{"metadata": {"vulnerability": "cve-2022-25487", "count": 43, "kinds": {"milestone": 4, "sighting": 17, "kev": 11, "other": 11}}, "data": [{"timestamp": "2022-02-21T00:00:00Z", "date_only": false, "value": "2022-02-21T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-25487", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-03-15T17:40:55Z", "date_only": false, "value": "2022-03-15T17:40:55.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-25487", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-03-15T18:15:00Z", "date_only": false, "value": "2022-03-15T18:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-R8JC-FQM2-4629", "record": "GHSA-R8JC-FQM2-4629", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-03-15T18:15:00Z", "date_only": false, "value": "2022-03-15T18:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-25487", "record": "GSD-2022-25487", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-03-15T18:15:12.287Z", "date_only": false, "value": "2022-03-15T18:15:12.287", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-25487", "record": "FKIE_CVE-2022-25487", "field": "published"}, {"timestamp": "2022-03-15T21:19:47Z", "date_only": false, "value": "2022-03-15T21:19:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/38973", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "fa194830-f18d-4130-b152-6a4bf05a8bd6", "content": "\u203c CVE-2022-25487 \u203c\n\nAtom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/38973"}, {"timestamp": "2022-03-16T00:00:40Z", "date_only": false, "value": "2022-03-16T00:00:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-R8JC-FQM2-4629", "record": "GHSA-R8JC-FQM2-4629", "field": "published"}, {"timestamp": "2022-03-17T00:00:00Z", "date_only": true, "value": "2022-03-17", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-22310", "record": "CNVD-2022-22310", "field": "submitTime"}, {"timestamp": "2022-03-24T00:00:00Z", "date_only": true, "value": "2022-03-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-22310", "record": "CNVD-2022-22310", "field": "openTime"}, {"timestamp": "2022-03-24T00:00:44Z", "date_only": false, "value": "2022-03-24T00:00:44Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-R8JC-FQM2-4629", "record": "GHSA-R8JC-FQM2-4629", "field": "modified"}, {"timestamp": "2022-03-30T16:06:12Z", "date_only": false, "value": "2022-03-30T16:06:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2022-25487", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-03-31T01:30:00Z", "date_only": false, "value": "2022-03-31T01:30Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-25487", "record": "GSD-2022-25487", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-10-14T14:57:26Z", "date_only": false, "value": "2023-10-14T14:57:26+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2022-25487", "field": "timestamps.asserted_at", "uuid": "970ca505-a6af-4ac6-aa93-a1efbc64b247", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-14T14:57:26Z", "date_only": false, "value": "2023-10-14T14:57:26+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2022-25487", "field": "timestamps.first_seen_at", "uuid": "970ca505-a6af-4ac6-aa93-a1efbc64b247", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-12-13T01:19:27.602Z", "date_only": false, "value": "2023-12-13T01:19:27.602423Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-25487", "record": "GSD-2022-25487", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T04:42:49.561Z", "date_only": false, "value": "2024-08-03T04:42:49.561Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-25487", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T04:42:49.561Z", "date_only": false, "value": "2024-08-03T04:42:49.561Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-25487", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-26T00:00:00Z", "date_only": false, "value": "2025-01-26T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "587e0337-00ee-4e8b-a018-9ed35ce1f320"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2022-25487", "field": "timestamps.asserted_at", "uuid": "b66a26e3-b707-4104-bfc0-9bdaf6b83121", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2022-25487", "field": "evidence.0.details.added_date", "uuid": "b66a26e3-b707-4104-bfc0-9bdaf6b83121", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "83105cf8-69c4-4f13-8a96-54deb3253bbc"}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2022-25487", "field": "timestamps.first_seen_at", "uuid": "b66a26e3-b707-4104-bfc0-9bdaf6b83121", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-06T00:00:00Z", "date_only": false, "value": "2025-07-06T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2022-25487", "field": "status.status_updated_at", "uuid": "b66a26e3-b707-4104-bfc0-9bdaf6b83121", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-18T00:00:00Z", "date_only": false, "value": "2025-09-18T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "fa552124-9214-43be-8987-5d9513b6d219"}, {"timestamp": "2025-11-08T00:00:00Z", "date_only": false, "value": "2025-11-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "c592ea2e-bd17-47d6-b80e-17ae2338d635"}, {"timestamp": "2026-01-21T00:00:00Z", "date_only": false, "value": "2026-01-21T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "dc624087-a37e-4c7b-9a6e-b3bb8fe2cd9e"}, {"timestamp": "2026-02-17T00:00:00Z", "date_only": false, "value": "2026-02-17T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "c8b563dd-2583-4e99-8fc0-95875807abae"}, {"timestamp": "2026-03-01T00:00:00Z", "date_only": false, "value": "2026-03-01T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "59ac4ec1-89e3-4336-8fb6-6d9b666ffb68"}, {"timestamp": "2026-05-15T00:00:00Z", "date_only": false, "value": "2026-05-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "41924173-2e3c-4468-886f-4c4f3d4a28d8"}, {"timestamp": "2026-06-17T04:33:37.350Z", "date_only": false, "value": "2026-06-17T04:33:37.350", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-25487", "record": "FKIE_CVE-2022-25487", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:03.299Z", "date_only": false, "value": "2026-06-19T12:46:03.299335Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c268ca7-2fe9-4efb-896d-ffe607bc2c35", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "477750d6-ea44-4419-9cc1-4cdd21ec4e86", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c268ca7-2fe9-4efb-896d-ffe607bc2c35"}, {"timestamp": "2026-06-23T00:00:00Z", "date_only": false, "value": "2026-06-23T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "876e10bf-f6db-4da7-a33d-f148093c4b4b"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2022-25487", "field": "timestamps.recorded_at", "uuid": "b66a26e3-b707-4104-bfc0-9bdaf6b83121", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:24.451Z", "date_only": false, "value": "2026-06-23T14:03:24.451285Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b66a26e3-b707-4104-bfc0-9bdaf6b83121", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "ad9e1a16-a002-4d49-b708-759870235f9c", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b66a26e3-b707-4104-bfc0-9bdaf6b83121"}, {"timestamp": "2026-06-30T09:22:46.360Z", "date_only": false, "value": "2026-06-30T09:22:46.360585Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/970ca505-a6af-4ac6-aa93-a1efbc64b247", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "eb23a3b4-b956-445c-b800-f4fbcf280618", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/970ca505-a6af-4ac6-aa93-a1efbc64b247"}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2022-25487", "field": "timestamps.last_seen_at", "uuid": "970ca505-a6af-4ac6-aa93-a1efbc64b247", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": true, "value": "2026-07-19", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2022-25487", "field": "evidence.0.details.observation_date", "uuid": "970ca505-a6af-4ac6-aa93-a1efbc64b247", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-19T00:00:00Z", "date_only": false, "value": "2026-07-19T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2022-25487", "field": "status.status_updated_at", "uuid": "970ca505-a6af-4ac6-aa93-a1efbc64b247", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-07-21T01:00:01Z", "date_only": false, "value": "2026-07-21T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2022-25487", "field": "timestamps.recorded_at", "uuid": "970ca505-a6af-4ac6-aa93-a1efbc64b247", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-08-12T10:15:11.694Z", "date_only": false, "value": "2026-08-12T10:15:11.694700Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "cbc738fb-b143-4029-ae54-c748b738faab"}, {"timestamp": "2026-09-01T20:01:49.626Z", "date_only": false, "value": "2026-09-01T20:01:49.626516Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/hacking_Attack/48180", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "3f73d700-2203-46a1-ab8c-fce560f8334b", "content": "Exploit Collector\nAtom CMS 1.0.2 Shell Upload\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nAtom CMS version 1.0 suffers from a remote shell upload vulnerability.\n\nMD5 | 96d978d4ce51689762e987b3a4617e53\n\nDownload\n# Exploit Title: Atom CMS 2.0 - Remote Code Execution (RCE)\n# Date: 22.03.2022\n# Exploit Author: Ashish Koli (Shikari)\n# Vendor Homepage: https://thedigitalcraft.com/\n# Software Link: https://github.com/thedigicraft/Atom.CMS\n# Version: 2.0\n# Tested on: Ubuntu 20.04.3 LTS\n# CVE: CVE-2022-25487\n\n# Description\nThis script uploads webshell.php to the Atom CMS. An application will store that file in the uploads directory with a unique number which allows us to access Webshell.\n\n# Usage : python3 exploit.py \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/48180"}, {"timestamp": "2026-09-02T10:15:10.985Z", "date_only": false, "value": "2026-09-02T10:15:10.985827Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "67aa0b6e-5319-4753-89d1-4cd01b8480d4"}, {"timestamp": "2026-09-06T04:00:04.777Z", "date_only": false, "value": "2026-09-06T04:00:04.777238Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/hacking_Attack/48180", "record": "CVE-2022-25487", "field": "creation_timestamp", "uuid": "e409c7e5-a43f-4909-9bd1-88860d9c4a30", "content": "Exploit Collector\nAtom CMS 1.0.2 Shell Upload\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nAtom CMS version 1.0 suffers from a remote shell upload vulnerability.\n\nMD5 | 96d978d4ce51689762e987b3a4617e53\n\nDownload\n# Exploit Title: Atom CMS 2.0 - Remote Code Execution (RCE)\n# Date: 22.03.2022\n# Exploit Author: Ashish Koli (Shikari)\n# Vendor Homepage: https://thedigitalcraft.com/\n# Software Link: https://github.com/thedigicraft/Atom.CMS\n# Version: 2.0\n# Tested on: Ubuntu 20.04.3 LTS\n# CVE: CVE-2022-25487\n\n# Description\nThis script uploads webshell.php to the Atom CMS. An application will store that file in the uploads directory with a unique number which allows us to access Webshell.\n\n# Usage : python3 exploit.py \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "url": "https://t.me/hacking_Attack/48180"}]}