{"vulnerability": "CVE-2022-25487", "sightings": [{"uuid": "587e0337-00ee-4e8b-a018-9ed35ce1f320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "83105cf8-69c4-4f13-8a96-54deb3253bbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-06)", "content": "", "creation_timestamp": "2025-07-06T00:00:00.000000Z"}, {"uuid": "c592ea2e-bd17-47d6-b80e-17ae2338d635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-08)", "content": "", "creation_timestamp": "2025-11-08T00:00:00.000000Z"}, {"uuid": "fa552124-9214-43be-8987-5d9513b6d219", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-18)", "content": "", "creation_timestamp": "2025-09-18T00:00:00.000000Z"}, {"uuid": "59ac4ec1-89e3-4336-8fb6-6d9b666ffb68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-01)", "content": "", "creation_timestamp": "2026-03-01T00:00:00.000000Z"}, {"uuid": "c8b563dd-2583-4e99-8fc0-95875807abae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-17)", "content": "", "creation_timestamp": "2026-02-17T00:00:00.000000Z"}, {"uuid": "dc624087-a37e-4c7b-9a6e-b3bb8fe2cd9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-21)", "content": "", "creation_timestamp": "2026-01-21T00:00:00.000000Z"}, {"uuid": "fa194830-f18d-4130-b152-6a4bf05a8bd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "seen", "source": "https://t.me/cibsecurity/38973", "content": "\u203c CVE-2022-25487 \u203c\n\nAtom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-15T21:19:47.000000Z"}, {"uuid": "41924173-2e3c-4468-886f-4c4f3d4a28d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-15)", "content": "", "creation_timestamp": "2026-05-15T00:00:00.000000Z"}, {"uuid": "cbc738fb-b143-4029-ae54-c748b738faab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-11)", "content": "", "creation_timestamp": "2026-08-12T10:15:11.694700Z"}, {"uuid": "477750d6-ea44-4419-9cc1-4cdd21ec4e86", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4c268ca7-2fe9-4efb-896d-ffe607bc2c35", "content": "", "creation_timestamp": "2026-06-19T12:46:03.299335Z"}, {"uuid": "ad9e1a16-a002-4d49-b708-759870235f9c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/b66a26e3-b707-4104-bfc0-9bdaf6b83121", "content": "", "creation_timestamp": "2026-06-23T14:03:24.451285Z"}, {"uuid": "876e10bf-f6db-4da7-a33d-f148093c4b4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-23)", "content": "", "creation_timestamp": "2026-06-23T00:00:00.000000Z"}, {"uuid": "eb23a3b4-b956-445c-b800-f4fbcf280618", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/970ca505-a6af-4ac6-aa93-a1efbc64b247", "content": "", "creation_timestamp": "2026-06-30T09:22:46.360585Z"}, {"uuid": "3f73d700-2203-46a1-ab8c-fce560f8334b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "seen", "source": "https://t.me/hacking_Attack/48180", "content": "Exploit Collector\nAtom CMS 1.0.2 Shell Upload\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nAtom CMS version 1.0 suffers from a remote shell upload vulnerability.\n\nMD5 | 96d978d4ce51689762e987b3a4617e53\n\nDownload\n# Exploit Title: Atom CMS 2.0 - Remote Code Execution (RCE)\n# Date: 22.03.2022\n# Exploit Author: Ashish Koli (Shikari)\n# Vendor Homepage: https://thedigitalcraft.com/\n# Software Link: https://github.com/thedigicraft/Atom.CMS\n# Version: 2.0\n# Tested on: Ubuntu 20.04.3 LTS\n# CVE: CVE-2022-25487\n\n# Description\nThis script uploads webshell.php to the Atom CMS. An application will store that file in the uploads directory with a unique number which allows us to access Webshell.\n\n# Usage : python3 exploit.py \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:49.626516Z"}, {"uuid": "d498d7ff-625f-4381-9481-8d91f6ab3fbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "seen", "source": "https://t.me/hacking_Attack/48180", "content": "Exploit Collector\nAtom CMS 1.0.2 Shell Upload\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nAtom CMS version 1.0 suffers from a remote shell upload vulnerability.\n\nMD5 | 96d978d4ce51689762e987b3a4617e53\n\nDownload\n# Exploit Title: Atom CMS 2.0 - Remote Code Execution (RCE)\n# Date: 22.03.2022\n# Exploit Author: Ashish Koli (Shikari)\n# Vendor Homepage: https://thedigitalcraft.com/\n# Software Link: https://github.com/thedigicraft/Atom.CMS\n# Version: 2.0\n# Tested on: Ubuntu 20.04.3 LTS\n# CVE: CVE-2022-25487\n\n# Description\nThis script uploads webshell.php to the Atom CMS. An application will store that file in the uploads directory with a unique number which allows us to access Webshell.\n\n# Usage : python3 exploit.py \nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:03.012606Z"}, {"uuid": "67aa0b6e-5319-4753-89d1-4cd01b8480d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-25487", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:10.985827Z"}]}