{"metadata": {"vulnerability": "cve-2022-25765", "count": 46, "kinds": {"milestone": 5, "sighting": 27, "kev": 0, "other": 14}}, "data": [{"timestamp": "2022-02-24T00:00:00Z", "date_only": false, "value": "2022-02-24T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-25765", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-09T00:00:00Z", "date_only": false, "value": "2022-09-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "cve-2022-25765", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-09-09T00:00:00Z", "date_only": true, "value": "2022-09-09", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "namespaces.gitlab.com.advisories.0.pubdate", "linked_record": true}, {"timestamp": "2022-09-09T05:00:01.722Z", "date_only": false, "value": "2022-09-09T05:00:01.722921Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC", "linked_record": true}, {"timestamp": "2022-09-09T05:00:15.097Z", "date_only": false, "value": "2022-09-09T05:00:15.097Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-25765", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-09-09T05:15:00Z", "date_only": false, "value": "2022-09-09T05:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RHWX-HJX2-X4QR", "record": "GHSA-RHWX-HJX2-X4QR", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-09-09T05:15:00Z", "date_only": false, "value": "2022-09-09T05:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-09-09T05:15:07.713Z", "date_only": false, "value": "2022-09-09T05:15:07.713", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-25765", "record": "FKIE_CVE-2022-25765", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-09-10T00:00:00Z", "date_only": true, "value": "2022-09-10", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "namespaces.github.com/rubysec/ruby-advisory-db.date", "linked_record": true}, {"timestamp": "2022-09-10T00:00:00Z", "date_only": false, "value": "2022-09-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "gsd.osvSchema.published", "linked_record": true}, {"timestamp": "2022-09-10T00:00:00Z", "date_only": false, "value": "2022-09-10T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2022-09-10T00:00:32Z", "date_only": false, "value": "2022-09-10T00:00:32Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RHWX-HJX2-X4QR", "record": "GHSA-RHWX-HJX2-X4QR", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-04T21:05:25Z", "date_only": false, "value": "2022-12-04T21:05:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3527", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "c05db7e1-ab7b-456b-84d4-7940f0921fb7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1apdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\nURL\uff1ahttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-06T04:04:20Z", "date_only": false, "value": "2022-12-06T04:04:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/1638", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "cc55a23e-5769-48f3-ad80-fc4ae36c91ec", "content": "#exploit\n1. CVE-2022-26265:\nContao CMS v.1.5.0 - RCE\nhttps://github.com/Inplex-sys/CVE-2022-26265\n\n2. CVE-2022-25765:\npdfkit URL Command Injection\nhttps://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795\n]-> A Shell exploit: https://github.com/Atsukoro1/PDFKitExploit", "url": "https://t.me/crackcodes/1638", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-06T06:38:55Z", "date_only": false, "value": "2022-12-06T06:38:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/simosaper/748", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "a4e3638f-5c4c-4b04-8e2b-03b31fd3e222", "content": "#exploit\n1. CVE-2022-26265:\nContao CMS v.1.5.0 - RCE\nhttps://github.com/Inplex-sys/CVE-2022-26265\n\n2. CVE-2022-25765:\npdfkit URL Command Injection\nhttps://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795\n]-> A Shell exploit: https://github.com/Atsukoro1/PDFKitExploit", "url": "https://t.me/simosaper/748", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-06T11:01:01Z", "date_only": false, "value": "2022-12-06T11:01:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7308", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "4dd691a0-413f-4a26-8d18-a4bdf9807253", "content": "#exploit\n1. CVE-2022-26265:\nContao CMS v.1.5.0 - RCE\nhttps://github.com/Inplex-sys/CVE-2022-26265\n\n2. CVE-2022-25765:\npdfkit URL Command Injection\nhttps://security.snyk.io/vuln/SNYK-RUBY-PDFKIT-2869795\n]-> A Shell exploit: https://github.com/Atsukoro1/PDFKitExploit", "url": "https://t.me/CyberSecurityTechnologies/7308", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-21T14:30:47Z", "date_only": false, "value": "2022-12-21T14:30:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3614", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "1e760aff-236e-4309-81db-98820a3ec2ca", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-25765 pdfkit <0.8.6 command injection.\nURL\uff1ahttps://github.com/shamo0/PDFkit-CMD-Injection\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3614", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-23T06:45:41Z", "date_only": false, "value": "2022-12-23T06:45:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2533", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "2a17a69b-d1b6-4109-8cd6-5fa51f9abec9", "content": "#CVE-2022\npdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2533", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-10T19:38:54Z", "date_only": false, "value": "2023-01-10T19:38:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/BlueRedTeam/2556", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "3f678c83-0e34-4816-8678-251146470b26", "content": "#CVE-2022\n7-Zip CVE-2022-29072 Mitigation - CHM file - This script detects if the .chm file exists and removes it.\n\nhttps://github.com/Phantomiman/7-Zip.chm-mitigiation\n\n#CVE-2022\nPoC for Acronis Arbitrary File Read - CVE-2022-45451\nhttps://github.com/alfarom256/CVE-2022-45451\n\n#webshell\nwebshell alfa php\n\nhttps://github.com/xstro04002/alfa-shell\n\nCVE-2022-25765 pdfkit <0.8.6 command injection.\n\nhttps://github.com/shamo0/PDFkit-CMD-Injection\n\nGet root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.\n\nhttps://github.com/Conradoduart3/Nft-Grabber-Stealer-Exploit-Cve-2022-Steal-BlockHain-Hack-Nft\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2556"}, {"timestamp": "2023-01-26T22:41:07Z", "date_only": false, "value": "2023-01-26T22:41:07Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RHWX-HJX2-X4QR", "record": "GHSA-RHWX-HJX2-X4QR", "field": "modified", "linked_record": true}, {"timestamp": "2023-01-28T19:14:38Z", "date_only": false, "value": "2023-01-28T19:14:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BABATATASASA/3436", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "8c7351fc-42cb-4c72-bc9b-b4398d9d9bd2", "content": "\u200b\u200bCVE-2022-25765 \n\npdfkit Exploit Reverse Shell\n\npdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u200b\u200bCVE-2022-45025\n\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n\u200b\u200bCVE-2022-36537\n\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n\u200b\u200bCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bCVE-2022-45771 - Pwndoc LFI to RCE\n\nPwndoc local file inclusion to remote code execution of Node.js code on the server.\n\nhttps://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE\n\n\u200b\u200bCVE-2022-46169\n\nCacti remote_agent.php Unauthenticated Command Injection.\n\nhttps://github.com/0xf4n9x/CVE-2022-46169\n\n\u200b\u200bCVE-2022-45451\n\nPoC for CVE-2022-45451 Acronis Arbitrary File Read\n\nhttps://github.com/alfarom256/CVE-2022-45451\n\nCVE-2022-28672\n\nThis bug was Use after Free caused by improper handling of javascript object memory references.\n\nhttps://github.com/hacksysteam/CVE-2022-28672\n\nUse after Free - RCE Exploit: https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672\n\n\u200b\u200bCVE-2003-0358\n\nBuffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges > via a long -s command line option.\n\nhttps://github.com/snowcra5h/CVE-2003-0358\n\n\u200b\u200bCVE-2022-39253\n\nDocker host file read\n\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc\n\n\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n\u200b\u200bCVE-2022-2602\n\nPoC Kernel Privilege Escalation Linux\n\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n\u200b\u200bEvilWfshbr\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation\n\nhttps://github.com/kkent030315/CVE-2022-42046\n\n\u200b\u200bCVE-2022-2602\n\nThis repository contains exploits for CVE-2022-2602. There are two versions of it:\n\n\u25ab\ufe0f Exploit using userfaultfd technique.\n\u25ab\ufe0f Exploit using inode locking technique.\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\n#cve #poc \n@pfkgit", "url": "https://t.me/BABATATASASA/3436", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-30T12:34:25Z", "date_only": false, "value": "2023-01-30T12:34:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7652", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "faa2c816-a451-4012-9b11-4fe050facea2", "content": "#exploit\n1. CVE-2022-44900:\nDirectory traversal vulnerability in SevenZipFile.extractall() function\nhttps://github.com/0xless/CVE-2022-44900-demo-lab\n\n2. CVE-2022-25765:\nPDFkit CMD Injection\nhttps://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765", "url": "https://t.me/CyberSecurityTechnologies/7652", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-30T22:53:50Z", "date_only": false, "value": "2023-01-30T22:53:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/1287", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "c0d7558d-56b5-44a6-a16d-93a223488a74", "content": "\u200b\u200bCVE-2022-25765\n\nExploit for CVE-2022-25765 command injection in pdfkit < 0.8.6\n\nhttps://github.com/nikn0laty/PDFkit-CMD-Injection-CVE-2022-25765\n\n#cve #poc #exploit", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/1287", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-31T05:59:59Z", "date_only": false, "value": "2023-01-31T05:59:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/proxy_bar/1347", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "fefb9a81-902d-4895-8c1c-a3a3c870e40c", "content": "CVE-2022-25765  -  PDFkit-CMD-Injection\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u044b\u0440\u043a\u0438 \u0442\u0443\u0442\nexploit\n\n#exploit", "url": "https://t.me/proxy_bar/1347"}, {"timestamp": "2023-02-02T11:57:40Z", "date_only": false, "value": "2023-02-02T11:57:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2497", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "ecb933a4-dfd1-480d-8b85-f815c793c460", "content": "Exploit for CVE-2022-25765 command injection in pdfkit < 0.8.6\n\ndownload: https://system32.ink/news-feed/p/209/", "url": "https://t.me/crackcodes/2497", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-14T10:12:05Z", "date_only": false, "value": "2023-03-14T10:12:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Jlnijv-_qCNdG8pk9ZaWqsDMPV8FiAY7bukyinbc-jdofzA", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "2407c927-0628-4ff9-a226-44ed9f0cfd3b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-06T00:00:00Z", "date_only": false, "value": "2023-04-06T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / snyk", "record": "cve-2022-25765", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-06T17:15:00Z", "date_only": false, "value": "2023-04-06T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-20T00:25:57Z", "date_only": false, "value": "2023-05-20T00:25:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4604", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "9ff000c3-9289-4132-bac8-590d5afc9486", "content": "PDFkit CMD-Injection (CVE-2022-25765)\n\nExploit\n\n#CVE #POC #Exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4604", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-07-02T13:30:24Z", "date_only": false, "value": "2023-07-02T13:30:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/680", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "44466181-93f4-4202-8f97-6f5bbfa0fcd9", "content": "cve-2022-25765\n\nGET   /?name=%20ls\n\n#poc", "url": "https://t.me/CNArsenal/680", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-08-08T00:00:00Z", "date_only": true, "value": "2023-08-08", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-25765", "record": "GSD-2022-25765", "field": "namespaces.gitlab.com.advisories.0.date", "linked_record": true}, {"timestamp": "2024-08-03T04:49:43.530Z", "date_only": false, "value": "2024-08-03T04:49:43.530Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-25765", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-09-16T16:47:50.441Z", "date_only": false, "value": "2024-09-16T16:47:50.441Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-25765", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-05-31T16:06:40Z", "date_only": false, "value": "2026-05-31T16:06:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/86709", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "83a92042-9b2a-4e13-be7d-d42cbdf9bb47", "url": "https://t.me/GithubRedTeam/86709"}, {"timestamp": "2026-05-31T19:00:11Z", "date_only": false, "value": "2026-05-31T19:00:11.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/ZoY6dRqoyhlR4mBfSRB4aFzKbPGG5Dw602ZRl8-Iopy1ppw", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "0fd66021-7ea2-4c71-bc79-5d4e484fea36"}, {"timestamp": "2026-06-17T04:34:14.390Z", "date_only": false, "value": "2026-06-17T04:34:14.390", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-25765", "record": "FKIE_CVE-2022-25765", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-07-29T12:00:52.838Z", "date_only": false, "value": "2026-07-29T12:00:52.838586Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/6088", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "046a8a00-d5e4-45a9-b80a-9f20ab9d17b7", "url": "https://t.me/CVEhub/6088"}, {"timestamp": "2026-07-29T12:00:53.374Z", "date_only": false, "value": "2026-07-29T12:00:53.374374Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5500", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "8c1287a7-8b5f-4607-a58e-b9acb6928c97", "url": "https://t.me/CVEhub/5500"}, {"timestamp": "2026-07-30T00:01:30.198Z", "date_only": false, "value": "2026-07-30T00:01:30.198273Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/6088", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "e30bebb3-7390-4e79-81e6-612bec777524", "url": "https://t.me/CVEhub/6088"}, {"timestamp": "2026-07-30T00:01:31.177Z", "date_only": false, "value": "2026-07-30T00:01:31.177014Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5500", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "056f314f-b52b-4ef2-945a-83e1a393a6cf", "url": "https://t.me/CVEhub/5500"}, {"timestamp": "2026-07-31T19:00:03.570Z", "date_only": false, "value": "2026-07-31T19:00:03.570676Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/6088", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "fed0b8b0-25f2-48dc-b4d0-596fb4b5fa3c", "url": "https://t.me/CVEhub/6088", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T20:00:04.184Z", "date_only": false, "value": "2026-07-31T20:00:04.184118Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5500", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "320a680e-fb1b-4ec8-8786-4c67586cd1e6", "url": "https://t.me/CVEhub/5500", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T00:00:24.195Z", "date_only": false, "value": "2026-08-01T00:00:24.195184Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5500", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "10c9b466-8c3d-4d44-b490-d6550b73200c", "url": "https://t.me/CVEhub/5500", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T00:00:24.776Z", "date_only": false, "value": "2026-08-01T00:00:24.776393Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/6088", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "bc0199c9-62af-41e6-b747-1f1505f58eef", "url": "https://t.me/CVEhub/6088", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-03T03:00:05.839Z", "date_only": false, "value": "2026-09-03T03:00:05.839119Z", "kind": "sighting", "label": "Seen", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "ef551e5f-be4a-4328-9b89-79ee3c95787c"}, {"timestamp": "2026-09-04T00:01:01.529Z", "date_only": false, "value": "2026-09-04T00:01:01.529085Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/PrO6w3QLOr3jUo9xBtS3NN22LRqKedjWuLvWfaGQXc76APg", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "5ef55659-f6d5-4ba9-994a-a9f3c2abb71f", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}], "metrics": {"as_of": "2026-11-11T11:57:00.652Z", "anchors": {"origin": {"timestamp": "2022-09-09T00:00:00Z", "date_only": false, "value": "2022-09-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "cve-2022-25765", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-09-09T00:00:00Z", "date_only": false, "value": "2022-09-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "cve-2022-25765", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-12-04T21:05:25Z", "date_only": false, "value": "2022-12-04T21:05:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3527", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "c05db7e1-ab7b-456b-84d4-7940f0921fb7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1apdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\nURL\uff1ahttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 7506325.0, "hours": 2085.090277777778, "days": 86.87876157407408, "min_seconds": 7419925.0, "max_seconds": 7506325.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-09-09T00:00:00Z", "date_only": false, "value": "2022-09-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "cve-2022-25765", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-12-04T21:05:25Z", "date_only": false, "value": "2022-12-04T21:05:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3527", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "c05db7e1-ab7b-456b-84d4-7940f0921fb7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1apdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\nURL\uff1ahttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 131716620.652714, "hours": 36587.95018130945, "days": 1524.4979242212269, "min_seconds": 131630220.652714, "max_seconds": 131716620.652714, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-09-09T00:00:00Z", "date_only": false, "value": "2022-09-09T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / snyk", "record": "cve-2022-25765", "field": "containers.cna.datePublic", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-11T11:57:00.652Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 124210295.652714, "hours": 34502.859903531666, "days": 1437.6191626471527, "min_seconds": 124210295.652714, "max_seconds": 124210295.652714, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-04T21:05:25Z", "date_only": false, "value": "2022-12-04T21:05:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3527", "record": "CVE-2022-25765", "field": "creation_timestamp", "uuid": "c05db7e1-ab7b-456b-84d4-7940f0921fb7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1apdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\nURL\uff1ahttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u6807\u7b7e\uff1a#CVE-2022", "url": "https://t.me/GithubRedTeam/3527", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-11T11:57:00.652Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}