{"vulnerability": "cve-2022-0824", "sightings": [{"uuid": "b16f6dc8-e769-40e5-8623-9b74732d5f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "f2bd6b1e-8618-48b3-8085-ae40686fcd13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:42.000000Z"}, {"uuid": "7d5ca1cc-20d0-44e1-a5d7-e6a282aea0f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "", "creation_timestamp": "2022-11-01T16:53:29.000000Z"}, {"uuid": "66ebb99d-1531-4cdd-b566-d3c2f4c52aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/1593", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aWebmin CVE-2022-0824 Reverse Shell\nURL\uff1ahttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell", "creation_timestamp": "2022-03-06T00:06:36.000000Z"}, {"uuid": "807aff0a-7795-4fb1-8b42-0ca057ea7d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3198", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-0824, CVE-2022-0829, File Manger privilege exploit\nURL\uff1ahttps://github.com/gokul-ramesh/WebminRCE-exploit\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2023-03-23T12:40:43.000000Z"}, {"uuid": "21775b15-980f-427e-8902-e99a2e119e74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/46635", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1a\u6f0f\u6d1e\u5229\u7528\n\u63cf\u8ff0\uff1aWebmin CVE-2022-0824 \u589e\u5f3a\u7248\u6f0f\u6d1e\u5229\u7528\u5de5\u5177 - \u652f\u6301\u547d\u4ee4\u6267\u884c\u548c\u53cd\u5411Shell\u53cc\u6a21\u5f0f\nURL\uff1ahttps://github.com/NUDTTAN91/Webmin-CVE-2022-0824-Enhanced-Exploit\n\n\u6807\u7b7e\uff1a#\u6f0f\u6d1e\u5229\u7528", "creation_timestamp": "2025-08-05T08:38:35.000000Z"}, {"uuid": "3317c956-dd81-486a-ae0f-7e3cb446ede0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "Telegram/pjCdkaPYm9FkTnXxup4bFVUrTLP1VgX6gwOCGLnwxjPbRGw", "content": "", "creation_timestamp": "2025-08-05T15:00:06.000000Z"}, {"uuid": "7a0b2787-64c2-496b-a52c-c17bf6102d91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/poxek/1897", "content": "Webmin-CVE-2022-0824-reverse shell\nWebmin 1.984 and below - File Manager privilege exploit (CVE-2022-0824 and CVE-2022-0829)\n\u041c\u0435\u043d\u0435\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Webmin, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f \u043c\u043e\u0434\u0443\u043b\u044f File Manager, \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u0430\u043c \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root, \u0435\u0441\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0442\u0435\u043c\u0443 Authentic \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e. \u0412\u0441\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Webmin \u0434\u043e\u043b\u0436\u043d\u044b \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f. \u041e\u0431\u0440\u0430\u0442\u0438\u0442\u0435 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u044b Virtualmin \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u044d\u0442\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u043e\u0439 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Webmin, \u044f\u0432\u043b\u044f\u044e\u0449\u0438\u0435\u0441\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c\u0438 \u0434\u043e\u043c\u0435\u043d\u0430.\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n\n\u0414\u043d\u0435\u0432\u043d\u0438\u043a \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u0430 \ud83d\udee1", "creation_timestamp": "2022-07-03T15:00:34.000000Z"}, {"uuid": "0b700997-dc6d-44c4-8a8d-e0edb05b0605", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://t.me/cibsecurity/38293", "content": "\u203c CVE-2022-0824 \u203c\n\nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-02T14:32:40.000000Z"}, {"uuid": "6fe6aec6-03ef-4a41-bd9e-d9cbcc08ffc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "exploited", "source": "https://t.me/BlueRedTeam/1781", "content": "#exploit\nCVE-2022-0824:\nPost-Auth Reverse Shell\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n@BlueRedTeam", "creation_timestamp": "2022-03-07T07:00:59.000000Z"}, {"uuid": "e77c72e6-018b-4922-b3c7-d3f4f9261ece", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2448", "content": "#CVE-2022\n\nCVE-2022-0824, CVE-2022-0829, File Manger privilege exploit\n\nhttps://github.com/gokul-ramesh/WebminRCE-exploit\n\n@BlueRedTeam", "creation_timestamp": "2022-11-13T05:30:39.000000Z"}, {"uuid": "40207fdf-a6b3-4688-ac5e-4540ac3b8b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/5554", "content": "#exploit\n1. CVE-2022-0824:\nPost-Auth Reverse Shell\nhttps://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\n\n2. CVE-2022-22947:\nSpring Cloud Gateway RCE\nhttps://github.com/shakeman8/CVE-2022-22947-RCE", "creation_timestamp": "2022-03-07T19:00:18.000000Z"}, {"uuid": "153b0781-205b-4c19-a09d-af3ff752b181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-08-02T00:01:21.395135Z"}, {"uuid": "f9d082a8-da9e-40f5-9d69-2799a96264d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-08-01T01:00:05.241543Z"}, {"uuid": "9c993ea4-9e1d-4dc2-843a-9d059ca2fc21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-07-29T12:00:58.232903Z"}, {"uuid": "1ecc35f2-3fad-4be3-9ceb-f5e0994f217d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://t.me/CVEhub/3619", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0824\nGithub: https://github.com/pizza-power/golang-webmin-CVE-2022-0824-revshell\nDescribe: \nImproper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990.", "creation_timestamp": "2026-07-30T00:01:36.997401Z"}, {"uuid": "cc1df2f6-24c0-4bb6-81de-265827e1067e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0824", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/webmin_file_manager_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"faisalfs10x\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"In Webmin version 1.984, any authenticated low privilege user without access rights to\\n          the File Manager module could interact with file manager functionalities such as downloading files from remote URLs and\\n          changing file permissions. It is possible to achieve Remote Code Execution via a crafted .cgi file by chaining those\\n          functionalities in the file manager.\", \"disclosure_date\": \"2022-02-26\", \"fullname\": \"exploit/linux/http/webmin_file_manager_rce\", \"is_install_path\": true, \"mod_time\": \"2022-10-27 11:26:31 +0000\", \"name\": \"Webmin File Manager RCE\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/webmin_file_manager_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/webmin_file_manager_rce\", \"references\": [\"URL-https://huntr.dev/bounties/d0049a96-de90-4b1a-9111-94de1044f295/\", \"URL-https://github.com/faisalfs10x/Webmin-CVE-2022-0824-revshell\", \"CVE-2022-0824\"], \"rport\": 10000, \"session_types\": false, \"targets\": [\"Automatic (Unix In-Memory)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:02.980944Z"}]}