{"metadata": {"vulnerability": "CVE-2022-22536", "count": 93, "kinds": {"milestone": 6, "sighting": 45, "kev": 17, "other": 25}}, "data": [{"timestamp": "2022-01-04T00:00:00Z", "date_only": false, "value": "2022-01-04T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-22536", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-02-08T00:00:00Z", "date_only": false, "value": "2022-02-08T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "sources_release_date.data.1.date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "sources_release_date.data.0.date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-125", "record": "CERTFR-2022-AVI-125", "field": "last_revision_date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-125", "record": "CERTFR-2022-AVI-125", "field": "initial_release_date"}, {"timestamp": "2022-02-09T00:00:00Z", "date_only": false, "value": "2022-02-09T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-125", "record": "CERTFR-2022-AVI-125", "field": "revisions.0.revision_date"}, {"timestamp": "2022-02-09T22:05:24Z", "date_only": false, "value": "2022-02-09T22:05:24.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-22536", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-02-09T23:15:00Z", "date_only": false, "value": "2022-02-09T23:15:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "sources_release_date.data.2.date"}, {"timestamp": "2022-02-09T23:15:00Z", "date_only": false, "value": "2022-02-09T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-6HC3-539H-6XC6", "record": "GHSA-6HC3-539H-6XC6", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-02-09T23:15:00Z", "date_only": false, "value": "2022-02-09T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-22536", "record": "GSD-2022-22536", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-02-09T23:15:18.620Z", "date_only": false, "value": "2022-02-09T23:15:18.620", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22536", "record": "FKIE_CVE-2022-22536", "field": "published"}, {"timestamp": "2022-02-10T02:19:27Z", "date_only": false, "value": "2022-02-10T02:19:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/37165", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "4006a733-2437-46db-84bb-c656bd256a1f", "content": "\u203c CVE-2022-22536 \u203c\n\nSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/37165"}, {"timestamp": "2022-02-10T11:11:05Z", "date_only": false, "value": "2022-02-10T11:11:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_3/2022", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "ac127ef6-6416-4623-9c1c-1c8ffbbcfed0", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_3/2022"}, {"timestamp": "2022-02-10T15:00:35Z", "date_only": false, "value": "2022-02-10T15:00:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/2615", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "9aebacd3-2605-4987-b887-cf9f2a2be335", "content": "\u200b\u200b\u041d\u0435 \u0445\u043e\u0442\u0435\u043b\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u0430\u043a\u0446\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 SAP, \u043d\u043e \u0432\u043e\u0442 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0441 \u043d\u0430\u043c\u0438 \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u044b.\n\n\u0412\u0441\u0435 \u0434\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u043e \u0432\u0441\u0435\u0439 \u043b\u0438\u043d\u0435\u0439\u043a\u0435 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 SAP Internet Communication Manager (ICM) \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0440\u044f\u0434 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2022-22536, CVE-2022- 22532 \u0438 CVE-2022-22533, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 ICMAD (Internet Communication Manager Advanced Desync).\n\nICM \u2014 \u043e\u0434\u0438\u043d \u0438\u0437 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0432\u0430\u0436\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 SAP NetWeaver. \u041e\u043d \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 SAP \u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0430\u0436\u043d\u0435\u0439\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u044c\u044e \u043e\u0431\u0449\u0435\u0433\u043e \u0441\u0442\u0435\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 SAP, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438\u0439 SAP, \u0430 \u044d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u0432 \u0435\u0433\u043e \u043a\u043e\u0434\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b SAP \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c 24/7.\n\nSAP \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a ICMAD \u043a\u043b\u0438\u0435\u043d\u0442 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442 \u0441\u0435\u0431\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445, \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0433\u043e \u043c\u043e\u0448\u0435\u043d\u043d\u0438\u0447\u0435\u0441\u0442\u0432\u0430, \u0441\u0431\u043e\u044f\u043c \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0445 \u0431\u0438\u0437\u043d\u0435\u0441-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u0445, \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u0432\u0441\u0435\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0432 \u043e\u0431\u0449\u0435\u043c \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f SAP.\n\nCVE-2022-22536, \u043e\u0434\u043d\u0430 \u0438\u0437 \u0442\u0440\u0435\u0445 \u043e\u0448\u0438\u0431\u043e\u043a ICMAD, \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u043f\u0440\u043e\u0441\u0442, \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u0439, \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 HTTP(S).\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438 \u0431\u0430\u0433\u0443 \u0446\u0435\u043b\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u0441\u043f\u0435\u0446\u043e\u0432 SAP Product Security Response Team (PSRT) \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Onapsis.\n\n\u041f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 SAP \u043f\u043e \u0432\u043e\u043f\u0440\u043e\u0441\u0430\u043c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0412\u0438\u043a\u0430 \u0427\u0430\u043d\u0433\u0430, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043d\u0435 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u041d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u0432\u0441\u0435 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u044d\u0442\u043e \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u043e\u0439\u0442\u0438. \u041d\u0430 \u044d\u0442\u043e\u0442 \u0441\u043b\u0443\u0447\u0430\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0443\u0436\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0441\u044f \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0435\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0438\u0441\u0442\u0435\u043c \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 ICMAD.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e\u00a0Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0431\u043e\u043b\u0435\u0435 5000 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SAP NetWeaver \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a ICMAD.\n\n\u041d\u0435\u043c\u0435\u0446\u043a\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u0436\u0435\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 Apache Log4j 2, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 SAP Commerce, SAP Data Intelligence 3 (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e), SAP Dynamic Authorization Management, Internet of Things Edge Platform, SAP Customer Checkout. \u0412\u0441\u0435 \u043e\u043d\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u043c \u041f\u041e.\n\n\u0415\u0441\u043b\u0438 \u0432\u044b \u0434\u043e\u0447\u0438\u0442\u0430\u043b\u0438 \u044d\u0442\u043e\u0442 \u043f\u043e\u0441\u0442 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 SAP \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435, \u0442\u043e \u043e\u0442\u043b\u043e\u0436\u0438\u0442\u0435 \u0432\u0441\u0435 \u0434\u0435\u043b\u0430 \u0438 \u0437\u0430\u0439\u043c\u0438\u0442\u0435\u0441\u044c \u0441\u0440\u043e\u0447\u043d\u044b\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041f\u041e.", "url": "https://t.me/true_secator/2615"}, {"timestamp": "2022-02-11T00:00:00Z", "date_only": false, "value": "2022-02-11T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "sources_update_date.data.0.date"}, {"timestamp": "2022-02-11T00:00:50Z", "date_only": false, "value": "2022-02-11T00:00:50Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-6HC3-539H-6XC6", "record": "GHSA-6HC3-539H-6XC6", "field": "published"}, {"timestamp": "2022-02-15T09:26:52Z", "date_only": false, "value": "2022-02-15T09:26:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/1499", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "8c896ea4-4981-4389-a17f-a501b860b3bb", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aSAP memory pipes desynchronization vulnerability(MPI) CVE-2022-22536.\nURL\uff1ahttps://github.com/antx-code/CVE-2022-22536", "url": "https://t.me/GithubRedTeam/1499"}, {"timestamp": "2022-02-16T10:29:17Z", "date_only": false, "value": "2022-02-16T10:29:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/1729", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "2a284af0-a1c0-4cdb-95ea-d335a8c1d6be", "content": "#exploit\n1. CVE-2022-22536:\nSAP NetWeaver Application Server ABAP/Java/ABAP Platform/SAP Content Server/Web Dispatcher memory pipes (MPI) desynchronization vulnerability\nhttps://github.com/antx-code/CVE-2022-22536\n\n2. CVE-2022-0435:\nA Remote Stack Overflow in the Linux Kernel\nhttps://www.appgate.com/blog/a-remote-stack-overflow-in-the-linux-kernel\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/1729"}, {"timestamp": "2022-02-16T11:02:01Z", "date_only": false, "value": "2022-02-16T11:02:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/5421", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "2b190f95-bcd1-4704-8b65-9ea937ad1711", "content": "#exploit\n1. CVE-2022-22536:\nSAP NetWeaver Application Server ABAP/Java/ABAP Platform/SAP Content Server/Web Dispatcher memory pipes (MPI) desynchronization vulnerability\nhttps://github.com/antx-code/CVE-2022-22536\n\n2. CVE-2022-0435:\nA Remote Stack Overflow in the Linux Kernel\nhttps://www.appgate.com/blog/a-remote-stack-overflow-in-the-linux-kernel", "url": "https://t.me/CyberSecurityTechnologies/5421"}, {"timestamp": "2022-04-14T00:00:00Z", "date_only": false, "value": "2022-04-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-345", "record": "CERTFR-2022-AVI-345", "field": "last_revision_date"}, {"timestamp": "2022-04-14T00:00:00Z", "date_only": false, "value": "2022-04-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-345", "record": "CERTFR-2022-AVI-345", "field": "initial_release_date"}, {"timestamp": "2022-04-14T00:00:00Z", "date_only": false, "value": "2022-04-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-345", "record": "CERTFR-2022-AVI-345", "field": "revisions.0.revision_date"}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-22536", "field": "timestamps.asserted_at", "uuid": "7ef5df8b-33a3-486e-8125-a8dca040dd73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-22536", "field": "timestamps.asserted_at", "uuid": "95966980-7a53-49f4-b88b-ada14ff1459e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": true, "value": "2022-08-18", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22536", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-22536", "field": "evidence.0.details.added_date", "uuid": "95966980-7a53-49f4-b88b-ada14ff1459e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": true, "value": "2022-08-18", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-22536", "field": "evidence.0.details.date_added", "uuid": "7ef5df8b-33a3-486e-8125-a8dca040dd73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-22536", "field": "timestamps.first_seen_at", "uuid": "7ef5df8b-33a3-486e-8125-a8dca040dd73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-22536", "field": "timestamps.first_seen_at", "uuid": "95966980-7a53-49f4-b88b-ada14ff1459e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-22536", "field": "status.status_updated_at", "uuid": "7ef5df8b-33a3-486e-8125-a8dca040dd73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-22536", "field": "status.status_updated_at", "uuid": "95966980-7a53-49f4-b88b-ada14ff1459e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2022-08-18T00:00:00Z", "date_only": false, "value": "2022-08-18T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22536", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2022-08-20T10:09:16Z", "date_only": false, "value": "2022-08-20T10:09:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberbannews_ir/6477", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "e04e7a9a-33aa-40e8-a734-75179507bc29", "content": "\u200d \ud83d\uded1\u0627\u0641\u0632\u0648\u062f\u0647 \u0634\u062f\u0646 7 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0628\u0627\u06af \u0647\u0627\u06cc CISA\n\n\u0622\u0698\u0627\u0646\u0633 \u0627\u0645\u0646\u06cc\u062a \u0633\u0627\u06cc\u0628\u0631\u06cc \u0648 \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u0622\u0645\u0631\u06cc\u06a9\u0627 \u06cc\u0627 \u0647\u0645\u0627\u0646 \u0633\u06cc\u0633\u0627 7 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0647 \u0641\u0647\u0631\u0633\u062a \u0628\u0627\u06af \u0647\u0627\u06cc \u062a\u062d\u062a \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc \u062e\u0648\u062f \u0627\u0641\u0632\u0648\u062f\u0647 \u0627\u0633\u062a. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062a\u0648\u0633\u0637 \u0627\u067e\u0644\u060c \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\u060c \u0627\u0633 \u0627\u0650\u06cc \u067e\u06cc \u0648 \u06af\u0648\u06af\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0646\u062f.\n\n\u0628\u0627 \u0627\u062d\u062a\u0633\u0627\u0628 \u0627\u06cc\u0646 7 \u0645\u0648\u0631\u062f \u062c\u062f\u06cc\u062f\u060c \u0641\u0647\u0631\u0633\u062a \u0628\u0627\u06af \u0647\u0627\u06cc \u0633\u06cc\u0633\u0627 \u062d\u0627\u0644\u0627 \u0634\u0627\u0645\u0644 801 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0622\u0698\u0627\u0646\u0633 \u0647\u0627\u06cc \u0641\u062f\u0631\u0627\u0644 \u0628\u0627\u06cc\u0633\u062a\u06cc \u0637\u0628\u0642 \u062a\u0627\u0631\u06cc\u062e \u0647\u0627\u06cc \u062a\u0639\u06cc\u06cc\u0646 \u0634\u062f\u0647\u060c \u0622\u0646 \u0647\u0627 \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u0646\u062f. \n\n\u0633\u06cc\u0633\u0627 \u0627\u0632 \u062a\u0645\u0627\u0645\u06cc \u0622\u0698\u0627\u0646\u0633 \u0647\u0627\u06cc \u0641\u062f\u0631\u0627\u0644 \u0648 \u0634\u0631\u06a9\u062a \u0647\u0627\u06cc \u0645\u0631\u0628\u0648\u0637\u0647 \u062e\u0648\u0627\u0633\u062a\u0647\u060c \u062a\u0627 \u062a\u0627\u0631\u06cc\u062e 8 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 2022 \u0627\u06cc\u0646 7 \u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u0646\u062f:\n\nCVE-2017-15944: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0634\u0631\u06a9\u062a \u067e\u0627\u0644\u0648 \u0622\u0644\u062a\u0648\nCVE-2022-21971: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\nCVE-2022-26923: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\nCVE-2022-2856: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u06af\u0648\u06af\u0644\nCVE-2022-32893: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u067e\u0644\nCVE-2022-32894: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0627\u067e\u0644\nCVE-2022-22536: \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0634\u0631\u06a9\u062a SAP\n\u0647\u0646\u0648\u0632 \u0647\u06cc\u0686 \u062c\u0632\u0626\u06cc\u0627\u062a\u06cc \u062f\u0631 \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0627 \u0646\u062d\u0648\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0627\u0632\u06cc\u06af\u0631\u0627\u0646 \u0645\u062e\u0631\u0628 \u0627\u0632 \u0622\u0646 \u0647\u0627 \u0645\u0646\u062a\u0634\u0631 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc\n\n@cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/6477"}, {"timestamp": "2022-08-22T11:00:04Z", "date_only": false, "value": "2022-08-22T11:00:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/poxek/2333", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "d1ca0a08-05ea-4325-8778-28639b2cc4fd", "content": "#\u041f\u041e #CVE\n\nSAP NetWeaver Application Server Remote Code Execution\nCVE-2022-22536\n\nSAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server \u0438 SAP Web Dispatcher \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0442 HTTP request smuggling. \u041d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 \u0436\u0435\u0440\u0442\u0432\u044b \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0432\u044b\u0434\u0430\u0432\u0430\u044f \u0441\u0435\u0431\u044f \u0437\u0430 \u0436\u0435\u0440\u0442\u0432\u0443, \u0438\u043b\u0438 \u043e\u0442\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0435 \u0432\u0435\u0431-\u043a\u044d\u0448\u0438. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.", "url": "https://t.me/poxek/2333"}, {"timestamp": "2022-08-23T14:49:44Z", "date_only": false, "value": "2022-08-23T14:49:44.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/2494", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "a88cbe5c-f7ca-41ec-8c37-17343d333e24", "content": "CISA has updated its Known Exploited Vulnerabilities Catalog with 7 new vulnerabilities based on evidence of active exploitation.\n\nRead details: https://thehackernews.com/2022/08/cisa-adds-7-new-actively-exploited.html\n\nCVE-2017-15944, CVE-2022-21971, CVE-2022-26923, CVE-2022-2856, CVE-2022-32893, CVE-2022-32894, CVE-2022-22536", "url": "https://t.me/thehackernews/2494"}, {"timestamp": "2022-08-24T16:15:00Z", "date_only": false, "value": "2022-08-24T16:15:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "sources_update_date.data.2.date"}, {"timestamp": "2022-08-25T00:00:00Z", "date_only": false, "value": "2022-08-25T00:00:00", "kind": "other", "label": "Date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "sources_update_date.data.1.date"}, {"timestamp": "2022-08-25T18:06:49Z", "date_only": false, "value": "2022-08-25T18:06:49.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/poxek/2362", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "ed3a2a52-3afd-46fa-b49b-bb1d4f0e01ae", "content": "#\u041f\u041e  #CVE\n\nCISA \u043f\u0440\u043e\u0441\u0438\u0442 \u0432\u0430\u0441 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u044d\u0442\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\nCVE-2022-22536, CVE-2022-32893, CVE-2022-32894, CVE-2022-2856, CVE-2022-21971, CVE-2022-26923, CVE-2017-15944\n\nCISA (\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410) \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u043e \u0441\u0432\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432 \u043d\u0435\u0433\u043e \u0441\u0435\u043c\u044c \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u0437\u0438\u0446\u0438\u0439. \u042d\u0442\u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Apple, Google, Microsoft, Palo Alto Networks \u0438 SAP.\u00a0", "url": "https://t.me/poxek/2362"}, {"timestamp": "2022-08-25T22:23:42.381Z", "date_only": false, "value": "2022-08-25T22:23:42.381000Z", "kind": "other", "label": "Last update date", "source": "variot \u00b7 VAR-202202-1358", "record": "VAR-202202-1358", "field": "last_update_date"}, {"timestamp": "2022-09-08T00:00:00Z", "date_only": true, "value": "2022-09-08", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-22536", "field": "evidence.0.details.due_date", "uuid": "7ef5df8b-33a3-486e-8125-a8dca040dd73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "ede9dd0d-3c7a-490f-b3e0-ed8b08f6c94a"}, {"timestamp": "2023-09-26T03:11:25.429Z", "date_only": false, "value": "2023-09-26T03:11:25.429Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "CVE-2022-22536", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-09-27T15:15:00Z", "date_only": false, "value": "2023-09-27T15:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-22536", "record": "GSD-2022-22536", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-11-11T03:54:13Z", "date_only": false, "value": "2023-11-11T03:54:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/73", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "9c37119e-279b-445f-8447-86d146cbffc2", "content": "#ExploitObserverAlert\n\nCVE-2022-22536\n\nDESCRIPTION: Exploit Observer has 16 entries related to CVE-2022-22536. SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.\n\nFIRST-EPSS: 0.958480000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/73"}, {"timestamp": "2023-11-12T17:32:52Z", "date_only": false, "value": "2023-11-12T17:32:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/120", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "8dc4cf94-172d-4fff-9733-5a99ff497313", "content": "#ExploitObserverAlert\n\nCVE-2022-22536\n\nDESCRIPTION: Exploit Observer has 16 entries related to CVE-2022-22536. SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.\n\nFIRST-EPSS: 0.958480000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/120"}, {"timestamp": "2023-12-04T23:31:27Z", "date_only": false, "value": "2023-12-04T23:31:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/1333", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "56a8adfd-e271-4b7b-8439-0a88919aba78", "content": "#ExploitObserverAlert\n\nCVE-2022-22536\n\nDESCRIPTION: Exploit Observer has 18 entries related to CVE-2022-22536. SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can prepend a victim's request with arbitrary data. This way, the attacker can execute functions impersonating the victim or poison intermediary Web caches. A successful attack could result in complete compromise of Confidentiality, Integrity and Availability of the system.\n\nFIRST-EPSS: 0.957010000\nNVD-IS: 6.0\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/1333"}, {"timestamp": "2023-12-13T01:19:28.710Z", "date_only": false, "value": "2023-12-13T01:19:28.710036Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-22536", "record": "GSD-2022-22536", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-19T15:10:07Z", "date_only": false, "value": "2024-03-19T15:10:07+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-22536", "field": "timestamps.asserted_at", "uuid": "50b9f865-6d37-408f-8aeb-5324bfa849f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-03-19T15:10:07Z", "date_only": false, "value": "2024-03-19T15:10:07+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-22536", "field": "timestamps.first_seen_at", "uuid": "50b9f865-6d37-408f-8aeb-5324bfa849f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2024-08-03T03:14:55.457Z", "date_only": false, "value": "2024-08-03T03:14:55.457Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-22536", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-12-24T20:32:47.976Z", "date_only": false, "value": "2024-12-24T20:32:47.976364Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971686", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "0e4bc1eb-a876-4078-a21b-6d3db7df0026", "url": "https://feedsin.space/feed/CISAKevBot/items/2971686"}, {"timestamp": "2025-01-29T20:20:36.420Z", "date_only": false, "value": "2025-01-29T20:20:36.420396Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22536", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T20:20:36.420Z", "date_only": false, "value": "2025-01-29T20:20:36.420396Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22536", "record": "FKIE_CVE-2022-22536", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-01-30T02:17:48Z", "date_only": false, "value": "2025-01-30T02:17:48.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/lChThSlD983zS8HLw7gOHevXPn4yJVmVBtTQgLy3r9b-cxxV", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "2909eee8-42f0-4fe8-8e23-b28cc7b0dd48"}, {"timestamp": "2025-02-23T02:10:34Z", "date_only": false, "value": "2025-02-23T02:10:34.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "e2cf6ecd-9f7a-4dba-89ef-94e8549907ca"}, {"timestamp": "2025-03-25T00:00:00Z", "date_only": false, "value": "2025-03-25T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-25)", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "0b58029d-d4d7-4709-a38b-5f45609d22f3"}, {"timestamp": "2025-04-02T05:00:06Z", "date_only": false, "value": "2025-04-02T05:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xrSOLi_Ndmn0wR_FEbBdlzmDVMAv25t2d-NjmhGGLeu57TM", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "8b313700-3080-4218-a339-cba3ae4222d3"}, {"timestamp": "2025-04-02T10:40:59.936Z", "date_only": false, "value": "2025-04-02T10:40:59.936916Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3llt76yeen72c", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "4231cab8-b981-451c-8a94-000f5a1b1ec5", "url": "https://bsky.app/profile/nimblenerd.social/post/3llt76yeen72c"}, {"timestamp": "2025-04-03T21:02:09.410Z", "date_only": false, "value": "2025-04-03T21:02:09.410625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llwselwx7n2d", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "80ca83dd-c7e4-4d85-be3f-ec91fa2c04e2", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3llwselwx7n2d"}, {"timestamp": "2025-04-18T13:50:56Z", "date_only": false, "value": "2025-04-18T13:50:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSec/28329", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "c4766495-384c-42c2-a618-fc9c5c72c35a", "content": "\u2022  \u0412 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0432 @SE_VirusTotal_bot \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 URL-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043f\u043e API \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 Web-check \u0438 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c \u0432\u0430\u043c \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u043e\u0442\u0447\u0435\u0442, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u0432\u0441\u0435 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u044b\u0448\u0435 \u0434\u0430\u043d\u043d\u044b\u0435. \u041d\u0443 \u0438 \u0431\u0443\u0434\u0435\u0442 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u0443\u0434\u043e\u0431\u043d\u0435\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c, \u0442\u0430\u043a \u043a\u0430\u043a \u0432\u0430\u043c \u043d\u0435 \u043f\u0440\u0438\u0434\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u0442\u044c \u043d\u0430 \u0441\u0430\u0439\u0442 \u0438 \u0442.\u0434., \u0432\u0441\u0451 \u043c\u043e\u0436\u043d\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043d\u0435 \u0432\u044b\u0445\u043e\u0434\u044f \u0438\u0437 Telegram.\n\n\u2022  \u041d\u0443 \u0430 \u0435\u0441\u043b\u0438 \u0445\u043e\u0442\u0438\u0442\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0430 \u0441\u0432\u043e\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u043b\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f API, \u0442\u043e \u0432\u043e\u0442 \u0442\u0443\u0442 \u0435\u0441\u0442\u044c \u0432\u0441\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f: https://github.com/lissy93/web-check\n\n#\u0418\u0411 #OSINT #VT\n\n\u2022  Malware-Traffic-Analysis.net \u2014 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u0432 \u0443\u0437\u043a\u0438\u0445 \u043a\u0440\u0443\u0433\u0430\u0445 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0431\u044f \u043a\u0430\u043a \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u0439 \u0438 \u0432\u0438\u043a\u0442\u043e\u0440\u0438\u043d \u043f\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 \u0442\u0440\u0430\u0444\u0438\u043a\u0430. \u0415\u0441\u0442\u044c \u0437\u0430\u0434\u0430\u0447\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u044b \u043a\u0430\u043a \u043d\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c \u0441\u0430\u0439\u0442\u0435, \u0442\u0430\u043a \u0438 \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u0445 (\u0437\u0430\u0434\u0430\u043d\u0438\u044f-\u0432\u0438\u043a\u0442\u043e\u0440\u0438\u043d\u044b, \u0442\u0440\u0430\u0444\u0438\u043a \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043e\u043e\u0431\u0449\u0435 \u043b\u0435\u0436\u0438\u0442 \u043d\u0430 \u0433\u0438\u0442\u0445\u0430\u0431\u0435). \n\n\u2022  \u041d\u0430 \u043a\u0430\u0436\u0434\u043e\u0435 \u0437\u0430\u0434\u0430\u043d\u0438\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0438 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0434\u043e\u043b\u0436\u043d\u043e \u0431\u044b\u0442\u044c \u0432 \u043e\u0442\u0447\u0451\u0442\u0435: \u043a\u0440\u0430\u0442\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0445\u043e\u0434\u0435 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0436\u0435\u0440\u0442\u0432\u0435 \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u0442\u0430\u043a\u0438\u0435, \u043a\u0430\u043a IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0434\u043e\u043c\u0435\u043d\u044b \u0438 URL-\u0430\u0434\u0440\u0435\u0441\u0430, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c, \u0434\u0432\u043e\u0438\u0447\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e. \u0415\u0441\u0442\u044c \u043c\u043d\u043e\u0433\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430 \u0437\u0430 2025 \u0433\u043e\u0434:\n\n#\u0418\u0411 #Malware\n\n\u2022  \u041a\u043e\u043b\u043b\u0435\u043a\u0446\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u0448\u043f\u0430\u0440\u0433\u0430\u043b\u043e\u043a \u0434\u043b\u044f DevOps, \u0418\u0411 \u0438 \u0418\u0422-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432:\n\nhttps://github.com/sk3pp3r/cheat-sheet-pdf/tree/master#nginx-whale\n\n#CheatSheet #DevOps #\u0418\u0411\n\neBPF-based lightweight debugger for Android.\n\nhttps://github.com/ShinoLeah/eDBG/\n\nSome useful books related to Cybersecurity, Linux and more.\n\nhttps://github.com/0x00ctrl/CyberSec-Books\n\nAttacking the cleanup_module function of a kernel module.\n\nhttps://github.com/MatheuZSecurity/UnhookingLinuxEdr\n\nNode JS C2 for backdooring vulnerable Electron applications.\n\nhttps://github.com/boku7/Loki\n\nAPT Emulation tool to exfiltrate sensitive .docx, .pptx, .xlsx, .pdf files.\n\nhttps://github.com/DarkSpaceSecurity/DocEx\n\nSAPGateBreaker is a PoC exploit for CVE-2022-22536, a critical HTTP Request Smuggling vulnerability in SAP NetWeaver. It demonstrates how to bypass ACLs by desynchronizing request parsing between ICM and backend services using crafted Content-Length-based payloads.\n\nhttps://github.com/BecodoExploit-mrCAT/SAPGateBreaker-Exploit\n\nAttacking the cleanup_module function of a kernel module.\n\nhttps://github.com/MatheuZSecurity/UnhookingLinuxEdr\n\nOSINT Tools for the Dark Web.\n\nhttps://github.com/apurvsinghgautam/dark-web-osint-tools\n\nLinux Kernel Defence Map (vulnerability classes, exploitation techniques, bug detection mechanisms, and defence technologies)\n\nhttps://github.com/a13xp0p0v/linux-kernel-defence-map?tab=readme-ov-file\n\n\"CTF\" challenge introducing Linux kernel exploitation\n\nhttps://gum3t.xyz/posts/a-gau-hack-from-euskalhack/\n\nThe Most Advanced Client-Side Prototype Pollution Scanner\n\nhttps://github.com/edoardottt/pphack\n\nSubDominator helps you discover subdomains associated with a target domain efficiently and with minimal impact for your Bug Bounty.\n\nhttps://github.com/RevoltSecurities/Subdominator\n\nHackTheBox Certified Penetration Tester Specialist (CPTS) Cheatsheet.\n \nhttps://github.com/zagnox/CPTS-cheatsheet\n\nHere Are Some Popular Hacking PDFs. \n \nhttps://github.com/zapstiko/Hacking-PDF\n\n#NinjaSecurity\n\nA curated list of bugbounty writeups made by someone.\n \nhttps://github.com/devanshbatham/Awesome-Bugbounty-Writeups \n\nBruteforcing from various scanner output - Automatically attempts default creds on found services.\n\nhttps://github.com/x90skysn3k/brutespray\n\nHExHTTP is a tool designed to perform tests on HTTP headers and analyze the results to identify vulnerabilities and interesting behaviors.\n \nhttps://github.com/c0dejump/HExHTTP\n\n\ud83e\udd77\n\nRed-Team-Exercises.\n\nhttps://github.com/CyberSecurityUP/Red-Team-Exercises\n\nAccess large language models from the command-line.\n\nhttps://github.com/simonw/llm\n\nPython script to enumerate users, groups and computers from a Windows domain through LDAP queries.\n\nhttps://github.com/ropnop/windapsearch\n\nGitRecon is a tool that uses the GitHub API to scan repositories owned by a user for email addresses and associated names.", "url": "https://t.me/NinjaSec/28329"}, {"timestamp": "2025-08-31T03:12:57Z", "date_only": false, "value": "2025-08-31T03:12:57.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "265598a2-e1b4-49ab-ab30-735eeb403fc5"}, {"timestamp": "2025-10-21T23:15:47.646Z", "date_only": false, "value": "2025-10-21T23:15:47.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-22536", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:47.646Z", "date_only": false, "value": "2025-10-21T23:15:47.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-22536", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:29Z", "date_only": false, "value": "2025-10-22T00:32:29Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-6HC3-539H-6XC6", "record": "GHSA-6HC3-539H-6XC6", "field": "modified"}, {"timestamp": "2025-11-01T09:00:05Z", "date_only": false, "value": "2025-11-01T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/cRCduug7pYTeO6xzAXJyOJRo3wROGUn_FAbtMmh2Ty8cTs0", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "e1f641a6-7b75-49f6-b546-9513fef8fd79"}, {"timestamp": "2026-02-02T12:27:16.861Z", "date_only": false, "value": "2026-02-02T12:27:16.861772Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4823c432-8143-48ca-9130-7a16ee18f8d7", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "6c97de6e-15ba-4f0f-b938-29e9a7380c8c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4823c432-8143-48ca-9130-7a16ee18f8d7"}, {"timestamp": "2026-02-02T12:27:16.861Z", "date_only": false, "value": "2026-02-02T12:27:16.861772Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4823c432-8143-48ca-9130-7a16ee18f8d7", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "c497831a-9504-4b46-bb4b-bd5dbe4af03d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4823c432-8143-48ca-9130-7a16ee18f8d7"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-22536", "field": "timestamps.recorded_at", "uuid": "7ef5df8b-33a3-486e-8125-a8dca040dd73", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "660327df-194a-47dd-8a94-4e4a9f833881"}, {"timestamp": "2026-02-28T00:00:00Z", "date_only": false, "value": "2026-02-28T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "1d1f2b05-1f20-47ec-a94a-f4c4414d4ca7"}, {"timestamp": "2026-06-17T04:28:33.183Z", "date_only": false, "value": "2026-06-17T04:28:33.183", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-22536", "record": "FKIE_CVE-2022-22536", "field": "lastModified"}, {"timestamp": "2026-06-19T12:47:06.319Z", "date_only": false, "value": "2026-06-19T12:47:06.319607Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2812f05-fa23-425d-aa73-78a221266b11", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "ed24c92c-87f8-4e66-abb1-34f308d620d7", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b2812f05-fa23-425d-aa73-78a221266b11"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-22536", "field": "timestamps.recorded_at", "uuid": "95966980-7a53-49f4-b88b-ada14ff1459e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:13:59.236Z", "date_only": false, "value": "2026-06-23T11:13:59.236031Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/95966980-7a53-49f4-b88b-ada14ff1459e", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "aef9e517-42b4-45f3-a249-da0ae8d9b30a", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/95966980-7a53-49f4-b88b-ada14ff1459e"}, {"timestamp": "2026-06-23T14:05:31.337Z", "date_only": false, "value": "2026-06-23T14:05:31.337332Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54191fac-a437-4c2f-955b-06fa9f9a066e", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "40995282-3190-4a56-83b8-9a3566d69b4e", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/54191fac-a437-4c2f-955b-06fa9f9a066e"}, {"timestamp": "2026-06-30T09:23:55.062Z", "date_only": false, "value": "2026-06-30T09:23:55.062778Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c0e0122-fdce-4b17-8713-ea2a377d2cd1", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "b3275a46-fef8-4f59-8283-6d589d757507", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9c0e0122-fdce-4b17-8713-ea2a377d2cd1"}, {"timestamp": "2026-07-01T07:17:48.541Z", "date_only": false, "value": "2026-07-01T07:17:48.541686Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/50b9f865-6d37-408f-8aeb-5324bfa849f3", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "91e2225e-9bf5-4b29-a9b9-59aec6cc7083", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/50b9f865-6d37-408f-8aeb-5324bfa849f3"}, {"timestamp": "2026-07-26T02:02:42.258Z", "date_only": false, "value": "2026-07-26T02:02:42.258124Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/593", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "86b56b55-4644-47a4-be91-f6ffc1f4f1d4", "url": "https://t.me/EchelonEyes/593"}, {"timestamp": "2026-07-26T07:01:49.208Z", "date_only": false, "value": "2026-07-26T07:01:49.208592Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/9050", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "785d02da-b8d3-4c7d-b4fa-bbbdd15a4f9d", "url": "https://t.me/KaitNews/9050"}, {"timestamp": "2026-07-27T00:01:17.997Z", "date_only": false, "value": "2026-07-27T00:01:17.997734Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/593", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "b3199712-f369-45bf-9052-59fafcb39471", "url": "https://t.me/EchelonEyes/593"}, {"timestamp": "2026-07-27T00:01:33.514Z", "date_only": false, "value": "2026-07-27T00:01:33.514087Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KaitNews/9050", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "b9f3af23-1b18-4587-b310-eb6833aace25", "url": "https://t.me/KaitNews/9050"}, {"timestamp": "2026-07-28T10:00:05.835Z", "date_only": false, "value": "2026-07-28T10:00:05.835416Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/593", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "d2e666b6-1b0f-4f6f-aa1b-d9e35b82349c", "url": "https://t.me/EchelonEyes/593"}, {"timestamp": "2026-07-29T00:00:40.949Z", "date_only": false, "value": "2026-07-29T00:00:40.949180Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/593", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "622faa0a-0edd-4002-9d52-990b2dfe2f71", "url": "https://t.me/EchelonEyes/593"}, {"timestamp": "2026-07-29T01:00:04.928Z", "date_only": false, "value": "2026-07-29T01:00:04.928915Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KaitNews/9050", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "ca6c7c48-0d9f-41e3-b9fe-571bc8a6c82e", "url": "https://t.me/KaitNews/9050"}, {"timestamp": "2026-07-30T00:03:20.494Z", "date_only": false, "value": "2026-07-30T00:03:20.494678Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/KaitNews/9050", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "6fe6304d-59d0-4bac-bb95-93a138112668", "url": "https://t.me/KaitNews/9050"}, {"timestamp": "2026-08-09T04:33:49.373Z", "date_only": false, "value": "2026-08-09T04:33:49.373607Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/onelab1337/2128", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "38c01995-013b-4653-98dc-55f0e3cc0264", "url": "https://t.me/onelab1337/2128"}, {"timestamp": "2026-08-10T00:00:26.470Z", "date_only": false, "value": "2026-08-10T00:00:26.470419Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/onelab1337/2128", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "7926c7f9-015d-40ff-8433-257afd5a7d37", "url": "https://t.me/onelab1337/2128"}, {"timestamp": "2026-08-19T21:00:05.312Z", "date_only": false, "value": "2026-08-19T21:00:05.312387Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/9", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "c0b4fb84-8767-4eac-8738-9ab940902de1", "url": "https://t.me/NinjaSecurity/9"}, {"timestamp": "2026-08-21T00:00:21.078Z", "date_only": false, "value": "2026-08-21T00:00:21.078275Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSecurity/9", "record": "CVE-2022-22536", "field": "creation_timestamp", "uuid": "7c83ae4d-9799-48b7-a729-3e0d501a481d", "url": "https://t.me/NinjaSecurity/9"}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-22536", "field": "timestamps.last_seen_at", "uuid": "50b9f865-6d37-408f-8aeb-5324bfa849f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": true, "value": "2026-10-20", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-22536", "field": "evidence.0.details.observation_date", "uuid": "50b9f865-6d37-408f-8aeb-5324bfa849f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-20T00:00:00Z", "date_only": false, "value": "2026-10-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-22536", "field": "status.status_updated_at", "uuid": "50b9f865-6d37-408f-8aeb-5324bfa849f3", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-22536", "field": "timestamps.recorded_at", "uuid": "50b9f865-6d37-408f-8aeb-5324bfa849f3", "status": {"status_reason": "confirmed", "exploited": true}}]}