{"vulnerability": "cve-2022-31629", "sightings": [{"uuid": "04076a4a-6770-46c5-8d31-e03f21e2e5a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31629", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-027-02", "content": "", "creation_timestamp": "2026-01-27T11:00:00.000000Z"}, {"uuid": "81d45833-7a53-41cc-bd3e-fcd10dfdff8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31629", "type": "seen", "source": "Telegram/jAUppa129BKxw9coRKCXeW1RMaFV8k5G7QJUY8ywJuse9so", "content": "", "creation_timestamp": "2022-12-10T16:46:34.000000Z"}, {"uuid": "2d35ae51-4ca9-4725-bec6-128825d32621", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31629", "type": "seen", "source": "https://t.me/cibsecurity/50644", "content": "\u203c CVE-2022-31629 \u203c\n\nIn PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-29T02:34:32.000000Z"}, {"uuid": "e2db372c-a048-4cfb-b2c1-74bcdb93b874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31629", "type": "seen", "source": "https://t.me/CVEhub/3214", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31629\nGithub: https://github.com/SilNex/CVE-2022-31629-poc\nDescribe: \nIn PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.", "creation_timestamp": "2026-07-29T12:00:58.842439Z"}, {"uuid": "b64b50c1-afce-4d04-af99-28bd20a69e94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31629", "type": "seen", "source": "https://t.me/CVEhub/3214", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31629\nGithub: https://github.com/SilNex/CVE-2022-31629-poc\nDescribe: \nIn PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.", "creation_timestamp": "2026-07-30T00:01:37.932597Z"}]}