{"metadata": {"vulnerability": "cve-2022-46381", "count": 43, "kinds": {"milestone": 4, "sighting": 16, "kev": 11, "other": 12}}, "data": [{"timestamp": "2022-12-03T00:00:00Z", "date_only": false, "value": "2022-12-03T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-46381", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-12-13T22:15:00Z", "date_only": false, "value": "2022-12-13T22:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WWH4-QV5C-5223", "record": "GHSA-WWH4-QV5C-5223", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2022-12-13T22:15:00Z", "date_only": false, "value": "2022-12-13T22:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-46381", "record": "GSD-2022-46381", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2022-12-13T22:15:10.300Z", "date_only": false, "value": "2022-12-13T22:15:10.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-46381", "record": "FKIE_CVE-2022-46381", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-14T00:21:59Z", "date_only": false, "value": "2022-12-14T00:21:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/54467", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "baff4adf-d3b5-4d28-bc95-b3086b970438", "content": "\u203c CVE-2022-46381 \u203c\n\nCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/54467"}, {"timestamp": "2022-12-14T00:30:23Z", "date_only": false, "value": "2022-12-14T00:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WWH4-QV5C-5223", "record": "GHSA-WWH4-QV5C-5223", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2022-12-14T10:16:53Z", "date_only": false, "value": "2022-12-14T10:16:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/154", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "cdd32577-ce4f-40c6-b119-d723eb46f49a", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "url": "https://t.me/dilagrafie/154", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-14T10:16:53Z", "date_only": false, "value": "2022-12-14T10:16:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/2137", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "99b819f9-4a5d-491a-af26-38d0950abace", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "url": "https://t.me/dilagrafie/2137", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2022-12-16T17:11:00Z", "date_only": false, "value": "2022-12-16T17:11Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-46381", "record": "GSD-2022-46381", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-01-28T19:14:38Z", "date_only": false, "value": "2023-01-28T19:14:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BABATATASASA/3436", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "fb86c9ba-048b-4127-8bc0-e3490d9a9c6c", "content": "\u200b\u200bCVE-2022-25765 \n\npdfkit Exploit Reverse Shell\n\npdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u200b\u200bCVE-2022-45025\n\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n\u200b\u200bCVE-2022-36537\n\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n\u200b\u200bCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bCVE-2022-45771 - Pwndoc LFI to RCE\n\nPwndoc local file inclusion to remote code execution of Node.js code on the server.\n\nhttps://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE\n\n\u200b\u200bCVE-2022-46169\n\nCacti remote_agent.php Unauthenticated Command Injection.\n\nhttps://github.com/0xf4n9x/CVE-2022-46169\n\n\u200b\u200bCVE-2022-45451\n\nPoC for CVE-2022-45451 Acronis Arbitrary File Read\n\nhttps://github.com/alfarom256/CVE-2022-45451\n\nCVE-2022-28672\n\nThis bug was Use after Free caused by improper handling of javascript object memory references.\n\nhttps://github.com/hacksysteam/CVE-2022-28672\n\nUse after Free - RCE Exploit: https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672\n\n\u200b\u200bCVE-2003-0358\n\nBuffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges > via a long -s command line option.\n\nhttps://github.com/snowcra5h/CVE-2003-0358\n\n\u200b\u200bCVE-2022-39253\n\nDocker host file read\n\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc\n\n\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n\u200b\u200bCVE-2022-2602\n\nPoC Kernel Privilege Escalation Linux\n\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n\u200b\u200bEvilWfshbr\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation\n\nhttps://github.com/kkent030315/CVE-2022-42046\n\n\u200b\u200bCVE-2022-2602\n\nThis repository contains exploits for CVE-2022-2602. There are two versions of it:\n\n\u25ab\ufe0f Exploit using userfaultfd technique.\n\u25ab\ufe0f Exploit using inode locking technique.\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\n#cve #poc \n@pfkgit", "url": "https://t.me/BABATATASASA/3436", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-10-23T13:10:08Z", "date_only": false, "value": "2023-10-23T13:10:08+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-23T13:10:08Z", "date_only": false, "value": "2023-10-23T13:10:08+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:19:38.043Z", "date_only": false, "value": "2023-12-13T01:19:38.043844Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-46381", "record": "GSD-2022-46381", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-04-04T03:15:24Z", "date_only": false, "value": "2024-04-04T03:15:24Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WWH4-QV5C-5223", "record": "GHSA-WWH4-QV5C-5223", "field": "modified", "linked_record": true}, {"timestamp": "2024-08-03T14:31:46.303Z", "date_only": false, "value": "2024-08-03T14:31:46.303Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-46381", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-05T00:00:00Z", "date_only": false, "value": "2025-02-05T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "31e9368e-2967-4cfb-ae00-ef3bffba8d1d", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-03-24T00:00:00Z", "date_only": false, "value": "2025-03-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "4ad74d5c-034a-4edd-a5e8-530886ba6ca9", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-04-22T14:38:42.637Z", "date_only": false, "value": "2025-04-22T14:38:42.637385Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-46381", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-22T14:38:42.637Z", "date_only": false, "value": "2025-04-22T14:38:42.637385Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-46381", "record": "FKIE_CVE-2022-46381", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-04-22T14:39:14.665Z", "date_only": false, "value": "2025-04-22T14:39:14.665Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-22T14:39:14.665Z", "date_only": false, "value": "2025-04-22T14:39:14.665Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-46381", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-46381", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a4117a12-4261-4ce6-ae48-e7b0be400e84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-46381", "field": "evidence.0.details.added_date", "uuid": "a4117a12-4261-4ce6-ae48-e7b0be400e84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "f44ec88b-e879-4a70-908d-e617d13bb424", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-46381", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "a4117a12-4261-4ce6-ae48-e7b0be400e84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-14T00:00:00Z", "date_only": false, "value": "2025-07-14T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-46381", "field": "status.status_updated_at", "uuid": "a4117a12-4261-4ce6-ae48-e7b0be400e84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T05:11:39.570Z", "date_only": false, "value": "2026-06-17T05:11:39.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-46381", "record": "FKIE_CVE-2022-46381", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:46:00.289Z", "date_only": false, "value": "2026-06-19T12:46:00.289150Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/28c2b948-b95d-4d76-bee6-93c590d24542", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "c1f6787a-ef78-48d8-821b-04bfb14f219d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/28c2b948-b95d-4d76-bee6-93c590d24542", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-46381", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "a4117a12-4261-4ce6-ae48-e7b0be400e84", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:12:08.322Z", "date_only": false, "value": "2026-06-23T11:12:08.322708Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a4117a12-4261-4ce6-ae48-e7b0be400e84", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "bcc136d8-8439-46be-91d5-ecbae637dea7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/a4117a12-4261-4ce6-ae48-e7b0be400e84", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:03:23.670Z", "date_only": false, "value": "2026-06-23T14:03:23.670525Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7310c228-ae8d-4561-be8c-0f1c41eb2a95", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "dcc967e6-9f50-4253-9fff-56b4ab8d765d", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7310c228-ae8d-4561-be8c-0f1c41eb2a95", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-30T09:23:44.006Z", "date_only": false, "value": "2026-06-30T09:23:44.006052Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa33a71d-f0f8-478e-ae79-547cdb1ddcbe", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "800ceadf-1c1a-4688-9a39-edd6eee1d446", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa33a71d-f0f8-478e-ae79-547cdb1ddcbe", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-01T05:54:50.561Z", "date_only": false, "value": "2026-07-01T05:54:50.561029Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/55717daf-703c-4dc9-a30f-c72046d3d164", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "6d4415d1-4e81-4efd-b920-413f357fe231", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/55717daf-703c-4dc9-a30f-c72046d3d164", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-29T12:00:52.901Z", "date_only": false, "value": "2026-07-29T12:00:52.901342Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5863", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "824f39d0-deb5-4785-b062-a93a1c22fa88", "url": "https://t.me/CVEhub/5863"}, {"timestamp": "2026-07-30T00:01:30.258Z", "date_only": false, "value": "2026-07-30T00:01:30.258456Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/5863", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "55f47a76-b00a-4c6f-9af5-8dfce20fe6fe", "url": "https://t.me/CVEhub/5863"}, {"timestamp": "2026-07-31T20:00:04.777Z", "date_only": false, "value": "2026-07-31T20:00:04.777388Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5863", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "7fb19652-40d4-4962-9c5d-f08b92234e6b", "url": "https://t.me/CVEhub/5863", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-01T00:00:24.699Z", "date_only": false, "value": "2026-08-01T00:00:24.699105Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/5863", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "6380724a-85f0-4f24-93c6-a54d8359b18b", "url": "https://t.me/CVEhub/5863", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.last_seen_at", "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": true, "value": "2026-10-09", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-46381", "field": "evidence.0.details.observation_date", "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-09T00:00:00Z", "date_only": false, "value": "2026-10-09T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-46381", "field": "status.status_updated_at", "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-21T09:03:44Z", "date_only": false, "value": "2026-10-21T09:03:44+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-10T10:50:18.710Z", "anchors": {"origin": {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2022-12-14T10:16:53Z", "date_only": false, "value": "2022-12-14T10:16:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/154", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "cdd32577-ce4f-40c6-b119-d723eb46f49a", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "url": "https://t.me/dilagrafie/154", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-10-23T13:10:08Z", "date_only": false, "value": "2023-10-23T13:10:08+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 27177008.0, "hours": 7549.168888888889, "days": 314.5487037037037, "min_seconds": 27090608.0, "max_seconds": 27177008.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-23T13:10:08Z", "date_only": false, "value": "2023-10-23T13:10:08+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit": {"available": true, "seconds": 27177008.0, "hours": 7549.168888888889, "days": 314.5487037037037, "min_seconds": 27090608.0, "max_seconds": 27177008.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-10-23T13:10:08Z", "date_only": false, "value": "2023-10-23T13:10:08+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 123413.0, "hours": 34.28138888888889, "days": 1.4283912037037036, "min_seconds": 37013.0, "max_seconds": 123413.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2022-12-14T10:16:53Z", "date_only": false, "value": "2022-12-14T10:16:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/154", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "cdd32577-ce4f-40c6-b119-d723eb46f49a", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "url": "https://t.me/dilagrafie/154", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 123418218.710871, "hours": 34282.8385307975, "days": 1428.4516054498959, "min_seconds": 123331818.710871, "max_seconds": 123418218.710871, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-13T00:00:00Z", "date_only": false, "value": "2022-12-13T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-46381", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-10T10:50:18.710Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 96241210.710871, "hours": 26733.66964190861, "days": 1113.9029017461921, "min_seconds": 96241210.710871, "max_seconds": 96241210.710871, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": true, "end_before_start": false, "start": {"timestamp": "2023-10-23T13:10:08Z", "date_only": false, "value": "2023-10-23T13:10:08+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-46381", "field": "timestamps.first_seen_at", "metric_role": "exploitation", "metric_basis": "kev_first_seen", "batch_listing": true, "uuid": "55717daf-703c-4dc9-a30f-c72046d3d164", "status": {"status_reason": "confirmed", "exploited": true}}, "end": {"timestamp": "2026-11-10T10:50:18.710Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 123294805.710871, "hours": 34248.55714190861, "days": 1427.023214246192, "min_seconds": 123294805.710871, "max_seconds": 123294805.710871, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2022-12-14T10:16:53Z", "date_only": false, "value": "2022-12-14T10:16:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/dilagrafie/154", "record": "CVE-2022-46381", "field": "creation_timestamp", "uuid": "cdd32577-ce4f-40c6-b119-d723eb46f49a", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "url": "https://t.me/dilagrafie/154", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-10T10:50:18.710Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}