{"metadata": {"vulnerability": "CVE-2022-41034", "count": 50, "kinds": {"milestone": 7, "sighting": 13, "kev": 0, "other": 30}}, "data": [{"timestamp": "2022-09-19T00:00:00Z", "date_only": false, "value": "2022-09-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-41034", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-10-11T00:00:00Z", "date_only": false, "value": "2022-10-11T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-41034", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-10-11T07:00:00Z", "date_only": false, "value": "2022-10-11T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41034", "record": "MSRC_CVE-2022-41034", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-10-11T07:00:00Z", "date_only": false, "value": "2022-10-11T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41034", "record": "MSRC_CVE-2022-41034", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-10-11T07:00:00Z", "date_only": false, "value": "2022-10-11T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "CVE-2022-41034", "field": "containers.cna.datePublic"}, {"timestamp": "2022-10-11T07:00:00Z", "date_only": false, "value": "2022-10-11T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41034", "record": "MSRC_CVE-2022-41034", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-10-11T07:00:00Z", "date_only": false, "value": "2022-10-11T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41034", "record": "MSRC_CVE-2022-41034", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-10-11T19:15:20.643Z", "date_only": false, "value": "2022-10-11T19:15:20.643", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41034", "record": "FKIE_CVE-2022-41034", "field": "published"}, {"timestamp": "2022-10-11T19:15:20.643Z", "date_only": false, "value": "2022-10-11T19:15:20.643", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-41034", "record": "GSD-2022-41034", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2022-10-11T22:00:00Z", "date_only": false, "value": "2022-10-11T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-10-11T22:00:00Z", "date_only": false, "value": "2022-10-11T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-10-11T22:00:00Z", "date_only": false, "value": "2022-10-11T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-10-11T22:26:25Z", "date_only": false, "value": "2022-10-11T22:26:25.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/51159", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "b3e28db2-f3b7-4c64-b166-8a8035cfc675", "content": "\u203c CVE-2022-41034 \u203c\n\nVisual Studio Code Remote Code Execution Vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/51159"}, {"timestamp": "2022-10-12T00:00:00Z", "date_only": false, "value": "2022-10-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-910", "record": "CERTFR-2022-AVI-910", "field": "last_revision_date"}, {"timestamp": "2022-10-12T00:00:00Z", "date_only": false, "value": "2022-10-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-910", "record": "CERTFR-2022-AVI-910", "field": "initial_release_date"}, {"timestamp": "2022-10-12T00:00:00Z", "date_only": false, "value": "2022-10-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-910", "record": "CERTFR-2022-AVI-910", "field": "revisions.0.revision_date"}, {"timestamp": "2022-10-12T22:00:00Z", "date_only": false, "value": "2022-10-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-10-13T22:00:00Z", "date_only": false, "value": "2022-10-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2022-10-16T22:00:00Z", "date_only": false, "value": "2022-10-16T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2022-10-19T22:00:00Z", "date_only": false, "value": "2022-10-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2022-11-08T23:00:00Z", "date_only": false, "value": "2022-11-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2022-11-13T23:00:00Z", "date_only": false, "value": "2022-11-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2022-11-15T23:00:00Z", "date_only": false, "value": "2022-11-15T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2022-11-16T23:00:00Z", "date_only": false, "value": "2022-11-16T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2022-11-28T23:00:00Z", "date_only": false, "value": "2022-11-28T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2022-12-04T23:00:00Z", "date_only": false, "value": "2022-12-04T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2022-12-04T23:00:00Z", "date_only": false, "value": "2022-12-04T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-13T01:19:32.642Z", "date_only": false, "value": "2023-12-13T01:19:32.642733Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-41034", "record": "GSD-2022-41034", "field": "gsd.osvSchema.modified"}, {"timestamp": "2023-12-20T20:15:17.973Z", "date_only": false, "value": "2023-12-20T20:15:17.973", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-41034", "record": "GSD-2022-41034", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-03T15:37:09.828Z", "date_only": false, "value": "2024-01-03T15:37:09.828511Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-41034", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-03T15:37:09.828Z", "date_only": false, "value": "2024-01-03T15:37:09.828511Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41034", "record": "FKIE_CVE-2022-41034", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-06-10T21:58:09Z", "date_only": false, "value": "2024-06-10T21:58:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/vscode_ipynb_remote_dev_exec.rb", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "6f591508-e77b-4ce9-927f-f6c386b41bf9", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/vscode_ipynb_remote_dev_exec.rb"}, {"timestamp": "2024-06-14T13:06:56Z", "date_only": false, "value": "2024-06-14T13:06:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/10673", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "a99d01be-bcbc-4bfb-bb76-be47538b03c0", "content": "#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE", "url": "https://t.me/CyberSecurityTechnologies/10673"}, {"timestamp": "2024-06-18T09:33:42Z", "date_only": false, "value": "2024-06-18T09:33:42.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/3316", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "0f1aa0d2-33c4-4b1c-9703-dcbf1bf36b8d", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/dilagrafie/3316"}, {"timestamp": "2024-06-18T09:33:59Z", "date_only": false, "value": "2024-06-18T09:33:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberDilara/200", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "bd4e2024-9f70-48a1-9943-c906a9e23fbf", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/CyberDilara/200"}, {"timestamp": "2024-06-18T09:34:50Z", "date_only": false, "value": "2024-06-18T09:34:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GrayHatsHack/6752", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "b8e3ecee-22eb-4acb-a362-d2e00118e0b0", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/6752"}, {"timestamp": "2024-06-18T09:34:50Z", "date_only": false, "value": "2024-06-18T09:34:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GrayHatsHack/7986", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "42ec35f5-44e4-4146-9d4b-f6abf003ed95", "content": "Tools - Hackers Factory\n\nThis project generates DNS zonefiles with custom NSEC3 parameters to reproduce and evaluate the attacks in CVE-2023-50868. \n\nhttps://github.com/Goethe-Universitat-Cybersecurity/NSEC3-Encloser-Attack\n\nGitHub - kgdn/buffet: Web-based virtual machine manager - BSc. Computer Systems dissertation project (Heriot-Watt University)\n\nhttps://github.com/kgdn/buffet\n\nA full Mod_Security guide to use local software like clam-av, chkrootkit, fail2ban, rkhunter for Nginx & Apache \n\nhttps://github.com/VolkanSah/ModSecurity-Webserver-Protection-Guide\n\nMac RDP Client: Kerberos and Protected Users Guide\nhttps://awakecoding.com/posts/mac-rdp-client-kerberos-and-protected-users-guide/\n\n#exploit\n1. CVE-2023-46817:\nphpFox <=4.8.13 (redirect) PHP Object Injection\nhttps://karmainsecurity.com/pocs/CVE-2023-46817.php\n\n2. Magento CE RCE Exploit\nhttps://github.com/Hackhoven/Magento-RCE\n\n#tools #Offensive_security\n\n1. Tools for analyzing EDR agents\nhttps://github.com/outflanknl/edr-internals\n\n2. Benevolent Shellcode Loader\nhttps://github.com/jakobfriedl/BenevolentLoader\n\n#exploit\n1. CVE-2024-30850, CVE-2024-31839:\nCHAOS RAT v5.01 web panel RCE\nhttps://github.com/chebuya/CVE-2024-30850-chaos-rat-rce-poc\n\n2. CVE-2024-28995:\nSolarWinds Serv-U directory transversal\nhttps://github.com/rapid7/metasploit-framework/pull/19255\n\nhttps://attackerkb.com/topics/2k7UrkHyl3/cve-2024-28995/rapid7-analysis\n\n#reversing\n1. TempleOS Reverse Engineering\nhttps://starkeblog.com/bootsector/templeos/2024/06/13/templeos-reverse-engineering-part-i.html\n2. Thecus NAS Firmware Decryption\nhttps://starkeblog.com/cryptography/firmware/2024/06/11/thecus-nas-firmware-decrypt.html\n\nhttps://github.com/nstarke/thecus-firmware-decrypt\n\nHijack clicks on and within links, probably for client-side routing \n\n#Research\n\"Hyperlink Hijacking: Exploiting Erroneous URL Links to Phantom Domains\", 2024.\n\nhttps://github.com/mapbox/link-hijacker\n\n#exploit\n1. CVE-2022-41034:\nVSCode ipynb RCE\nhttps://packetstormsecurity.com/files/179029/VSCode-ipynb-Remote-Code-Execution.html\n\n2. CVE-2024-27801:\nUaF in NSXPC on all Apple platforms\nhttps://github.com/wangtielei/POCs/tree/main/CVE-2024-27801\n+ UAF in AGX (iOS <13):\nhttps://github.com/wangtielei/POCs/tree/main/No_CVE\n\n#HackersFactory", "url": "https://t.me/GrayHatsHack/7986"}, {"timestamp": "2024-08-03T12:35:48.672Z", "date_only": false, "value": "2024-08-03T12:35:48.672Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-41034", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:36:19.742Z", "date_only": false, "value": "2024-08-15T17:36:19.742+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1683", "record": "WID-SEC-W-2022-1683", "field": "document.tracking.generator.date"}, {"timestamp": "2024-11-20T14:44:48.381Z", "date_only": false, "value": "2024-11-20T14:44:48.381Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-41034", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-02T21:26:57.315Z", "date_only": false, "value": "2025-01-02T21:26:57.315Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41034", "record": "MSRC_CVE-2022-41034", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-02T21:27:14.862Z", "date_only": false, "value": "2025-01-02T21:27:14.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-41034", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-02T21:27:14.862Z", "date_only": false, "value": "2025-01-02T21:27:14.862Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "CVE-2022-41034", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "9edabe08-913c-46b0-97ec-ae75b46e1743"}, {"timestamp": "2025-02-23T04:10:48Z", "date_only": false, "value": "2025-02-23T04:10:48.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "09ce4227-e2ed-45b3-8c11-7a47e4c907be"}, {"timestamp": "2025-10-23T21:13:00Z", "date_only": false, "value": "2025-10-23T21:13:00.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "69500cb4-fcf7-40df-9d84-e239c7d6a933"}, {"timestamp": "2026-06-17T05:02:27.740Z", "date_only": false, "value": "2026-06-17T05:02:27.740", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41034", "record": "FKIE_CVE-2022-41034", "field": "lastModified"}, {"timestamp": "2026-07-29T12:00:33.532Z", "date_only": false, "value": "2026-07-29T12:00:33.532747Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12379", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "baad7afa-7dfc-4c0d-98b1-4f13a1feedd3", "url": "https://t.me/CVEhub/12379"}, {"timestamp": "2026-07-30T00:00:58.384Z", "date_only": false, "value": "2026-07-30T00:00:58.384793Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/12379", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "0a232364-bff4-442e-91f9-65e981db5e4f", "url": "https://t.me/CVEhub/12379"}, {"timestamp": "2026-07-31T00:00:05.667Z", "date_only": false, "value": "2026-07-31T00:00:05.667392Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/12379", "record": "CVE-2022-41034", "field": "creation_timestamp", "uuid": "a51e7c95-4c47-40e5-9c49-43d3de34c83c", "url": "https://t.me/CVEhub/12379"}]}