{"vulnerability": "cve-2022-3179", "sightings": [{"uuid": "70a227f4-3017-4489-9100-49847c3627db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-20)", "content": "", "creation_timestamp": "2025-04-20T00:00:00.000000Z"}, {"uuid": "8125c26c-612d-4625-8604-c8cb9ff4b5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31790", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/482", "content": "CVE-2022-31790 & -/-/31789 : BLIND EXPLOITS TO RULE WATCHGUARD FIREWALLS\nhttps://www.ambionics.io/blog/hacking-watchguard-firewalls", "creation_timestamp": "2022-09-28T06:30:08.000000Z"}, {"uuid": "f40fcb1c-556f-4865-adf7-5c0ab0b00404", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31790", "type": "seen", "source": "https://t.me/cibsecurity/49360", "content": "\u203c CVE-2022-31790 \u203c\n\nWatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-06T22:19:35.000000Z"}, {"uuid": "8e9e012d-f8ac-473d-b2d8-4fdebd098a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3179", "type": "seen", "source": "https://t.me/cibsecurity/49667", "content": "\u203c CVE-2022-3179 \u203c\n\nWeak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-13T20:25:32.000000Z"}, {"uuid": "758c8cbd-a617-4bfe-95fe-977a02590e11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31794", "type": "seen", "source": "https://t.me/cibsecurity/44831", "content": "\u203c CVE-2022-31794 \u203c\n\nAn issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the requestTempFile function in hw_view.php. An attacker is able to influence the unitName POST parameter and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-20T18:26:38.000000Z"}, {"uuid": "1f2c5859-ded2-45d8-a6fd-14680ddff9df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31795", "type": "seen", "source": "https://t.me/cibsecurity/44826", "content": "\u203c CVE-2022-31795 \u203c\n\nAn issue was discovered on Fujitsu ETERNUS CentricStor CS8000 (Control Center) devices before 8.1A SP02 P04. The vulnerability resides in the grel_finfo function in grel.php. An attacker is able to influence the username (user), password (pw), and file-name (file) parameters and inject special characters such as semicolons, backticks, or command-substitution sequences in order to force the application to execute arbitrary commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-20T18:26:30.000000Z"}, {"uuid": "afff4a5c-8de9-4a57-bffa-9708e1e531e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31796", "type": "seen", "source": "https://t.me/cibsecurity/43680", "content": "\u203c CVE-2022-31796 \u203c\n\nlibjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-06-02T18:31:53.000000Z"}, {"uuid": "27d40a1d-323f-40ce-97ae-09aa8cc90172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31790", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6708", "content": "#exploit\nBlind Exploits to rule WatchGuard firewalls (CVE-2022-31790, CVE-2022-31789)\nhttps://www.ambionics.io/blog/hacking-watchguard-firewalls", "creation_timestamp": "2022-08-31T11:07:01.000000Z"}, {"uuid": "0549ced6-4a19-4141-90fa-983eb28568e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-08-02T00:01:15.474103Z"}, {"uuid": "fceaab35-830b-4583-8b49-47a2f00e8cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-08-02T00:01:19.198526Z"}, {"uuid": "4bcb4b2b-9068-465f-83d7-01c816802cc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-08-01T03:00:03.929138Z"}, {"uuid": "6b7340ff-1cc0-4fc3-b473-d41e4e53010e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-08-01T05:00:05.132275Z"}, {"uuid": "f4c153cd-eced-4afd-a041-d5e0bb1e3e47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:00:07.465698Z"}, {"uuid": "b6a32415-3b78-470c-8554-0dacb3c8f37c", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/05c68957-3684-432f-b134-714c8bc8030f", "content": "", "creation_timestamp": "2026-06-23T14:06:15.129839Z"}, {"uuid": "58f1ae04-bbc5-461e-9f49-5a6a06b4492f", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-31793", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/64f5e9eb-8832-4ada-ad56-e69af5a00e3d", "content": "", "creation_timestamp": "2026-06-30T09:59:27.201243Z"}, {"uuid": "ff44a007-95f5-4aaa-b364-9684cc1d9aac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:10.617171Z"}, {"uuid": "8b4fc179-3848-4350-ad61-6d531be97cd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-28T00:00:54.264984Z"}, {"uuid": "b9613ab9-6fb1-468e-9a8f-e85ce82dd6b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:16.014148Z"}, {"uuid": "fd0c96b8-936b-4cdb-b69d-9526214e5eb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-07-29T12:01:00.588737Z"}, {"uuid": "cb040ff0-68a3-496e-950c-47599735cb2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-07-29T12:01:02.521059Z"}, {"uuid": "57212cbc-d094-4957-aef7-f12a2997c78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "seen", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-07-30T00:01:43.381850Z"}, {"uuid": "19724fe5-169d-49e1-92ad-42b2457e1f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/CVEhub/2671", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31798\nGithub: https://github.com/omarhashem123/CVE-2022-31798\nDescribe: \nNortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.", "creation_timestamp": "2026-07-30T00:01:39.078054Z"}, {"uuid": "16197b6d-d06c-4c48-a121-f314636e5e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:26.818897Z"}, {"uuid": "e84e03aa-f305-42d3-8c6b-6165780b5269", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:41.890880Z"}, {"uuid": "c7074bd7-7996-4ff9-beb7-dabb3c81d5dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T12:00:05.423936Z"}, {"uuid": "4fe15aff-6955-4f51-bf5d-fe2c26239e95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-06T00:00:48.452044Z"}]}