "value": "2025-06-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "a0d0f3ed-29d1-45f8-a417-0910f6afee87"}, {"timestamp": "2025-06-12T00:00:00Z", "date_only": false, "value": "2025-06-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "bc8e204a-2deb-4c96-94f8-1cdc9ed644e4"}, {"timestamp": "2025-06-13T00:00:00Z", "date_only": false, "value": "2025-06-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ff550630-9769-4376-9db2-0b6a781be799"}, {"timestamp": "2025-06-14T00:00:00Z", "date_only": false, "value": "2025-06-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b8cbd1a0-7eb4-4641-a167-d0aead252431"}, {"timestamp": "2025-06-18T00:00:00Z", "date_only": false, "value": "2025-06-18T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9cc822b3-441e-4874-9d14-ceb0905f3354"}, {"timestamp": "2025-06-19T23:26:58Z", "date_only": false, "value": "2025-06-19T23:26:58.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/dcf911ee-17b3-4902-aa15-4ecabf2e40ce", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f71531ca-e2e1-4d45-b4b9-0149b9498664"}, {"timestamp": "2025-06-26T08:53:34.853Z", "date_only": false, "value": "2025-06-26T08:53:34.853287Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-e1523a5c-9dce464b104523e0", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "64ad389d-baed-4ec2-ad22-e850ba551757", "url": "https://poliverso.org/objects/0477a01e-e1523a5c-9dce464b104523e0"}, {"timestamp": "2025-06-27T00:00:00Z", "date_only": false, "value": "2025-06-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c5d1b056-3afc-4066-9391-c7ff7e1cf001"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3d59f7b9-1d81-4c92-969c-ca378f794814"}, {"timestamp": "2025-07-09T00:00:00Z", "date_only": false, "value": "2025-07-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c78e9b56-cb80-48c2-b1a1-f40ac6b26cb3"}, {"timestamp": "2025-07-11T00:00:00Z", "date_only": false, "value": "2025-07-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7cc64d61-73d4-498a-87d6-5a80f16b3012"}, {"timestamp": "2025-07-12T00:00:00Z", "date_only": false, "value": "2025-07-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "36bda2c2-40fb-4c4d-a04c-745db23edc29"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1964db37-5d04-423f-9988-f7a36463de88"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "86b87d0c-5c3d-4e1e-8b0b-84069f062b91"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "47be8112-2966-4aa8-a33a-cc2a9680d3b5"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cda84c7d-d89b-45aa-aff2-0d63a6ee79ef"}, {"timestamp": "2025-07-28T08:52:33Z", "date_only": false, "value": "2025-07-28T08:52:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/28/chinalinked-group-fire-ant-exploits.html", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c64aa243-c057-42b8-a579-3b486297e2e5", "url": "https://threatintel.cc/2025/07/28/chinalinked-group-fire-ant-exploits.html"}, {"timestamp": "2025-08-06T00:00:00Z", "date_only": false, "value": "2025-08-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-06)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7314c7fa-28a6-42bd-9325-fba9e46768ec"}, {"timestamp": "2025-08-18T00:00:00Z", "date_only": false, "value": "2025-08-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-18)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ecf47d07-a8be-49b5-8e87-453a5d90d504"}, {"timestamp": "2025-08-19T00:00:00Z", "date_only": false, "value": "2025-08-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c27b18d1-36c0-4c14-ade5-f0c6cb94fc0a"}, {"timestamp": "2025-08-22T00:00:00Z", "date_only": false, "value": "2025-08-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3098f467-18be-46a5-8cda-3f3b173249c3"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "30dcd398-a29d-4371-9010-e41ba4a9bdaf"}, {"timestamp": "2025-08-27T00:00:00Z", "date_only": false, "value": "2025-08-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "613a798f-739f-4c5f-b5b0-b1d71d716aa2"}, {"timestamp": "2025-08-31T00:00:00Z", "date_only": false, "value": "2025-08-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "82fd8c2e-79d1-4d84-befa-1c62f2059181"}, {"timestamp": "2025-08-31T03:12:42Z", "date_only": false, "value": "2025-08-31T03:12:42.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "8f867756-f66e-424f-9240-28840279cd21"}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5be8cffc-a1ca-4570-9859-010d9c823afd"}, {"timestamp": "2025-10-20T22:19:36.373Z", "date_only": false, "value": "2025-10-20T22:19:36.373118Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-2b7225e6-dcdcada2934e837a", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3444d63a-ec5b-4da4-b810-ab895cb84d95", "url": "https://poliverso.org/objects/0477a01e-2b7225e6-dcdcada2934e837a"}, {"timestamp": "2025-10-21T23:15:40.370Z", "date_only": false, "value": "2025-10-21T23:15:40.370Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-1388", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:40.370Z", "date_only": false, "value": "2025-10-21T23:15:40.370Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-1388", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:32Z", "date_only": false, "value": "2025-10-22T00:32:32Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MRPH-RVC3-CV97", "record": "GHSA-MRPH-RVC3-CV97", "field": "modified"}, {"timestamp": "2025-10-27T00:00:00Z", "date_only": false, "value": "2025-10-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c7e377d8-9e1f-471e-9028-d158a810a7dc"}, {"timestamp": "2025-10-27T17:06:48.893Z", "date_only": false, "value": "2025-10-27T17:06:48.893000", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "sources_update_date.data.4.date"}, {"timestamp": "2025-11-01T14:20:07.908Z", "date_only": false, "value": "2025-11-01T14:20:07.908164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m4l6qx625t2q", "record": "cve-2022-1388", "field": "creation_timestamp", "uuid": "024db0f7-e0c6-4041-a4d4-2dd9998befed", "url": "https://bsky.app/profile/cyberhub.blog/post/3m4l6qx625t2q"}, {"timestamp": "2025-11-01T19:42:30.544Z", "date_only": false, "value": "2025-11-01T19:42:30.544095Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3m4lqrfqehd2s", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7288af39-c1bf-4b77-85a4-ccee2c98f91c", "url": "https://bsky.app/profile/cybersecurity.page/post/3m4lqrfqehd2s"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "02d4760f-4cf7-4cbe-a041-9129ecc9f2cd"}, {"timestamp": "2025-11-09T19:28:42.452Z", "date_only": false, "value": "2025-11-09T19:28:42.452025Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m57tpryiunp2", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cf76247c-9827-4812-a532-611ccda16227", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m57tpryiunp2"}, {"timestamp": "2025-11-18T15:28:35.748Z", "date_only": false, "value": "2025-11-18T15:28:35.748000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202205-0394", "record": "VAR-202205-0394", "field": "last_update_date"}, {"timestamp": "2025-11-29T00:00:00Z", "date_only": false, "value": "2025-11-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3f388149-6215-40b4-aebc-ddba5a1da75f"}, {"timestamp": "2025-11-30T00:00:00Z", "date_only": false, "value": "2025-11-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "19dfb24e-bff8-475f-b9ad-af5c17640b30"}, {"timestamp": "2025-12-01T00:00:00Z", "date_only": false, "value": "2025-12-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d71b5ede-2cbd-4802-ad82-0d32b7f637ca"}, {"timestamp": "2025-12-09T00:00:00Z", "date_only": false, "value": "2025-12-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5ec2248d-d052-45f4-82ab-2138939625a9"}, {"timestamp": "2025-12-16T00:00:00Z", "date_only": false, "value": "2025-12-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "15930dd5-11f3-45e8-bd5f-d25b638ff7a6"}, {"timestamp": "2026-01-20T12:39:42Z", "date_only": false, "value": "2026-01-20T12:39:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/siberkampus/8f640eaeb1cebdc1ffeec85bc40e3754", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0fb2d654-f24a-4bb8-a745-d6060a882f29", "url": "https://gist.github.com/siberkampus/8f640eaeb1cebdc1ffeec85bc40e3754"}, {"timestamp": "2026-01-23T00:00:00Z", "date_only": false, "value": "2026-01-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "56f61085-d1f4-40b7-8e60-b40dcb389c0c"}, {"timestamp": "2026-01-28T00:00:00Z", "date_only": false, "value": "2026-01-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "409caf79-db53-4fa7-b696-6196d272fbb7"}, {"timestamp": "2026-01-30T00:00:00Z", "date_only": false, "value": "2026-01-30T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0ce43876-abf3-4506-924e-070a1403df40"}, {"timestamp": "2026-02-02T12:27:47.219Z", "date_only": false, "value": "2026-02-02T12:27:47.219134Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca71a718-c31f-4e35-b439-635f8e0c4ca9", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e628c683-36c4-42d0-a4e8-c0bf0bfb15ca", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca71a718-c31f-4e35-b439-635f8e0c4ca9"}, {"timestamp": "2026-02-02T12:27:47.219Z", "date_only": false, "value": "2026-02-02T12:27:47.219134Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca71a718-c31f-4e35-b439-635f8e0c4ca9", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "372265cc-13e8-4f9a-b2f7-61288fa223e0", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca71a718-c31f-4e35-b439-635f8e0c4ca9"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-1388", "field": "timestamps.recorded_at", "uuid": "fa406e77-1021-4831-a8dc-9ed81cfa9941", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-08T00:00:00Z", "date_only": false, "value": "2026-02-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "fc92d2df-165d-45f5-addc-c885e1623fcf"}, {"timestamp": "2026-02-09T00:00:00Z", "date_only": false, "value": "2026-02-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f308d751-e7a1-4429-93cc-59954ff4d10c"}, {"timestamp": "2026-02-11T00:00:00Z", "date_only": false, "value": "2026-02-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "aedc96ee-a00a-4e20-98cc-39042c9bc689"}, {"timestamp": "2026-02-18T00:00:00Z", "date_only": false, "value": "2026-02-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2adce91e-9c5a-4415-ad65-4f4b0bb0268d"}, {"timestamp": "2026-02-19T00:00:00Z", "date_only": false, "value": "2026-02-19T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "814e1dca-e98f-45a8-8fe6-93ec214f0577"}, {"timestamp": "2026-02-22T00:00:00Z", "date_only": false, "value": "2026-02-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1f8b7849-7d4d-488e-9f5c-08a8839283ef"}, {"timestamp": "2026-02-23T00:00:00Z", "date_only": false, "value": "2026-02-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f3ff3dc8-8027-4c98-842b-640b23760d71"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": false, "value": "2026-02-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "37fd9679-08dd-4ad4-a698-10b64a834d15"}, {"timestamp": "2026-02-27T00:00:00Z", "date_only": false, "value": "2026-02-27T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "794bd724-68c0-403c-be47-4e7d25740a89"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0b2f0f80-31ca-4f2c-ae6c-7a527767556d"}, {"timestamp": "2026-03-04T00:00:00Z", "date_only": false, "value": "2026-03-04T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "136247a8-2e24-42cb-b86b-1eb047b28bb7"}, {"timestamp": "2026-03-11T00:00:00Z", "date_only": false, "value": "2026-03-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d47f2063-3637-4825-bce3-69d5cf4aec72"}, {"timestamp": "2026-03-12T00:00:00Z", "date_only": false, "value": "2026-03-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ecc05d0b-a347-4c80-b279-93ad47f1ce16"}, {"timestamp": "2026-03-31T00:00:00Z", "date_only": false, "value": "2026-03-31T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "50e50c4d-c5e9-496a-8cbc-4978337821f4"}, {"timestamp": "2026-04-10T00:00:00Z", "date_only": false, "value": "2026-04-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c3010818-58cb-4a8d-9c67-7725b69fc573"}, {"timestamp": "2026-04-16T00:00:00Z", "date_only": false, "value": "2026-04-16T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-16)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9ac84b8a-2a30-47d6-9097-f66deca510e8"}, {"timestamp": "2026-04-20T00:00:00Z", "date_only": false, "value": "2026-04-20T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "cf0d4655-214a-4875-845f-281fae804bd3"}, {"timestamp": "2026-04-25T00:00:00Z", "date_only": false, "value": "2026-04-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "433d1ab3-9763-402a-8305-bb24013dcdfa"}, {"timestamp": "2026-04-28T00:00:00Z", "date_only": false, "value": "2026-04-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "56b3400b-9f08-4e8f-a537-2399fd397b15"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b367e45b-1a27-4f6e-8931-1b5c36dc38bb"}, {"timestamp": "2026-05-21T00:00:00Z", "date_only": false, "value": "2026-05-21T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "6c280e16-5533-467d-97c0-420534a202b5"}, {"timestamp": "2026-05-26T00:00:00Z", "date_only": false, "value": "2026-05-26T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3b1501b8-d3e8-4db5-9e13-b9fa2ccf929e"}, {"timestamp": "2026-05-30T14:03:25.981Z", "date_only": false, "value": "2026-05-30T14:03:25.981548Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/golangoss.bsky.social/post/3mn37pvf2mg2w", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "52ece617-b161-4f86-97bc-5cd40a4c9640", "url": "https://bsky.app/profile/golangoss.bsky.social/post/3mn37pvf2mg2w"}, {"timestamp": "2026-06-17T04:22:20.683Z", "date_only": false, "value": "2026-06-17T04:22:20.683", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-1388", "record": "FKIE_CVE-2022-1388", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:16.393Z", "date_only": false, "value": "2026-06-19T12:47:16.393514Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4bdb7e9-5389-468d-a61e-cc21419bef2e", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f2019139-b555-424b-86da-2f791136d969", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4bdb7e9-5389-468d-a61e-cc21419bef2e"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "33e10c88-ab31-4e7c-8d0f-3ffcc5d4bd30"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-1388", "field": "timestamps.recorded_at", "uuid": "6bba823a-5346-4038-8567-e6170d5860e2", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:49.911Z", "date_only": false, "value": "2026-06-23T11:13:49.911125Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6bba823a-5346-4038-8567-e6170d5860e2", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "da02cdd0-2203-497e-b0bb-f8ca626351f8", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/6bba823a-5346-4038-8567-e6170d5860e2"}, {"timestamp": "2026-06-23T14:05:21.617Z", "date_only": false, "value": "2026-06-23T14:05:21.617331Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/03f75575-ff73-4df9-8821-24cc37e91bb4", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "103c3ecc-7f8b-4453-9bd7-36507e4adf4e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/03f75575-ff73-4df9-8821-24cc37e91bb4"}, {"timestamp": "2026-06-30T09:23:03.553Z", "date_only": false, "value": "2026-06-30T09:23:03.553281Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d7759b-0d48-4e8f-8193-20ac39c9c99a", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c8a77cef-6f43-4668-9a11-c29017ebc03c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d7759b-0d48-4e8f-8193-20ac39c9c99a"}, {"timestamp": "2026-07-01T05:53:57.055Z", "date_only": false, "value": "2026-07-01T05:53:57.055303Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5bbaeb64-565c-4c56-b1d2-ebcd8c495918", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7"}, {"timestamp": "2026-07-01T10:15:12.474Z", "date_only": false, "value": "2026-07-01T10:15:12.474910Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d2212b7f-796c-4cac-b245-d18f7440b3fe"}, {"timestamp": "2026-07-13T10:15:08.078Z", "date_only": false, "value": "2026-07-13T10:15:08.078037Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e9d38d5b-736e-4a18-91b6-5fffe788dd00"}, {"timestamp": "2026-07-16T12:15:03.473Z", "date_only": false, "value": "2026-07-16T12:15:03.473070Z", "kind": "sighting", "label": "Seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "84a979b5-694f-4042-8c4c-cf962559bfad"}, {"timestamp": "2026-07-18T18:00:04.240Z", "date_only": false, "value": "2026-07-18T18:00:04.240007Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/211", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "fd30bc55-c01c-4a0e-b6dd-d8e4f404d102", "url": "https://t.me/CVEhub/211"}, {"timestamp": "2026-07-19T00:00:10.747Z", "date_only": false, "value": "2026-07-19T00:00:10.747421Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/211", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d5db8c28-6968-4592-8952-cfe90353e5f4", "url": "https://t.me/CVEhub/211"}, {"timestamp": "2026-07-20T10:15:08.794Z", "date_only": false, "value": "2026-07-20T10:15:08.794291Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9aa63e4f-692d-4516-984e-a511b7682a3b"}, {"timestamp": "2026-07-21T10:16:16.873Z", "date_only": false, "value": "2026-07-21T10:16:16.873071Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c899c7f5-7270-486e-b2a7-e900161c2bd7"}, {"timestamp": "2026-07-29T12:00:15.867Z", "date_only": false, "value": "2026-07-29T12:00:15.867096Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16884", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c0cff547-ac21-492a-a0ee-7c0f6719507f", "url": "https://t.me/CVEhub/16884"}, {"timestamp": "2026-07-29T12:00:30.680Z", "date_only": false, "value": "2026-07-29T12:00:30.680633Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13249", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "019ea0aa-5428-43b8-bce2-9212968db999", "url": "https://t.me/CVEhub/13249"}, {"timestamp": "2026-07-29T12:00:31.529Z", "date_only": false, "value": "2026-07-29T12:00:31.529511Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12646", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "25f0ba69-7837-46c4-b3dd-7ccf86f7ac57", "url": "https://t.me/CVEhub/12646"}, {"timestamp": "2026-07-29T12:02:30.181Z", "date_only": false, "value": "2026-07-29T12:02:30.181957Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3302", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4f248e92-8203-41f1-8417-715c32033361", "url": "https://t.me/reverseame/3302"}, {"timestamp": "2026-07-29T12:02:38.298Z", "date_only": false, "value": "2026-07-29T12:02:38.298085Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2768", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5ceaf516-b912-4d1b-a006-f8b50e3827c9", "url": "https://t.me/reverseame/2768"}, {"timestamp": "2026-07-29T12:02:41.366Z", "date_only": false, "value": "2026-07-29T12:02:41.366418Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2408", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ed82e393-f71c-4e21-9e64-0452e6ea3064", "url": "https://t.me/reverseame/2408"}, {"timestamp": "2026-07-30T00:00:35.142Z", "date_only": false, "value": "2026-07-30T00:00:35.142875Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/16884", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9beb801c-94cc-4a00-87a9-1afadc42345d", "url": "https://t.me/CVEhub/16884"}, {"timestamp": "2026-07-30T00:00:55.579Z", "date_only": false, "value": "2026-07-30T00:00:55.579979Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/13249", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5916c01b-c7e4-4edb-a8fa-463edc7689a9", "url": "https://t.me/CVEhub/13249"}, {"timestamp": "2026-07-30T00:00:57.132Z", "date_only": false, "value": "2026-07-30T00:00:57.132756Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12646", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f8064556-df44-4325-b902-5134c64fd051", "url": "https://t.me/CVEhub/12646"}, {"timestamp": "2026-07-30T00:02:30.866Z", "date_only": false, "value": "2026-07-30T00:02:30.866341Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/3302", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "89b69b29-eb36-4206-88e3-18d276e417f6", "url": "https://t.me/reverseame/3302"}, {"timestamp": "2026-07-30T00:02:34.654Z", "date_only": false, "value": "2026-07-30T00:02:34.654783Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2768", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3e678b36-a9b3-4a11-9fd3-333ce1eb7e71", "url": "https://t.me/reverseame/2768"}, {"timestamp": "2026-07-30T00:02:36.413Z", "date_only": false, "value": "2026-07-30T00:02:36.413609Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/reverseame/2408", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "38d8bf15-1cec-40fe-989e-e5e5d4fdc127", "url": "https://t.me/reverseame/2408"}, {"timestamp": "2026-07-31T00:00:08.585Z", "date_only": false, "value": "2026-07-31T00:00:08.585280Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12646", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "48eb1c84-987d-45d7-943d-77096c3f610a", "url": "https://t.me/CVEhub/12646"}, {"timestamp": "2026-07-31T00:00:10.148Z", "date_only": false, "value": "2026-07-31T00:00:10.148211Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/13249", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "81a77414-ef60-40e3-95c6-c572d3109a0d", "url": "https://t.me/CVEhub/13249"}, {"timestamp": "2026-07-31T00:00:41.365Z", "date_only": false, "value": "2026-07-31T00:00:41.365170Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/16884", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "0a1d57d5-45b1-466d-bb17-b4dcd366543c", "url": "https://t.me/CVEhub/16884"}, {"timestamp": "2026-08-02T18:00:04.513Z", "date_only": false, "value": "2026-08-02T18:00:04.513989Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3302", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5bf74a2e-0fb0-457c-82d2-279284b01f28", "url": "https://t.me/reverseame/3302"}, {"timestamp": "2026-08-02T22:18:45.996Z", "date_only": false, "value": "2026-08-02T22:18:45.996774Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/2768", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c9ba8c84-85ff-4e57-93e3-0703338d25a4", "url": "https://t.me/reverseame/2768"}, {"timestamp": "2026-08-03T01:17:26.327Z", "date_only": false, "value": "2026-08-03T01:17:26.327478Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/2408", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9fabb930-7639-4843-87d7-a998449aa1a0", "url": "https://t.me/reverseame/2408"}, {"timestamp": "2026-08-03T01:27:32.155Z", "date_only": false, "value": "2026-08-03T01:27:32.155906Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/reverseame/2768", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ab14ee8e-d17b-47f8-87f5-791f6b8a9488", "url": "https://t.me/reverseame/2768"}, {"timestamp": "2026-08-03T01:29:04.689Z", "date_only": false, "value": "2026-08-03T01:29:04.689477Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/reverseame/3302", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5cce60fe-3bfd-4279-b28b-38d199f0a2b8", "url": "https://t.me/reverseame/3302"}, {"timestamp": "2026-08-16T19:00:04.224Z", "date_only": false, "value": "2026-08-16T19:00:04.224748Z", "kind": "sighting", "label": "Seen", "source": "Telegram/DLnNoVtzkKpaISUXUkLWV-lLykLZh1vUJggJSeJFUc9GRQI", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9684cae7-0888-48c3-959a-32b86234467c"}, {"timestamp": "2026-08-17T00:00:11.348Z", "date_only": false, "value": "2026-08-17T00:00:11.348312Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/DLnNoVtzkKpaISUXUkLWV-lLykLZh1vUJggJSeJFUc9GRQI", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "abc90333-12de-4294-9ecc-edc51dd0c5b1"}, {"timestamp": "2026-08-29T23:00:04.832Z", "date_only": false, "value": "2026-08-29T23:00:04.832505Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "089c091c-814a-42bf-9034-aae4b09b6b8f"}, {"timestamp": "2026-08-30T00:00:09.443Z", "date_only": false, "value": "2026-08-30T00:00:09.443802Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "fdea5d5e-4beb-4f03-86c5-7e874a2b596f"}, {"timestamp": "2026-09-01T17:00:29.592Z", "date_only": false, "value": "2026-09-01T17:00:29.592792Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5787", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "adfb08a1-c58d-4bb7-a38c-233ee2d3915e", "url": "https://t.me/cissp/5787"}, {"timestamp": "2026-09-01T17:00:29.820Z", "date_only": false, "value": "2026-09-01T17:00:29.820272Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/5776", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "004a358b-57c5-4518-8d57-e3a8db9fe1ca", "url": "https://t.me/cissp/5776"}, {"timestamp": "2026-09-01T20:00:12.343Z", "date_only": false, "value": "2026-09-01T20:00:12.343788Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/181926", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "49040e3d-df2b-4430-84ea-6f2e49317f9b", "url": "https://t.me/hacking_Attack/181926"}, {"timestamp": "2026-09-01T20:00:55.131Z", "date_only": false, "value": "2026-09-01T20:00:55.131448Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/108895", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "4f2cfdd7-3e33-4b48-acc4-d36ea33d3832", "url": "https://t.me/hacking_Attack/108895"}, {"timestamp": "2026-09-01T20:00:55.179Z", "date_only": false, "value": "2026-09-01T20:00:55.179045Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/108897", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7d14ec4f-8a5a-4f47-bb19-5b5b6da7e807", "url": "https://t.me/hacking_Attack/108897"}, {"timestamp": "2026-09-01T20:01:41.166Z", "date_only": false, "value": "2026-09-01T20:01:41.166166Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/53217", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "35372595-9e6a-4362-ae12-572e1c42fe5b", "url": "https://t.me/hacking_Attack/53217"}, {"timestamp": "2026-09-01T20:01:42.023Z", "date_only": false, "value": "2026-09-01T20:01:42.023361Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/52713", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "366a55ab-4fcd-46a4-aa8b-80aee794421a", "url": "https://t.me/hacking_Attack/52713"}, {"timestamp": "2026-09-01T20:01:42.069Z", "date_only": false, "value": "2026-09-01T20:01:42.069544Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/52773", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7afa0ef1-e38d-4c8d-90aa-1a15a9cc2136", "url": "https://t.me/hacking_Attack/52773"}, {"timestamp": "2026-09-01T20:01:42.115Z", "date_only": false, "value": "2026-09-01T20:01:42.115405Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/52813", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3d87a47b-77ac-4fbb-9245-a7a9f8836f8a", "url": "https://t.me/hacking_Attack/52813"}, {"timestamp": "2026-09-01T20:01:42.270Z", "date_only": false, "value": "2026-09-01T20:01:42.270363Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/52687", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "daee186c-f81c-4dda-a628-206848877cce", "url": "https://t.me/hacking_Attack/52687"}, {"timestamp": "2026-09-02T01:00:05.831Z", "date_only": false, "value": "2026-09-02T01:00:05.831487Z", "kind": "sighting", "label": "Seen", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "3260d014-8517-499f-bb3a-200d73278028"}, {"timestamp": "2026-09-02T01:00:13.132Z", "date_only": false, "value": "2026-09-02T01:00:13.132920Z", "kind": "sighting", "label": "Seen", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5da817ea-1b16-4fbe-af5a-ada9f3ec2b95"}, {"timestamp": "2026-09-03T00:00:53.944Z", "date_only": false, "value": "2026-09-03T00:00:53.944301Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2c48c7d8-bc9d-42c2-b38a-27924c5ab12c"}, {"timestamp": "2026-09-03T00:00:59.273Z", "date_only": false, "value": "2026-09-03T00:00:59.273212Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "ecad0f4e-3b45-4e5b-aa43-e40670e1b5c1"}, {"timestamp": "2026-09-04T12:00:12.599Z", "date_only": false, "value": "2026-09-04T12:00:12.599273Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/108897", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "7d5271a7-aa73-474d-9160-59225cca6d3a", "url": "https://t.me/hacking_Attack/108897"}, {"timestamp": "2026-09-04T12:00:12.688Z", "date_only": false, "value": "2026-09-04T12:00:12.688573Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/108895", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b4d8b96e-5411-4117-8df4-a09d2092faba", "url": "https://t.me/hacking_Attack/108895"}, {"timestamp": "2026-09-05T21:00:05.337Z", "date_only": false, "value": "2026-09-05T21:00:05.337572Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/53217", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "d6f5c725-0fa1-4d0c-be13-4ac835f00bf3", "url": "https://t.me/hacking_Attack/53217"}, {"timestamp": "2026-09-05T22:00:04.965Z", "date_only": false, "value": "2026-09-05T22:00:04.965292Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/52773", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "72f9b880-12cc-4db9-a037-68b08c8e2033", "url": "https://t.me/hacking_Attack/52773"}, {"timestamp": "2026-09-05T22:00:05.017Z", "date_only": false, "value": "2026-09-05T22:00:05.017743Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/hacking_Attack/52713", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "2d817de0-3b88-48e8-8934-c80fff4c8d38", "url": "https://t.me/hacking_Attack/52713"}, {"timestamp": "2026-09-06T15:00:03.962Z", "date_only": false, "value": "2026-09-06T15:00:03.962637Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "76a32a7a-ea17-46ed-94d7-b84da41af891"}, {"timestamp": "2026-09-09T04:00:31.508Z", "date_only": false, "value": "2026-09-09T04:00:31.508764Z", "kind": "sighting", "label": "Seen", "source": "Telegram/RUhb2X_NByPmmlGxx3Mv0bgYVYI4R3G82Gib5B5TVl_yrw4", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "9bf95b19-3925-449b-8c8b-c861a70eff19"}, {"timestamp": "2026-09-10T00:00:52.918Z", "date_only": false, "value": "2026-09-10T00:00:52.918439Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RUhb2X_NByPmmlGxx3Mv0bgYVYI4R3G82Gib5B5TVl_yrw4", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "b458e1b2-c203-4cda-84da-b0454792c4bf"}, {"timestamp": "2026-09-10T09:00:06.826Z", "date_only": false, "value": "2026-09-10T09:00:06.826325Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cissp/5787", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "abc73991-43f9-4e63-9652-7efd60b23e9b", "url": "https://t.me/cissp/5787"}, {"timestamp": "2026-09-11T10:15:41.347Z", "date_only": false, "value": "2026-09-11T10:15:41.347330Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-10)", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "85f8d414-8b2f-4e55-88c1-508d944877e6"}, {"timestamp": "2026-09-14T03:00:11.150Z", "date_only": false, "value": "2026-09-14T03:00:11.150782Z", "kind": "sighting", "label": "Seen", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "f3f8ac1a-7dfb-4610-83c5-68d3a529a874"}, {"timestamp": "2026-09-14T20:00:05.446Z", "date_only": false, "value": "2026-09-14T20:00:05.446367Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Ssa3gF0FchkiaC-tURe9QHzVfOAC5n-nZu8KcEJPkSs-ugc", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5c334ec2-e355-4beb-8fe1-62708bc73277"}, {"timestamp": "2026-09-15T00:00:09.867Z", "date_only": false, "value": "2026-09-15T00:00:09.867389Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Ssa3gF0FchkiaC-tURe9QHzVfOAC5n-nZu8KcEJPkSs-ugc", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "78ed3397-d600-4655-89ca-7e631d2b619e"}, {"timestamp": "2026-09-15T00:00:24.272Z", "date_only": false, "value": "2026-09-15T00:00:24.272580Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/SWXpTb_FDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "e6653e07-47a8-4498-92db-68aef5cc8be6"}, {"timestamp": "2026-09-22T07:00:11.261Z", "date_only": false, "value": "2026-09-22T07:00:11.261622Z", "kind": "sighting", "label": "Seen", "source": "Telegram/hfmq1zWepPD91LRghKR-0RSOW6g1tRVTeNiRv4LWNO2cCpY", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "889041bb-9ff1-4b1d-ae29-8e576ec348ca"}, {"timestamp": "2026-09-22T07:00:28Z", "date_only": false, "value": "2026-09-22T07:00:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/fR4ffcUgoAp1klg0nicalmqYLSrsb4WEiUuO3aa6KIHXqBE", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1850bc48-2637-423f-9157-a8e9cd2e34ce"}, {"timestamp": "2026-09-22T07:00:28Z", "date_only": false, "value": "2026-09-22T07:00:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/fR4ffcUgoAp1klg0nicalmqYLSrsb4WEiUuO3aa6KIHXqBE", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "1676f6ff-98b4-4a14-b914-2faae3893f2c"}, {"timestamp": "2026-09-23T00:00:11.356Z", "date_only": false, "value": "2026-09-23T00:00:11.356392Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/hfmq1zWepPD91LRghKR-0RSOW6g1tRVTeNiRv4LWNO2cCpY", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "5375132f-5645-4eb1-87e1-ab7b1576d7de"}, {"timestamp": "2026-10-08T20:16:12.276Z", "date_only": false, "value": "2026-10-08T20:16:12.276384Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxfbnlvn6z2b", "record": "CVE-2022-1388", "field": "creation_timestamp", "uuid": "c5bc8bb9-9ab7-4947-8e5b-55a4f8f6ae47", "url": "https://bsky.app/profile/cyfar.ca/post/3mxfbnlvn6z2b"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-1388", "field": "timestamps.last_seen_at", "uuid": "b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": true, "value": "2026-10-23", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-1388", "field": "evidence.0.details.observation_date", "uuid": "b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-1388", "field": "status.status_updated_at", "uuid": "b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-25T01:00:01Z", "date_only": false, "value": "2026-10-25T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-1388", "field": "timestamps.recorded_at", "uuid": "b0d0a2ff-f278-4c7b-b0d3-d19a98fb65b7", "status": {"status_reason": "confirmed", "exploited": true}}]}