{"metadata": {"vulnerability": "cve-2022-38577", "count": 22, "kinds": {"milestone": 4, "sighting": 6, "kev": 0, "other": 12}}, "data": [{"timestamp": "2022-08-22T00:00:00Z", "date_only": false, "value": "2022-08-22T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-38577", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-09-19T15:45:54Z", "date_only": false, "value": "2022-09-19T15:45:54.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-38577", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-19T16:15:00Z", "date_only": false, "value": "2022-09-19T16:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-GC28-55G9-F45F", "record": "GHSA-GC28-55G9-F45F", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-19T16:15:00Z", "date_only": false, "value": "2022-09-19T16:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-38577", "record": "GSD-2022-38577", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-19T16:15:11.457Z", "date_only": false, "value": "2022-09-19T16:15:11.457", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-38577", "record": "FKIE_CVE-2022-38577", "field": "published"}, {"timestamp": "2022-09-20T00:00:30Z", "date_only": false, "value": "2022-09-20T00:00:30Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-GC28-55G9-F45F", "record": "GHSA-GC28-55G9-F45F", "field": "published"}, {"timestamp": "2022-09-22T00:00:26Z", "date_only": false, "value": "2022-09-22T00:00:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-GC28-55G9-F45F", "record": "GHSA-GC28-55G9-F45F", "field": "modified"}, {"timestamp": "2022-09-22T11:05:12Z", "date_only": false, "value": "2022-09-22T11:05:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6850", "record": "CVE-2022-38577", "field": "creation_timestamp", "uuid": "486e0d4a-c3ab-4421-a3dd-b7fb1d346fa5", "content": "#exploit\n1. From Leaking TheHole to Chrome Renderer RCE\nhttps://medium.com/numen-cyber-labs/from-leaking-thehole-to-chrome-renderer-rce-183dcb6f3078\n\n2. CVE-2022-38577:\nProcessMaker - User Profile Privilege Escalation\nhttps://github.com/sornram9254/CVE-2022-38577-Processmaker", "url": "https://t.me/CyberSecurityTechnologies/6850"}, {"timestamp": "2022-11-15T18:49:00Z", "date_only": false, "value": "2022-11-15T18:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-38577", "record": "GSD-2022-38577", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-05-25T16:56:29Z", "date_only": false, "value": "2023-05-25T16:56:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2812", "record": "CVE-2022-38577", "field": "creation_timestamp", "uuid": "3910de90-89a4-4518-906f-5974afe393d4", "content": "#Tools -\u00a0 \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\nMCPTool\n\nFeatures:\n\u25ab\ufe0f See information of a server\n\u25ab\ufe0f View player information\n\u25ab\ufe0f Port scanning\n\u25ab\ufe0f QuboScanner\n\u25ab\ufe0f Scanning of nodes of a hosting\n\u25ab\ufe0f Create a local bungee\n\u25ab\ufe0f Listening command\n\u25ab\ufe0f Checker\n\u25ab\ufe0f Show mods on this server.\n\n\nhttps://github.com/wrrulos/MCPTool\n\nvbackdoor\n\nHide process,port,self under Linux using the LD_PRELOAD rootkit.\n\nhttps://github.com/veo/vbackdoor\n\nWebKiller V2\n\nTool Information Gathering Write With Python.\n\nhttps://github.com/ultrasecurity/webkiller\n\nFilelessRemotePE\n\nLoading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique.\n\nhttps://github.com/D1rkMtr/FilelessRemotePE\n\nJuicyPotatoNG\n\nJust another Windows Local Privilege Escalation from Service Account to System. \n\nhttps://github.com/antonioCoco/JuicyPotatoNG\n\nDetails:\nhttps://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/\n\nBluffy \n\nA utility which was used in experiments to bypass Anti-Virus products (statically) by formatting shellcode into realistic looking data formats.\n\nSo far, we implemented:\n\n\u25ab\ufe0f UUID\n\u25ab\ufe0f CLSID\n\u25ab\ufe0f SVG\n\u25ab\ufe0f CSS\n\u25ab\ufe0f CSV\n\nhttps://github.com/preemptdev/bluffy\n\nCVE-2022-38577\n\nProcessMaker - User Profile Privilege Escalation\n\nhttps://github.com/sornram9254/CVE-2022-38577-Processmaker\n\n#cve\n\nAV-Bypass-Learning\n\nhttps://github.com/colind0pe/AV-Bypass-Learning\n\nLockBit-Black-Builder\n\nhttps://github.com/3xp0rt/LockBit-Black-Builder\n\nLockBit ransomware builder leaked online by \u201cangry developer\u201d\nhttps://www.bleepingcomputer.com/news/security/lockbit-ransomware-builder-leaked-online-by-angry-developer-/\n\nPaybag\n\nCreate metasploit payload easily using Paybag\n\nhttps://github.com/Deadpool2000/Paybag\n\nDNS_Enumerator\n\nhttps://github.com/crypticq/DNS_Enumerator\n\nShotDroid v2\n\nPentesting tool for android. There are 3 tools that have their respective functions:\n\nAndroid Files: Get files from Android directory, internal and external storage (Images, Videos, Whatsapp, ..)\nAndroid Keylogger: Android Keylogging Keyboard + Reverse Shell.\nTake Face Webcam: Take face shot from the target phone's front camera and PC webcam.\n\nFeatures:\n\u25ab\ufe0f Hide apps in android files.\n\u25ab\ufe0f Custom android directory.\n\u25ab\ufe0f For Android Keylogger -> you can see it here: Simple-keyboard or LokiBoard.\n\u25ab\ufe0f Automatic html template in take face webcam.\n\u25ab\ufe0f Custom html or custom your html folder in take face webcam tool.\n\u25ab\ufe0f etc.\n\nhttps://github.com/kp300/shotdroid\n\nFakeBurpCert\n\nBurp suite Certificate modification tool.\n\nThis tool is used to modify or add information that is not included in the dynamically generated certificates in PortSwiggers Burp Suite.\n\nCurrently working:\n\n\u25ab\ufe0f Modification of CN\n\u25ab\ufe0f Set the serial number\n\u25ab\ufe0f Set the date of the certificate\n\u25ab\ufe0f Modification or add a SAN (Subject Alternative Name).\n\u25ab\ufe0f Add an OCSP URI.\n\nhttps://github.com/raise-isayan/FakeCert\n\nBufferOverflowKiller v1.0\n\nA tool for buffer overflow attacks\n\nhttps://github.com/baimao-box/BufferOverflowKiller\n\nLeonidas\n\nThis is the repository containing Leonidas, a framework for executing attacker actions in the cloud. It provides a YAML-based format for defining cloud attacker tactics, techniques and procedures (TTPs) and their associated detection properties.\n\nhttps://github.com/WithSecureLabs/leonidas\n\nRustChain\n\nThis tool is a simple PoC of how to hide memory artifacts using a ROP chain in combination with hardware breakpoints. The ROP chain will change the main module memory page's protections to N/A while sleeping (i.e. when the function Sleep is called). \n\nFor more detailed information about this memory scanning evasion technique check out the original project Gargoyle. x64 only.\n\nhttps://github.com/Kudaes/RustChain\n\nCVE-2022-39197\n\ncritical Cobalt Strike bug could lead to RCE attacks.\n\nhttps://github.com/burpheart/cve-2022-39197\n\nDetails:\nhttps://securityonline.info/cve-2022-39197-critical-cobalt-strike-bug-could-lead-to-rce-attacks/\n\nJoin:\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory\n\nWebsite:\nwww.ghostclan.org", "url": "https://t.me/dilagrafie/2812"}, {"timestamp": "2023-12-13T01:19:21.981Z", "date_only": false, "value": "2023-12-13T01:19:21.981609Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-38577", "record": "GSD-2022-38577", "field": "gsd.osvSchema.modified"}, {"timestamp": "2025-06-03T18:18:06.679Z", "date_only": false, "value": "2025-06-03T18:18:06.679251Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-38577", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-06-03T18:18:06.679Z", "date_only": false, "value": "2025-06-03T18:18:06.679251Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-38577", "record": "FKIE_CVE-2022-38577", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-06-03T18:18:18.698Z", "date_only": false, "value": "2025-06-03T18:18:18.698Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-38577", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-04T23:53:47.276Z", "date_only": false, "value": "2026-07-04T23:53:47.276Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-38577", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:20:55.001Z", "date_only": false, "value": "2026-07-09T00:20:55.001Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-38577", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-07-09T00:20:55.001Z", "date_only": false, "value": "2026-07-09T00:20:55.001Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-38577", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-07-09T01:17:40.450Z", "date_only": false, "value": "2026-07-09T01:17:40.450", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-38577", "record": "FKIE_CVE-2022-38577", "field": "lastModified"}, {"timestamp": "2026-07-29T12:01:00.622Z", "date_only": false, "value": "2026-07-29T12:01:00.622996Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2566", "record": "CVE-2022-38577", "field": "creation_timestamp", "uuid": "31dd5216-d31e-4ef4-93d1-3b7c95d44548", "url": "https://t.me/CVEhub/2566"}, {"timestamp": "2026-07-30T00:01:39.125Z", "date_only": false, "value": "2026-07-30T00:01:39.125421Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/2566", "record": "CVE-2022-38577", "field": "creation_timestamp", "uuid": "375e34f8-6ed3-4101-86b9-74003442b185", "url": "https://t.me/CVEhub/2566"}, {"timestamp": "2026-08-01T03:00:03.878Z", "date_only": false, "value": "2026-08-01T03:00:03.878830Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2566", "record": "CVE-2022-38577", "field": "creation_timestamp", "uuid": "9b0ec440-e3ad-4e44-ada0-e9036b5e1962", "url": "https://t.me/CVEhub/2566"}, {"timestamp": "2026-08-02T00:01:19.154Z", "date_only": false, "value": "2026-08-02T00:01:19.154235Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/2566", "record": "CVE-2022-38577", "field": "creation_timestamp", "uuid": "721b8df7-7dea-46ac-aa64-c97c9afc83f8", "url": "https://t.me/CVEhub/2566"}]}