{"metadata": {"vulnerability": "cve-2022-46164", "count": 27, "kinds": {"milestone": 4, "sighting": 9, "kev": 0, "other": 14}}, "data": [{"timestamp": "2022-11-28T17:27:19.997Z", "date_only": false, "value": "2022-11-28T17:27:19.997Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-46164", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-05T00:00:00Z", "date_only": true, "value": "2022-12-05", "kind": "other", "label": "Pubdate", "source": "gsd \u00b7 GSD-2022-46164", "record": "GSD-2022-46164", "field": "namespaces.gitlab.com.advisories.0.pubdate"}, {"timestamp": "2022-12-05T20:52:19.695Z", "date_only": false, "value": "2022-12-05T20:52:19.695Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46164", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-12-05T20:52:19.695Z", "date_only": false, "value": "2022-12-05T20:52:19.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "cve-2022-46164", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-12-05T21:15:00Z", "date_only": false, "value": "2022-12-05T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-RF3G-V8P5-P675", "record": "GHSA-RF3G-V8P5-P675", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-12-05T21:15:00Z", "date_only": false, "value": "2022-12-05T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-46164", "record": "GSD-2022-46164", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-12-05T21:15:10.443Z", "date_only": false, "value": "2022-12-05T21:15:10.443", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-46164", "record": "FKIE_CVE-2022-46164", "field": "published"}, {"timestamp": "2022-12-05T23:06:14Z", "date_only": false, "value": "2022-12-05T23:06:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-RF3G-V8P5-P675", "record": "GHSA-RF3G-V8P5-P675", "field": "published"}, {"timestamp": "2022-12-05T23:06:14Z", "date_only": false, "value": "2022-12-05T23:06:14Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-RF3G-V8P5-P675", "record": "GHSA-RF3G-V8P5-P675", "field": "modified"}, {"timestamp": "2022-12-07T00:00:00Z", "date_only": true, "value": "2022-12-07", "kind": "other", "label": "Date", "source": "gsd \u00b7 GSD-2022-46164", "record": "GSD-2022-46164", "field": "namespaces.gitlab.com.advisories.0.date"}, {"timestamp": "2022-12-07T04:49:00Z", "date_only": false, "value": "2022-12-07T04:49Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-46164", "record": "GSD-2022-46164", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-01-04T14:10:29Z", "date_only": false, "value": "2023-01-04T14:10:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1255", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "88f1a754-274b-427d-b8e2-f9c10ca2750d", "content": "exploit for CVE-2022-46164 \n\u043e\u0441\u043e\u0437\u043d\u0430\u0442\u044c", "url": "https://t.me/proxy_bar/1255"}, {"timestamp": "2023-01-05T11:30:20Z", "date_only": false, "value": "2023-01-05T11:30:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7492", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "d4e3223c-3480-41ed-8fb6-0ae3a8afb981", "content": "#exploit\n1. CVE-2022-46164:\nNodeBB Account Takeover Flaw\nhttps://github.com/stephenbradshaw/CVE-2022-46164-poc\n\n2. CVE-2022-23087:\n\"Escaping from bhyve\"\nhttps://www.synacktiv.com/publications/escaping-from-bhyve.html\nhttps://github.com/synacktiv/bhyve", "url": "https://t.me/CyberSecurityTechnologies/7492"}, {"timestamp": "2023-01-05T13:41:52Z", "date_only": false, "value": "2023-01-05T13:41:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2232", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "6c3583d0-26d3-410e-8a26-c14155fb868f", "content": "#CyberSecurity news -  \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\n\u200aCan these researchers help defend satellite systems targeted by hackers?\n\nhttps://www.cyberscoop.com/space-satellite-cybersecurity-sparta/\n\n\u200aBitRAT malware campaign uses stolen bank data for phishing\n\nhttps://www.bleepingcomputer.com/news/security/bitrat-malware-campaign-uses-stolen-bank-data-for-phishing/\n\n\u200aPoland warns of attacks by Russia-linked Ghostwriter hacking group\n\nhttps://www.bleepingcomputer.com/news/security/poland-warns-of-attacks-by-russia-linked-ghostwriter-hacking-group/\n\n\u200aRail giant Wabtec discloses data breach after Lockbit ransomware attack\n\nhttps://www.bleepingcomputer.com/news/security/rail-giant-wabtec-discloses-data-breach-after-lockbit-ransomware-attack/\n\n\u200aOver 60,000 Exchange servers vulnerable to ProxyNotShell attacks\n\nhttps://www.bleepingcomputer.com/news/security/over-60-000-exchange-servers-vulnerable-to-proxynotshell-attacks/\n\n\u200aOngoing Flipper Zero phishing attacks target infosec community\n\nhttps://www.bleepingcomputer.com/news/security/ongoing-flipper-zero-phishing-attacks-target-infosec-community/\n\n\u200aCVE-2022-43396 & CVE-2022-44621: Command injection in Apache Kylin\n\nhttps://securityonline.info/cve-2022-43396-cve-2022-44621-command-injection-in-apache-kylin/\n\n\u200aCVE-2022-43931: Critical Vulnerability in Synology VPN Plus Server software\n\nhttps://securityonline.info/cve-2022-43931-critical-vulnerability-in-synology-vpn-plus-server-software/\n\n\u200aPowerMeUp: powershell scripts for post exploitation\n\nhttps://securityonline.info/powermeup-powershell-scripts-for-post-exploitation/\n\n\u200aLockbit Ransomware Group Apologized For the Attack On Hospital for Sick Children\n\nhttps://gbhackers.com/lockbit-ransomware-group-apologized/\n\n\u200aTop 10 Open Port Scanner and Port Checker Tools for 2023\n\nhttps://gbhackers.com/open-port-scanner-port-checker-tools/\n\nBitRAT Now Sharing Sensitive Bank Data as a Lure\n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2023/01/03/bitrat-now-sharing-sensitive-bank-data-as-a-lure\n\n\u200b\u200bDebloating Windows 10 with one command and no scripts\n\nhttps://gabrielsieben.tech/2023/01/02/debloating-windows-10-with-one-command-and-no-scripts\n\n\u200b\u200bBug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass\n\nhttps://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/\n\n\u200aBitRAT Malware Uses Bank-Themed Phishing Emails to Steal Sensitive Information\n\nhttps://cybersecuritynews.com/bitrat-malware-uses-phishing-emails/\n\n\u200aPoC Code for NodeBB Account Takeover Flaw (CVE-2022-46164) Published\n\nhttps://securityonline.info/poc-code-for-nodebb-account-takeover-flaw-cve-2022-46164-published/\n\n\u200aVillain - Windows And Linux Backdoor Generator And Multi-Session Handler That Allows Users To Connect With Sibling Servers And Share Their Backdoor Sessions\n\nhttp://www.kitploit.com/2023/01/villain-windows-and-linux-backdoor.html\n\n\u200aToyota Discloses Data Breach \u2013 Customers\u2019 Personal Information Exposed\n\nhttps://gbhackers.com/toyota-discloses-data-breach/\n\n\u200aOFRAK : Unpack, Modify, And Repack Binaries\n\nhttps://kalilinuxtutorials.com/ofrak/\n\n\u200aLABScon Replay | InkySquid: The Missing Arsenal\n\nhttps://www.sentinelone.com/labs/labscon-replay-inkysquid-the-missing-arsenal/\n\n\u200aOver 60,000 Online Exchange Servers Unpatched for RCE Vulnerability ProxyNotShell\n\nhttps://gbhackers.com/unpatched-proxynotshell/\n\nBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/2232"}, {"timestamp": "2023-01-05T13:41:52Z", "date_only": false, "value": "2023-01-05T13:41:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/349", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "635bab6c-d584-4e80-b04f-567d24ca2986", "content": "#CyberSecurity news -  \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\n\u200aCan these researchers help defend satellite systems targeted by hackers?\n\nhttps://www.cyberscoop.com/space-satellite-cybersecurity-sparta/\n\n\u200aBitRAT malware campaign uses stolen bank data for phishing\n\nhttps://www.bleepingcomputer.com/news/security/bitrat-malware-campaign-uses-stolen-bank-data-for-phishing/\n\n\u200aPoland warns of attacks by Russia-linked Ghostwriter hacking group\n\nhttps://www.bleepingcomputer.com/news/security/poland-warns-of-attacks-by-russia-linked-ghostwriter-hacking-group/\n\n\u200aRail giant Wabtec discloses data breach after Lockbit ransomware attack\n\nhttps://www.bleepingcomputer.com/news/security/rail-giant-wabtec-discloses-data-breach-after-lockbit-ransomware-attack/\n\n\u200aOver 60,000 Exchange servers vulnerable to ProxyNotShell attacks\n\nhttps://www.bleepingcomputer.com/news/security/over-60-000-exchange-servers-vulnerable-to-proxynotshell-attacks/\n\n\u200aOngoing Flipper Zero phishing attacks target infosec community\n\nhttps://www.bleepingcomputer.com/news/security/ongoing-flipper-zero-phishing-attacks-target-infosec-community/\n\n\u200aCVE-2022-43396 & CVE-2022-44621: Command injection in Apache Kylin\n\nhttps://securityonline.info/cve-2022-43396-cve-2022-44621-command-injection-in-apache-kylin/\n\n\u200aCVE-2022-43931: Critical Vulnerability in Synology VPN Plus Server software\n\nhttps://securityonline.info/cve-2022-43931-critical-vulnerability-in-synology-vpn-plus-server-software/\n\n\u200aPowerMeUp: powershell scripts for post exploitation\n\nhttps://securityonline.info/powermeup-powershell-scripts-for-post-exploitation/\n\n\u200aLockbit Ransomware Group Apologized For the Attack On Hospital for Sick Children\n\nhttps://gbhackers.com/lockbit-ransomware-group-apologized/\n\n\u200aTop 10 Open Port Scanner and Port Checker Tools for 2023\n\nhttps://gbhackers.com/open-port-scanner-port-checker-tools/\n\nBitRAT Now Sharing Sensitive Bank Data as a Lure\n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2023/01/03/bitrat-now-sharing-sensitive-bank-data-as-a-lure\n\n\u200b\u200bDebloating Windows 10 with one command and no scripts\n\nhttps://gabrielsieben.tech/2023/01/02/debloating-windows-10-with-one-command-and-no-scripts\n\n\u200b\u200bBug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass\n\nhttps://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/\n\n\u200aBitRAT Malware Uses Bank-Themed Phishing Emails to Steal Sensitive Information\n\nhttps://cybersecuritynews.com/bitrat-malware-uses-phishing-emails/\n\n\u200aPoC Code for NodeBB Account Takeover Flaw (CVE-2022-46164) Published\n\nhttps://securityonline.info/poc-code-for-nodebb-account-takeover-flaw-cve-2022-46164-published/\n\n\u200aVillain - Windows And Linux Backdoor Generator And Multi-Session Handler That Allows Users To Connect With Sibling Servers And Share Their Backdoor Sessions\n\nhttp://www.kitploit.com/2023/01/villain-windows-and-linux-backdoor.html\n\n\u200aToyota Discloses Data Breach \u2013 Customers\u2019 Personal Information Exposed\n\nhttps://gbhackers.com/toyota-discloses-data-breach/\n\n\u200aOFRAK : Unpack, Modify, And Repack Binaries\n\nhttps://kalilinuxtutorials.com/ofrak/\n\n\u200aLABScon Replay | InkySquid: The Missing Arsenal\n\nhttps://www.sentinelone.com/labs/labscon-replay-inkysquid-the-missing-arsenal/\n\n\u200aOver 60,000 Online Exchange Servers Unpatched for RCE Vulnerability ProxyNotShell\n\nhttps://gbhackers.com/unpatched-proxynotshell/\n\nBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "url": "https://t.me/dilagrafie/349"}, {"timestamp": "2023-01-05T15:07:56Z", "date_only": false, "value": "2023-01-05T15:07:56.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/crackcodes/2101", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "d0ef4421-8a69-4a97-a71e-e412d7851b55", "content": "#exploit\n1. CVE-2022-46164:\nNodeBB Account Takeover Flaw\nhttps://github.com/stephenbradshaw/CVE-2022-46164-poc\n\n2. CVE-2022-23087:\n\"Escaping from bhyve\"\nhttps://www.synacktiv.com/publications/escaping-from-bhyve.html\nhttps://github.com/synacktiv/bhyve", "url": "https://t.me/crackcodes/2101"}, {"timestamp": "2023-01-06T18:30:19Z", "date_only": false, "value": "2023-01-06T18:30:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/645", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "86c422fa-8bd3-47e9-8191-ce9138c1cba0", "content": "CVE-2022-46164 : NodeBB <2.6.1 - Account Takeover \nPOC : https://github.com/stephenbradshaw/CVE-2022-46164-poc", "url": "https://t.me/MrVGunz/645"}, {"timestamp": "2023-01-17T00:38:48Z", "date_only": false, "value": "2023-01-17T00:38:48.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4519", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "db5b11d1-06ad-413b-8107-d0651dde546c", "content": "CVE-2022-46164 exploit \n\nRead\n\n#exploit #CVE \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4519"}, {"timestamp": "2023-02-01T04:25:05Z", "date_only": false, "value": "2023-02-01T04:25:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/sW5d9fmUYwBCBd5p0m4KHR33OMnL89OoDtqPJLuw77rW9-Q", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "6e26ed01-7f90-4c17-bc01-1cc868ba9902"}, {"timestamp": "2023-12-13T01:19:37.707Z", "date_only": false, "value": "2023-12-13T01:19:37.707663Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-46164", "record": "GSD-2022-46164", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T14:24:03.223Z", "date_only": false, "value": "2024-08-03T14:24:03.223Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-46164", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-23T15:48:00.216Z", "date_only": false, "value": "2025-04-23T15:48:00.216074Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-46164", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-23T15:48:00.216Z", "date_only": false, "value": "2025-04-23T15:48:00.216074Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-46164", "record": "FKIE_CVE-2022-46164", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-23T16:32:39.227Z", "date_only": false, "value": "2025-04-23T16:32:39.227Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-46164", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-23T16:32:39.227Z", "date_only": false, "value": "2025-04-23T16:32:39.227Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-46164", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-31T03:12:59Z", "date_only": false, "value": "2025-08-31T03:12:59.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2022-46164", "field": "creation_timestamp", "uuid": "4fc83a57-dce8-47cb-ae69-031fb5acae7f"}, {"timestamp": "2026-06-17T05:11:20.473Z", "date_only": false, "value": "2026-06-17T05:11:20.473", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-46164", "record": "FKIE_CVE-2022-46164", "field": "lastModified"}]}