{"vulnerability": "cve-2022-2926", "sightings": [{"uuid": "97c1789f-8cbd-434e-8132-28190f2f6048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2926", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17141", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-2926\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory\n\ud83d\udccf Published: 2022-09-26T12:35:35.000Z\n\ud83d\udccf Modified: 2025-05-21T16:23:31.411Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/2a440e1a-a7e4-4106-839a-d93895e16785", "creation_timestamp": "2025-05-21T16:41:34.000000Z"}, {"uuid": "f115038b-e437-40ac-99fa-89aeb6958426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29265", "type": "seen", "source": "https://t.me/arpsyndicate/3152", "content": "#ExploitObserverAlert\n\nCVE-2022-29265\n\nDESCRIPTION: Exploit Observer has 3 entries in 2 file formats related to CVE-2022-29265. Multiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML External Entity references when configured with default property values: - EvaluateXPath - EvaluateXQuery - ValidateXml Apache NiFi flow configurations that include these Processors are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations in the default configuration for these Processors, and disallows XML External Entity resolution in standard services.\n\nFIRST-EPSS: 0.001270000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-28T01:46:28.000000Z"}, {"uuid": "5c9558b2-d630-44e7-86fe-c717eb9433e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-2926", "type": "seen", "source": "https://t.me/cibsecurity/50478", "content": "\u203c CVE-2022-2926 \u203c\n\nThe Download Manager WordPress plugin before 3.2.55 does not validate one of its settings, which could allow high privilege users such as admin to list and read arbitrary files and folders outside of the blog directory\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-26T16:22:01.000000Z"}, {"uuid": "4f33d83b-a7e2-4243-a494-7dfe3160df0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29265", "type": "seen", "source": "https://t.me/cibsecurity/41691", "content": "\u203c CVE-2022-29265 \u203c\n\nMultiple components in Apache NiFi 0.0.1 to 1.16.0 do not restrict XML External Entity references in the default configuration. The Standard Content Viewer service attempts to resolve XML External Entity references when viewing formatted XML files. The following Processors attempt to resolve XML External Entity references when configured with default property values: - EvaluateXPath - EvaluateXQuery - ValidateXml Apache NiFi flow configurations that include these Processors are vulnerable to malicious XML documents that contain Document Type Declarations with XML External Entity references. The resolution disables Document Type Declarations in the default configuration for these Processors, and disallows XML External Entity resolution in standard services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-30T12:25:49.000000Z"}, {"uuid": "b857d5b0-15f8-47db-8efc-49c60af0ca05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29264", "type": "seen", "source": "https://t.me/cibsecurity/41367", "content": "\u203c CVE-2022-29264 \u203c\n\nAn issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-25T12:30:55.000000Z"}, {"uuid": "18be0565-311a-4056-b2a5-b76b9356f35e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "seen", "source": "https://t.me/cibsecurity/40880", "content": "\u203c CVE-2022-29268 \u203c\n\nBitrix through 7.5.0 allows remote attackers to execute arbitrary code by using the restore.php Upload From Local Disk feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-15T20:20:15.000000Z"}, {"uuid": "678b1320-7537-4d2c-8b5e-c48b7c836ac8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "seen", "source": "https://t.me/pentestnotes/57", "content": "\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0411\u0438\u0442\u0440\u0438\u043a\u0441\u0435 (CVSS 9.5) \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e, \u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0432\u0441\u0435 \u0441\u043b\u043e\u043c\u0430\u043b\u0438.\n\n\u041f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0432\u0441\u0435\u0445 VMBitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0438\u0434\u043d\u044b \u0432 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043b\u0438\u0431\u043e \u043c\u0435\u0440\u0442\u0432\u044b, \u043b\u0438\u0431\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\nFOFA - 218 results\n\n\nBDU:2024-05252\nCVE-2022-29268", "creation_timestamp": "2026-08-04T13:00:17.526411Z"}, {"uuid": "3c2ab0bf-8e80-40e8-90f6-3a094e8cc1bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "seen", "source": "https://t.me/pentestnotes/57", "content": "\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0411\u0438\u0442\u0440\u0438\u043a\u0441\u0435 (CVSS 9.5) \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e, \u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0432\u0441\u0435 \u0441\u043b\u043e\u043c\u0430\u043b\u0438.\n\n\u041f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0432\u0441\u0435\u0445 VMBitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0438\u0434\u043d\u044b \u0432 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043b\u0438\u0431\u043e \u043c\u0435\u0440\u0442\u0432\u044b, \u043b\u0438\u0431\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\nFOFA - 218 results\n\n\nBDU:2024-05252\nCVE-2022-29268", "creation_timestamp": "2026-08-05T00:00:32.416179Z"}, {"uuid": "8ee618ca-0c13-4d5b-baed-4f323d0efd6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "exploited", "source": "https://t.me/pentestnotes/57", "content": "\u041a\u0430\u0437\u0430\u043b\u043e\u0441\u044c \u0431\u044b, \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0411\u0438\u0442\u0440\u0438\u043a\u0441\u0435 (CVSS 9.5) \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e, \u0430 \u0445\u0430\u043a\u0435\u0440\u044b \u0443\u0436\u0435 \u0432\u0441\u0435 \u0441\u043b\u043e\u043c\u0430\u043b\u0438.\n\n\u041f\u043e\u043b\u043e\u0432\u0438\u043d\u0430 \u0432\u0441\u0435\u0445 VMBitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u0438\u0434\u043d\u044b \u0432 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043b\u0438\u0431\u043e \u043c\u0435\u0440\u0442\u0432\u044b, \u043b\u0438\u0431\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\nFOFA - 218 results\n\n\nBDU:2024-05252\nCVE-2022-29268", "creation_timestamp": "2026-08-06T00:01:01.804611Z"}, {"uuid": "9fc3d5a7-4342-4f3c-852b-421fd6d0ba33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "seen", "source": "https://t.me/cyberwarehouse/1006", "content": "\ud83d\udc68\u200d\ud83d\udcbb Bitrix Ultimate Pentest Guide.\n\n\u2022  \u0410\u0432\u0442\u043e\u0440 \u044d\u0442\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043b \u043e\u0447\u0435\u043d\u044c \u043e\u0431\u044a\u0435\u043c\u043d\u044b\u0439 \u0433\u0430\u0439\u0434 \u043f\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0443 CMS Bitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u0442\u0435\u0445\u043d\u0438\u043a \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432. \u0412\u043e\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435:\n\n - \u041e\u0441\u043d\u043e\u0432\u044b \u0431\u0438\u0442\u0440\u0438\u043a\u0441\u043e\u043b\u043e\u0433\u0438\u0438:\n\u27a1\u0412\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 WAF;\n\u27a1\u041c\u043d\u043e\u0433\u043e\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0441\u0442\u044c.\n - \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438;\n - \u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438:\n\u27a1\u041b\u0430\u0439\u0444\u0445\u0430\u043a \u0447\u0435\u0440\u0435\u0437 burp.\n - \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b;\n - Content Spoofing;\n - Account Enumeration;\n - Non-legitimate registration;\n - Open Redirect;\n - XSS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n - SSRF;\n - LFI;\n - RCE:\n\u27a1RCE vote_agent.php (CVE-2022-27228);\n\u27a1RCE html_editor_action.php;\n\u27a1RCE Landing;\n\u27a1CVE-2022-29268 (Rejected).\n - BDU:2024-01501:\n\u27a1Reflected XSS;\n\u27a1Local File Read.\n - WAF Bypass;\n - LPE;\n - Bitrix24:\n\u27a1XSS bitrix 24;\n\u27a1CVE-2022-43959;\n\u27a1CVE-2023-1713;\n\u27a1CVE-2023-1714;\n\u27a1CVE-2023-1718.\n - \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438:\n\u27a1\u0420\u0435\u0435\u0441\u0442\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439;\n\u27a1\u0414\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /local/;\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f;\n\u27a1Aspro;\n\u27a1\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b;\n\u27a1\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u041e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u0438;\n\u27a1RCE by Insecure deserialization;\n - \u041f\u043e\u0438\u0441\u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n - \u0421\u043a\u0430\u043d\u0435\u0440 \u043f\u043e\u0434 bitrix - \u201chuitrix\u201d:\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u043a\u0430\u043d\u0435\u0440\u0430:\n\u27a1Fast scan;\n\u27a1Full Scan;\n\u27a1Detect Version;\n\u27a1Entrance Finder;\n\u27a1RCE modules;\n\u27a1Enum Bitrix Users;\n\u27a1Spawn Bitrix User;\n\u27a1Detect custom modules.\n - References:\n\u27a1Github;\n\u27a1BDU;\n\u27a1Habr & Telegra.ph;\n\u27a1Telegram;\n\u27a1Other.\n\n\u27a1 https://pentestnotes.ru/notes/bitrix_pentest_full\n\nS.E. \u25aa\ufe0f infosec.work \u25aa\ufe0f VT", "creation_timestamp": "2026-07-26T02:00:07.804716Z"}, {"uuid": "8be3bdfe-a001-4d88-a6cb-32e9422f612a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "seen", "source": "https://t.me/cyberwarehouse/882", "content": "\ud83d\udc68\u200d\ud83d\udcbb Bitrix Ultimate Pentest Guide.\n\n\u2022  \u0410\u0432\u0442\u043e\u0440 \u044d\u0442\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043b \u043e\u0447\u0435\u043d\u044c \u043e\u0431\u044a\u0435\u043c\u043d\u044b\u0439 \u0433\u0430\u0439\u0434 \u043f\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0443 CMS Bitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u0442\u0435\u0445\u043d\u0438\u043a \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432. \u0412\u043e\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435:\n\n - \u041e\u0441\u043d\u043e\u0432\u044b \u0431\u0438\u0442\u0440\u0438\u043a\u0441\u043e\u043b\u043e\u0433\u0438\u0438:\n\u27a1\u0412\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 WAF;\n\u27a1\u041c\u043d\u043e\u0433\u043e\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0441\u0442\u044c.\n - \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438;\n - \u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438:\n\u27a1\u041b\u0430\u0439\u0444\u0445\u0430\u043a \u0447\u0435\u0440\u0435\u0437 burp.\n - \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b;\n - Content Spoofing;\n - Account Enumeration;\n - Non-legitimate registration;\n - Open Redirect;\n - XSS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n - SSRF;\n - LFI;\n - RCE:\n\u27a1RCE vote_agent.php (CVE-2022-27228);\n\u27a1RCE html_editor_action.php;\n\u27a1RCE Landing;\n\u27a1CVE-2022-29268 (Rejected).\n - BDU:2024-01501:\n\u27a1Reflected XSS;\n\u27a1Local File Read.\n - WAF Bypass;\n - LPE;\n - Bitrix24:\n\u27a1XSS bitrix 24;\n\u27a1CVE-2022-43959;\n\u27a1CVE-2023-1713;\n\u27a1CVE-2023-1714;\n\u27a1CVE-2023-1718.\n - \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438:\n\u27a1\u0420\u0435\u0435\u0441\u0442\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439;\n\u27a1\u0414\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /local/;\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f;\n\u27a1Aspro;\n\u27a1\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b;\n\u27a1\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u041e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u0438;\n\u27a1RCE by Insecure deserialization;\n - \u041f\u043e\u0438\u0441\u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n - \u0421\u043a\u0430\u043d\u0435\u0440 \u043f\u043e\u0434 bitrix - \u201chuitrix\u201d:\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u043a\u0430\u043d\u0435\u0440\u0430:\n\u27a1Fast scan;\n\u27a1Full Scan;\n\u27a1Detect Version;\n\u27a1Entrance Finder;\n\u27a1RCE modules;\n\u27a1Enum Bitrix Users;\n\u27a1Spawn Bitrix User;\n\u27a1Detect custom modules.\n - References:\n\u27a1Github;\n\u27a1BDU;\n\u27a1Habr & Telegra.ph;\n\u27a1Telegram;\n\u27a1Other.\n\n\u27a1\ufe0f https://pentestnotes.ru/notes/bitrix_pentest_full\n\n#Bitrix #\u041f\u0435\u043d\u0442\u0435\u0441\u0442", "creation_timestamp": "2026-07-26T02:00:10.974225Z"}, {"uuid": "ee715dd9-d827-4944-ba50-f1cca2754f10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/882", "content": "\ud83d\udc68\u200d\ud83d\udcbb Bitrix Ultimate Pentest Guide.\n\n\u2022  \u0410\u0432\u0442\u043e\u0440 \u044d\u0442\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043b \u043e\u0447\u0435\u043d\u044c \u043e\u0431\u044a\u0435\u043c\u043d\u044b\u0439 \u0433\u0430\u0439\u0434 \u043f\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0443 CMS Bitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u0442\u0435\u0445\u043d\u0438\u043a \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432. \u0412\u043e\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435:\n\n - \u041e\u0441\u043d\u043e\u0432\u044b \u0431\u0438\u0442\u0440\u0438\u043a\u0441\u043e\u043b\u043e\u0433\u0438\u0438:\n\u27a1\u0412\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 WAF;\n\u27a1\u041c\u043d\u043e\u0433\u043e\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0441\u0442\u044c.\n - \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438;\n - \u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438:\n\u27a1\u041b\u0430\u0439\u0444\u0445\u0430\u043a \u0447\u0435\u0440\u0435\u0437 burp.\n - \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b;\n - Content Spoofing;\n - Account Enumeration;\n - Non-legitimate registration;\n - Open Redirect;\n - XSS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n - SSRF;\n - LFI;\n - RCE:\n\u27a1RCE vote_agent.php (CVE-2022-27228);\n\u27a1RCE html_editor_action.php;\n\u27a1RCE Landing;\n\u27a1CVE-2022-29268 (Rejected).\n - BDU:2024-01501:\n\u27a1Reflected XSS;\n\u27a1Local File Read.\n - WAF Bypass;\n - LPE;\n - Bitrix24:\n\u27a1XSS bitrix 24;\n\u27a1CVE-2022-43959;\n\u27a1CVE-2023-1713;\n\u27a1CVE-2023-1714;\n\u27a1CVE-2023-1718.\n - \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438:\n\u27a1\u0420\u0435\u0435\u0441\u0442\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439;\n\u27a1\u0414\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /local/;\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f;\n\u27a1Aspro;\n\u27a1\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b;\n\u27a1\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u041e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u0438;\n\u27a1RCE by Insecure deserialization;\n - \u041f\u043e\u0438\u0441\u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n - \u0421\u043a\u0430\u043d\u0435\u0440 \u043f\u043e\u0434 bitrix - \u201chuitrix\u201d:\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u043a\u0430\u043d\u0435\u0440\u0430:\n\u27a1Fast scan;\n\u27a1Full Scan;\n\u27a1Detect Version;\n\u27a1Entrance Finder;\n\u27a1RCE modules;\n\u27a1Enum Bitrix Users;\n\u27a1Spawn Bitrix User;\n\u27a1Detect custom modules.\n - References:\n\u27a1Github;\n\u27a1BDU;\n\u27a1Habr & Telegra.ph;\n\u27a1Telegram;\n\u27a1Other.\n\n\u27a1\ufe0f https://pentestnotes.ru/notes/bitrix_pentest_full\n\n#Bitrix #\u041f\u0435\u043d\u0442\u0435\u0441\u0442", "creation_timestamp": "2026-07-27T00:00:31.381245Z"}, {"uuid": "936cd547-6b5a-4c6e-bfb9-80ce0badd895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-29268", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/1006", "content": "\ud83d\udc68\u200d\ud83d\udcbb Bitrix Ultimate Pentest Guide.\n\n\u2022  \u0410\u0432\u0442\u043e\u0440 \u044d\u0442\u043e\u0433\u043e \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u0430 \u0441\u043e\u0431\u0440\u0430\u043b \u043e\u0447\u0435\u043d\u044c \u043e\u0431\u044a\u0435\u043c\u043d\u044b\u0439 \u0433\u0430\u0439\u0434 \u043f\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0443 CMS Bitrix, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0432 \u0441\u0435\u0431\u044f \u0431\u043e\u043b\u044c\u0448\u043e\u0435 \u043a\u043e\u043b-\u0432\u043e \u0442\u0435\u0445\u043d\u0438\u043a \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432. \u0412\u043e\u0442 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u043d\u0438\u0435:\n\n - \u041e\u0441\u043d\u043e\u0432\u044b \u0431\u0438\u0442\u0440\u0438\u043a\u0441\u043e\u043b\u043e\u0433\u0438\u0438:\n\u27a1\u0412\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 WAF;\n\u27a1\u041c\u043d\u043e\u0433\u043e\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0441\u0442\u044c.\n - \u041e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438;\n - \u041c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438:\n\u27a1\u041b\u0430\u0439\u0444\u0445\u0430\u043a \u0447\u0435\u0440\u0435\u0437 burp.\n - \u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u044b;\n - Content Spoofing;\n - Account Enumeration;\n - Non-legitimate registration;\n - Open Redirect;\n - XSS \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438;\n - SSRF;\n - LFI;\n - RCE:\n\u27a1RCE vote_agent.php (CVE-2022-27228);\n\u27a1RCE html_editor_action.php;\n\u27a1RCE Landing;\n\u27a1CVE-2022-29268 (Rejected).\n - BDU:2024-01501:\n\u27a1Reflected XSS;\n\u27a1Local File Read.\n - WAF Bypass;\n - LPE;\n - Bitrix24:\n\u27a1XSS bitrix 24;\n\u27a1CVE-2022-43959;\n\u27a1CVE-2023-1713;\n\u27a1CVE-2023-1714;\n\u27a1CVE-2023-1718.\n - \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438:\n\u27a1\u0420\u0435\u0435\u0441\u0442\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439;\n\u27a1\u0414\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044f /local/;\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u0430\u043c\u043e\u043f\u0438\u0441\u043d\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f;\n\u27a1Aspro;\n\u27a1\u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u044b;\n\u27a1\u041a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u041e\u0442\u0440\u0430\u0441\u043b\u0435\u0432\u044b\u0435 \u0441\u0430\u0439\u0442\u044b;\n\u27a1\u0423\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u043c\u043e\u0434\u0443\u043b\u0438;\n\u27a1RCE by Insecure deserialization;\n - \u041f\u043e\u0438\u0441\u043a \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0439 \u0438 \u0444\u0430\u0439\u043b\u043e\u0432.\n - \u0421\u043a\u0430\u043d\u0435\u0440 \u043f\u043e\u0434 bitrix - \u201chuitrix\u201d:\n\u27a1\u0421\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u0441\u043a\u0430\u043d\u0435\u0440\u0430:\n\u27a1Fast scan;\n\u27a1Full Scan;\n\u27a1Detect Version;\n\u27a1Entrance Finder;\n\u27a1RCE modules;\n\u27a1Enum Bitrix Users;\n\u27a1Spawn Bitrix User;\n\u27a1Detect custom modules.\n - References:\n\u27a1Github;\n\u27a1BDU;\n\u27a1Habr & Telegra.ph;\n\u27a1Telegram;\n\u27a1Other.\n\n\u27a1 https://pentestnotes.ru/notes/bitrix_pentest_full\n\nS.E. \u25aa\ufe0f infosec.work \u25aa\ufe0f VT", "creation_timestamp": "2026-07-27T00:00:33.247052Z"}]}