{"metadata": {"vulnerability": "cve-2022-41076", "count": 60, "kinds": {"milestone": 11, "sighting": 15, "kev": 0, "other": 34}}, "data": [{"timestamp": "2022-09-19T00:00:00Z", "date_only": false, "value": "2022-09-19T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-41076", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": true, "value": "2022-12-13", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-41076", "record": "GSD-2022-41076", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-41076", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-12-13T08:00:00Z", "date_only": false, "value": "2022-12-13T08:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41076", "record": "MSRC_CVE-2022-41076", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T08:00:00Z", "date_only": false, "value": "2022-12-13T08:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41076", "record": "MSRC_CVE-2022-41076", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-12-13T08:00:00Z", "date_only": false, "value": "2022-12-13T08:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2022-41076", "field": "containers.cna.datePublic"}, {"timestamp": "2022-12-13T08:00:00Z", "date_only": false, "value": "2022-12-13T08:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41076", "record": "MSRC_CVE-2022-41076", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T08:00:00Z", "date_only": false, "value": "2022-12-13T08:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41076", "record": "MSRC_CVE-2022-41076", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-13T19:15:00Z", "date_only": false, "value": "2022-12-13T19:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-HCFW-R2RR-7G6C", "record": "GHSA-HCFW-R2RR-7G6C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-12-13T19:15:00Z", "date_only": false, "value": "2022-12-13T19:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-41076", "record": "GSD-2022-41076", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-12-13T19:15:11.957Z", "date_only": false, "value": "2022-12-13T19:15:11.957", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41076", "record": "FKIE_CVE-2022-41076", "field": "published"}, {"timestamp": "2022-12-13T21:30:26Z", "date_only": false, "value": "2022-12-13T21:30:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HCFW-R2RR-7G6C", "record": "GHSA-HCFW-R2RR-7G6C", "field": "published"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2303", "record": "WID-SEC-W-2022-2303", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2307", "record": "WID-SEC-W-2022-2307", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2303", "record": "WID-SEC-W-2022-2303", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2307", "record": "WID-SEC-W-2022-2307", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2303", "record": "WID-SEC-W-2022-2303", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2307", "record": "WID-SEC-W-2022-2307", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2307", "record": "WID-SEC-W-2022-2307", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1103", "record": "CERTFR-2022-AVI-1103", "field": "last_revision_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1105", "record": "CERTFR-2022-AVI-1105", "field": "last_revision_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1106", "record": "CERTFR-2022-AVI-1106", "field": "last_revision_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1103", "record": "CERTFR-2022-AVI-1103", "field": "initial_release_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1105", "record": "CERTFR-2022-AVI-1105", "field": "initial_release_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1106", "record": "CERTFR-2022-AVI-1106", "field": "initial_release_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1103", "record": "CERTFR-2022-AVI-1103", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1105", "record": "CERTFR-2022-AVI-1105", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1106", "record": "CERTFR-2022-AVI-1106", "field": "revisions.0.revision_date"}, {"timestamp": "2022-12-15T00:00:00Z", "date_only": true, "value": "2022-12-15", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-41076", "record": "GSD-2022-41076", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-12-27T23:00:00Z", "date_only": false, "value": "2022-12-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2303", "record": "WID-SEC-W-2022-2303", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2022-12-27T23:00:00Z", "date_only": false, "value": "2022-12-27T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2303", "record": "WID-SEC-W-2022-2303", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-09T13:51:54Z", "date_only": false, "value": "2023-01-09T13:51:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1297", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "53adcc59-9d50-4760-898a-98f846f10ec2", "content": "Exchange CVE-2022-41076 Privilege Escalation (OWASSRF + TabShell)\n\nPoC: https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e\n\u0421\u0442\u0430\u0442\u044c\u044f: https://blog.viettelcybersecurity.com/tabshell-owassrf/\n\u0412\u0438\u0434\u0435\u043e: https://www.youtube.com/watch?v=yzvLDo3cLYU\n\n#exploit #lpe #redteam #blueteam #report #pentest", "url": "https://t.me/RalfHackerChannel/1297"}, {"timestamp": "2023-01-09T17:49:40Z", "date_only": false, "value": "2023-01-09T17:49:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1273", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "8bed37e9-77f9-4f81-ae24-304cd2f6310e", "content": "CVE-2022-41076\n\nThe OWASSRF + TabShell exploit chain\n\ntabshell_poc.ps1", "url": "https://t.me/proxy_bar/1273"}, {"timestamp": "2023-01-09T23:20:19Z", "date_only": false, "value": "2023-01-09T23:20:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/u5npDIsaLJQK3m-zwd1mmkUUDg-h3-iQOw8rZU83WOV2NLE", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "fc6be123-521d-41cf-a442-c0e3ee3998c9"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": true, "value": "2023-01-10", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2023-01829", "record": "CNVD-2023-01829", "field": "openTime"}, {"timestamp": "2023-01-10T00:00:00Z", "date_only": true, "value": "2023-01-10", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2023-01829", "record": "CNVD-2023-01829", "field": "submitTime"}, {"timestamp": "2023-01-10T05:13:06Z", "date_only": false, "value": "2023-01-10T05:13:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7503", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "e3566d6b-4161-46e6-a629-1e552f7823e7", "content": "#exploit\n1. CVE-2022-41076:\nThe OWASSRF + TabShell exploit chain\nhttps://blog.viettelcybersecurity.com/tabshell-owassrf\n]-> https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e\n\n2. CVE-2022-3515/CVE-2022-47629:\nInteger overflow bug Libksba\u00a0library (x.509)\nhttps://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md \n\n3. CVE-2022-44877:\nCentos Web Panel 7 Unauthenticated RCE\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/CyberSecurityTechnologies/7503"}, {"timestamp": "2023-01-10T09:14:55Z", "date_only": false, "value": "2023-01-10T09:14:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/zero_day_uz/280", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "34506efa-ad72-425a-9dc7-c8d1657a1af5", "content": "Microsoft Exchange: OWASSRF + TabShell \n(CVE-2022-41076)\n\nThe TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF.\n\nFor a detailed write see research: \nhttps://blog.viettelcybersecurity.com/tabshell-owassrf/\n\nPoC: \nhttps://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e\n\n#owa #ssrf #tabshell #poc", "url": "https://t.me/zero_day_uz/280"}, {"timestamp": "2023-01-28T21:44:02Z", "date_only": false, "value": "2023-01-28T21:44:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/professional_c_h/1888", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "6212e805-ff2e-4ea4-9bdf-06f97b7ffb87", "content": "\u2b55\ufe0fMicrosoft Exchange: OWASSRF + TabShell \n(CVE-2022-41076)\n\nThe TabShell vulnerability its a form of Privilege Escalation which allows breaking out of the restricted Powershell Sandbox after you have successfully gained access through OWASSRF.\n\nFor a detailed write see research: \nhttps://blog.viettelcybersecurity.com/tabshell-owassrf/\n\nPoC: \nhttps://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e\n\n#owa #ssrf #tabshell #poc\n\nChannels :\n@Professional_c_h\n@Card_Crack_Hack", "url": "https://t.me/professional_c_h/1888"}, {"timestamp": "2023-02-01T17:27:05Z", "date_only": false, "value": "2023-02-01T17:27:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QbDffPK45sEvY1NSFLkD1751HQ35mEkhQAE9dpzBuhFZsnw", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "dc62bb8a-384c-48c1-aa9b-cf387c753356"}, {"timestamp": "2023-02-02T06:34:32Z", "date_only": false, "value": "2023-02-02T06:34:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/RFfwK1BBWd1yksqXOQORWmjVF_Swxhl7IKlxdVTfn7Fq5ds", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "9cfe4dcf-2e5a-4995-9129-485cd155a74d"}, {"timestamp": "2023-02-13T07:16:05Z", "date_only": false, "value": "2023-02-13T07:16:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/oRsY88da6I73cGl-qCrSnHo-IYzCGX_3hpJxkVr1dviH7oQ", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "0f833d55-6d33-42c8-b199-3f71ac55266a"}, {"timestamp": "2023-03-04T13:01:25Z", "date_only": false, "value": "2023-03-04T13:01:25.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XbVANu0oDDLdSiNrK5AHO-lSfskiTXJSFLS2EPeeO7JcPLg", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "d7d98750-8e32-46df-a6e3-c140b2b2f3b3"}, {"timestamp": "2023-03-15T18:13:05Z", "date_only": false, "value": "2023-03-15T18:13:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aUftZCBNqWFLmozew0JHAoVPxPg5BBbDzqvntHGXg8GYSLQ", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "82eab591-5055-47f0-be06-3ff458103282"}, {"timestamp": "2023-11-17T17:40:00Z", "date_only": false, "value": "2023-11-17T17:40Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-41076", "record": "GSD-2022-41076", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:32.357Z", "date_only": false, "value": "2023-12-13T01:19:32.357694Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-41076", "record": "GSD-2022-41076", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T12:35:49.474Z", "date_only": false, "value": "2024-08-03T12:35:49.474Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-41076", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:39:46.683Z", "date_only": false, "value": "2024-08-15T17:39:46.683+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2303", "record": "WID-SEC-W-2022-2303", "field": "document.tracking.generator.date"}, {"timestamp": "2024-08-15T17:39:50.526Z", "date_only": false, "value": "2024-08-15T17:39:50.526+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2307", "record": "WID-SEC-W-2022-2307", "field": "document.tracking.generator.date"}, {"timestamp": "2025-01-03T00:31:10Z", "date_only": false, "value": "2025-01-03T00:31:10Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HCFW-R2RR-7G6C", "record": "GHSA-HCFW-R2RR-7G6C", "field": "modified"}, {"timestamp": "2025-07-22T17:49:26.580Z", "date_only": false, "value": "2025-07-22T17:49:26.580Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-41076", "record": "MSRC_CVE-2022-41076", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-22T17:49:51.687Z", "date_only": false, "value": "2025-07-22T17:49:51.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-41076", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-07-22T17:49:51.687Z", "date_only": false, "value": "2025-07-22T17:49:51.687Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2022-41076", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-09-04T17:48:44.658Z", "date_only": false, "value": "2025-09-04T17:48:44.658Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-POWERSHELL-2022-41076", "record": "BIT-POWERSHELL-2022-41076", "field": "published"}, {"timestamp": "2026-06-17T05:02:32.503Z", "date_only": false, "value": "2026-06-17T05:02:32.503", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-41076", "record": "FKIE_CVE-2022-41076", "field": "lastModified"}, {"timestamp": "2026-07-26T07:01:02.952Z", "date_only": false, "value": "2026-07-26T07:01:02.952197Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/975", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "591506a9-2200-4b58-8a60-25dc9f1e77df", "url": "https://t.me/EchelonEyes/975"}, {"timestamp": "2026-07-27T00:01:11.114Z", "date_only": false, "value": "2026-07-27T00:01:11.114547Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/975", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "4445672b-634b-4088-b877-bc051db6e6be", "url": "https://t.me/EchelonEyes/975"}, {"timestamp": "2026-07-28T04:00:05.531Z", "date_only": false, "value": "2026-07-28T04:00:05.531381Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/975", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "462ddd0a-9adf-45ca-9675-9d28a9a7a20d", "url": "https://t.me/EchelonEyes/975"}, {"timestamp": "2026-07-29T00:00:48.721Z", "date_only": false, "value": "2026-07-29T00:00:48.721378Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/975", "record": "CVE-2022-41076", "field": "creation_timestamp", "uuid": "bb41ea1c-3873-4d29-b2ab-fe1167b33236", "url": "https://t.me/EchelonEyes/975"}, {"timestamp": "2026-09-08T08:34:36.952Z", "date_only": false, "value": "2026-09-08T08:34:36.952Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-POWERSHELL-2022-41076", "record": "BIT-POWERSHELL-2022-41076", "field": "modified"}]}