{"vulnerability": "2022-46", "sightings": [{"uuid": "091265a5-3295-4e1d-99a3-20fda68aed9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "fdbf1c2f-93e9-4f7a-a5db-d20e0d9d9c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46751", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113477970956610756", "content": "", "creation_timestamp": "2024-11-13T22:20:22.951664Z"}, {"uuid": "287f7dac-5c98-4be1-bbdb-05b6793ccaca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51251", "content": "", "creation_timestamp": "2023-04-05T00:00:00.000000Z"}, {"uuid": "42ba07b6-16fb-4636-b18b-6ed63b4e3ec0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46795", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646046707551944", "content": "", "creation_timestamp": "2024-12-13T14:44:16.021683Z"}, {"uuid": "752329d7-b16e-405b-a89e-754269ae28d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46796", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646105704402889", "content": "", "creation_timestamp": "2024-12-13T14:59:15.323425Z"}, {"uuid": "3b76bc91-ec57-4f6b-a623-d340eff2a2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46807", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646105718672385", "content": "", "creation_timestamp": "2024-12-13T14:59:15.411692Z"}, {"uuid": "ae2198e7-2c96-444f-a8d9-d82f9683ed20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46811", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646105733415077", "content": "", "creation_timestamp": "2024-12-13T14:59:15.759985Z"}, {"uuid": "69f7d27e-6c5c-4087-a913-14da9322c6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46838", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646105748585726", "content": "", "creation_timestamp": "2024-12-13T14:59:16.226324Z"}, {"uuid": "3c8bc007-f3ae-4a6e-8ba7-62a30a2039dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46840", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646164746250083", "content": "", "creation_timestamp": "2024-12-13T15:14:16.096325Z"}, {"uuid": "a89be68d-e557-414d-804d-fb317a596d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46846", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113646164761595591", "content": "", "creation_timestamp": "2024-12-13T15:14:16.382984Z"}, {"uuid": "2d5b572c-ec18-4726-b1ef-41cd519eadb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971767", "content": "", "creation_timestamp": "2024-12-24T20:33:49.400244Z"}, {"uuid": "31e9368e-2967-4cfb-ae00-ef3bffba8d1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-05)", "content": "", "creation_timestamp": "2025-02-05T00:00:00.000000Z"}, {"uuid": "0b273cee-92b7-416e-85ee-64496972df04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "27ba5f81-e56b-4caf-9635-237ef0b18b27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "9d14e3d7-8dcb-456a-8e6e-919309437e4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46770", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "06caad98-27f3-4e95-825e-2ee7b590ce8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:49.000000Z"}, {"uuid": "72a80259-767d-49cd-a396-e5c8819ee31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46770", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:49.000000Z"}, {"uuid": "58a43b7d-b544-4076-907f-973f8dade9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:49.000000Z"}, {"uuid": "bf3cadcd-222a-4c09-b849-06d7a046d239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:40.000000Z"}, {"uuid": "3998dfd1-1c6a-4cda-899f-dd04ce3ef601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "content": "", "creation_timestamp": "2025-03-24T00:00:00.000000Z"}, {"uuid": "4ad74d5c-034a-4edd-a5e8-530886ba6ca9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-24)", "content": "", "creation_timestamp": "2025-03-24T00:00:00.000000Z"}, {"uuid": "f44ec88b-e879-4a70-908d-e617d13bb424", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-14)", "content": "", "creation_timestamp": "2025-07-14T00:00:00.000000Z"}, {"uuid": "b62c0570-f196-428f-bcc6-ce4e4c446f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46736", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqbeuvnr5w2m", "content": "", "creation_timestamp": "2025-05-28T23:40:45.982989Z"}, {"uuid": "b4151298-9270-4d08-b57a-2240c521082c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46655", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqbf3mmkrg2e", "content": "", "creation_timestamp": "2025-05-28T23:44:31.430569Z"}, {"uuid": "2c32db6b-673d-4b9e-b816-9208233bab1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46735", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqbfdc7a5o2o", "content": "", "creation_timestamp": "2025-05-28T23:48:48.877782Z"}, {"uuid": "6de0b58e-cccb-4855-a677-8f911baea1a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46945", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmvyz4qv322j", "content": "", "creation_timestamp": "2025-04-16T06:53:31.219357Z"}, {"uuid": "858860ba-cfb7-42c2-ac6d-a7bbd4e1467e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46945", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvyf7du2a", "content": "", "creation_timestamp": "2025-04-17T21:02:30.762333Z"}, {"uuid": "e67f3910-6529-4b28-b84c-64d95274d29f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/dlevi309/b29eb4b1bd684805c7f5de4136d133c8", "content": "", "creation_timestamp": "2025-04-20T02:30:28.000000Z"}, {"uuid": "4b227e8a-ecef-469f-a816-8968820e064a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-07)", "content": "", "creation_timestamp": "2025-07-07T00:00:00.000000Z"}, {"uuid": "e9211f56-135a-405f-a73f-3cf7c7624823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i2crb52n", "content": "", "creation_timestamp": "2025-05-01T21:03:05.897401Z"}, {"uuid": "0340082b-2875-41a4-9a8e-8cf562fed7a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46166", "type": "seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lswtsht7kk2p", "content": "", "creation_timestamp": "2025-07-01T23:24:10.354854Z"}, {"uuid": "c82004bf-560e-4e05-952c-b110dbf94d2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46908", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupieut7fr22", "content": "", "creation_timestamp": "2025-07-24T12:01:26.340853Z"}, {"uuid": "6c38d832-f0a4-4286-840c-bf9cf7b4261d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46663", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lzerudhup7f2", "content": "", "creation_timestamp": "2025-09-21T20:58:25.383143Z"}, {"uuid": "92c872aa-b381-40be-8f5d-f6afc3f72b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46152", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m62365zsfp2d", "content": "", "creation_timestamp": "2025-11-20T05:51:04.540644Z"}, {"uuid": "8b212516-344c-4c8a-a6ae-d20ff2be136b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2022-46387", "type": "seen", "source": "https://gist.github.com/sdushantha/3f8e4a07b8a74e37d0819e0cbaf5816b", "content": "", "creation_timestamp": "2025-09-22T12:42:57.000000Z"}, {"uuid": "0e527101-dbed-4d63-93df-2a3866f3f122", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46907", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwrsq274uc2m", "content": "", "creation_timestamp": "2025-08-19T21:02:29.409974Z"}, {"uuid": "e07ed9c7-88c5-4901-a516-9d5326149abe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46337", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:45.000000Z"}, {"uuid": "551f4e17-4e9d-4b51-9281-a4b9ceadf061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46770", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/mirageos/qubes_mirage_firewall_dos.rb", "content": "", "creation_timestamp": "2023-01-17T23:17:21.000000Z"}, {"uuid": "ed50cee2-cd73-41a1-9e37-11d4d90ec2e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb", "content": "", "creation_timestamp": "2023-01-23T19:50:39.000000Z"}, {"uuid": "4fc83a57-dce8-47cb-ae69-031fb5acae7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:59.000000Z"}, {"uuid": "9a86fad9-da54-422d-bb6e-667dd3944d66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:05.000000Z"}, {"uuid": "318664ed-e268-426b-91cb-d4cae4d25096", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:01.000000Z"}, {"uuid": "c1c11700-1db6-4a71-9439-d1cc52a1bf91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/VLTNOgithub/bb9e33de94419c9c730db52571084066", "content": "", "creation_timestamp": "2025-09-04T20:23:50.000000Z"}, {"uuid": "3f9ab0c0-c650-4225-aa1d-3d20fc4cdb79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/mac_dirty_cow.rb", "content": "", "creation_timestamp": "2023-02-02T18:03:09.000000Z"}, {"uuid": "fb09e347-881d-4b47-8678-12705082b0c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/82400a8a9060dd96eea708a8a2329318", "content": "", "creation_timestamp": "2026-02-02T16:44:13.000000Z"}, {"uuid": "ed5b94a1-cd30-4a42-bfeb-f4bb312d670c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/michelepierini2-droid/5809ddd462250873656ec9738ef0a920", "content": "", "creation_timestamp": "2025-12-07T06:40:04.000000Z"}, {"uuid": "1edb0548-a5d4-493d-80ca-ee64d07fa805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46845", "type": "seen", "source": "https://gist.github.com/Darkcrai86/ed3ce24221b36a222c458779355599db", "content": "", "creation_timestamp": "2025-12-09T19:13:06.000000Z"}, {"uuid": "4ccc4a4d-317d-4dcd-b1f0-f39b89814d77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/781f6da990e1d6b23db8dce6e2cdf3e2", "content": "", "creation_timestamp": "2025-12-12T07:10:01.000000Z"}, {"uuid": "e3b84399-e025-4534-83ae-a7d871e8df33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/ef9075049410ea7d01baafa1ae186f97", "content": "", "creation_timestamp": "2025-12-12T07:18:14.000000Z"}, {"uuid": "bef4c20b-e9e0-40d9-a4dc-8f39c56b1963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/771a99ff7c8bba3fe1d6024a94d94fed", "content": "", "creation_timestamp": "2025-12-14T22:47:58.000000Z"}, {"uuid": "8a36d643-3ecf-450f-a24f-1954529b21ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/9bc2d9649e149e26f5dde51860f8e248", "content": "", "creation_timestamp": "2025-12-19T07:37:57.000000Z"}, {"uuid": "59248d11-cf4b-451f-ba7f-088f7dff279c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/25a0e92ab855cc3946e1faabd9ab57cf", "content": "", "creation_timestamp": "2026-01-08T04:31:15.000000Z"}, {"uuid": "5531fa9f-d00c-402d-9c15-ff8ff6c0b138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/295b1a61dd88e5ccf3148e7cbdf06924", "content": "", "creation_timestamp": "2026-01-08T07:44:25.000000Z"}, {"uuid": "6a03fda7-d656-4eea-bba9-b1f8637e92e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/222e2768e362f614f7f5cecfb0ae706c", "content": "", "creation_timestamp": "2026-01-08T09:53:20.000000Z"}, {"uuid": "2246cd03-fca9-45a2-80fe-756e8774efa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/NightVibes3/6a3d8f0d193e37d88529338f05b5f3e6", "content": "", "creation_timestamp": "2026-01-08T10:03:28.000000Z"}, {"uuid": "d3c5f877-dac4-4baf-9600-e4b9523fe870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_23/2022", "content": "", "creation_timestamp": "2022-12-12T08:44:41.000000Z"}, {"uuid": "ccb909a7-c23d-4d97-a560-986531a1451c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4bafad59-2a95-43e7-8116-ef8a85665f8f", "content": "", "creation_timestamp": "2026-02-02T12:27:04.994642Z"}, {"uuid": "2d0f4e2b-e935-4b60-a23f-a186683debb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46338", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13309", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46338\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: g810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data.\n\ud83d\udccf Published: 2022-11-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-24T18:53:54.653Z\n\ud83d\udd17 References:\n1. https://github.com/MatMoul/g810-led/pull/297\n2. https://bugs.debian.org/1024998\n3. https://lists.debian.org/debian-lts-announce/2022/12/msg00002.html", "creation_timestamp": "2025-04-24T19:06:37.000000Z"}, {"uuid": "73676b73-69e5-46e1-988d-1a5da369c163", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46723", "type": "published-proof-of-concept", "source": "https://t.me/HackerArsenal/394", "content": "#exploit\n1. Zero-Click Calendar invite - Critical 0-click vulnerability chain in macOS (CVE-2022-46723)\nhttps://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b\n\n2. CVE-2024-2879:\nWP LayerSlider - Unauth SQLI\nhttps://github.com/herculeszxc/CVE-2024-2879", "creation_timestamp": "2024-09-19T13:11:55.000000Z"}, {"uuid": "18b10de8-4a8c-4845-b922-99447b33c068", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/cKure/10556", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.\n\nhttps://github.com/zhuowei/MacDirtyCowDemo", "creation_timestamp": "2022-12-19T08:55:26.000000Z"}, {"uuid": "0cd953fe-b0f2-4c1e-937a-f7c925e3653d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46020", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3640", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1agetshell\n\u63cf\u8ff0\uff1aWBCE CMS v1.5.4 can implement getshell by modifying the upload file type. CVE project by @Sn0wAlice\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2022-46020\n\n\u6807\u7b7e\uff1a#getshell", "creation_timestamp": "2022-12-27T15:30:10.000000Z"}, {"uuid": "0e2865b8-08a5-4eff-80e2-330a3166c563", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3568", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-46169\nURL\uff1ahttps://github.com/imjdl/CVE-2022-46169\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-12-07T07:17:18.000000Z"}, {"uuid": "7e1f4271-8ef7-4802-8cc5-b2313f32615e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3615", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aGet root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.\nURL\uff1ahttps://github.com/Conradoduart3/Nft-Grabber-Stealer-Exploit-Cve-2022-Steal-BlockHain-Hack-Nft\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-12-22T04:51:26.000000Z"}, {"uuid": "a50f0dea-bf25-4597-9987-478e1c5afcd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4633", "type": "seen", "source": "https://t.me/GithubRedTeam/3624", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-2602\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2022-4633\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-12-22T12:25:58.000000Z"}, {"uuid": "59b1dab3-f397-4969-bd38-294226cb9b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4646", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3619", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aTOP All bugbounty pentesting CVE-2022- POC Exp  RCE example payload  Things\nURL\uff1ahttps://github.com/Live-Hack-CVE/CVE-2022-4646\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-12-22T09:22:53.000000Z"}, {"uuid": "171db85c-01d2-4910-8b48-627bd49c703d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46283", "type": "seen", "source": "https://t.me/cvedetector/18446", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-46283 -\", \n  \"Content\": \"CVE ID : CVE-2022-46283 \nPublished : Feb. 19, 2025, 3:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-19T17:54:24.000000Z"}, {"uuid": "649f067a-0c67-447d-9d37-d4681933b6fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46764", "type": "seen", "source": "https://t.me/cyberguerre/4048", "content": "\u0412 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437 \u0424\u0421\u0422\u042d\u041a \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TrueConf Client, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043d\u0430\u0448\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 CheckPoint.\n\n(\u041a\u0441\u0442\u0430\u0442\u0438, \u041d\u041a\u0426\u041a\u0418 \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0432\u043e\u0439 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0439 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0435\u0449\u0451 \u0431\u0435\u0437 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u0430 \u0411\u0414\u0423.)\n\n\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0424\u0421\u0422\u042d\u041a \u044f\u0432\u043d\u043e \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u0432 \u0431\u0430\u0437\u0435 CVE \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 TrueConf. \u0422\u0430\u043a \u0432 \u0411\u0414\u0423 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u00ab\u043d\u043e\u0432\u0430\u044f\u00bb \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TrueConf Server \u2014 \u0441 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0437\u0430\u043f\u043e\u0437\u0434\u0430\u043d\u0438\u0435\u043c, \u0447\u0442\u043e \u0432\u0438\u0434\u043d\u043e \u0438\u0437 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432: CVE-2022-46764 \u0438 BDU:2026-04607. \u041f\u0440\u0438\u0447\u0451\u043c \u0432 2022 \u0433\u043e\u0434\u0443 \u0435\u0451 \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f SolidLab.", "creation_timestamp": "2026-04-06T18:52:08.000000Z"}, {"uuid": "24d4d79e-ca30-48d6-8a2c-b3b8912bbd56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "Telegram/7fgJPbYm76Noyc5NVfwJ4imA4GEc6x2X4VIWCPGaO6mzOX0", "content": "", "creation_timestamp": "2025-07-02T15:00:06.000000Z"}, {"uuid": "d380db4b-14ce-4a65-830b-619ad442f1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "Telegram/_RteshKRLDCQ4RAmweF2blRppm4mSQiC8GB-jXpC1s6eNw8", "content": "", "creation_timestamp": "2026-03-29T09:00:04.000000Z"}, {"uuid": "97f04c0c-fa60-4f06-9765-daf0fddee55c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "Telegram/KKi08pVtUDaCAJkb9047w9y4w-ZBtgxVmflDXmeWCTkhF9g", "content": "", "creation_timestamp": "2026-03-29T03:00:06.000000Z"}, {"uuid": "628ca782-2c38-46d5-9188-e458e367366b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "Telegram/JLhJQ7n8NYWxmD11_3t0g_ZRcR3DzIiGQT-gwDA9cmtWa00", "content": "", "creation_timestamp": "2026-04-01T03:00:06.000000Z"}, {"uuid": "9b3f7eac-1208-4442-b042-5bba872ebf89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "Telegram/TImB4WLg9m4sLGXOfrFfePfJsw5eV9JDphaGTzdqtpQzKI4", "content": "", "creation_timestamp": "2026-04-03T21:00:05.000000Z"}, {"uuid": "6e5245ad-04f3-454b-93dc-ec5cd88f2ae4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/4427", "content": "\u200b\u26a1\ufe0fCacti \u0432\u043d\u043e\u0432\u044c \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\u043e\u043c: \u0441\u0440\u0430\u0437\u0443 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044e\u0442 \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u043f\u0443\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\n\n\ud83d\udcac\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Cacti, \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0435\u0442\u044f\u043c\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u043b\u0438 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0432\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435, \u0432\u0435\u0434\u0443\u0449\u0438\u0435 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0435 \u0438\u0437 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\nCVE-2024-25641 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 9.1). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u00ab\u0418\u043c\u043f\u043e\u0440\u0442 \u043f\u0430\u043a\u0435\u0442\u043e\u0432\u00bb, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043d\u0430 \u00ab\u0418\u043c\u043f\u043e\u0440\u0442 \u0448\u0430\u0431\u043b\u043e\u043d\u043e\u0432\u00bb \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 PHP-\u043a\u043e\u0434 \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0447\u0442\u043e \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430.\nCVE-2024-29895 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 10.0). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043b\u044e\u0431\u043e\u043c\u0443 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u0439 \u043e\u043f\u0446\u0438\u0438 \u00abregister_argc_argv\u00bb \u0432 PHP.\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0434\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044e \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432:\n\nCVE-2024-31445 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 8.8). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0432 api_automation.php, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u0434\u0430.\nCVE-2024-31459 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430 lib/plugin.php, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0432\u043c\u0435\u0441\u0442\u0435 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\u0421\u043b\u0435\u0434\u0443\u0435\u0442 \u043e\u0442\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e 10 \u0438\u0437 12 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c CVE-2024-29895 \u0438 CVE-2024-30268 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Cacti \u0434\u043e 1.2.26 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e. \u042d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0431\u044b\u043b\u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 1.2.27, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 13 \u043c\u0430\u044f 2024 \u0433\u043e\u0434\u0430. \u0414\u0432\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 1.3.x \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0432\u043e\u0437\u043d\u0438\u043a\u043b\u0430 \u0441 Cacti \u0441\u043f\u0443\u0441\u0442\u044f \u0431\u043e\u043b\u0435\u0435 \u0432\u043e\u0441\u044c\u043c\u0438 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u0440\u0443\u0433\u043e\u0439 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u0438 ( CVE-2023-39361, CVSS 9.8), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u0410 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 2023 \u0433\u043e\u0434\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2022-46169 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9.8 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u0430\u043c\u044b\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0438\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Cacti \u0434\u043b\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0431\u043e\u0442\u043d\u0435\u0442\u043e\u0432 MooBot \u0438 ShellBot.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f \u0432\u044b\u0448\u0435\u043e\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 GitHub, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0433\u0440\u043e\u0437.\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2024-05-14T14:37:41.000000Z"}, {"uuid": "390260e4-48c4-4d67-a432-3285a865fe39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/77722", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #SSRF\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-46364-Proof-of-the-concept\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cybermaksxx\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-03-29 03:00:22\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nThis vulnerability allows an attacker to perform SSRF (Server-Side Request Forgery) attacks on Apache CXF webservices that accept MTOM/XOP requests. The issue exists in how the href attribute of xop:Include is parsed, allowing arbitrary URLs to be requested by the server.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-03-29T03:02:31.000000Z"}, {"uuid": "7fdf39b8-b481-4e23-bc0c-905a9cb445c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46165", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/504", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46165\n\ud83d\udd39 Description: Syncthing is an open source, continuous file synchronization program. In versions prior to 1.23.5 a compromised instance with shared folders could sync malicious files which contain arbitrary HTML and JavaScript in the name. If the owner of another device looks over the shared folder settings and moves the mouse over the latest sync, a script could be executed to change settings for shared folders or add devices automatically. Additionally adding a new device with a malicious name could embed HTML or JavaScript inside parts of the page. As a result the webUI may be subject to a stored cross site scripting attack. This issue has been addressed in version 1.23.5. Users are advised to upgrade. Users unable to upgrade should avoid sharing folders with untrusted users.\n\ud83d\udccf Published: 2023-06-06T17:59:30.857Z\n\ud83d\udccf Modified: 2025-01-07T18:32:23.914Z\n\ud83d\udd17 References:\n1. https://github.com/syncthing/syncthing/security/advisories/GHSA-9rp6-23gf-4c3h\n2. https://github.com/syncthing/syncthing/commit/73c52eafb6566435dffd979c3c49562b6d5a4238\n3. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IRYGBFJPVBW6PPTETNIBWQJE4HJSA5PJ/\n4. https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XEBWSQVGHSTR4ZO7LVVEMPEGMV2DS5XR/", "creation_timestamp": "2025-01-07T18:37:29.000000Z"}, {"uuid": "0d3686ea-9479-4eaa-b810-3276baf72112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46300", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2243", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46300\n\ud83d\udd39 Description: Versions of VISAM VBASE Automation Base prior to 11.7.5 may disclose information if a valid user opens a specially crafted file.\n\ud83d\udccf Published: 2023-03-21T22:10:34.483Z\n\ud83d\udccf Modified: 2025-01-17T22:08:25.887Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-23-080-05", "creation_timestamp": "2025-01-17T22:57:09.000000Z"}, {"uuid": "82476fcc-270a-4861-9642-06b18b895238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46538", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12154", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46538\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T18:53:59.567Z\n\ud83d\udd17 References:\n1. https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formWriteFacMac/formWriteFacMac.md", "creation_timestamp": "2025-04-16T19:56:42.000000Z"}, {"uuid": "24530e15-1f33-4e7e-a7a4-39a68dcefc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46732\n\ud83d\udd39 Description: Even if the authentication fails for local service authentication, the requested command could still execute regardless of authentication status.\n\ud83d\udccf Published: 2023-01-17T23:31:14.972Z\n\ud83d\udccf Modified: 2025-01-17T22:13:06.336Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/uscert/ics/advisories/icsa-23-017-01\n2. https://digitalsupport.ge.com/s/article/GE-Digital-Product-Security-Advisory-GED-23-01", "creation_timestamp": "2025-01-17T22:57:02.000000Z"}, {"uuid": "76b82e1e-cfe2-4ee4-8f69-bb747196a729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46773", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5521", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46773\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result.  IBM X-Force ID:  242951.\n\ud83d\udccf Published: 2023-03-15T19:57:22.981Z\n\ud83d\udccf Modified: 2025-02-26T16:11:32.849Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6962155\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/242951", "creation_timestamp": "2025-02-26T16:24:13.000000Z"}, {"uuid": "13caf5b4-3505-4500-a9bc-61d53cf525e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5967", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46752\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: \nDell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n\n\ud83d\udccf Published: 2023-03-08T16:51:55.033Z\n\ud83d\udccf Modified: 2025-02-28T18:32:37.203Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000207928/dsa-2023-011-dell-client-platform-security-update-for-a-bios-vulnerability", "creation_timestamp": "2025-02-28T19:27:15.000000Z"}, {"uuid": "3b62ab33-d253-4c0b-a8e4-516009f1552b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4694", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11164", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4694\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:36:49.932Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/a4d865c2-1a2b-4e3a-aaae-915b0dfc3f22\n2. https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e", "creation_timestamp": "2025-04-09T20:48:31.000000Z"}, {"uuid": "ad8c5928-e26c-485f-87b7-2a6d8d7c1a67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46394", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6550", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46394\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r39p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.\n\ud83d\udccf Published: 2023-03-08T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-05T15:11:23.371Z\n\ud83d\udd17 References:\n1. https://developer.arm.com/support/arm-security-updates\n2. https://developer.arm.com/Arm%20Security%20Center/Mali%20GPU%20Driver%20Vulnerabilities", "creation_timestamp": "2025-03-05T15:32:56.000000Z"}, {"uuid": "60ea62c9-210c-4e85-aa3b-e2eb1eeab685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46973", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46973\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T16:28:57.425Z\n\ud83d\udd17 References:\n1. https://github.com/anji-plus/report/issues/15\n2. https://github.com/Fw-fW-fw/UPDATE-CVE/blob/main/CVE-2022-46973", "creation_timestamp": "2025-03-07T16:35:13.000000Z"}, {"uuid": "dc087d50-6252-4009-a8cd-28a5aaa0a5e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46712", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7146", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46712\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13. An app may be able to cause unexpected system termination or potentially execute code with kernel privileges.\n\ud83d\udccf Published: 2023-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T14:26:33.138Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213488", "creation_timestamp": "2025-03-11T14:39:38.000000Z"}, {"uuid": "0d657497-f226-4aa8-983f-bd78ea7fcb27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46501", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6864", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46501\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Accruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function.\n\ud83d\udccf Published: 2023-03-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-07T17:29:32.771Z\n\ud83d\udd17 References:\n1. http://accruent.com\n2. https://maintenanceconnection.ca/zero-day-flaw-in-accruent-software/", "creation_timestamp": "2025-03-07T17:35:14.000000Z"}, {"uuid": "70be1cd9-05d0-4888-b623-b75259512ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46180", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7064", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46180\n\ud83d\udd25 CVSS Score: 5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)\n\ud83d\udd39 Description: Discourse Mermaid (discourse-mermaid-theme-component) allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary HTML on that post. The issue has been fixed on the `main` branch of the GitHub repository, with 1.1.0 named as a patched version. Admins can update the theme component through the admin UI. As a workaround, admins can temporarily disable discourse-mermaid-theme-component.\n\ud83d\udccf Published: 2023-01-04T16:44:54.487Z\n\ud83d\udccf Modified: 2025-03-10T21:32:39.201Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse-mermaid-theme-component/security/advisories/GHSA-8437-hgcm-p3q3\n2. https://github.com/discourse/discourse-mermaid-theme-component/pull/14\n3. https://github.com/discourse/discourse-mermaid-theme-component/commit/c10bc4a08bf865cee20e5d5dffba535762813f0f", "creation_timestamp": "2025-03-10T21:39:19.000000Z"}, {"uuid": "c8f27b08-16fa-466e-b3bc-8fef0486e0e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46177", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7071", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46177\n\ud83d\udd25 CVSS Score: 5.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, when a user requests for a password reset link email, then changes their primary email, the old reset email is still valid. When the old reset email is used to reset the password, the Discourse account's primary email would be re-linked to the old email. If the old email address is compromised or has transferred ownership, this leads to an account takeover. This is however mitigated by the SiteSetting `email_token_valid_hours` which is currently 48 hours. Users should upgrade to versions 2.8.14 or 3.0.0.beta15 to receive a patch. As a workaround, lower `email_token_valid_hours ` as needed.\n\ud83d\udccf Published: 2023-01-05T19:48:05.483Z\n\ud83d\udccf Modified: 2025-03-10T21:31:57.876Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse/security/advisories/GHSA-5www-jxvf-vrc3\n2. https://github.com/discourse/discourse/commit/4bf306f0e3bf54a9ef9c5886bf1cfb85c20da570\n3. https://github.com/discourse/discourse/commit/83944213b2b2454af80d0407f60d67641b1f0b38", "creation_timestamp": "2025-03-10T21:39:28.000000Z"}, {"uuid": "f8856b73-37a9-4c26-b976-f5899d2026ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46168", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7069", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46168\n\ud83d\udd25 CVSS Score: 3.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Discourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta15 on the `beta` and `tests-passed` branches, recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is not an issue as they are likely already familiar with one another's email addresses. This issue is patched in versions 2.8.14 and 2.9.0.beta15. The fix is that someone sending emails out via group SMTP to non-staged users masks those emails with blind carbon copy (BCC). Staged users are ones that have likely only interacted with the group via email, and will likely include other people who were CC'd on the original email to the group. As a workaround, disable group SMTP for any groups that have it enabled.\n\ud83d\udccf Published: 2023-01-05T17:18:58.143Z\n\ud83d\udccf Modified: 2025-03-10T21:32:09.707Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse/security/advisories/GHSA-8p7g-3wm6-p3rm\n2. https://github.com/discourse/discourse/pull/19724", "creation_timestamp": "2025-03-10T21:39:26.000000Z"}, {"uuid": "b43eedad-dff7-40e8-b8e8-544b044f9ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46704", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7142", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46704\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, macOS Big Sur 11.7.2, macOS Monterey 12.6.2. An app may be able to modify protected parts of the file system.\n\ud83d\udccf Published: 2023-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T14:29:05.417Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213532\n2. https://support.apple.com/en-us/HT213534\n3. https://support.apple.com/en-us/HT213533", "creation_timestamp": "2025-03-11T14:39:35.000000Z"}, {"uuid": "acaf2709-634d-4051-836a-a2a42b659353", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46713", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7147", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46713\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A race condition was addressed with additional validation. This issue is fixed in macOS Ventura 13, macOS Monterey 12.6.1, macOS Big Sur 11.7.1. An app may be able to modify protected parts of the file system.\n\ud83d\udccf Published: 2023-02-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T14:25:32.946Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213488\n2. https://support.apple.com/en-us/HT213493\n3. https://support.apple.com/en-us/HT213494", "creation_timestamp": "2025-03-11T14:39:43.000000Z"}, {"uuid": "1246ddbe-1bdf-4dae-beb8-615e45e4dbaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4669", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4669\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Page Builder: Live Composer WordPress plugin before 1.5.23 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-21T08:50:39.682Z\n\ud83d\udccf Modified: 2025-03-12T16:16:52.245Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/79f011e4-3422-4307-8736-f27048796aae", "creation_timestamp": "2025-03-12T16:41:14.000000Z"}, {"uuid": "2df59808-d631-4e6e-a2d2-d5f7b6d4d426", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4622", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7378", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4622\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-21T08:50:48.474Z\n\ud83d\udccf Modified: 2025-03-12T20:22:59.072Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/ea055ed4-324d-4d77-826a-b6f814413eb2", "creation_timestamp": "2025-03-12T20:42:42.000000Z"}, {"uuid": "1695f1ad-50d1-490f-98c1-6dcf3e1ceaa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46892", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8120", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46892\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.\n\ud83d\udccf Published: 2023-02-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-19T17:49:23.426Z\n\ud83d\udd17 References:\n1. https://amperecomputing.com/products/security-bulletins/root-complex-OS-re-enable", "creation_timestamp": "2025-03-19T18:19:42.000000Z"}, {"uuid": "71a71a9f-f6f9-4d4f-9624-1be7f8e7d986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4678", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8383", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4678\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The TemplatesNext ToolKit WordPress plugin before 3.2.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2023-02-13T14:32:07.210Z\n\ud83d\udccf Modified: 2025-03-21T16:24:26.652Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6a36d665-a0ca-4346-8e55-cf9ba45966cc", "creation_timestamp": "2025-03-21T17:19:25.000000Z"}, {"uuid": "bf08f7b9-3451-48c8-a48b-5226ae3f6ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8429", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46754\n\ud83d\udd25 CVSS Score: 8.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N)\n\ud83d\udd39 Description: \nWyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user might access certain pro license features for which this admin is not authorized in order to configure user controlled external entities.\n\n\n\n\n\n\n\ud83d\udccf Published: 2023-02-10T21:25:19.476Z\n\ud83d\udccf Modified: 2025-03-21T19:49:50.393Z\n\ud83d\udd17 References:\n1. https://www.dell.com/support/kbdoc/en-us/000206134/dsa-2022-329-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities", "creation_timestamp": "2025-03-21T20:24:52.000000Z"}, {"uuid": "9ce57a5b-4a6c-4c4d-9637-1e10366e61ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46649", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8475", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46649\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.\n\ud83d\udccf Published: 2023-02-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T16:05:39.446Z\n\ud83d\udd17 References:\n1. https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-001/\n2. https://www.otorio.com/blog/airlink-acemanager-vulnerabilities/\n3. https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-04", "creation_timestamp": "2025-03-24T16:23:09.000000Z"}, {"uuid": "fe980b11-7476-4cb6-a694-3649fd776e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46650", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8466", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46650\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Acemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.\n\ud83d\udccf Published: 2023-02-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T16:15:42.259Z\n\ud83d\udd17 References:\n1. https://source.sierrawireless.com/resources/security-bulletins/sierra-wireless-technical-bulletin---swi-psa-2023-001/\n2. https://www.otorio.com/blog/airlink-acemanager-vulnerabilities/\n3. https://www.cisa.gov/uscert/ics/advisories/icsa-23-026-04", "creation_timestamp": "2025-03-24T16:22:58.000000Z"}, {"uuid": "d767eadf-16ec-4305-b74d-7b946efa76e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4677", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4677\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Leaflet Maps Marker WordPress plugin before 3.12.7 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-02-06T19:59:40.495Z\n\ud83d\udccf Modified: 2025-03-25T20:12:16.710Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/9c293098-de54-4a04-b13d-2a702200f02e", "creation_timestamp": "2025-03-25T20:24:22.000000Z"}, {"uuid": "7b4c721d-2290-4abf-ac0b-3d81aa10c991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4681", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8724", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4681\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.\n\ud83d\udccf Published: 2023-02-06T19:59:20.610Z\n\ud83d\udccf Modified: 2025-03-25T18:13:32.700Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/5a4096e8-abe4-41c4-b741-c44e740e8689", "creation_timestamp": "2025-03-25T18:25:12.000000Z"}, {"uuid": "a58b5ab6-cb54-4193-8dab-e90b524a25da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4664", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4664\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\ud83d\udccf Published: 2023-02-06T19:59:12.545Z\n\ud83d\udccf Modified: 2025-03-25T20:45:45.241Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d6a9cfaa-d3fa-442e-a9a1-b06588723e39", "creation_timestamp": "2025-03-25T21:25:22.000000Z"}, {"uuid": "b7c7af11-4a32-4180-8263-cdf2d89afc15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46967", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46967\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory.\n\ud83d\udccf Published: 2023-01-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-31T16:51:20.718Z\n\ud83d\udd17 References:\n1. https://packetstormsecurity.com/files/169916/Revenue-Collection-System-1.0-SQL-Injection-Remote-Code-Execution.html", "creation_timestamp": "2025-03-31T17:30:51.000000Z"}, {"uuid": "486e3be3-1d00-4530-9c81-229474f82bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46934", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46934\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: kkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T16:10:32.387Z\n\ud83d\udd17 References:\n1. https://github.com/kekingcn/kkFileView/issues/411", "creation_timestamp": "2025-03-27T16:26:59.000000Z"}, {"uuid": "71051d77-09f3-4d8d-98ad-6f7a9c89b538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4667", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9185", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4667\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-30T20:31:59.713Z\n\ud83d\udccf Modified: 2025-03-27T19:06:24.158Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a388232b-a399-46a5-83e6-20c1b5df351d", "creation_timestamp": "2025-03-27T19:26:58.000000Z"}, {"uuid": "969f51b0-1f90-438b-b479-7d8993a8dd05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4654", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9359", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4654\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-01-30T20:31:37.715Z\n\ud83d\udccf Modified: 2025-03-28T14:01:53.933Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a29744cd-b760-4757-8564-883d59fa4881", "creation_timestamp": "2025-03-28T14:27:44.000000Z"}, {"uuid": "3e21f0a2-ff7a-44aa-a293-a323ef0771b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4649", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9357", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4649\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Extended Search WordPress plugin before 2.1.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-01-30T20:31:35.961Z\n\ud83d\udccf Modified: 2025-03-28T14:04:17.568Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/0d9ba176-97be-4b6b-9cf1-6c3047321a1e", "creation_timestamp": "2025-03-28T14:27:42.000000Z"}, {"uuid": "df65c0c1-cf15-47f5-a984-a6d26f4fce5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46999", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9934", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46999\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tuzicms v2.0.6 was discovered to contain a SQL injection vulnerability via the component \\App\\Manage\\Controller\\UserController.class.php.\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:17:21.563Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/shiyi-5yjak/hx4unh/lvalegwh46r4dgcp?singleDoc", "creation_timestamp": "2025-04-01T15:32:56.000000Z"}, {"uuid": "f632398c-fbdd-43e0-96c1-0ae37581d748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46998", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9933", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46998\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:18:09.656Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/shiyi-5yjak/hx4unh/kgnanw3lt8wg1tx2#%20%E3%80%8Ataocms-3.0.2-ssrf%E3%80%8B", "creation_timestamp": "2025-04-01T15:32:55.000000Z"}, {"uuid": "b9324c42-6add-4d65-90ab-68819480a809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46957", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9932", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46957\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:19:39.520Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/sites/default/files/download/oretnom23/tracking.zip\n2. https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46957", "creation_timestamp": "2025-04-01T15:32:54.000000Z"}, {"uuid": "3f25fa3f-f78d-4855-88db-1f7cdc9825ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46624", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9931", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46624\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in Online Graduate Tracer System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.\n\ud83d\udccf Published: 2023-01-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-01T15:20:36.135Z\n\ud83d\udd17 References:\n1. https://www.sourcecodester.com/php/15904/online-graduate-tracer-system-college-ict-alumni.html\n2. https://github.com/Rajeshwar40/CVE/blob/main/CVE-2022-46624", "creation_timestamp": "2025-04-01T15:32:53.000000Z"}, {"uuid": "1a0390d0-203c-4b57-86f0-c436e869267b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4693", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10094", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4693\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user\u2019s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.\n\ud83d\udccf Published: 2023-01-23T14:31:53.721Z\n\ud83d\udccf Modified: 2025-04-02T15:30:53.916Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/1eee10a8-135f-4b76-8289-c381ff1f51ea\n2. https://lana.codes/lanavdb/eeabe1d3-6f64-400a-8fb2-0865efdf6957", "creation_timestamp": "2025-04-02T15:33:22.000000Z"}, {"uuid": "ebcc2827-8b64-42e3-b2ef-6a792a13a363", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46639", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10219", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46639\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2023-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T14:23:55.169Z\n\ud83d\udd17 References:\n1. https://ia-informatica.com/it/CVE-2022-46639", "creation_timestamp": "2025-04-03T14:35:02.000000Z"}, {"uuid": "2e4ede04-3f0f-45ff-9b28-1b03b0ab740d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46959", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10228", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46959\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\ud83d\udccf Published: 2023-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T14:11:53.604Z\n\ud83d\udd17 References:\n1. https://github.com/go-sonic/sonic/issues/56", "creation_timestamp": "2025-04-03T14:35:17.000000Z"}, {"uuid": "08824c0b-c9b3-45ca-9d0f-6cc963aa565d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/fixedlook/e38d4cc35db8363303e906580d64d23b", "content": "", "creation_timestamp": "2026-04-25T22:27:51.000000Z"}, {"uuid": "e7838705-dc2c-42e4-ae81-d31b72ec4617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46889", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46889\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A persistent cross-site scripting (XSS) vulnerability in NexusPHP before 1.7.33 allows remote authenticated attackers to permanently inject arbitrary web script or HTML via the title parameter used in /subtitles.php.\n\ud83d\udccf Published: 2023-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T18:10:03.704Z\n\ud83d\udd17 References:\n1. https://github.com/xiaomlove/nexusphp/releases/tag/v1.7.33\n2. https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities", "creation_timestamp": "2025-04-03T18:35:25.000000Z"}, {"uuid": "95bc1be5-d075-4a2e-bf7d-4cb8d87d26f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10300", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Weak access control in NexusPHP before 1.7.33 allows a remote authenticated user to edit any post in the forum (this is caused by a lack of checks performed by the /forums.php?action=post page).\n\ud83d\udccf Published: 2023-01-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T18:08:39.464Z\n\ud83d\udd17 References:\n1. https://github.com/xiaomlove/nexusphp/releases/tag/v1.7.33\n2. https://www.surecloud.com/resources/blog/nexusphp-surecloud-security-review-identifies-authenticated-unauthenticated-vulnerabilities", "creation_timestamp": "2025-04-03T18:35:27.000000Z"}, {"uuid": "d5be8e2e-7842-42b4-9842-a5b3528ad328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4650", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10334", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4650\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-01-23T14:31:55.502Z\n\ud83d\udccf Modified: 2025-04-03T19:20:54.367Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/b430fdaa-191a-429e-b6d2-479b32bb1075", "creation_timestamp": "2025-04-03T19:35:45.000000Z"}, {"uuid": "e055c9ad-43ea-4cef-9866-6b01ad9b42b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46955", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10773", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46955\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:29:30.957Z\n\ud83d\udd17 References:\n1. https://www.github.com", "creation_timestamp": "2025-04-07T19:45:41.000000Z"}, {"uuid": "d84845b5-132d-423c-ab17-c1dc9239ad0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4645", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4645\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\ud83d\udccf Published: 2023-03-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T20:37:39.327Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/277\n2. https://gitlab.com/libtiff/libtiff/-/commit/e813112545942107551433d61afd16ac094ff246\n3. https://gitlab.com/gitlab-org/cves/-/blob/master/2022/CVE-2022-4645.json\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BA6GRCAQ7NR2OK5N44UQRGUJBIYKWJJH/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZTFA6GGOKFPIQNHDBMXYUR4XUXUJESE/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLM763GGZVVOAXIQXG6YGTYJ5VFYNECQ/\n7. https://security.netapp.com/advisory/ntap-20230331-0001/", "creation_timestamp": "2025-04-04T21:36:38.000000Z"}, {"uuid": "7b091ca3-77ec-4965-b269-bac5043cf62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46471", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10781", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46471\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter at /healthcare/Admin/consulting_detail.php.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:06:41.785Z\n\ud83d\udd17 References:\n1. https://github.com/dreamwonly/bug_report/blob/main/vendors/janobe/Online%20Health%20Care%20System/SQLi-1.md", "creation_timestamp": "2025-04-07T19:45:50.000000Z"}, {"uuid": "45bcd1c2-4ba9-47c2-a691-4172b61172c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10780", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46093\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Hospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:08:30.147Z\n\ud83d\udd17 References:\n1. https://github.com/Frank-Z7/z-vulnerabilitys/blob/main/Hospital-Management-System/Hospital-Management-System.md", "creation_timestamp": "2025-04-07T19:45:49.000000Z"}, {"uuid": "b71f9daa-2d70-4a0a-9a39-fd3c93b61b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46648", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10539", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46648\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.\n\ud83d\udccf Published: 2023-01-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-04T18:52:30.835Z\n\ud83d\udd17 References:\n1. https://github.com/ruby-git/ruby-git\n2. https://github.com/ruby-git/ruby-git/pull/602\n3. https://jvn.jp/en/jp/JVN16765254/index.html\n4. https://lists.debian.org/debian-lts-announce/2023/01/msg00043.html", "creation_timestamp": "2025-04-04T19:36:54.000000Z"}, {"uuid": "9aa153a7-dd9e-4af3-9872-9900a5d53059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4655", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10527", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4655\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, which could allow users with a role as low as a contributor to perform a Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-01-16T15:37:55.918Z\n\ud83d\udccf Modified: 2025-04-04T18:10:49.090Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a1c70c80-e952-4cc7-aca0-c2dde3fa08a9", "creation_timestamp": "2025-04-04T18:36:23.000000Z"}, {"uuid": "89bba1bf-535c-44ce-b055-b0c8bbe55461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4658", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4658\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The RSSImport WordPress plugin through 4.6.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\ud83d\udccf Published: 2023-01-16T15:37:52.771Z\n\ud83d\udccf Modified: 2025-04-04T20:38:52.466Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c7a17eb9-2811-45ba-bab3-f53b2fa7d051", "creation_timestamp": "2025-04-04T21:36:31.000000Z"}, {"uuid": "f95248fc-d0e1-4c2e-9ee6-9c2b12a29337", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46956", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46956\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:27:36.707Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-5.md", "creation_timestamp": "2025-04-07T19:45:43.000000Z"}, {"uuid": "bcb7abab-c808-4a45-a944-6d23c3d65cbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46953", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10770", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46953\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:31:22.323Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-4.md", "creation_timestamp": "2025-04-07T19:45:38.000000Z"}, {"uuid": "d32793f1-76db-42c1-a6b6-8c66cc6879ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46950", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10797", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46950\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:45:01.083Z\n\ud83d\udd17 References:\n1. https://github.com/Venus-XATBLab-YT/bug_report/blob/main/dynamic-transaction-queuing-system/SQLi-1.md", "creation_timestamp": "2025-04-07T20:46:34.000000Z"}, {"uuid": "42617ea1-c7d1-421a-a68a-b30db7979fb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46622", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10918", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46622\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter.\n\ud83d\udccf Published: 2023-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T14:28:59.093Z\n\ud83d\udd17 References:\n1. https://github.com/sudoninja-noob/CVE-2022-46622/blob/main/CVE-2022-46622", "creation_timestamp": "2025-04-08T14:47:11.000000Z"}, {"uuid": "92a1b0b0-ef6c-4e0d-b576-1d517c194f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46369", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10900", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46369\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting (PXSS) \u2013 vulnerability may allow inserting scripts into unspecified input fields.\n\ud83d\udccf Published: 2023-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T13:40:44.402Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-04-08T13:46:29.000000Z"}, {"uuid": "70122c0c-52d3-443d-9a16-49466ca3ed40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46503", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10914", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46503\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter.\n\ud83d\udccf Published: 2023-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T14:30:39.234Z\n\ud83d\udd17 References:\n1. https://github.com/mkwsj007/bug_report/blob/main/vendors/donbermoy/Online%20Student%20Enrollment%20System/XSS-1.md", "creation_timestamp": "2025-04-08T14:47:04.000000Z"}, {"uuid": "8dfb75cb-1e9e-461b-ae2b-5bd99d7295a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46623", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10922", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46623\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter.\n\ud83d\udccf Published: 2023-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T14:27:28.452Z\n\ud83d\udd17 References:\n1. https://github.com/sudoninja-noob/CVE-2022-46623/blob/main/CVE-2022-46623", "creation_timestamp": "2025-04-08T14:47:15.000000Z"}, {"uuid": "25722070-fb31-44e2-b9cf-0c7255309efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46368", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10947", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46368\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) \u2013 vulnerability may allow unauthorized action on behalf of authenticated users.\n\ud83d\udccf Published: 2023-01-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-08T16:20:50.387Z\n\ud83d\udd17 References:\n1. https://www.gov.il/en/Departments/faq/cve_advisories", "creation_timestamp": "2025-04-08T16:46:39.000000Z"}, {"uuid": "3bb9799f-468e-464a-b040-2c5558c0b8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4646", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11135", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4646\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.\n\ud83d\udccf Published: 2022-12-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T18:34:30.323Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10\n2. https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398", "creation_timestamp": "2025-04-09T18:48:09.000000Z"}, {"uuid": "474b941f-4f79-4aa3-be7d-aa198171676d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4647", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4647\n\ud83d\udd25 CVSS Score: 5.1 (cvssV3_0, Vector: CVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.2.\n\ud83d\udccf Published: 2022-12-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T18:35:42.198Z\n\ud83d\udd17 References:\n1. https://huntr.dev/bounties/ccdd243d-726c-4199-b742-25c571491242\n2. https://github.com/microweber/microweber/commit/20df56615e61624f5fff149849753869e4b3b936", "creation_timestamp": "2025-04-09T18:48:08.000000Z"}, {"uuid": "b9cbf4ad-e8d5-4ea3-b859-b691f28a5689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46610", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11096", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46610\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: 72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:41:48.709Z\n\ud83d\udd17 References:\n1. https://github.com/72wukong/72crm-9.0-PHP/issues/36", "creation_timestamp": "2025-04-09T15:47:43.000000Z"}, {"uuid": "dca2fa4f-c0f1-417f-beaa-04187eeb9536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46449", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11091", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46449\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in MPD (Music Player Daemon) v0.23.10 allows attackers to cause a Denial of Service (DoS) via a crafted input.\n\ud83d\udccf Published: 2023-01-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:43:02.603Z\n\ud83d\udd17 References:\n1. https://github.com/MusicPlayerDaemon/MPD/issues/1676", "creation_timestamp": "2025-04-09T15:47:35.000000Z"}, {"uuid": "39704d1c-9733-446c-85b4-2ec57ebc132f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4662", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11132", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4662\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.\n\ud83d\udccf Published: 2022-12-22T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T18:36:53.874Z\n\ud83d\udd17 References:\n1. https://lore.kernel.org/all/CAB7eexLLApHJwZfMQ=X-PtRhw0BgO+5KcSMS05FNUYejJXqtSA%40mail.gmail.com/\n2. https://lore.kernel.org/all/20220913140355.910732567%40linuxfoundation.org/", "creation_timestamp": "2025-04-09T18:48:03.000000Z"}, {"uuid": "60f99cea-155f-4c50-9b3a-513342002805", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46769", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11152", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46769\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature.\n\nUpgrade to Apache Sling App CMS >= 1.1.4 \n\n\ud83d\udccf Published: 2023-01-09T10:14:56.823Z\n\ud83d\udccf Modified: 2025-04-09T19:26:54.690Z\n\ud83d\udd17 References:\n1. https://sling.apache.org/news.html", "creation_timestamp": "2025-04-09T19:48:29.000000Z"}, {"uuid": "2d023a2c-f482-4305-b630-d70bc7dba7e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4695", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11161", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4695\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:38:51.348Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/65cc19c12efa392f792f6bb154b4838547e0af5e\n2. https://huntr.dev/bounties/2559d548-b847-40fb-94d6-18c1ad58b789", "creation_timestamp": "2025-04-09T20:48:25.000000Z"}, {"uuid": "4058e00c-7fde-4aeb-8b76-46cc843fdde2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4688", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4688\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Authorization in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:35:24.121Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9\n2. https://huntr.dev/bounties/23856e7e-94ff-4dee-97d0-0cd47e9b8ff6", "creation_timestamp": "2025-04-09T20:48:33.000000Z"}, {"uuid": "2b2e3031-f211-4692-838f-a9ed4a17ae3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4692", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11166", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4692\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:36:04.452Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/c07b4a57caa89905e54b800f4d8fb720bbf5bf82\n2. https://huntr.dev/bounties/9d1ed6ea-f7a0-4561-9325-a2babef99c74", "creation_timestamp": "2025-04-09T20:48:32.000000Z"}, {"uuid": "c2be1a39-5879-4eaf-8c74-bc52b9be6cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4684", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4684\n\ud83d\udd25 CVSS Score: 7.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:33:22.316Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9\n2. https://huntr.dev/bounties/b66f2bdd-8b41-456c-bf65-92302c2e03b5", "creation_timestamp": "2025-04-09T20:48:42.000000Z"}, {"uuid": "132ae010-ff2d-4dcf-b71c-d9454c8ed01b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46490", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11234", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46490\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c.\n\ud83d\udccf Published: 2023-01-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T14:43:51.494Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2327", "creation_timestamp": "2025-04-10T14:50:15.000000Z"}, {"uuid": "d6778331-4610-4156-9a19-662ff5264477", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46489", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11232", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46489\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c.\n\ud83d\udccf Published: 2023-01-05T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T14:44:58.296Z\n\ud83d\udd17 References:\n1. https://github.com/gpac/gpac/issues/2328", "creation_timestamp": "2025-04-10T14:50:09.000000Z"}, {"uuid": "1f59ba63-db18-40aa-be74-64f273611508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4686", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11171", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4686\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:33:55.317Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9\n2. https://huntr.dev/bounties/caa0b22c-501f-44eb-af65-65c315cd1637", "creation_timestamp": "2025-04-09T20:48:40.000000Z"}, {"uuid": "d978f2a1-24d4-4895-981b-9c8144e3ef3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4687", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11170", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4687\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T20:34:36.435Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/dca35bde877aab6e64ef51b52e590b5d48f692f9\n2. https://huntr.dev/bounties/b908377f-a61b-432c-8e6a-c7498da69788", "creation_timestamp": "2025-04-09T20:48:39.000000Z"}, {"uuid": "b0adbb31-acfb-4d99-9a62-31fc52b863db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46309", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11278", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46309\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files.\n\ud83d\udccf Published: 2023-01-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:28:01.107Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6785-86407-1.html", "creation_timestamp": "2025-04-10T16:49:34.000000Z"}, {"uuid": "0ce70e66-c4d6-4502-a53c-3e38941630e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46305", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46305\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files.\n\ud83d\udccf Published: 2023-01-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:29:34.892Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6801-bb704-1.html", "creation_timestamp": "2025-04-10T16:49:29.000000Z"}, {"uuid": "abce142c-0f41-4b7a-991e-9f227316f8bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46304", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11288", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46304\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allows the attacker to execute arbitrary system command to perform arbitrary system operation or disrupt service.\n\ud83d\udccf Published: 2023-01-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T17:46:14.271Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6800-b5cf6-1.html", "creation_timestamp": "2025-04-10T17:49:08.000000Z"}, {"uuid": "79910827-8358-4590-a188-319334055d8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46306", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11277", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46306\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files under arbitrary file path and allows the attacker to perform arbitrary system operation and disrupt of service.\n\ud83d\udccf Published: 2023-01-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:29:15.283Z\n\ud83d\udd17 References:\n1. https://www.twcert.org.tw/tw/cp-132-6802-4341b-1.html", "creation_timestamp": "2025-04-10T16:49:30.000000Z"}, {"uuid": "e75be6a3-016b-462b-b2b7-d7282f6c7180", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46360", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11279", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46360\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Out-of-bounds read vulnerability in V-SFT v6.1.7.0 and earlier and TELLUS v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitrary code by having a user to open a specially crafted image file.\n\ud83d\udccf Published: 2023-01-03T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:24:48.372Z\n\ud83d\udd17 References:\n1. https://monitouch.fujielectric.com/site/download-e/09vsft6_inf/index.php\n2. https://jvn.jp/en/vu/JVNVU90679513/index.html", "creation_timestamp": "2025-04-10T16:49:35.000000Z"}, {"uuid": "34d861c2-c35a-4441-ade7-d0e754ea9b49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46178", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11318", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46178\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.1 allow users to upload a file, but do not validate the file name, which may lead to upload file to any path. The vulnerability has been fixed in v2.5.1. There are no workarounds.\n\ud83d\udccf Published: 2022-12-29T18:09:38.842Z\n\ud83d\udccf Modified: 2025-04-10T19:41:30.356Z\n\ud83d\udd17 References:\n1. https://github.com/metersphere/metersphere/security/advisories/GHSA-9p62-x3c5-hr5p", "creation_timestamp": "2025-04-10T19:49:03.000000Z"}, {"uuid": "df19058c-8f24-4e4d-9ed3-8667f0424e31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46568", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11740", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46568\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the AccountPassword parameter in the SetSysEmailSettings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:38:47.128Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/B1SZP0aIo\n3. https://hackmd.io/%400dayResearch/SetSysEmailSettings", "creation_timestamp": "2025-04-15T03:54:16.000000Z"}, {"uuid": "cfca9d56-9811-423a-8de6-680de4fec5a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46173", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11440", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46173\n\ud83d\udd25 CVSS Score: 7.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L)\n\ud83d\udd39 Description: Elrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between the transaction caches and the processing component. If the above-mentioned transaction was sent with more gas than required, the smart contract result (SCR transaction) that should have returned the leftover gas, would have been wrongly added to a cache that the processing unit did not consider. The node stopped notarizing metachain blocks. The fix was actually to extend the SCR transaction search in all other caches if it wasn't found in the correct (expected) sharded-cache. There are no known workarounds at this time. This issue has been patched in version 1.3.50.\n\n\ud83d\udccf Published: 2022-12-28T06:27:55.036Z\n\ud83d\udccf Modified: 2025-04-11T15:46:02.255Z\n\ud83d\udd17 References:\n1. https://github.com/ElrondNetwork/elrond-go/security/advisories/GHSA-p228-4mrh-ww7r\n2. https://github.com/ElrondNetwork/elrond-go/pull/4718\n3. https://github.com/ElrondNetwork/elrond-go/commit/39d7ddcb08bb34217dab6daef7cd9d287fb8cab3", "creation_timestamp": "2025-04-11T15:50:45.000000Z"}, {"uuid": "17423c5d-79a2-4d44-92b0-415b3a6cd1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46434", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12122", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46434\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T17:48:34.389Z\n\ud83d\udd17 References:\n1. https://www.tp-link.com/us/press/security-advisory/\n2. https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/rJl69Icws", "creation_timestamp": "2025-04-16T17:56:54.000000Z"}, {"uuid": "1a247c33-36fe-4f88-a25d-9fa2684f92a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46580", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11496", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46580\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the user_edit_page parameter in the wifi_captive_portal function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T22:40:50.228Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul6-TEW755-bof-wifi_captive_portal-d2b3d37344564ed4b3948a471d1eeb11", "creation_timestamp": "2025-04-11T22:51:22.000000Z"}, {"uuid": "49e8699f-6512-4504-890a-db4731b17f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46583", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11458", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46583\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:36:14.113Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul2-TEW755-bof-wizard_ipv6-7ed96443609f4640b5f0f3bd6ce23b83", "creation_timestamp": "2025-04-11T16:51:08.000000Z"}, {"uuid": "5ece5676-42ff-4f9f-9f96-52cebfece53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46174", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11441", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46174\n\ud83d\udd25 CVSS Score: 4.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: efs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to receive NFS connections prior to applying the TLS tunnel. In affected versions, concurrent mount operations can allocate the same local port, leading to either failed mount operations or an inappropriate mapping from an EFS customer\u2019s local mount points to that customer\u2019s EFS file systems. This issue is patched in version v1.34.4. There is no recommended work around. We recommend affected users update the installed version of efs-utils to v1.34.4 or later.\n\ud83d\udccf Published: 2022-12-28T06:46:43.859Z\n\ud83d\udccf Modified: 2025-04-11T15:45:05.380Z\n\ud83d\udd17 References:\n1. https://github.com/aws/efs-utils/security/advisories/GHSA-4fv8-w65m-3932\n2. https://github.com/aws/efs-utils/issues/125\n3. https://github.com/aws/efs-utils/commit/f3a8f88167d55caa2f78aeb72d4dc1987a9ed62d", "creation_timestamp": "2025-04-11T15:50:46.000000Z"}, {"uuid": "acc8929d-b512-40ca-b82c-273b204564ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46597", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11461", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46597\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:34:43.979Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul1-TEW755-command-injection-setup_wizard_mydlink-dccea20f75e04110878213126612feba", "creation_timestamp": "2025-04-11T16:51:11.000000Z"}, {"uuid": "415d496f-7d1f-4753-a681-71054a81d76b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46596", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11460", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46596\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the del_num parameter in the icp_delete_img (sub_41DEDC) function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:35:29.702Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul6-TEW755-bof-icp_delete_img-ed2df4b6b4f74520bda8adead2d0d651", "creation_timestamp": "2025-04-11T16:51:10.000000Z"}, {"uuid": "8768b76c-df34-4064-a69e-bd6722932896", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46599", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11465", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46599\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setlogo_num parameter in the icp_setlogo_img (sub_41DBF4) function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:33:07.013Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul5-TEW755-bof-icp_setlogo_img-692484d9166046e481afc08a8f50e757", "creation_timestamp": "2025-04-11T16:51:18.000000Z"}, {"uuid": "6f073ccb-4298-44d1-9024-1888c780b20f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46598", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11463", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46598\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_5g function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:33:55.947Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul3-TEW755-injection-set_sta_enrollee_pin_5g-b903e73d59b940c8a79bf4425dfdf992", "creation_timestamp": "2025-04-11T16:51:16.000000Z"}, {"uuid": "00b7a8db-3b21-4aac-83f0-fb1e835037db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46582", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11498", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46582\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the login_name parameter in the do_graph_auth (sub_4061E0) function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T22:36:51.865Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul1-TEW755-bof-do_graph_auth-06984af9eb224f7fbcd27dbb6d7d2a2d", "creation_timestamp": "2025-04-11T22:51:27.000000Z"}, {"uuid": "b732f90b-d0f9-452e-b7dc-9806d5d411c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46764", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11478", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46764\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.\n\ud83d\udccf Published: 2022-12-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T16:51:08.109Z\n\ud83d\udd17 References:\n1. https://solidlab.ru/our-news/145-trueconf.html\n2. https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46764.txt\n3. https://vuldb.com/?diff.216845", "creation_timestamp": "2025-04-11T17:51:20.000000Z"}, {"uuid": "b9998a99-a9c3-44df-b1c6-96bd9745bc0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46763", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11491", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46763\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.\n\ud83d\udccf Published: 2022-12-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T18:51:14.733Z\n\ud83d\udd17 References:\n1. https://solidlab.ru/our-news/145-trueconf.html\n2. https://github.com/sldlb/public_cve_submissions/blob/main/CVE-2022-46763.txt\n3. https://vuldb.com/?diff.216851", "creation_timestamp": "2025-04-11T19:50:43.000000Z"}, {"uuid": "fc373b8c-e60b-4340-8b9c-5302c75e12a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46581", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46581\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the cameo.cameo.nslookup_target parameter in the tools_nslookup function.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T22:38:22.274Z\n\ud83d\udd17 References:\n1. https://brief-nymphea-813.notion.site/Vul5-TEW755-bof-tools_nslookup-c83bac14fe0f4f729535053459479fd1", "creation_timestamp": "2025-04-11T22:51:26.000000Z"}, {"uuid": "67c6fa7c-f9b9-4a72-a02e-36e2f4cb9935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46563", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11763", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46563\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetDynamicDNSSettings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T04:02:09.340Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/HkDzZLCUo\n3. https://hackmd.io/%400dayResearch/SetDynamicDNSSettings", "creation_timestamp": "2025-04-15T04:54:06.000000Z"}, {"uuid": "48874aea-4b77-4ad7-a2e0-ab8524032111", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46562", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11762", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46562\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the PSK parameter in the SetQuickVPNSettings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T04:03:23.068Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/B1C9jeXDi\n3. https://hackmd.io/%400dayResearch/SetQuickVPNSettings_PSK", "creation_timestamp": "2025-04-15T04:54:05.000000Z"}, {"uuid": "aca6fd00-e558-40e0-ad0f-eddc22c60c64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46561", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46561\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWanSettings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T04:04:46.009Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/ry55QVQvj\n3. https://hackmd.io/%400dayResearch/SetWanSettings_PPPoE\n4. https://hackmd.io/%400dayResearch/SetWanSettings_L2TP\n5. https://hackmd.io/%400dayResearch/SetWanSettings_PPTP", "creation_timestamp": "2025-04-15T04:54:04.000000Z"}, {"uuid": "5e2a350b-b99b-458a-ad75-10c469ec5e54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46179", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11648", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46179\n\ud83d\udd25 CVSS Score: 9.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H)\n\ud83d\udd39 Description: LiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUB_ACTIONS environment variable to anything other than null or true and skip authentication checks. This issue is patched in the latest commit (c658b4f3e57258acf5f6207a90c2f2169698ae22) by requiring the var to be set to true, causing a test script to run instead of being able to login. A potential workaround is to check for the GITHUB_ACTIONS environment variable and set it to \"\" (no quotes) to null the variable and force credential checks.\n\ud83d\udccf Published: 2022-12-28T07:00:37.036Z\n\ud83d\udccf Modified: 2025-04-14T16:20:27.821Z\n\ud83d\udd17 References:\n1. https://github.com/LiuWoodsCode/LiuOS/security/advisories/GHSA-f9x3-mj2r-cqmf\n2. https://github.com/LiuWoodsCode/LiuOS/commit/c658b4f3e57258acf5f6207a90c2f2169698ae22", "creation_timestamp": "2025-04-14T16:53:44.000000Z"}, {"uuid": "b0d40da5-f391-4940-b7c1-7a9470ef1f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46641", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11745", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46641\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindSettings function.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:31:09.801Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetIpMacBindSettings%20Command%20Injection%20Vulnerability.md", "creation_timestamp": "2025-04-15T03:54:23.000000Z"}, {"uuid": "39a4c0d9-5062-4463-9167-45e7d572d1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46492", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46492\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: nbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:49:27.536Z\n\ud83d\udd17 References:\n1. https://github.com/Fanli2012/nbnbk/issues/3", "creation_timestamp": "2025-04-15T04:54:13.000000Z"}, {"uuid": "1481e3a8-7f68-4145-8f90-fbbe170f4d7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46566", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11764", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46566\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetQuickVPNSettings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T04:00:32.669Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/SyhDme7wo\n3. https://hackmd.io/%400dayResearch/SetQuickVPNSettings_Password", "creation_timestamp": "2025-04-15T04:54:07.000000Z"}, {"uuid": "a33249fa-2535-48b9-9b38-c5768d71519f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46569", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11742", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46569\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Key parameter in the SetWLanRadioSecurity module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:35:47.694Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/r1R6sWRUs\n3. https://hackmd.io/%400dayResearch/SetWLanRadioSecurity", "creation_timestamp": "2025-04-15T03:54:17.000000Z"}, {"uuid": "126c8391-13a4-4b4f-a9be-98c0d99639a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46642", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11746", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46642\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:29:08.047Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://github.com/CyberUnicornIoT/IoTvuln/blob/main/d-link/dir-846/D-Link%20dir-846%20SetAutoUpgradeInfo%20command%20injection%20vulnerability.md", "creation_timestamp": "2025-04-15T03:54:24.000000Z"}, {"uuid": "0ae5124a-8dd0-4121-8249-d0bce1a5bd71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46570", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11743", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46570\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan3Settings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T03:34:15.313Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/r1zsTSmDs\n3. https://hackmd.io/%400dayResearch/SetWan3Settings_l2tp\n4. https://hackmd.io/%400dayResearch/SetWan3Settings_pppoe\n5. https://hackmd.io/%400dayResearch/SetWan3Settings_pptp", "creation_timestamp": "2025-04-15T03:54:18.000000Z"}, {"uuid": "006cff0b-d602-4b62-a6b5-688c88b36e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46171", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11750", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46171\n\ud83d\udd25 CVSS Score: 6.8 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)\n\ud83d\udd39 Description: Tauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `?`, and `[...]` match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Scopes without the wildcards are not affected. As `**` allows for sub directories the behavior there is also as expected. The issue has been patched in the latest release and was backported into the currently supported 1.x branches. There are no known workarounds at the time of publication.\n\ud83d\udccf Published: 2022-12-23T13:47:56.494Z\n\ud83d\udccf Modified: 2025-04-15T03:17:21.623Z\n\ud83d\udd17 References:\n1. https://github.com/tauri-apps/tauri/security/advisories/GHSA-6mv3-wm7j-h4w5\n2. https://github.com/tauri-apps/tauri/commit/72389b00d7b495ffd7750eb1e75a3b8537d07cf3\n3. https://github.com/tauri-apps/tauri/commit/f0602e7c294245ab6ef6fbf2a976ef398340ef58", "creation_timestamp": "2025-04-15T03:54:31.000000Z"}, {"uuid": "c30ed17d-241f-4827-a55b-f94402f13479", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46560", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11760", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46560\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module.\n\ud83d\udccf Published: 2022-12-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-15T04:06:04.583Z\n\ud83d\udd17 References:\n1. https://www.dlink.com/en/security-bulletin/\n2. https://hackmd.io/%400dayResearch/rkXr4BQPi\n3. https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe\n4. https://hackmd.io/%400dayResearch/SetWan2Settings_pptp\n5. https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp", "creation_timestamp": "2025-04-15T04:54:03.000000Z"}, {"uuid": "10a4f6d6-94ad-493d-bbd4-5b9aecdf2a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46536", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12150", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46536\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeedUp parameter at /goform/SetClientState.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T19:13:19.684Z\n\ud83d\udd17 References:\n1. https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formSetClientState_limitSpeedUp/formSetClientState_limitSpeedUp.md", "creation_timestamp": "2025-04-16T19:56:38.000000Z"}, {"uuid": "26b6d8b8-afcd-4fec-a781-aa9860ed71a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12153", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46537\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security parameter at /goform/WifiBasicSet.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T19:01:53.590Z\n\ud83d\udd17 References:\n1. https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formWifiBasicSet_security/formWifiBasicSet_security.md", "creation_timestamp": "2025-04-16T19:56:42.000000Z"}, {"uuid": "6ab3169e-439b-419c-a164-bf444de12552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46539", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12131", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46539\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the security_5g parameter at /goform/WifiBasicSet.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T18:42:44.266Z\n\ud83d\udd17 References:\n1. https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/formWifiBasicSet_security%20_5g/formWifiBasicSet_security_5g.md", "creation_timestamp": "2025-04-16T18:56:08.000000Z"}, {"uuid": "25bd60d9-6238-4c75-b1a8-1873f350c754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12041", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46768\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: Arbitrary file read vulnerability exists in Zabbix Web Service Report Generation, which listens on the port 10053. The service does not have proper validation for URL parameters before reading the files.\n\ud83d\udccf Published: 2022-12-19T10:00:14.221Z\n\ud83d\udccf Modified: 2025-04-16T13:50:46.579Z\n\ud83d\udd17 References:\n1. https://support.zabbix.com/browse/ZBX-22087", "creation_timestamp": "2025-04-16T13:55:55.000000Z"}, {"uuid": "e7ba56e6-e26c-4839-86ad-b76d2964374a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46771", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12058", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46771\n\ud83d\udd25 CVSS Score: 4.6 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N)\n\ud83d\udd39 Description: \nIBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 242273.\n\n\n\ud83d\udccf Published: 2022-12-20T19:40:41.039Z\n\ud83d\udccf Modified: 2025-04-16T14:49:50.868Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/6848897\n2. https://exchange.xforce.ibmcloud.com/vulnerabilities/242273", "creation_timestamp": "2025-04-16T14:56:27.000000Z"}, {"uuid": "f6ca9a39-79f1-4f86-b770-6c7cae7fc914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46288", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46288\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Open redirect vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.\n\ud83d\udccf Published: 2022-12-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T14:37:40.692Z\n\ud83d\udd17 References:\n1. https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf\n2. https://jvn.jp/en/jp/JVN96321933/index.html", "creation_timestamp": "2025-04-17T14:58:23.000000Z"}, {"uuid": "aa1d5af0-407d-4529-aa76-ac2916a0ee18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46070", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12082", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46070\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.\n\ud83d\udccf Published: 2024-03-11T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T15:48:41.105Z\n\ud83d\udd17 References:\n1. https://s3.amazonaws.com/geovision_downloads/TechNotice/CyberSecurity/Security_Advistory_ASManager-ASM-2022-11.pdf", "creation_timestamp": "2025-04-16T15:56:10.000000Z"}, {"uuid": "e404f293-788f-47f2-a31e-163fcb6403a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46435", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12126", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46435\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T17:48:02.899Z\n\ud83d\udd17 References:\n1. https://www.tp-link.com/us/press/security-advisory/\n2. https://hackmd.io/%40slASVrz_SrW7NQCsunofeA/SyvnlO9Pi", "creation_timestamp": "2025-04-16T17:57:00.000000Z"}, {"uuid": "e49e9bfb-475c-4e59-8153-da4f2816d41b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46287", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12237", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46287\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Cross-site scripting vulnerability in DENSHI NYUSATSU CORE SYSTEM v6 R4 and earlier allows a remote unauthenticated attacker to inject an arbitrary script.\n\ud83d\udccf Published: 2022-12-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T14:38:56.991Z\n\ud83d\udd17 References:\n1. https://www.cals.jacic.or.jp/coreconso/pdf/coreconsoinfo20221215.pdf\n2. https://jvn.jp/en/jp/JVN96321933/index.html", "creation_timestamp": "2025-04-17T14:58:21.000000Z"}, {"uuid": "ca89a5f9-5edd-475b-80b6-8fc4d7860284", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46670", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46670\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L)\n\ud83d\udd39 Description: \nRockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute\u00a0of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. \u00a0The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website. \n\n\n\ud83d\udccf Published: 2022-12-16T20:12:22.414Z\n\ud83d\udccf Modified: 2025-04-17T14:35:29.173Z\n\ud83d\udd17 References:\n1. https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1137679", "creation_timestamp": "2025-04-17T14:58:26.000000Z"}, {"uuid": "5b23e567-cbc4-4ff6-b6da-8c10ce73c959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46399", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12240", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46399\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.\n\ud83d\udccf Published: 2022-12-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T14:36:42.589Z\n\ud83d\udd17 References:\n1. https://www.computer.org/csdl/proceedings/sp/2023/1He7WWuJExG\n2. https://www.computer.org/csdl/proceedings-article/sp/2023/933600a521/1He7Yja1AYM\n3. https://microchip.com\n4. https://www.microchip.com/en-us/products/wireless-connectivity/software-vulnerability-response/deviating-behaviors-in-bluetooth-le", "creation_timestamp": "2025-04-17T14:58:24.000000Z"}, {"uuid": "e4eae066-e411-4fb6-92ac-c6913f421484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46541", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12134", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46541\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the ssid parameter at /goform/fast_setting_wifi_set.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T18:35:28.885Z\n\ud83d\udd17 References:\n1. https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/form_fast_setting_wifi_set/form_fast_setting_wifi_set.md", "creation_timestamp": "2025-04-16T18:56:13.000000Z"}, {"uuid": "4d89d45f-3309-4700-8b3b-08aca99a556c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46540", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12132", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46540\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-16T18:36:50.338Z\n\ud83d\udd17 References:\n1. https://github.com/Double-q1015/CVE-vulns/blob/main/tenda_f1203/fromAddressNat_entrys/fromAddressNat_entrys.md", "creation_timestamp": "2025-04-16T18:56:09.000000Z"}, {"uuid": "fe3eb853-999d-4855-8718-125070dea3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46311", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46311\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The contacts component has a free (undefined) provider vulnerability. Successful exploitation of this vulnerability may affect data integrity.\n\ud83d\udccf Published: 2022-12-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T14:51:46.896Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397", "creation_timestamp": "2025-04-17T14:58:13.000000Z"}, {"uuid": "83c6978e-160e-4528-979a-99966874a376", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46109", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46109\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.\n\ud83d\udccf Published: 2022-12-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:48:32.235Z\n\ud83d\udd17 References:\n1. https://github.com/z1r00/IOT_Vul/tree/main/Tenda/AC10/formSetClientState", "creation_timestamp": "2025-04-17T17:57:23.000000Z"}, {"uuid": "32d16061-0f27-427c-8f4e-9756348138bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46137", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12299", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46137\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.\n\ud83d\udccf Published: 2022-12-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:35:30.997Z\n\ud83d\udd17 References:\n1. https://github.com/MegaTKC/AeroCMS/issues/7", "creation_timestamp": "2025-04-17T17:57:31.000000Z"}, {"uuid": "2366a9f5-a99d-4a1d-975e-2f387a89ac18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46135", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12298", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46135\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.\n\ud83d\udccf Published: 2022-12-16T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-17T17:36:20.855Z\n\ud83d\udd17 References:\n1. https://github.com/MegaTKC/AeroCMS/issues/5", "creation_timestamp": "2025-04-17T17:57:30.000000Z"}, {"uuid": "b0cfb6ac-1747-4df9-a97f-872b17a875e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46903", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12943", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46903\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Insufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS.\n\ud83d\udccf Published: 2022-12-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T18:41:47.445Z\n\ud83d\udd17 References:\n1. https://news.websoft.ru/_wt/wiki_base/7175851369410989446", "creation_timestamp": "2025-04-22T19:03:35.000000Z"}, {"uuid": "849e3fc1-4310-4528-b211-daaf73f6edfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46701", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12521", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46701\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-18T18:49:22.215Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213535\n2. https://support.apple.com/en-us/HT213532\n3. https://support.apple.com/en-us/HT213530\n4. http://seclists.org/fulldisclosure/2022/Dec/20\n5. http://seclists.org/fulldisclosure/2022/Dec/23\n6. http://seclists.org/fulldisclosure/2022/Dec/26", "creation_timestamp": "2025-04-18T18:58:41.000000Z"}, {"uuid": "ee2a0de1-9316-4d87-a957-b44d93a920c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46392", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12679", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46392\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T14:33:40.703Z\n\ud83d\udd17 References:\n1. https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0\n2. https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BR7ZCVKLPGCOEEALUHZMFHXQHR6S4QL/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XMKJ5IMJEPXYAHHU56Z4P2FSYIEAESB/", "creation_timestamp": "2025-04-21T15:03:04.000000Z"}, {"uuid": "2dc908f2-2272-49da-9c1d-e9116f2ab759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46691", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12682", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46691\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T14:29:07.611Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213535\n2. https://support.apple.com/en-us/HT213532\n3. https://support.apple.com/en-us/HT213530\n4. https://support.apple.com/en-us/HT213531\n5. https://support.apple.com/en-us/HT213536\n6. https://support.apple.com/en-us/HT213537\n7. http://seclists.org/fulldisclosure/2022/Dec/20\n8. http://seclists.org/fulldisclosure/2022/Dec/21\n9. http://seclists.org/fulldisclosure/2022/Dec/23\n10. http://seclists.org/fulldisclosure/2022/Dec/26\n11. http://seclists.org/fulldisclosure/2022/Dec/28\n12. http://seclists.org/fulldisclosure/2022/Dec/27\n13. https://security.gentoo.org/glsa/202305-32", "creation_timestamp": "2025-04-21T15:03:07.000000Z"}, {"uuid": "696c289c-5305-42b2-b3ae-375c471319ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46631", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12694", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46631\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiSignalCfg function.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T15:29:12.590Z\n\ud83d\udd17 References:\n1. https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/6", "creation_timestamp": "2025-04-21T16:03:02.000000Z"}, {"uuid": "cf1c9c27-369c-4bc5-b137-5fc8efb4c384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46122", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12853", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46122\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/view_category.php?id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:38:57.071Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-6.md", "creation_timestamp": "2025-04-22T14:03:46.000000Z"}, {"uuid": "b2e9b524-0fe6-47df-9090-835d3d6fbd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46121", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12852", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46121\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:39:49.177Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-5.md", "creation_timestamp": "2025-04-22T14:03:45.000000Z"}, {"uuid": "a33292b1-fb6e-422a-843c-312b2be9a75d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46634", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12695", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46634\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T15:27:51.101Z\n\ud83d\udd17 References:\n1. https://github.com/EPhaha/IOT_vuln/tree/main/TOTOLink/A7100RU/7", "creation_timestamp": "2025-04-21T16:03:03.000000Z"}, {"uuid": "b52667ed-cfd2-4272-b1b9-a66e60be69bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12698", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46689\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T15:21:15.921Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213535\n2. https://support.apple.com/en-us/HT213532\n3. https://support.apple.com/en-us/HT213530\n4. https://support.apple.com/en-us/HT213531\n5. https://support.apple.com/en-us/HT213536\n6. https://support.apple.com/en-us/HT213534\n7. https://support.apple.com/en-us/HT213533\n8. http://seclists.org/fulldisclosure/2022/Dec/20\n9. http://seclists.org/fulldisclosure/2022/Dec/21\n10. http://seclists.org/fulldisclosure/2022/Dec/25\n11. http://seclists.org/fulldisclosure/2022/Dec/23\n12. http://seclists.org/fulldisclosure/2022/Dec/26\n13. http://seclists.org/fulldisclosure/2022/Dec/24\n14. http://seclists.org/fulldisclosure/2022/Dec/27", "creation_timestamp": "2025-04-21T16:03:06.000000Z"}, {"uuid": "b9aaa2e0-82f1-4273-b146-d34db8824c96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46123", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12748", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:30:24.907Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-7.md", "creation_timestamp": "2025-04-21T20:03:19.000000Z"}, {"uuid": "42ca2d92-b967-443b-9cfa-a2bfcb948685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46124", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12749", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46124\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:29:07.682Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-9.md", "creation_timestamp": "2025-04-21T20:03:20.000000Z"}, {"uuid": "4597f693-0780-4b75-ba13-54d81526ddc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46125", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:17:23.106Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-10.md", "creation_timestamp": "2025-04-21T20:03:26.000000Z"}, {"uuid": "a21bf8f8-91e3-463d-9215-1045935d2701", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46997", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12759", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46997\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:06:22.604Z\n\ud83d\udd17 References:\n1. https://mirrors.neusoft.edu.cn/pypi/web/simple/request/\n2. https://github.com/Viralmaniar/Passhunt/\n3. https://github.com/Viralmaniar/Passhunt/issues/14", "creation_timestamp": "2025-04-21T20:03:33.000000Z"}, {"uuid": "cfdfbadc-b641-4a98-97a2-6452779f9ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46996", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12758", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46996\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:08:05.279Z\n\ud83d\udd17 References:\n1. https://mirrors.neusoft.edu.cn/pypi/web/simple/request/\n2. https://github.com/SHenry07/vSphere_selfuse/\n3. https://github.com/SHenry07/vSphere_selfuse/issues/39", "creation_timestamp": "2025-04-21T20:03:32.000000Z"}, {"uuid": "00ed9394-06eb-4d51-8a40-722e91733445", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46126", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12757", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46126\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T19:09:02.594Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-8.md", "creation_timestamp": "2025-04-21T20:03:32.000000Z"}, {"uuid": "8947abb3-2c39-4b79-85a0-c38ac89dc99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46062", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12801", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46062\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Gym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).\n\ud83d\udccf Published: 2022-12-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T03:06:43.607Z\n\ud83d\udd17 References:\n1. https://github.com/rdyx0/CVE/blob/master/Gym%20Management%20System/CSRF/delete_user/delete_user.md", "creation_timestamp": "2025-04-22T04:03:27.000000Z"}, {"uuid": "e0a6c39d-6bf0-44e5-ba7f-66db8ffbc973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46061", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12800", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46061\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AeroCMS v0.0.1 is vulnerable to ClickJacking.\n\ud83d\udccf Published: 2022-12-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T03:08:29.708Z\n\ud83d\udd17 References:\n1. https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-ClickJacking/registration_ClickJacking/registration_ClickJacking.md", "creation_timestamp": "2025-04-22T04:03:26.000000Z"}, {"uuid": "08ec5904-f513-49ce-a15d-79c5de6e2a6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46051", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46051\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.\n\ud83d\udccf Published: 2022-12-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T14:49:38.547Z\n\ud83d\udd17 References:\n1. https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/view_all_comments_update/view_all_comments_update.MD", "creation_timestamp": "2025-04-22T15:03:39.000000Z"}, {"uuid": "638414da-0684-4a62-b9cc-827e18d03a23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12778", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46364\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A SSRF vulnerability in parsing the\u00a0href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.\u00a0\n\ud83d\udccf Published: 2022-12-13T16:20:26.765Z\n\ud83d\udccf Modified: 2025-04-22T02:48:36.211Z\n\ud83d\udd17 References:\n1. https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1&modificationDate=1670944472739&api=v2", "creation_timestamp": "2025-04-22T03:02:36.000000Z"}, {"uuid": "5c1558ee-402b-4405-9ce6-eb8a9783f2f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46073", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46073\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T02:28:44.397Z\n\ud83d\udd17 References:\n1. https://www.youtube.com/watch?v=jT09Uiwl0Jo&ab_channel=IkariShinji\n2. https://yuyudhn.github.io/CVE-2022-46073/", "creation_timestamp": "2025-04-22T03:02:44.000000Z"}, {"uuid": "376297cf-a5b9-4ec6-af01-c042f24a1898", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46072", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12784", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46072\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T02:31:46.663Z\n\ud83d\udd17 References:\n1. https://www.youtube.com/watch?v=jBAVUSzBL_M&ab_channel=IkariShinji\n2. https://yuyudhn.github.io/CVE-2022-46072/", "creation_timestamp": "2025-04-22T03:02:43.000000Z"}, {"uuid": "fc7b07de-cea6-4632-b7ad-315e8a446909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46071", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12783", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46071\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T02:33:46.146Z\n\ud83d\udd17 References:\n1. https://www.youtube.com/watch?v=5wit1Arzwxs&feature=youtu.be\n2. https://yuyudhn.github.io/CVE-2022-46071/", "creation_timestamp": "2025-04-22T03:02:42.000000Z"}, {"uuid": "e7c3f0cf-cca7-4f7e-b6fe-f12d4685230b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46117", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46117\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T02:24:42.489Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-1.md", "creation_timestamp": "2025-04-22T03:02:49.000000Z"}, {"uuid": "95f6b208-79d6-4d1e-8078-8de5b7a68a98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46074", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12786", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46074\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T02:26:16.578Z\n\ud83d\udd17 References:\n1. https://www.youtube.com/watch?v=5Q3vyTo02bc&ab_channel=IkariShinji\n2. https://yuyudhn.github.io/CVE-2022-46074/", "creation_timestamp": "2025-04-22T03:02:45.000000Z"}, {"uuid": "b398432f-806e-4254-bcf3-fb73d882849c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12851", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:40:52.889Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-4.md", "creation_timestamp": "2025-04-22T14:03:44.000000Z"}, {"uuid": "d5296fc9-ff9e-4025-b78a-10c0d4bf4c94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46119", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12850", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46119\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:41:28.441Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-3.md", "creation_timestamp": "2025-04-22T14:03:43.000000Z"}, {"uuid": "1a9ba111-b249-4faa-9b78-0d8be6041176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46118", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12846", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46118\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=product_per_brand&bid=.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T13:51:41.876Z\n\ud83d\udd17 References:\n1. https://github.com/HMHYHM/bug_report/blob/main/vendors/oretnom23/helmet-store-showroom-site/SQLi-2.md", "creation_timestamp": "2025-04-22T14:03:36.000000Z"}, {"uuid": "b66cbf55-0d10-4767-b53d-39fdcf24169a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46047", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12857", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46047\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.\n\ud83d\udccf Published: 2022-12-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T14:55:18.647Z\n\ud83d\udd17 References:\n1. https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-SQLi/categories_delete_sql_injection/categories_delete_sql_injection.md", "creation_timestamp": "2025-04-22T15:03:33.000000Z"}, {"uuid": "9085db97-a5f6-469a-987f-6f9e4b72b57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46058", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12869", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46058\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.\n\ud83d\udccf Published: 2022-12-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T14:45:15.154Z\n\ud83d\udd17 References:\n1. https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-XSS/add_post_post_content/add_post_post_content.md", "creation_timestamp": "2025-04-22T15:03:50.000000Z"}, {"uuid": "04d4ec14-e68f-4570-bdf7-54f3e0f0810c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46152", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12885", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46152\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The commands `OPTEE_MSG_CMD_OPEN_SESSION` and `OPTEE_MSG_CMD_INVOKE_COMMAND` can be executed from the normal world via an OP-TEE SMC. This function is not validating the `num_params` argument, which is only limited to `OPTEE_MSG_MAX_NUM_PARAMS` (127) in the function `get_cmd_buffer()`. Therefore, an attacker in the normal world can craft an SMC call that will cause out-of-bounds reading in `cleanup_shm_refs` and potentially freeing of fake-objects in the function `mobj_put()`. A normal-world attacker with permission to execute SMC instructions may exploit this flaw. Maintainers believe this problem permits local privilege escalation from the normal world to the secure world. Version 3.19.0 contains a fix for this issue. There are no known workarounds.\n\ud83d\udccf Published: 2022-11-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T15:59:11.617Z\n\ud83d\udd17 References:\n1. https://github.com/OP-TEE/optee_os/security/advisories/GHSA-65w8-6mrg-52g7\n2. https://github.com/OP-TEE/optee_os/commit/728616b28df659cf0bdde6e58a471f6ef25d023c\n3. https://github.com/OP-TEE/optee_os/blob/c2d449482de098f1c894b94f338440e5a327813d/core/tee/entry_std.c#L257\n4. https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:X/RC:X/CR:M/IR:M/AR:M/MAV:L/MAC:L/MPR:H/MUI:N/MS:C/MC:H/MI:H/MA:H&version=3.1", "creation_timestamp": "2025-04-22T16:03:29.000000Z"}, {"uuid": "54556241-fe86-415f-895c-da71d257ca4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46059", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12874", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46059\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: AeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).\n\ud83d\udccf Published: 2022-12-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T14:41:40.154Z\n\ud83d\udd17 References:\n1. https://github.com/rdyx0/CVE/blob/master/AeroCMS/AeroCMS-v0.0.1-CSRF/add_user_csrf/add_user_csrf.md", "creation_timestamp": "2025-04-22T15:03:58.000000Z"}, {"uuid": "1f24c5e1-5ee0-4ca5-b4c3-0535906a5b9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46147", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12883", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46147\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Drag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contains a patch for this issue. There are no known workarounds.\n\ud83d\udccf Published: 2022-11-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T15:59:21.749Z\n\ud83d\udd17 References:\n1. https://github.com/openedx/xblock-drag-and-drop-v2/security/advisories/GHSA-qv6c-367r-3w6q\n2. https://github.com/openedx/xblock-drag-and-drop-v2/pull/295#issuecomment-1277693864\n3. https://github.com/openedx/xblock-drag-and-drop-v2/commit/68887d1b4a44325d2de7573d450e41129ba98b1a\n4. https://github.com/openedx/xblock-drag-and-drop-v2/releases/tag/v3.0.0", "creation_timestamp": "2025-04-22T16:03:24.000000Z"}, {"uuid": "49b8a064-c00e-4188-8a12-796aeaf470cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46161", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12888", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46161\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: pdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code. There are no known fixes for this issue. Users are advised to restrict access to trusted user input.\n\ud83d\udccf Published: 2022-12-06T18:47:00.669Z\n\ud83d\udccf Modified: 2025-04-22T15:58:39.616Z\n\ud83d\udd17 References:\n1. https://securitylab.github.com/advisories/GHSL-2022-068_pdfmake/\n2. https://github.com/bpampuch/pdfmake/blob/802813970ac6de68a0bd0931b74150b33da0dd18/dev-playground/server.js#L32", "creation_timestamp": "2025-04-22T16:03:31.000000Z"}, {"uuid": "71dfcff5-8e9d-47e3-9b2a-eb94e8e30ec6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46162", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12887", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46162\n\ud83d\udd25 CVSS Score: 8.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: discourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin installed and enabled. This issue is patched in commit 91478f5. As a workaround, ensure that the Content Security Policy is enabled and monitor any posts that contain bbcode.\n\ud83d\udccf Published: 2022-11-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T15:58:52.978Z\n\ud83d\udd17 References:\n1. https://github.com/discourse/discourse-bbcode/security/advisories/GHSA-8c87-xpqv-c7mp\n2. https://github.com/discourse/discourse-bbcode/commit/91478f5cfecdcc43cf85b997168a8ecfd0f8df90", "creation_timestamp": "2025-04-22T16:03:30.000000Z"}, {"uuid": "c4c62a02-37a0-4946-9738-c27683d4b57d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46255", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12893", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46255\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. A check was added within Pages to ensure the working directory is clean before unpacking new content to prevent an arbitrary file overwrite bug. This vulnerability affected only version 3.7.0 of GitHub Enterprise Server and was fixed in version 3.7.1. This vulnerability was reported via the GitHub Bug Bounty program.\n\ud83d\udccf Published: 2022-12-14T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-22T15:58:08.645Z\n\ud83d\udd17 References:\n1. https://docs.github.com/en/enterprise-server%403.7/admin/release-notes#3.7.1", "creation_timestamp": "2025-04-22T16:03:39.000000Z"}, {"uuid": "68bf0955-5f26-4e02-9a98-7bbffdf77ab3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12996", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46742\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H)\n\ud83d\udd39 Description: Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.\n\n\ud83d\udccf Published: 2022-12-07T08:16:09.365Z\n\ud83d\udccf Modified: 2025-04-22T21:00:54.778Z\n\ud83d\udd17 References:\n1. https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-002.md", "creation_timestamp": "2025-04-22T22:04:04.000000Z"}, {"uuid": "e452e577-6e4e-4d4f-90f9-57755f551a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46741", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12974", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46741\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)\n\ud83d\udd39 Description: Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.\u00a0\n\ud83d\udccf Published: 2022-12-07T07:41:04.470Z\n\ud83d\udccf Modified: 2025-04-22T20:59:04.875Z\n\ud83d\udd17 References:\n1. https://github.com/PaddlePaddle/Paddle/blob/develop/security/advisory/pdsa-2022-001.md", "creation_timestamp": "2025-04-22T21:04:12.000000Z"}, {"uuid": "de39fc4b-4560-45e9-be77-d14a08f1d599", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46908", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14909", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46908\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQLite through 3.40.0, when relying on --safe for execution of an untrusted CLI script, does not properly implement the azProhibitedFunctions protection mechanism, and instead allows UDF functions such as WRITEFILE.\n\ud83d\udccf Published: 2022-12-12T00:00:00.000Z\n\ud83d\udccf Modified: 2025-05-05T16:11:57.403Z\n\ud83d\udd17 References:\n1. https://news.ycombinator.com/item?id=33948588\n2. https://sqlite.org/forum/forumpost/07beac8056151b2f\n3. https://sqlite.org/src/info/cefc032473ac5ad2\n4. https://security.netapp.com/advisory/ntap-20230203-0005/\n5. https://security.gentoo.org/glsa/202311-03", "creation_timestamp": "2025-05-05T16:20:01.000000Z"}, {"uuid": "ae0faed1-4a67-43b1-a36f-fef5ee35941e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46649", "type": "published-proof-of-concept", "source": "Telegram/SSrtCgayPsdQ7ACWmFUcbOILSUKUuiqUzt1lTM83ZC8nccs", "content": "", "creation_timestamp": "2026-04-25T09:00:05.000000Z"}, {"uuid": "c23a521e-aaf1-4301-b83c-cbe3dc256d53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46721", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18633", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46721\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13. An app may be able to execute arbitrary code with kernel privileges.\n\ud83d\udccf Published: 2024-01-10T22:03:33.924Z\n\ud83d\udccf Modified: 2025-06-17T17:22:49.537Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213488", "creation_timestamp": "2025-06-17T17:42:13.000000Z"}, {"uuid": "d92dc428-db8f-41ac-85ed-fd214a7b5847", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46710", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18981", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46710\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1. Location data may be shared via iCloud links even if Location metadata is disabled via the Share Sheet.\n\ud83d\udccf Published: 2024-01-10T22:03:37.235Z\n\ud83d\udccf Modified: 2025-06-20T15:32:34.297Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/HT213532\n2. https://support.apple.com/en-us/HT213530", "creation_timestamp": "2025-06-20T15:44:20.000000Z"}, {"uuid": "355b34e3-b911-415d-88a6-2741452d4e8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46393", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12680", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46393\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and MBEDTLS_SSL_CID_IN_LEN_MAX > 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.\n\ud83d\udccf Published: 2022-12-15T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-21T14:31:49.155Z\n\ud83d\udd17 References:\n1. https://mbed-tls.readthedocs.io/en/latest/tech-updates/security-advisories/\n2. https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0\n3. https://github.com/Mbed-TLS/mbedtls/releases/tag/v2.28.2\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BR7ZCVKLPGCOEEALUHZMFHXQHR6S4QL/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6XMKJ5IMJEPXYAHHU56Z4P2FSYIEAESB/", "creation_timestamp": "2025-04-21T15:03:05.000000Z"}, {"uuid": "9e5b9d1a-eb13-4256-a74b-0661b87978d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46828", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12950", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-46828\n\ud83d\udd25 CVSS Score: 5.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: In JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.\n\ud83d\udccf Published: 2022-12-08T17:37:59.846Z\n\ud83d\udccf Modified: 2025-04-22T18:33:56.630Z\n\ud83d\udd17 References:\n1. https://www.jetbrains.com/privacy-security/issues-fixed/", "creation_timestamp": "2025-04-22T19:03:46.000000Z"}, {"uuid": "7211f530-77ea-40d4-850d-f9159e1a8ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46480", "type": "seen", "source": "https://t.me/Master_X_Cha/6123", "content": "CVE-2022-46480 \u2705\n\n\u2714\ufe0f \u0646\u0648\u0639\u0647\u0627: \u0627\u0644\u062b\u063a\u0631\u0629 \u062f\u064a \u0645\u0646 \u0646\u0648\u0639 \u062a\u062c\u0627\u0648\u0632 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u0647\u0648\u064a\u0629 (Authentication Bypass) \u0628\u062d\u064a\u062b \u062a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0641\u062a\u062d \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0630\u0643\u064a \u0628\u062f\u0648\u0646 \u0627\u0644\u062d\u0627\u062c\u0629 \u0644\u0627\u062f\u062e\u0627\u0644 \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0635\u062d\u064a\u062d\u0629\n\n\u2714\ufe0f \u0627\u0644\u0646\u0638\u0627\u0645 \u0627\u0644\u0644\u0649 \u0645\u062a\u0627\u062b\u0631:\n\u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u062a\u0627\u062b\u0631 \u0639\u0644\u0649 \u0627\u062c\u0647\u0632\u0629 Ultraloq UL3 BT Smart Lock\n\n\u2714\ufe0f \u062a\u0635\u0646\u064a\u0641 \u0627\u0644\u062e\u0637\u0648\u0631\u0629:\n\u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u062a\u0635\u0646\u0641\u062a \u0639\u0644\u0649 \u0627\u0646\u0647\u0627 \"\u0645\u0634\u0643\u0644\u0629 \u062d\u0631\u062c\u0629\" \u0644\u0627\u0646\u0647\u0627 \u0628\u062a\u062f\u064a \u0641\u0631\u0635\u0629 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0644\u0644\u0648\u0635\u0648\u0644 \u063a\u064a\u0631 \u0627\u0644\u0645\u0635\u0631\u062d \u0628\u064a\u0647 \u0648\u0627\u0644\u062a\u062d\u0643\u0645 \u0641\u064a \u0627\u0644\u062c\u0647\u0627\u0632 \u0627\u0644\u0630\u0643\u064a\n\n\u2714\ufe0f \u0645\u062e\u0627\u0637\u0631\u0647\u0627:\n\u0645\u0645\u0643\u0646 \u064a\u062a\u0645 \u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u0627\u0644\u062b\u063a\u0631\u0629 \u0645\u0646 \u062c\u0647\u0627\u062a \u063a\u064a\u0631 \u0645\u0633\u0645\u0648\u062d \u0644\u064a\u0647\u0627 \u0644\u0644\u0648\u0635\u0648\u0644 \u0644\u0644\u062c\u0647\u0627\u0632 \u0628\u062f\u0648\u0646 \u0627\u0630\u0646 \u0648\u062f\u0647 \u0628\u064a\u0647\u062f\u062f \u0633\u0644\u0627\u0645\u0629 \u0627\u0644\u0646\u0627\u0633 \u0648\u0645\u0645\u062a\u0644\u0643\u0627\u062a\u0647\u0645\n\n\u26a1\ufe0f \u0637\u064a\u0628 \u0647\u0644 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0627\u062a\u062d\u0644\u062a\u061f\n\u0644\u0633\u0647 \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u0645\u062a\u062d\u0644\u062a\u0634 \u0631\u0633\u0645\u064a \u0648\u0627\u0644\u062c\u0647\u0627\u062a \u0627\u0644\u0645\u062e\u062a\u0635\u0629 \u0634\u063a\u0627\u0644\u0629 \u0639\u0644\u0649 \u0627\u0635\u062f\u0627\u0631 \u062a\u062d\u062f\u064a\u062b \u0627\u0645\u0646\u064a \u0642\u0631\u064a\u0628\n\n\u26a1\ufe0f \u0633\u0639\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0627\u0644\u062d\u0627\u0644\u064a\u061f\n\u0633\u0639\u0631\u0647\u0627 \u062d\u0627\u0644\u064a\u0627 \u0628\u064a\u0646 3k$ \u0644 8k$", "creation_timestamp": "2025-04-24T05:53:52.000000Z"}, {"uuid": "12eccfb5-d4d6-4a15-90df-682ec3553700", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4652", "type": "seen", "source": "Telegram/58yrJTI6Jn5zPdz8ILZamGuzzueg6eO6XIDmzAz2OjEjKaic", "content": "", "creation_timestamp": "2025-03-02T11:44:20.000000Z"}, {"uuid": "7b279b2a-3548-48f9-9bd7-9f52c02843ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/habr_com_news/13888", "content": "\u041f\u0440\u043e\u0444\u0438\u043b\u044c\u043d\u044b\u0435 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0445\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0447\u0430\u043b\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-46169 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0435\u0442\u0438 Cacti.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c", "creation_timestamp": "2023-01-16T14:11:31.000000Z"}, {"uuid": "85b814b3-a29a-49d3-881c-b63480343e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46740", "type": "published-proof-of-concept", "source": "https://t.me/ETHICALHACKERSCOMMUNITY2/2706", "content": "STEP2: Pick the attack module you wish      1) Frames detected at the moment of connectivity disruption, one-by-one\n    2) Sequence of frames till the moment a disruption was detected (BETA)\n  STEP3: The first mode of DoS802.11, tests all the frames that the fuzzer detected up to that moment. It is a second hand filtering to separate the true positive from the false positive frames. In case  a frame is positive, i.e., causes a DoS to the associated STA, an exploit is being produced automatically.\n  STEP4: DoS802.11 exits when the log files have been considered.  **The rest to modules are currently in BETA mode.  Vulnerabilities  So far, the fuzzer managed to identify the following CVE IDs, by exploiting different Management frames:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2022-32654 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32654)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32655 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32655)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32656 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32656)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32657 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32657)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32658)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32659)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986/mt8518s/mt8532  Both  Published  6.7 (Medium)      CVE-2022-46740 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46740)  WS7100-20  Both  Published  6.5 (Medium)      We would like also to thank the MediaTek and Huawei security teams, for acknowledging and fixing these security issues, as stated in the following two security advisories: MediaTek (https://corp.mediatek.com/product-security-acknowledgements) and Huawei (https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-dosvihswr-8f632df1-en).  Moreover, by following the methodology of the work titled \"How is your Wi-Fi connection today? DoS attacks on WPA3-SAE\" (https://www.sciencedirect.com/science/article/pii/S221421262100243X), the fuzzer can identify the same SAE vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) which are linked to the below CVE IDs:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2021-37910 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37910)  All ASUS RX-based models  WPA3-SAE  Published  5.3 (medium)      CVE-2021-40288 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40288)  AX10v1  WPA3-SAE  Published  7.5 (high)      CVE-2021-41753 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41753)  DIR-x1560/DIR-X6060  WPA3-SAE  Published  7.5 (high)      CVE-2021-41788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41788)  mt7603E/mt7612/mt7613\nmt7615/mt7622/mt7628", "creation_timestamp": "2023-07-10T13:19:09.000000Z"}, {"uuid": "74ae13d6-598c-4ca7-a196-ceb55bb728f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/TopCyberTechNews/237", "content": "Top Security News for 15/01/2023\n\ne-Discovery Law and Lawyers in Fifty Years\nhttps://malware.news/t/e-discovery-law-and-lawyers-in-fifty-years/66406#post_1 \n\njust got infected with vipersoftx and i dont know how\nhttps://www.reddit.com/r/Malware/comments/10bo8sn/just_got_infected_with_vipersoftx_and_i_dont_know/ \n\nsanta-linux: a proof of concept binary authorization system for linux, based on Google's Santa\nhttps://www.reddit.com/r/netsec/comments/10bt2e1/santalinux_a_proof_of_concept_binary/ \n\nMysql SOUNDEX function in Symfony with Doctrine\nhttps://malware.news/t/mysql-soundex-function-in-symfony-with-doctrine/66405#post_1 \n\nAnalysis of FG-IR-22-398 \u2013 FortiOS - heap-based buffer overflow in SSLVPNd\nhttps://www.reddit.com/r/netsec/comments/10bzr8n/analysis_of_fgir22398_fortios_heapbased_buffer/ \n\nImpact of the CircleCI Security Incident on the Datadog Agent\nhttps://www.reddit.com/r/netsec/comments/10bvjm4/impact_of_the_circleci_security_incident_on_the/ \n\nMost internet-exposed Cacti servers exposed to hacking\nhttps://securityaffairs.com/140797/hacking/cacti-servers-cve-2022-46169-flaw.html \n\nIs it possible to hack iCloud info for missing person (last known location of phone)\nhttps://www.reddit.com/r/netsec/comments/10c5ps9/is_it_possible_to_hack_icloud_info_for_missing/ \n\nCacti Servers Under Attack as Majority Fail to Patch Critical Vulnerability\nhttps://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html \n\nFrench CNIL fined Tiktok $5.4 Million for violating cookie laws\nhttps://securityaffairs.com/140786/digital-id/cnil-fined-tiktok.html \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-01-15T08:00:04.000000Z"}, {"uuid": "998a0a60-ef36-407c-9823-f803772897e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "Telegram/VU7cdEj350As5nbBSxMaQrMuipi7XUOYnpvGVqbkeYiQTAI", "content": "", "creation_timestamp": "2025-07-24T15:00:06.000000Z"}, {"uuid": "4ee5a63c-13fe-4d36-8c97-c8ecd42fec28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "Telegram/G-kx-DTDWfPOp5cJepg92j2e9E9yyQ0k9SVYaxiupb8kGRk", "content": "", "creation_timestamp": "2025-07-13T15:00:06.000000Z"}, {"uuid": "dfb4413f-fbf3-4906-8351-2cb0f283f9aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3633", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aProof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.\nURL\uff1ahttps://github.com/zhuowei/WDBFontOverwrite\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-12-26T07:20:21.000000Z"}, {"uuid": "8df79d44-b2a2-45f5-a8ec-550a972a9251", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "Telegram/iaypP0jcxCggB5kzmtFDBtLTsZJqutclSXLyB4_2SxNpZA", "content": "", "creation_timestamp": "2023-01-19T00:11:25.000000Z"}, {"uuid": "02ef1b05-5a11-468d-a47b-0fb25cb361ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "Telegram/0NZCYVlx7ylV75kO7UU3TIiJIkgGwrPNwLxvKLb7GodpuQ", "content": "", "creation_timestamp": "2023-01-19T00:11:07.000000Z"}, {"uuid": "8beeb886-caa7-4559-ab93-b77eb693bf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46871", "type": "seen", "source": "https://t.me/kasperskyb2b/705", "content": "\ud83d\udc40 Asus patch monday\n\n\u0412\u0447\u0435\u0440\u0430 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u043a\u0443\u043c\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f 19 \u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0438\u0433\u0440\u043e\u0432\u044b\u0435 \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0438 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0434\u043b\u044f mesh Wi-Fi. \u0412\u0441\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e 17 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 \u0431\u0435\u0437 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f \u043f\u043b\u044e\u0441 9 \u0441 \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c\u0438 CVE: CVE-2023-28702 (CVSS 8.8), CVE-2023-28703 (CVSS 7.2), CVE-2023-31195, CVE-2022-46871 (CVSS 8.8), CVE-2022-38105, CVE-2022-35401 (CVSS 8.1), CVE-2018-1160 (2018! \u0438 CVSS 9.8), CVE-2022-38393, CVE-2022-26376.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0430\u043c\u044b\u0435 \u0440\u0430\u0437\u043d\u043e\u043e\u0431\u0440\u0430\u0437\u043d\u044b\u0435, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043c\u0430\u0441\u0441\u0443 RCE \u0438 DoS.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443, Asus \u0440\u0430\u0441\u0448\u0435\u0432\u0435\u043b\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0440\u044f\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u043e \u0431\u044b\u0441\u0442\u0440\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f, \u0430 \u0442\u0435\u043c, \u043a\u0442\u043e \u043d\u0435 \u0445\u043e\u0447\u0435\u0442 \u0438\u043b\u0438 \u043d\u0435 \u043c\u043e\u0436\u0435\u0442 \u044d\u0442\u043e\u0433\u043e \u0441\u0434\u0435\u043b\u0430\u0442\u044c, \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b WAN \u0432\u043e \u0438\u0437\u0431\u0435\u0436\u0430\u043d\u0438\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439. \u0412 \u0447\u0438\u0441\u043b\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0434\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432 \u0442\u0430\u043a\u043e\u043c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438, \u0432\u0445\u043e\u0434\u044f\u0442 VPN-\u0441\u0435\u0440\u0432\u0435\u0440, DDNS, DMZ \u0438 \u043f\u0435\u0440\u0435\u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432. \n\u0421\u0430\u043c\u044b\u0435 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u0442\u0430\u0439\u0432\u0430\u043d\u044c\u0441\u043a\u043e\u0433\u043e CERT, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0438 \u0440\u0430\u0441\u043f\u0438\u043d\u0430\u043b \u0433\u043e\u0440\u0434\u0443\u044e \u043f\u0442\u0438\u0446\u0443 Asus \u043d\u0430 \u0432\u044b\u043f\u0443\u0441\u043a \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439. \u041b\u0443\u0447\u0448\u0435 \u043f\u043e\u0437\u0434\u043d\u043e, \u0447\u0435\u043c \u043d\u0438\u043a\u043e\u0433\u0434\u0430?\n \n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2023-06-20T09:57:08.000000Z"}, {"uuid": "d8c227e1-d7d2-40f3-857e-0ba4a9052cac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46723", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/3863", "content": "#exploit\n1. Zero-Click Calendar invite - Critical 0-click vulnerability chain in macOS (CVE-2022-46723)\nhttps://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b\n\n2. CVE-2024-2879:\nWP LayerSlider - Unauth SQLI\nhttps://github.com/herculeszxc/CVE-2024-2879", "creation_timestamp": "2024-09-19T10:18:53.000000Z"}, {"uuid": "d1e5dbde-d53b-4cd2-a771-8c3b5544fec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46849", "type": "seen", "source": "https://t.me/cibsecurity/73590", "content": "\u203c CVE-2022-46849 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Weblizar Coming Soon Page \u00e2\u20ac\u201c Responsive Coming Soon & Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page \u00e2\u20ac\u201c Responsive Coming Soon & Maintenance Mode: from n/a through 1.5.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T12:25:58.000000Z"}, {"uuid": "c5070d7b-04f2-47f9-9ddc-3029c204a560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46021", "type": "seen", "source": "Telegram/M4sqG_p3bXrfq9qkU1b91Ws3SUeFetx9_C5ltVmoORsovETf", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}, {"uuid": "35518ad7-74be-4907-85df-e31c3d873423", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/ctinow/87122", "content": "Cacti servers under attack by attackers exploiting CVE-2022-46169\n\nhttps://ift.tt/sTMGvRO", "creation_timestamp": "2023-01-16T13:28:34.000000Z"}, {"uuid": "cfe4c9f2-e550-4544-824b-1063a6f0e9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46697", "type": "seen", "source": "Telegram/wXJFleV8vEaWRjyjght-R7V6rgaHTWmrrJG5mADAecKVQmw", "content": "", "creation_timestamp": "2023-04-09T15:26:50.000000Z"}, {"uuid": "820c5bd0-9806-4fd8-857c-5c6c272ff571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46660", "type": "published-proof-of-concept", "source": "Telegram/H5Dkkha3Th8jseqkeGc7uOUCt_0lfInetyOoX5ljpqSECpk", "content": "", "creation_timestamp": "2023-03-15T13:15:26.000000Z"}, {"uuid": "9dab8c56-e410-4758-9ed0-3d18ee01be60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "published-proof-of-concept", "source": "Telegram/H5Dkkha3Th8jseqkeGc7uOUCt_0lfInetyOoX5ljpqSECpk", "content": "", "creation_timestamp": "2023-03-15T13:15:26.000000Z"}, {"uuid": "4afa8838-842a-4f2f-bca2-b7ef219dfd06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46020", "type": "published-proof-of-concept", "source": "Telegram/h2ZjwpZ2AXQhhKApIGtumk8DCKOUi8BVL5CVd05c6G-hmJc", "content": "", "creation_timestamp": "2023-01-24T06:53:06.000000Z"}, {"uuid": "6db90e0e-5973-46b2-a2fb-74a095eaa08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "Telegram/_cmVUIWQojhnpDMW206gPiccyvTTJ0qFuor2hEi4jokaPYc", "content": "", "creation_timestamp": "2023-01-21T11:39:54.000000Z"}, {"uuid": "3c235dae-d574-43b2-aa4c-c95eb31a78b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "Telegram/suSVZ8gjh9CeURgOUMEZq2Z7fyo2iknJlY7RsYX9Hr2cvtw", "content": "", "creation_timestamp": "2023-01-20T07:08:40.000000Z"}, {"uuid": "90b32c9a-b182-46ca-a6c3-2bbfc4e62b0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "Telegram/6bGILe3mVmWrfrRIpCubGmiYAxihYe46Ez4Lvqgy2cYu_60", "content": "", "creation_timestamp": "2023-01-19T09:11:13.000000Z"}, {"uuid": "47f390a3-10ca-48aa-bc34-ffc864695009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46331", "type": "published-proof-of-concept", "source": "Telegram/H5Dkkha3Th8jseqkeGc7uOUCt_0lfInetyOoX5ljpqSECpk", "content": "", "creation_timestamp": "2023-03-15T13:15:26.000000Z"}, {"uuid": "dabdad0f-53c6-41cd-9f47-4558dde5b1d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46527", "type": "seen", "source": "Telegram/i3i7bKY0ZhVuqvP9UVKCrnxIrVEYZjBWV0W4s_ip7a5wu-g", "content": "", "creation_timestamp": "2023-03-14T11:52:08.000000Z"}, {"uuid": "92da5e2a-5e07-4197-96b6-450a59167e7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46859", "type": "seen", "source": "https://t.me/cibsecurity/73519", "content": "\u203c CVE-2022-46859 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T15:23:24.000000Z"}, {"uuid": "e3f4fb06-8174-4094-bd9e-2f99eacc51e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46808", "type": "seen", "source": "https://t.me/cibsecurity/73517", "content": "\u203c CVE-2022-46808 \u203c\n\nImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems ARMember armember-membership allows SQL Injection.This issue affects ARMember: from n/a through 3.4.11.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-03T15:23:22.000000Z"}, {"uuid": "8f10d6a8-6f5a-40c7-a47e-b02304ef867c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46723", "type": "published-proof-of-concept", "source": "https://t.me/ton618cyber/933", "content": "#exploit\n1. Zero-Click Calendar invite - Critical 0-click vulnerability chain in macOS (CVE-2022-46723)\nhttps://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b\n\n2. CVE-2024-2879:\nWP LayerSlider - Unauth SQLI\nhttps://github.com/herculeszxc/CVE-2024-2879", "creation_timestamp": "2024-09-19T10:18:53.000000Z"}, {"uuid": "433c4927-ae9c-4275-b8c0-da4f93783510", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46722", "type": "published-proof-of-concept", "source": "Telegram/4626rOifAR8lrhV3YZPjT1LCFIP6QyPu2FBAoN97b9E", "content": "", "creation_timestamp": "2023-10-22T05:00:14.000000Z"}, {"uuid": "d6baa264-0797-43cb-8ae7-7aac1326b4fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46973", "type": "seen", "source": "Telegram/KZ6diuJEDeCMR5T2jK55qdvV2G06nGvqh9tGQYW1jG637Gb-", "content": "", "creation_timestamp": "2025-03-08T04:35:51.000000Z"}, {"uuid": "aa8f5879-22cf-4d11-8b7b-2585c3ac9407", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46415", "type": "seen", "source": "Telegram/Lg8nuyO4zkJiY--Hx5rd6jurVnvNjR4Oge21QB8eCeN_KWfK", "content": "", "creation_timestamp": "2025-02-19T22:21:30.000000Z"}, {"uuid": "54cdaf3b-7456-44a8-ac06-c0cc1dadd183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46396", "type": "seen", "source": "Telegram/acurarZxlqVTAxaXPSc4uD5S3O1485Bg8INHcYD3ZlDOgFfz", "content": "", "creation_timestamp": "2025-02-14T10:03:11.000000Z"}, {"uuid": "2b5571a5-8598-4675-aaed-5995ac70356d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46703", "type": "seen", "source": "Telegram/-YTKoZdX2dsJeIqdyO0ZIA-9zBDzHd2SlYbjbk6mlp3VakVW", "content": "", "creation_timestamp": "2025-02-14T10:03:11.000000Z"}, {"uuid": "8604c752-305e-48a3-975b-f83810d8ff87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46781", "type": "seen", "source": "Telegram/rS4Ze_o85Wswqlw5QB8lEKQQQTVobhjYVLBEwJIxKOq_fVpW", "content": "", "creation_timestamp": "2025-02-14T10:05:08.000000Z"}, {"uuid": "d17e29c0-a99e-480c-b6b7-29670db6c782", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46680", "type": "seen", "source": "Telegram/i7lHWW0DSQ8tHro8G_hLuMe_TvKI3qLEifcH0YA7-qzimxk", "content": "", "creation_timestamp": "2023-06-21T07:15:26.000000Z"}, {"uuid": "ee3a8ac2-cf78-4fb9-b301-d27b68f34291", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "https://t.me/arpsyndicate/3157", "content": "#ExploitObserverAlert\n\nCVE-2022-46364\n\nDESCRIPTION: Exploit Observer has 6 entries in 3 file formats related to CVE-2022-46364. A SSRF vulnerability in parsing the\u00a0href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.\n\nFIRST-EPSS: 0.028500000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2024-01-28T02:00:33.000000Z"}, {"uuid": "4b1474b4-64a5-4f61-adbb-0073a8442736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46907", "type": "seen", "source": "https://t.me/arpsyndicate/3133", "content": "#ExploitObserverAlert\n\nCVE-2022-46907\n\nDESCRIPTION: Exploit Observer has 4 entries in 2 file formats related to CVE-2022-46907. A carefully crafted request on several JSPWiki plugins could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim.  Apache JSPWiki users should upgrade to 2.12.0 or later.\n\nFIRST-EPSS: 0.001850000\nNVD-IS: 2.7\nNVD-ES: 2.8", "creation_timestamp": "2024-01-28T00:34:02.000000Z"}, {"uuid": "b1faff14-c43c-4b95-9353-ee53b0a77bb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46487", "type": "seen", "source": "https://t.me/arpsyndicate/2297", "content": "#ExploitObserverAlert\n\nCVE-2022-46487\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-46487. Improper initialization of x87 and SSE floating-point configuration registers in the __scone_entry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floating-point operations in an enclave or access sensitive information via side-channel analysis.", "creation_timestamp": "2024-01-01T05:35:33.000000Z"}, {"uuid": "e960a9f5-084f-46df-94c8-e4d78bb56bfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46486", "type": "seen", "source": "https://t.me/arpsyndicate/2303", "content": "#ExploitObserverAlert\n\nCVE-2022-46486\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-46486. A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.", "creation_timestamp": "2024-01-01T06:21:31.000000Z"}, {"uuid": "73fb4fb7-c47c-4253-86b6-217399d61728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46290", "type": "seen", "source": "https://t.me/arpsyndicate/46", "content": "#ExploitObserverAlert\n\nCVE-2022-46290\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2022-46290. Multiple out-of-bounds write vulnerabilities exist in the ORCA format nAtoms functionality of Open Babel 3.1.1 and master commit 530dbfa3. A specially-crafted malformed file can lead to arbitrary code execution. An attacker can provide a malicious file to trigger this vulnerability.The loop that stores the coordinates does not check its index against nAtoms\n\nFIRST-EPSS: 0.000550000\nNVD-IS: 5.9\nNVD-ES: 1.8", "creation_timestamp": "2023-11-10T20:06:45.000000Z"}, {"uuid": "a1935c9e-7c50-491c-97b0-fc3153689665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/arpsyndicate/705", "content": "#ExploitObserverAlert\n\nCVE-2022-46689\n\nDESCRIPTION: Exploit Observer has 60 entries related to CVE-2022-46689. A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges.\n\nFIRST-EPSS: 0.004520000\nNVD-IS: 5.9\nNVD-ES: 1.0", "creation_timestamp": "2023-11-29T09:00:11.000000Z"}, {"uuid": "61d732b3-30e9-4868-81b0-db39beb12ede", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/432", "content": "an Auto PoC tool CVE-2022-4611 in python this code will send an invalid HTTP Access to the server with too large headers, and some servers will have to try to process it, so CVE- 2022-4611 can be mined\n\n\nDetails > github.com/Phamchie/CVE-2022-4611", "creation_timestamp": "2023-07-06T18:42:13.000000Z"}, {"uuid": "6a693541-9025-4c69-be23-62e8a4caf3fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "published-proof-of-concept", "source": "https://t.me/CyberKEX/60", "content": "an Auto PoC tool CVE-2022-4611 in python this code will send an invalid HTTP Access to the server with too large headers, and some servers will have to try to process it, so CVE- 2022-4611 can be mined\n\n\nDetails > github.com/Phamchie/CVE-2022-4611", "creation_timestamp": "2023-07-06T18:42:17.000000Z"}, {"uuid": "2308475e-fc86-414f-8511-d88914b42c14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "published-proof-of-concept", "source": "https://t.me/Exploitationn/2385", "content": "https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604\n\nAuto Exploit Responsive File Manager in Python 3 \nRCE w Extension Bypass\n\nExample Site That using Responsive File Manager : http://www.better.in/resources/js/tinymce/plugins/filemanager/\nExample Dork : inurl:/filemanager/ intext:\u201dexecute.php\u201d\n\n@Exploitationn", "creation_timestamp": "2023-04-29T18:20:00.000000Z"}, {"uuid": "b6051f92-9e11-407c-8d03-982758f4be59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "published-proof-of-concept", "source": "https://t.me/anonymous_secures/1284", "content": "an Auto PoC tool CVE-2022-4611 in python this code will send an invalid HTTP Access to the server with too large headers, and some servers will have to try to process it, so CVE- 2022-4611 can be mined\n\n\nDetails > github.com/Phamchie/CVE-2022-4611", "creation_timestamp": "2023-07-06T18:42:12.000000Z"}, {"uuid": "f9c03edd-7a35-4cf8-af04-0a7f4579d62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "Telegram/0LxSJuadzx1gFt5LjOzQKudcVVss8Xi_oBXbI34BaDEWNfs", "content": "", "creation_timestamp": "2025-03-27T16:00:07.000000Z"}, {"uuid": "6c3583d0-26d3-410e-8a26-c14155fb868f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2232", "content": "#CyberSecurity news -  \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\n\u200aCan these researchers help defend satellite systems targeted by hackers?\n\nhttps://www.cyberscoop.com/space-satellite-cybersecurity-sparta/\n\n\u200aBitRAT malware campaign uses stolen bank data for phishing\n\nhttps://www.bleepingcomputer.com/news/security/bitrat-malware-campaign-uses-stolen-bank-data-for-phishing/\n\n\u200aPoland warns of attacks by Russia-linked Ghostwriter hacking group\n\nhttps://www.bleepingcomputer.com/news/security/poland-warns-of-attacks-by-russia-linked-ghostwriter-hacking-group/\n\n\u200aRail giant Wabtec discloses data breach after Lockbit ransomware attack\n\nhttps://www.bleepingcomputer.com/news/security/rail-giant-wabtec-discloses-data-breach-after-lockbit-ransomware-attack/\n\n\u200aOver 60,000 Exchange servers vulnerable to ProxyNotShell attacks\n\nhttps://www.bleepingcomputer.com/news/security/over-60-000-exchange-servers-vulnerable-to-proxynotshell-attacks/\n\n\u200aOngoing Flipper Zero phishing attacks target infosec community\n\nhttps://www.bleepingcomputer.com/news/security/ongoing-flipper-zero-phishing-attacks-target-infosec-community/\n\n\u200aCVE-2022-43396 & CVE-2022-44621: Command injection in Apache Kylin\n\nhttps://securityonline.info/cve-2022-43396-cve-2022-44621-command-injection-in-apache-kylin/\n\n\u200aCVE-2022-43931: Critical Vulnerability in Synology VPN Plus Server software\n\nhttps://securityonline.info/cve-2022-43931-critical-vulnerability-in-synology-vpn-plus-server-software/\n\n\u200aPowerMeUp: powershell scripts for post exploitation\n\nhttps://securityonline.info/powermeup-powershell-scripts-for-post-exploitation/\n\n\u200aLockbit Ransomware Group Apologized For the Attack On Hospital for Sick Children\n\nhttps://gbhackers.com/lockbit-ransomware-group-apologized/\n\n\u200aTop 10 Open Port Scanner and Port Checker Tools for 2023\n\nhttps://gbhackers.com/open-port-scanner-port-checker-tools/\n\nBitRAT Now Sharing Sensitive Bank Data as a Lure\n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2023/01/03/bitrat-now-sharing-sensitive-bank-data-as-a-lure\n\n\u200b\u200bDebloating Windows 10 with one command and no scripts\n\nhttps://gabrielsieben.tech/2023/01/02/debloating-windows-10-with-one-command-and-no-scripts\n\n\u200b\u200bBug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass\n\nhttps://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/\n\n\u200aBitRAT Malware Uses Bank-Themed Phishing Emails to Steal Sensitive Information\n\nhttps://cybersecuritynews.com/bitrat-malware-uses-phishing-emails/\n\n\u200aPoC Code for NodeBB Account Takeover Flaw (CVE-2022-46164) Published\n\nhttps://securityonline.info/poc-code-for-nodebb-account-takeover-flaw-cve-2022-46164-published/\n\n\u200aVillain - Windows And Linux Backdoor Generator And Multi-Session Handler That Allows Users To Connect With Sibling Servers And Share Their Backdoor Sessions\n\nhttp://www.kitploit.com/2023/01/villain-windows-and-linux-backdoor.html\n\n\u200aToyota Discloses Data Breach \u2013 Customers\u2019 Personal Information Exposed\n\nhttps://gbhackers.com/toyota-discloses-data-breach/\n\n\u200aOFRAK : Unpack, Modify, And Repack Binaries\n\nhttps://kalilinuxtutorials.com/ofrak/\n\n\u200aLABScon Replay | InkySquid: The Missing Arsenal\n\nhttps://www.sentinelone.com/labs/labscon-replay-inkysquid-the-missing-arsenal/\n\n\u200aOver 60,000 Online Exchange Servers Unpatched for RCE Vulnerability ProxyNotShell\n\nhttps://gbhackers.com/unpatched-proxynotshell/\n\nBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-01-05T13:41:52.000000Z"}, {"uuid": "9b315d1b-7dfa-4e7c-98c9-b99d5f1653c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/hackingshadow/2745", "content": "#TheShadowArmy\n\n#exploit\n1. CVE-2022-41050:\nA vulnerability in the MS Windows' User-Mode Printer Drivers\nhttps://ssd-disclosure.com/win32k-user-mode-printer-drivers-startdoc-uaf\n\n2. CVE-2022-46689:\nmacOS Dirty Cow bug\nhttps://github.com/zhuowei/MacDirtyCowDemo\n\n_-_-_-_-_-_- \u269cJOIN NOW \u269c -_-_-_-_-_-_\n \u274d\u274d\u274d \u2756 @HackingShadow \u2756 \u274d\u274d\u274d", "creation_timestamp": "2023-01-12T12:23:26.000000Z"}, {"uuid": "ecc0c01f-7b39-4824-80da-120bdc5cb9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/hackingshadow/2736", "content": "\ud83e\udd19Shizo is in touch!\n\ud83d\udca5I hope you didn't forget about Dirty COW(PoCs). Zhulwei has a new post about getting root in macOS 13.0.1 / 12.6.1 and below by exploiting CVE-2022-46689 (starting the binary, overwriting and starting over again). In fact, this is the equivalent of Dirty COW, only affecting macOS (XNU), instead of the Linux kernel, so the repository is called:\n\"MacDirtyCowDemo\" and Ian Beer (i41nbeer, \"former\" GCHQ employee, previous linked vulnerability here). The Apple security update says that an attacker exploiting this vulnerability can execute arbitrary code with kernel privileges and the race condition is prevented by new checks (as will be written below - they indirectly affect). Zhulwei began to analyze the vulnerability by analyzing a file in Apple XNU (vm_unaligned_copy_switch_race.c) and achieved a race condition (one thread switches memory between readonly and writable, and the second one tries to write data), allowing him to temporarily modify files in the /System volume (for saving changes after reboot, you need to run on a writable volume, all this is due to the Sealed System Volume).\n\nChzhulwei failed to achieve the execution of arbitrary code with kernel privileges and only managed to influence userspace processes. The disabling of password checking was achieved through recommendations for user authentication based on a policy located in /etc/pam.d (/etc/pam.d/login, pam_permit.so always allows access without authentication) and was introduced at Pwn2Own2020 and affected in a talk at Black Hat USA 2020 \"Compromising the macOS Kernel through Safari by Chaining Six Vulnerabilities\" and for convenience, a command line parameter was added that takes as an argument what needs to be overwritten.\n\nTo get root, you need to execute the following commands to download the repository and go to the directory with it:\n1\ufe0f\u20e3clang -o switcharoo vm_unaligned_copy_switch_race.c\n2\ufe0f\u20e3sed -e \"s/rootok/permit/g\" /etc/pam.d/su > overwrite_file.bin\n3\ufe0f\u20e3./switcharoo /etc/pam.d/su overwrite_file.bin\n4\ufe0f\u20e3su\nAnd after executing the binary at step 3\ufe0f\u20e3, you should get the following output:\nTesting for 10 seconds...\nRO mapping was modified\nAnd after executing the su command in step 4\ufe0f\u20e3, access to the rooted shell will be obtained:\nsh-3.2#\n\nAmong other things:\n\ud83d\udcbeThere is another type of confusion in the unaligned write function in the XNU kernel:\nmach_vm_write(mach_task_self(), printf, printf, 0x8001);\nOf interest is the union vm_map_object:\nunion vm_map_object {\nvm_object_t vmo_object; /* object object */\nvm_map_t vmo_submap; /* belongs to another map */\n} vm_map_object_t;\nFor vm addresses in sharedcache, the first entry will be a nested map (submap)\nMoreover, VME_OBJECT just causes type confusion\nThat is, shared cache mapping in memory cannot be directly overwritten!\n\ud83d\udcbeDue to the fact that the submap does not own VM_PROT_WRITE, the patch leads to an early return (or the next dst_object = VME_OBJECT(entry) leads to panic), which, as it were, indirectly prevents type confusion, and in vm_map_copy_overwrite_nested this was already in the shortcut at:\nif (dst_end <= entry->vme_end) {\n\u00a0\u00a0\u00a0\u00a0\u00a0 goto start_overwrite; /* you can prevent permission checks */\n}\n\ud83d\udcbevm_map_copy_overwrite_unaligned does not imply write check\n\ud83d\udcbeProbably, code signing (codesigning) and sandbox will prevent overwriting. Since the whole process dies if an incorrect signature is submitted, and re-checking the codesignature on the page is quite a hindrance.\n\n\u26a0\ufe0fSo if the subscriber uses apple products, update (the vulnerability was patched in:\niOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, macOS 13.1, macOS 12.6.2, macOS 11.7.2, tvOS 16.2, watchOS 9.2)!\n\n#macOS #XNU #vulnerability #exploitation #security #DirtyCOW #MacDirtyCow #root #su", "creation_timestamp": "2022-12-18T04:04:21.000000Z"}, {"uuid": "b10508a4-b6d7-4f9f-a996-5404be769690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/BABATATASASA/3436", "content": "\u200b\u200bCVE-2022-25765 \n\npdfkit Exploit Reverse Shell\n\npdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u200b\u200bCVE-2022-45025\n\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n\u200b\u200bCVE-2022-36537\n\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n\u200b\u200bCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bCVE-2022-45771 - Pwndoc LFI to RCE\n\nPwndoc local file inclusion to remote code execution of Node.js code on the server.\n\nhttps://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE\n\n\u200b\u200bCVE-2022-46169\n\nCacti remote_agent.php Unauthenticated Command Injection.\n\nhttps://github.com/0xf4n9x/CVE-2022-46169\n\n\u200b\u200bCVE-2022-45451\n\nPoC for CVE-2022-45451 Acronis Arbitrary File Read\n\nhttps://github.com/alfarom256/CVE-2022-45451\n\nCVE-2022-28672\n\nThis bug was Use after Free caused by improper handling of javascript object memory references.\n\nhttps://github.com/hacksysteam/CVE-2022-28672\n\nUse after Free - RCE Exploit: https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672\n\n\u200b\u200bCVE-2003-0358\n\nBuffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges > via a long -s command line option.\n\nhttps://github.com/snowcra5h/CVE-2003-0358\n\n\u200b\u200bCVE-2022-39253\n\nDocker host file read\n\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc\n\n\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n\u200b\u200bCVE-2022-2602\n\nPoC Kernel Privilege Escalation Linux\n\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n\u200b\u200bEvilWfshbr\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation\n\nhttps://github.com/kkent030315/CVE-2022-42046\n\n\u200b\u200bCVE-2022-2602\n\nThis repository contains exploits for CVE-2022-2602. There are two versions of it:\n\n\u25ab\ufe0f Exploit using userfaultfd technique.\n\u25ab\ufe0f Exploit using inode locking technique.\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\n#cve #poc \n@pfkgit", "creation_timestamp": "2023-01-28T19:14:38.000000Z"}, {"uuid": "635bab6c-d584-4e80-b04f-567d24ca2986", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/349", "content": "#CyberSecurity news -  \ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06 #Pentesting \n\n\u200aCan these researchers help defend satellite systems targeted by hackers?\n\nhttps://www.cyberscoop.com/space-satellite-cybersecurity-sparta/\n\n\u200aBitRAT malware campaign uses stolen bank data for phishing\n\nhttps://www.bleepingcomputer.com/news/security/bitrat-malware-campaign-uses-stolen-bank-data-for-phishing/\n\n\u200aPoland warns of attacks by Russia-linked Ghostwriter hacking group\n\nhttps://www.bleepingcomputer.com/news/security/poland-warns-of-attacks-by-russia-linked-ghostwriter-hacking-group/\n\n\u200aRail giant Wabtec discloses data breach after Lockbit ransomware attack\n\nhttps://www.bleepingcomputer.com/news/security/rail-giant-wabtec-discloses-data-breach-after-lockbit-ransomware-attack/\n\n\u200aOver 60,000 Exchange servers vulnerable to ProxyNotShell attacks\n\nhttps://www.bleepingcomputer.com/news/security/over-60-000-exchange-servers-vulnerable-to-proxynotshell-attacks/\n\n\u200aOngoing Flipper Zero phishing attacks target infosec community\n\nhttps://www.bleepingcomputer.com/news/security/ongoing-flipper-zero-phishing-attacks-target-infosec-community/\n\n\u200aCVE-2022-43396 & CVE-2022-44621: Command injection in Apache Kylin\n\nhttps://securityonline.info/cve-2022-43396-cve-2022-44621-command-injection-in-apache-kylin/\n\n\u200aCVE-2022-43931: Critical Vulnerability in Synology VPN Plus Server software\n\nhttps://securityonline.info/cve-2022-43931-critical-vulnerability-in-synology-vpn-plus-server-software/\n\n\u200aPowerMeUp: powershell scripts for post exploitation\n\nhttps://securityonline.info/powermeup-powershell-scripts-for-post-exploitation/\n\n\u200aLockbit Ransomware Group Apologized For the Attack On Hospital for Sick Children\n\nhttps://gbhackers.com/lockbit-ransomware-group-apologized/\n\n\u200aTop 10 Open Port Scanner and Port Checker Tools for 2023\n\nhttps://gbhackers.com/open-port-scanner-port-checker-tools/\n\nBitRAT Now Sharing Sensitive Bank Data as a Lure\n\nhttps://blog.qualys.com/vulnerabilities-threat-research/2023/01/03/bitrat-now-sharing-sensitive-bank-data-as-a-lure\n\n\u200b\u200bDebloating Windows 10 with one command and no scripts\n\nhttps://gabrielsieben.tech/2023/01/02/debloating-windows-10-with-one-command-and-no-scripts\n\n\u200b\u200bBug Writeup: RCE via SSTI on Spring Boot Error Page with Akamai WAF Bypass\n\nhttps://h1pmnh.github.io/post/writeup_spring_el_waf_bypass/\n\n\u200aBitRAT Malware Uses Bank-Themed Phishing Emails to Steal Sensitive Information\n\nhttps://cybersecuritynews.com/bitrat-malware-uses-phishing-emails/\n\n\u200aPoC Code for NodeBB Account Takeover Flaw (CVE-2022-46164) Published\n\nhttps://securityonline.info/poc-code-for-nodebb-account-takeover-flaw-cve-2022-46164-published/\n\n\u200aVillain - Windows And Linux Backdoor Generator And Multi-Session Handler That Allows Users To Connect With Sibling Servers And Share Their Backdoor Sessions\n\nhttp://www.kitploit.com/2023/01/villain-windows-and-linux-backdoor.html\n\n\u200aToyota Discloses Data Breach \u2013 Customers\u2019 Personal Information Exposed\n\nhttps://gbhackers.com/toyota-discloses-data-breach/\n\n\u200aOFRAK : Unpack, Modify, And Repack Binaries\n\nhttps://kalilinuxtutorials.com/ofrak/\n\n\u200aLABScon Replay | InkySquid: The Missing Arsenal\n\nhttps://www.sentinelone.com/labs/labscon-replay-inkysquid-the-missing-arsenal/\n\n\u200aOver 60,000 Online Exchange Servers Unpatched for RCE Vulnerability ProxyNotShell\n\nhttps://gbhackers.com/unpatched-proxynotshell/\n\nBTC:\nbc1q62lwma4r3w3klq4mcn5hys9nps5h40qmafrc8e\n\n\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00 \ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\nhttps://t.me/dilagrafie", "creation_timestamp": "2023-01-05T13:41:52.000000Z"}, {"uuid": "fb86c9ba-048b-4127-8bc0-e3490d9a9c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "published-proof-of-concept", "source": "https://t.me/BABATATASASA/3436", "content": "\u200b\u200bCVE-2022-25765 \n\npdfkit Exploit Reverse Shell\n\npdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u200b\u200bCVE-2022-45025\n\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n\u200b\u200bCVE-2022-36537\n\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n\u200b\u200bCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bCVE-2022-45771 - Pwndoc LFI to RCE\n\nPwndoc local file inclusion to remote code execution of Node.js code on the server.\n\nhttps://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE\n\n\u200b\u200bCVE-2022-46169\n\nCacti remote_agent.php Unauthenticated Command Injection.\n\nhttps://github.com/0xf4n9x/CVE-2022-46169\n\n\u200b\u200bCVE-2022-45451\n\nPoC for CVE-2022-45451 Acronis Arbitrary File Read\n\nhttps://github.com/alfarom256/CVE-2022-45451\n\nCVE-2022-28672\n\nThis bug was Use after Free caused by improper handling of javascript object memory references.\n\nhttps://github.com/hacksysteam/CVE-2022-28672\n\nUse after Free - RCE Exploit: https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672\n\n\u200b\u200bCVE-2003-0358\n\nBuffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges > via a long -s command line option.\n\nhttps://github.com/snowcra5h/CVE-2003-0358\n\n\u200b\u200bCVE-2022-39253\n\nDocker host file read\n\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc\n\n\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n\u200b\u200bCVE-2022-2602\n\nPoC Kernel Privilege Escalation Linux\n\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n\u200b\u200bEvilWfshbr\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation\n\nhttps://github.com/kkent030315/CVE-2022-42046\n\n\u200b\u200bCVE-2022-2602\n\nThis repository contains exploits for CVE-2022-2602. There are two versions of it:\n\n\u25ab\ufe0f Exploit using userfaultfd technique.\n\u25ab\ufe0f Exploit using inode locking technique.\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\n#cve #poc \n@pfkgit", "creation_timestamp": "2023-01-28T19:14:38.000000Z"}, {"uuid": "cdd32577-ce4f-40c6-b119-d723eb46f49a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/154", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "creation_timestamp": "2022-12-14T10:16:53.000000Z"}, {"uuid": "99b819f9-4a5d-491a-af26-38d0950abace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2137", "content": "Parshu\n\nFilter URLs to save your time using regex\n\nParshu uses regex to filter out the custom results. Remembering every regex or writing regexes for a task which you do daily is not easy, so parshu will help you to automate the task.\n\nhttps://github.com/R0X4R/Parshu\n\n\u200b\u200bIATelligence\n\nIATelligence is a Python script that extracts the Import Address Table (IAT) from a PE file and uses OpenAI's GPT-3 model to provide details about each Windows API imported by the file. The script also searches for related MITRE ATT&CK techniques and explains how the API could potentially be used by attackers.\n\nIt also displays the hashes of the file and estimates the cost of the GPT-3 requests. IATelligence is a proof of concept for using GPT-3 for malware analysis and quickly assessing the behavior of a malware based on its IAT.\n\nhttps://github.com/fr0gger/IATelligence\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bZeek-Formatted Threat Intelligence Feeds\n\nThis is a public feed based on Public Threat Feeds and CRITICAL PATH SECURITY gathered data. This feed will be updated as often as possible.\n\nhttps://github.com/CriticalPathSecurity/Zeek-Intelligence-Feeds\n\n\u200b\u200binject-globals\n\nA function for injecting global variables into function calls.\n\nhttps://github.com/victorwss/inject-globals\n\n\u200b\u200bPublic version of Redblood C2\n\nThis is a simple command and control server to handle sessions and your victims.\n\nhttps://github.com/kira2040k/RedbloodC2\n\n\u200b\u200bShadow\n\nA jailbreak detection bypass for modern iOS jailbreaks.\n\nPlease note that Shadow is not designed as an app-specific bypass. Issues mainly in consideration are non-detection related app crashes, regressions from previous versions, and compatibility issues.\n\nhttps://github.com/jjolano/shadow\n\n\u200aDomainDouche - OSINT Tool to Abuse SecurityTrails Domain Suggestion API To Find Potentially Related Domains By Keyword And Brute Force\n\nhttp://www.kitploit.com/2022/12/domaindouche-osint-tool-to-abuse.html\n\nCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\nDonate\nhttps://t.me/c/1634518258/5\nhttps://t.me/HackerFactory/114\n\n#redteam #infosec #cybersec #\ud835\udddb\ud835\uddee\ud835\uddf0\ud835\uddf8\ud835\uddf2\ud835\uddff\ud835\ude00\ud835\uddd9\ud835\uddee\ud835\uddf0\ud835\ude01\ud835\uddfc\ud835\uddff\ud835\ude06\n\n3/3", "creation_timestamp": "2022-12-14T10:16:53.000000Z"}, {"uuid": "24506fa0-95a4-48de-90c5-d21ecfb05e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2911", "content": "Tools - Hackers Factory \n\n\u200b\u200bctf-tools\n\nThis is a collection of setup scripts to create an install of various security research tools. Of course, this isn't a hard problem, but it's really nice to have them in one place that's easily deployable to new machines and so forth.\n\nhttps://github.com/zardus/ctf-tools\n\n#cybersecurity #infosec #ctf\n\n\u200b\u200bRESTler\n\nRESTler is the first stateful REST API fuzzing tool for automatically testing cloud services through their REST APIs and finding security and reliability bugs in these services.\n\nhttps://github.com/microsoft/restler-fuzzer\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bCVE-2022-46718\n\niOS Vulnerability Exposes Sensitive Location Data.\n\nhttps://github.com/biscuitehh/cve-2022-46718-leaky-location\n\n#cve #cybersecurity #infosec\n\n\u200b\u200bBunkerWeb\n\nA web server based on the notorious NGINX and focused on security.\n\nhttps://github.com/bunkerity/bunkerweb\n\n#cybersecurity #infosec\n\n\u200b\u200bLAUREL\n\nLAUREL is an event post-processing plugin for auditd(8) that generates useful, enriched JSON-based audit logs suitable for modern security monitoring setups.\n\nhttps://github.com/threathunters-io/laurel\n\n#cybersecurity #infosec\n\n\u200b\u200bSecbench.js\n\nSecbench.js is the first benchmark suite of server-side JavaScript vulnerabilities. This benchmark consists of 600 publicly reported vulnerabilities curated from different advisory databases, such as Snyk, GitHub Advisories, and Huntr.dev.\n\nhttps://github.com/cristianstaicu/SecBench.js\n\n#infosec #pentesting #bugbounty\n\n\u200b\u200bCTFd\n\nA Capture The Flag framework focusing on ease of use and customizability. It comes with everything you need to run a CTF and it's easy to customize with plugins and themes.\n\nhttps://github.com/CTFd/CTFd\n\n#cybersecurity #infosec #ctf\n\n\u200b\u200bStackMask\n\nThis is a PoC of encrypting the stack prior to custom sleeping by leveraging CPU cycles. This is the code of the relevant blog post: Masking the Implant with Stack Encryption\n\nhttps://github.com/WKL-Sec/StackMask\n\n#infosec #pentesting #redteam\n\n\u200b\u200bETWHash\n\nA C# POC that is able to extract NetNTLMv2 hashes of incoming authentications via SMB, by consuming ETW events from the Microsoft-Windows-SMBServer provider {D48CE617-33A2-4BC3-A5C7-11AA4F29619E}\n\nhttps://github.com/nettitude/ETWHash\n\n#infosec #pentesting #redteam\n\n\u200b\u200bsh4d0wup\n\nSigning-key abuse and update exploitation framework.\n\nhttps://github.com/kpcyrd/sh4d0wup\n\n#cybersecurity #infosec\n\nhttps://t.me/dilagrafie\nhttps://t.me/HackerFactory", "creation_timestamp": "2023-05-05T15:01:04.000000Z"}, {"uuid": "6f007195-3aa6-4202-a2b3-a63fa3f2ed36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46697", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2874", "content": "25 Tools - Hackers Factory\n\n\u200b\u200bOctopus\n\nA security analysis framework for WebAssembly module and Blockchain Smart Contract.\n\nhttps://github.com/FuzzingLabs/octopus\n\n#cybersecurity #infosec\n\n\u200b\u200bPenetration-Testing-Cheat-Sheet\n\nA guide to help people who are new to penetration testing and are looking to gain an overview of the penetration testing process. This guide will help anyone hoping to take the CREST CRT or Offensive Security's OSCP exam and will aim to cover each stage of compromising a host.\n\nhttps://github.com/curtishoughton/Penetration-Testing-Cheat-Sheet\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bViDeZZo\n\nA virtual device fuzzing framework considering both intra- and inter-message dependencies to balance fuzzing scalability and efficiency.\n\nhttps://github.com/HexHive/ViDeZZo\n\n#cybersecurity #infosec\n\n\u200b\u200bBug Bounty Beginner's Roadmap\n\nThis is a resource factory for anyone looking forward to starting bug hunting and would require guidance as a beginner.\n\nhttps://github.com/bittentech/Bug-Bounty-Beginner-Roadmap\n\n#bugbounty #pentesting #infosec\n\n\u200b\u200bImHex\n\n\ud83d\udd0d A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.\n\nhttps://github.com/WerWolv/ImHex\n\n#cybersecurity #infosec #reverse\n\n\u200b\u200bAndroid Penetration Testing Cheat Sheet\n\nThis is more of a checklist for myself. May contain useful tips and tricks.\n\nhttps://github.com/ivan-sincek/android-penetration-testing-cheat-sheet\n\n#cybersecurity #infosec #pentesting\n\n\u200b\u200bZenLdr\n\nBasic implementation of Cobalt Strikes - User Defined Reflective Loader feature.\n\nhttps://github.com/Mav3rick33/ZenLdr\n\nDetails:\nhttps://mav3rick33.gitbook.io/the-lab/cobalt-strike-user-defined-reflective-loader-studies\n\n#infosec #redteam #pentesting\n\n\u200b\u200bScoper\n\nThis is a #BurpSuite extension that allows users to easily add web addresses to the Burp Suite scope.\n\nhttps://github.com/haticeerturk/scoper\n\n#infosec #bugbounty #pentesting\n\n\u200b\u200bspotify-gdpr-dump-analysis\n\nLocal analysis of complete spotify streaming dataset (endsong_*.json). Made in 3 hours alongside with chatGPT, fixing bugs as they appeared.\n\nhttps://github.com/pldubouilh/spotify-gdpr-dump-analysis\n\n#cybersecurity #infosec\n\n\u200b\u200bCVE-2022-46697\n\nOut-of-bounds access in IOMobileFrameBuffer\n\nhttps://github.com/antoniozekic/Proof-of-concepts/tree/main/CVE-2022-46697\n\n#exploit #cybersecurity #infosec #cve\n\n\u200b\u200bVulnerable WordPress\n\nIn this repository, we collect vulnerable WordPress plugins monthly and provide them to researchers. The output is a vulnerable WordPress that is easily installed. Researchers can use this version for Nuclei template development, exploit development, practice, training, etc.\n\nhttps://github.com/onhexgroup/Vulnerable-WordPress\n\n#infosec #bugbounty #pentesting\n\n\u200b\u200bOffensiveCpp\n\nThis repo contains C/C++ snippets that can be handy in specific offensive scenarios.\n\nhttps://github.com/lsecqt/OffensiveCpp\n\n#infosec #pentesting #redteam\n\n\u200b\u200bHades-C2\n\nHades is a basic Command & Control framework built using Python. It is currently extremely bare bones, but I plan to add more features soon.\n\nhttps://github.com/Lavender-exe/Hades-C2\n\n#infosec #pentesting #redteam\n\n\u200b\u200bRed Team Ops: Havoc 101\n\nLearn how to compromise an Active Directory Infrastructure by simulating adversarial Tactics, Techniques and Procedures (TTPs) using Havoc Framework.\n\nhttps://github.com/WesleyWong420/RedTeamOps-Havoc-101\n\n#infosec #cybersecurity #pentesting #redteam\n\n\u200b\u200bAzureGoat\n\nA Damn Vulnerable Azure Infrastructure.\n\nhttps://github.com/ine-labs/AzureGoat\n\n#cybersecurity #infosec\n\n\u200b\u200bDamn Vulnerable GraphQL Application\n\nDamn Vulnerable GraphQL Application is an intentionally vulnerable implementation of Facebook's GraphQL technology, to learn and practice GraphQL Security.\n\nhttps://github.com/dolevf/Damn-Vulnerable-GraphQL-Application\n\n#cybersecurity #infosec", "creation_timestamp": "2023-04-13T10:41:15.000000Z"}, {"uuid": "4700bc49-a662-4a1f-8013-27378ab7995e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "seen", "source": "https://t.me/proxy_bar/1301", "content": "CVE-2022-46463 \n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 Harbour v1.X.X\u2013v2.5.3 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u0449\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438 \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c  \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412\u043e\u043e\u0431\u0449\u0435 \u0425\u0430\u0440\u0431\u043e\u0440 \u043a\u0440\u0443\u0442\u0430\u044f \u0448\u0442\u0443\u043a\u0430, \u0434\u043b\u044f devops\\devsecops\n\nexploit\n\n#harbor #repo", "creation_timestamp": "2023-01-18T06:02:47.000000Z"}, {"uuid": "88f1a754-274b-427d-b8e2-f9c10ca2750d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1255", "content": "exploit for CVE-2022-46164 \n\u043e\u0441\u043e\u0437\u043d\u0430\u0442\u044c", "creation_timestamp": "2023-01-04T14:10:29.000000Z"}, {"uuid": "027c8fe0-f039-4d2e-b529-c8ee12fde585", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/1229", "content": "MacDirtyCowDem\n\u041f\u043e\u043b\u0443\u0447\u0430\u0435\u043c root \u0432  macOS 13.0.1 \u0447\u0435\u0440\u0435\u0437 CVE-2022-46689\nexploit\n\n\n\n#root #macos #exploit", "creation_timestamp": "2022-12-18T11:46:29.000000Z"}, {"uuid": "838c8ffa-c4ce-48f2-b336-45038ee0e300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46175", "type": "published-proof-of-concept", "source": "https://t.me/hackprotectsi/216", "content": "https://securityonline.info/cve-2022-46175-json5-prototype-pollution-vulnerability/", "creation_timestamp": "2022-12-29T15:09:28.000000Z"}, {"uuid": "1b3ccbae-f3d3-4356-863b-ad676592959a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "published-proof-of-concept", "source": "Telegram/x32OgBFd0aCC92zk7eLPFbtruiIwizixl2f573m9-8FRL4U", "content": "", "creation_timestamp": "2023-07-09T19:53:04.000000Z"}, {"uuid": "78e94b73-f2c2-493f-bda0-535d7fc37c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "published-proof-of-concept", "source": "https://t.me/Exploitationn/517", "content": "https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604\n\nAuto Exploit Responsive File Manager in Python 3 \nRCE w Extension Bypass\n\nExample Site That using Responsive File Manager : http://www.better.in/resources/js/tinymce/plugins/filemanager/\nExample Dork : inurl:/filemanager/ intext:\u201dexecute.php\u201d\n\n@Exploitationn", "creation_timestamp": "2023-04-29T18:20:00.000000Z"}, {"uuid": "463e3b2b-fddb-4568-a284-bdd7a463c576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46395", "type": "published-proof-of-concept", "source": "Telegram/kf4Urssb8wJGlEy3ZhDQuJbRUyCxL_25Ub6xyNT9N9dN9Mg", "content": "", "creation_timestamp": "2023-07-14T08:26:05.000000Z"}, {"uuid": "ad9fbde7-92f4-41bf-acda-b0ccdbe7404e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "Telegram/4k3A4ntNg4xcvwPkWdQ1N84lwxuJB70aNgLqWMJ_QgrE_Yo", "content": "", "creation_timestamp": "2023-02-07T12:47:05.000000Z"}, {"uuid": "8c629744-56bb-48d1-8314-9b79f114c2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "Telegram/XeGWMxPo2XivsWnPanq9-IRzv4Yms3WPUVXM00Wck1qh2vg", "content": "", "creation_timestamp": "2023-01-05T04:29:05.000000Z"}, {"uuid": "d246ad78-9299-4f30-bfba-7498a0427d8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46487", "type": "seen", "source": "https://t.me/cibsecurity/74017", "content": "\u203c\ufe0fCVE-2022-46487\u203c\ufe0f\n\nImproper initialization of x87 and SSE floatingpoint configuration registers in the sconeentry component of SCONE before 5.8.0 for Intel SGX allows a local attacker to compromise the execution integrity of floatingpoint operations in an enclave or access sensitive information via sidechannel analysis.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T01:30:51.000000Z"}, {"uuid": "fc3aba80-2449-4eaf-bc53-5fd4541eb6d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46486", "type": "seen", "source": "https://t.me/cibsecurity/74016", "content": "\u203c\ufe0fCVE-2022-46486\u203c\ufe0f\n\nA lack of pointervalidation logic in the sconedispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "creation_timestamp": "2023-12-31T01:30:46.000000Z"}, {"uuid": "6e26ed01-7f90-4c17-bc01-1cc868ba9902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "Telegram/sW5d9fmUYwBCBd5p0m4KHR33OMnL89OoDtqPJLuw77rW9-Q", "content": "", "creation_timestamp": "2023-02-01T04:25:05.000000Z"}, {"uuid": "93c5fe3d-fed9-44be-95d7-b5ed6978b212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46697", "type": "seen", "source": "https://t.me/RespaldoHackingTeam/657", "content": "#exploit\n1. CVE-2022-46697:\nOut-of-bounds access in IOMobileFrameBuffer\nhttps://github.com/antoniozekic/Proof-of-concepts/tree/main/CVE-2022-46697\n\n2. CVE-2022-38053, CVE-2023-21742, CVE-2023-21717:\nSharePoint Webpart Property Traversal\nhttps://testbnull.medium.com/ph%C3%A2n-t%C3%ADch-l%E1%BB%97-h%E1%BB%95ng-sharepoint-webpart-property-traversal-cve-2022-38053-cve-2023-21742-bc6931698a5f\n\n3. CVE-2023-23398:\nMicrosoft Excel Spoofing\nhttps://packetstormsecurity.com/files/171752/Microsoft-Excel-Spoofing.html", "creation_timestamp": "2023-04-13T07:13:01.000000Z"}, {"uuid": "d0f8d076-179d-4f72-aaf3-e1ab1bed22fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46697", "type": "seen", "source": "Telegram/YrcJwFF7LRTjg7mgQwAEoX7-6-7JVVBbOdwyqXnUuY7Sxg", "content": "", "creation_timestamp": "2023-04-17T11:58:07.000000Z"}, {"uuid": "937998ce-df96-46ee-b1d3-c9c72d539635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/ZeroDay_TM/708", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.\n\nhttps://github.com/zhuowei/WDBFontOverwrite\n\n- - - - - - - - - - - - - - - - - - - -\n-=[ @ZeroDay_TM ]=-", "creation_timestamp": "2023-01-27T14:05:19.000000Z"}, {"uuid": "f347a889-1540-403b-ba56-bacface38838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/665", "content": "\ud83d\udca3 \u0647\u0634\u062f\u0627\u0631!\n\n\u0627\u0628\u0631\u0627\u0632 \u0645\u0627\u0646\u06cc\u062a\u0648\u0631\u06cc\u0646\u06af Cacti \u06cc\u06a9\u06cc \u0627\u0632 \u0645\u0639\u0631\u0648\u0641\u062a\u0631\u06cc\u0646 \u0647\u0627 \u0648 \u067e\u0631\u06a9\u0627\u0631\u0628\u0631\u062f\u062a\u0631\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u060c \u0628\u062e\u0635\u0648\u0635 \u062f\u0631 \u0628\u062e\u0634 \u0634\u0628\u06a9\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0627\u06cc\u0631\u0627\u0646 \u0646\u06cc\u0632 \u062a\u0648\u062c\u0647 \u0648\u06cc\u0698\u0647 \u0627\u06cc \u0628\u0647 \u0622\u0646 \u0645\u06cc \u0634\u0648\u062f.\n\u062e\u06cc\u0644\u06cc \u0627\u0632 \u0645\u062c\u0645\u0648\u0639\u0647 \u0647\u0627\u060c \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0631\u0627\u062d\u062a\u06cc \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0648 \u0627\u0632 \u0647\u0645\u0647 \u0645\u0647\u0645\u062a\u0631 \u0645\u062a\u0646 \u0628\u0627\u0632 \u0648 \u0631\u0627\u06cc\u06af\u0627\u0646 \u0628\u0648\u062f\u0646\u060c \u0627\u0632 \u0622\u0646 \u0628\u0647\u0631\u0647 \u0645\u06cc \u0628\u0631\u062f\u0646\u062f.\n\n\u062d\u062a\u0645\u0627 \u0627\u062e\u0628\u0627\u0631 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 Solarwinds \u0631\u0627 \u0628\u0647 \u06cc\u0627\u062f \u062f\u0627\u0631\u06cc\u062f\u060c \u0627\u06cc\u0646\u062c\u0627 \u0628\u062d\u062b \u0645\u0642\u0627\u06cc\u0633\u0647 \u0646\u06cc\u0633\u062a \u0628\u06cc\u0634\u062a\u0631 \u0627\u0647\u0645\u06cc\u062a \u0648 \u062c\u0627\u06cc\u06af\u0627\u0647 \u0627\u06cc\u0646 \u0642\u0628\u06cc\u0644 \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0627\u0633\u062a \u06a9\u0647 \u0645\u0648\u0636\u0648\u0639 \u0631\u0627 \u067e\u0631 \u0631\u0646\u06af \u0645\u06cc \u06a9\u0646\u062f.\n\n\u0622\u0633\u06cc\u0628 \u067e\u0630\u06cc\u0631\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632 9.8 \u0627\u0632 \u0646\u0648\u0639 RCE (\u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u0628\u0631\u067e\u0627\u06cc\u06cc Reverse Shell \u0631\u0627 \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u0645\u0647\u0627\u062c\u0645 \u0628\u0647 \u0627\u0631\u0645\u063a\u0627\u0646 \u0645\u06cc \u0622\u0648\u0631\u062f) \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2022-46169 \u062f\u0631 \u0627\u06cc\u0646 \u0645\u062d\u0635\u0648\u0644 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a.\n\n\ud83d\udd11 \u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0627\u0628\u0632\u0627\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0646\u0645\u0627\u06cc\u062f\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u062a\u0631 \u0628\u0647 \u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0631\u0627 \u062f\u0631 \u0627\u0648\u0644\u0648\u06cc\u062a \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f.\n\n\u062c\u0632\u0626\u06cc\u0627\u062a  \u06a9\u0627\u0645\u0644: https://github.com/Cacti/cacti/security/advisories/GHSA-6p93-p743-35gf", "creation_timestamp": "2023-01-19T18:30:59.000000Z"}, {"uuid": "86c422fa-8bd3-47e9-8191-ce9138c1cba0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/645", "content": "CVE-2022-46164 : NodeBB <2.6.1 - Account Takeover \nPOC : https://github.com/stephenbradshaw/CVE-2022-46164-poc", "creation_timestamp": "2023-01-06T18:30:19.000000Z"}, {"uuid": "234d8530-3ca7-46ae-85c9-9f1201a2f1bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/629", "content": "CVE-2022-46169 : Cacti 1.2.22 - Unauthenticated Command Injection\u200c\nPOC : https://github.com/0xf4n9x/CVE-2022-46169", "creation_timestamp": "2022-12-18T21:29:02.000000Z"}, {"uuid": "d0ef4421-8a69-4a97-a71e-e412d7851b55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2101", "content": "#exploit\n1. CVE-2022-46164:\nNodeBB Account Takeover Flaw\nhttps://github.com/stephenbradshaw/CVE-2022-46164-poc\n\n2. CVE-2022-23087:\n\"Escaping from bhyve\"\nhttps://www.synacktiv.com/publications/escaping-from-bhyve.html\nhttps://github.com/synacktiv/bhyve", "creation_timestamp": "2023-01-05T15:07:56.000000Z"}, {"uuid": "f4d2dbb4-71db-4b48-b92e-9cf93963a5fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1850", "content": "#exploit\n1. CVE-2022-41050:\nA vulnerability in the MS Windows' User-Mode Printer Drivers\nhttps://ssd-disclosure.com/win32k-user-mode-printer-drivers-startdoc-uaf\n\n2. CVE-2022-46689:\nmacOS Dirty Cow bug\nhttps://github.com/zhuowei/MacDirtyCowDemo", "creation_timestamp": "2022-12-18T11:59:52.000000Z"}, {"uuid": "a9ffd1f2-a72c-45f7-a3d1-ade997820b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46649", "type": "seen", "source": "https://t.me/true_secator/4051", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IIoT.\n\n\u0412 \u0440\u0430\u043c\u0430\u0445 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 Otorio \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0440\u0435\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 OT.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IIoT \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0442\u044f\u043c OT, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u0430\u043a\u0442\u043e\u0440\u0443 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 OT \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-3703, CVE-2022-41607 \u0438 CVE-2022-40981) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RAS) ETIC Telecom \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041f\u044f\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f\u00a0InHand Networks InRouter 302 \u0438 InRouter 615, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 RCE.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u00ab\u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438).\n\n\u0412\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 InRouter \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 Sierra Wireless AirLink Router (CVE-2022-46649 \u0438 CVE-2022-46650).\n\n\u0411\u0430\u0433\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 RCE.\u00a0\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 - \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0435\u0442\u0438 OT \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443, \u0435\u0441\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IIoT \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u043e\u0442\u043a\u0430\u0437\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b Wi-Fi \u0438\u043b\u0438 \u0441\u043e\u0442\u043e\u0432\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b, \u043c\u043e\u0433\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u00ab\u043f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb AitM \u0441 \u043d\u0435\u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c.\n\n\u0410\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0430\u0440\u044c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u00a0\u0441\u043b\u0430\u0431\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00a0\u0434\u043e\u00a0\u0430\u0442\u0430\u043a \u0441\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f,\u00a0\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0447\u0438\u043f\u044b, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Otorio, \u0434\u043b\u044f \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a\u00a0WiGLE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0447\u0442\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u0438\u0445 \u043c\u0435\u0441\u0442\u043e\u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0442\u0440\u043c\u0435\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0439 Wi-Fi, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.", "creation_timestamp": "2023-02-10T11:50:07.000000Z"}, {"uuid": "7a72aa36-d883-4496-bbc9-ac03d3d4b2d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46650", "type": "seen", "source": "https://t.me/true_secator/4051", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043e\u043a\u0430\u0437\u0430\u0442\u044c\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u0438\u0437-\u0437\u0430 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IIoT.\n\n\u0412 \u0440\u0430\u043c\u0430\u0445 \u0448\u0438\u0440\u043e\u043a\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u0448\u0435\u043d\u0438\u044f\u0445 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u043e\u0439 Otorio \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043d\u0430\u0431\u043e\u0440 \u0438\u0437 38 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0441\u0442\u0430\u0442\u044c \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u043f\u043e\u0432\u0435\u0440\u0445\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f \u0430\u0442\u0430\u043a, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0440\u0435\u0434\u044b \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 OT.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 IIoT \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u043c \u0441\u0435\u0442\u044f\u043c OT, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u043e.\n\n\u041d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0437 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0442 \u0432\u043d\u0435\u0448\u043d\u0435\u043c\u0443 \u0430\u043a\u0442\u043e\u0440\u0443 \u043f\u0440\u044f\u043c\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0442\u044b\u0441\u044f\u0447\u0430\u043c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 OT \u0447\u0435\u0440\u0435\u0437 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442.\n\n\u0422\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2022-3703, CVE-2022-41607 \u0438 CVE-2022-40981) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0441\u0435\u0440\u0432\u0435\u0440 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (RAS) ETIC Telecom \u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\u041f\u044f\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f\u00a0InHand Networks InRouter 302 \u0438 InRouter 615, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 RCE.\n\n\u041e\u043d\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043e\u0431\u043b\u0430\u0447\u043d\u0443\u044e \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 \u00ab\u0434\u0438\u0441\u043f\u0435\u0442\u0447\u0435\u0440 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438).\n\n\u0412\u043c\u0435\u0448\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u043e\u0431\u043b\u0430\u043a\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 InRouter \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 root.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\u00a0\u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 Sierra Wireless AirLink Router (CVE-2022-46649 \u0438 CVE-2022-46650).\n\n\u0411\u0430\u0433\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 RCE.\u00a0\u041e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 - \u043d\u0430 \u0441\u0442\u0430\u0434\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f.\n\n\u041f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442, \u0447\u0442\u043e \u0441\u0435\u0442\u0438 OT \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u043c\u0443 \u0440\u0438\u0441\u043a\u0443, \u0435\u0441\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 IIoT \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0441\u043e\u0437\u0434\u0430\u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 \u043e\u0442\u043a\u0430\u0437\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0432\u0441\u0435 \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0448\u0438\u0441\u044c \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b Wi-Fi \u0438\u043b\u0438 \u0441\u043e\u0442\u043e\u0432\u044b\u0435 \u043a\u0430\u043d\u0430\u043b\u044b, \u043c\u043e\u0433\u0443\u0442 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u00ab\u043f\u0440\u043e\u0442\u0438\u0432\u043d\u0438\u043a \u043f\u043e\u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435\u00bb AitM \u0441 \u043d\u0435\u0431\u043b\u0430\u0433\u043e\u043f\u0440\u0438\u044f\u0442\u043d\u044b\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0432\u043e\u0437\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435\u043c.\n\n\u0410\u0442\u0430\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0432\u0430\u0440\u044c\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442 \u043d\u0430\u0446\u0435\u043b\u0438\u0432\u0430\u043d\u0438\u044f \u043d\u0430\u00a0\u0441\u043b\u0430\u0431\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f\u00a0\u0434\u043e\u00a0\u0430\u0442\u0430\u043a \u0441\u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f,\u00a0\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0430 \u043a\u043e\u043c\u0431\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0447\u0438\u043f\u044b, \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e Otorio, \u0434\u043b\u044f \u0438\u0445 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u0430\u043a\u0438\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b, \u043a\u0430\u043a\u00a0WiGLE, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0447\u0442\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u043e \u043f\u0440\u0438\u0433\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0446\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434, \u0438\u0445 \u043c\u0435\u0441\u0442\u043e\u043d\u0430\u0445\u043e\u0436\u0434\u0435\u043d\u0438\u044f \u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0439 \u0431\u043b\u0438\u0437\u043e\u0441\u0442\u0438.\n\n\u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u043d\u0442\u0440\u043c\u0435\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0441\u0445\u0435\u043c\u044b \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0438\u043c\u0435\u043d\u0430 \u0441\u0435\u0442\u0435\u0439 Wi-Fi, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u043b\u0443\u0436\u0431\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043c\u0435\u0440\u044b \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c.", "creation_timestamp": "2023-02-10T11:50:07.000000Z"}, {"uuid": "b418d087-46b3-4958-8c26-60a41ce1a98f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1666", "content": "#exploit\n1. CVE-2022-46169:\nCritical vulnerability affects Cacti network graphing solution\nhttps://securityonline.info/cve-2022-46169-critical-vulnerability-affects-cacti-network-graphing-solution\n\n2. Linux PrivEsc(2) - Scheduled Tasks (cron)\nhttps://medium.com/@tinopreter/linux-privesc-2-scheduled-tasks-cron-b23c4c4df152\n\n3. CVE-2022-45313/45315:\nMikrotik RouterOs <7.5/7.6 was discovered to contain an OOB R/ in the hotspot vuln/snmp process\nhttps://github.com/cq674350529/pocs_slides/tree/master/advisory/MikroTik/CVE-2022-45313\nhttps://github.com/cq674350529/pocs_slides/tree/master/advisory/MikroTik/CVE-2022-45315", "creation_timestamp": "2022-12-07T14:51:25.000000Z"}, {"uuid": "59a93e2c-be61-4fb4-9e27-9ac54763a277", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46146", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1619", "content": "#exploit\n1. CVE-2022-3328:\nRace condition in snap-confine's must_mkdir_and_open_with_perms()\nhttps://seclists.org/oss-sec/2022/q4/164\n\n2. CVE-2022-46146:\nAuthentication Bypass in Open-Source Prometheus Project\nhttps://securityonline.info/cve-2022-46146-authentication-bypass-in-open-source-prometheus-project\n\n3. CVE-2022-4116:\nQuarkus Java framework RCE\nhttps://joebeeton.github.io\n]-> https://github.com/JoeBeeton/simple-request-attacks", "creation_timestamp": "2022-12-06T04:04:16.000000Z"}, {"uuid": "74565b53-2d97-4935-adfe-1c22995fb023", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46871", "type": "seen", "source": "https://t.me/true_secator/4523", "content": "\ud83d\udea4 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ASUS \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u00ab\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f\u00bb\n\nASUS \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0441 \u043a\u0443\u043c\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \"Latest security updates\" \u043e\u0442 06/19/2023 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u2194\ufe0f \u0412 \u043d\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. \u0412 \u0441\u043f\u0438\u0441\u043a\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f CVE-2023-28702, CVE-2023-28703, CVE-2023-31195, CVE-2022-46871, CVE-2022-38105, CVE-2022-35401, CVE-2018-1160, CVE-2022-38393, CVE-2022-26376.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438: GT6, GT-AXE16000, GT-AX11000 PRO, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000, XT9, XT8, XT8 V2, RT-AX86U PRO, RT-AX86U, RT-AX86S, RT-AX82U, RT-AX58U, RT-AX3000, TUF-AX6000 \u0438 TUF-AX5400.\n\nhttps://www.asus.com/content/asus-product-security-advisory/#:~:text=06/19/2023%20New%20firmware%20with%20accumulate%20security%20updates\n\n\u270b @Russian_OSINT", "creation_timestamp": "2023-06-21T14:27:19.000000Z"}, {"uuid": "f0198d41-9d2e-4c4e-bc61-0aa155efe6fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2180", "content": "#Threat_Research\n1. Exploit Party: Bring Your Own Vulnerable Driver Attacks\nhttps://fourcore.io/blogs/bring-your-own-vulnerable-driver-attack\n2. Analyzing CVE-2022-46630 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330", "creation_timestamp": "2023-01-10T14:19:10.000000Z"}, {"uuid": "884c0b27-104a-4218-bf0e-8bac69c412f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2256", "content": "CVE-2022-46169\n\nExploit to CVE-2022-46169 vulnerability on Cacti 1.2.19\n\nhttps://system32.ink/news-feed/p/135/", "creation_timestamp": "2023-01-14T14:01:37.000000Z"}, {"uuid": "f81da029-c26a-4f0d-b2fd-4a6643b624b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/crackcodes/2203", "content": "Cacti: Unauthenticated Remote Code Execution (CVE-2022-46169)\nhttps://ift.tt/BUxzjQ9\n\nSubmitted January 11, 2023 at 05:28AM by monoimpact\nvia reddit https://ift.tt/hcIzBt2", "creation_timestamp": "2023-01-11T03:31:50.000000Z"}, {"uuid": "1dccb0aa-cd78-4d85-9c12-faa54beb36b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46630", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2180", "content": "#Threat_Research\n1. Exploit Party: Bring Your Own Vulnerable Driver Attacks\nhttps://fourcore.io/blogs/bring-your-own-vulnerable-driver-attack\n2. Analyzing CVE-2022-46630 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330", "creation_timestamp": "2023-01-10T14:19:10.000000Z"}, {"uuid": "78118dec-b3b0-413c-bfad-052b939ba75f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/true_secator/3939", "content": "\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439 Cacti \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043d\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u044b \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE-\u043e\u0448\u0438\u0431\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0445\u043e\u0434\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u0412\u0435\u0431-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u0434\u043b\u044f \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c Cacti \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043d\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 RRDtool.\n\n\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430 \u0441\u043e\u043f\u0440\u043e\u0432\u043e\u0436\u0434\u0430\u044e\u0449\u0438\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0434\u043b\u044f CVE-2022-46169 c \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 9,8, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 Cacti.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430\u00a0\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 5 \u0434\u0435\u043a\u0430\u0431\u0440\u044f, \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0434\u0435\u043d\u044c, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 SonarSource.\n\n\u0427\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a 3 \u044f\u043d\u0432\u0430\u0440\u044f SonarSource \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 CVE-2022-46169\u00a0Shadowserver \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u043f\u0435\u0440\u0432\u044b\u0435\u00a0\u043f\u043e\u043f\u044b\u0442\u043a\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u041f\u041e.\n\n\u0420\u0435\u0441\u0435\u0440\u0447\u0435\u0440\u044b Censys \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438, \u0447\u0442\u043e \u0438\u0437 6400 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u0435\u044e \u0445\u043e\u0441\u0442\u043e\u0432 Cacti, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0432 \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435, \u0442\u043e\u043b\u044c\u043a\u043e\u00a0\u043d\u0430 26 \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f\u00a0\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430.\u00a0\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f \u0432 \u0411\u0440\u0430\u0437\u0438\u043b\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438 \u0438 \u0421\u0428\u0410.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c Cacti \u0434\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.", "creation_timestamp": "2023-01-13T18:05:06.000000Z"}, {"uuid": "9aa9bcc3-3641-4c5e-b605-30eb3dc6988e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "published-proof-of-concept", "source": "https://t.me/DailyToolz/763", "content": "https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604\n\nAuto Exploit Responsive File Manager in Python 3 \nRCE w Extension Bypass\n\nExample Site That using Responsive File Manager : http://www.better.in/resources/js/tinymce/plugins/filemanager/\nExample Dork : inurl:/filemanager/ intext:\u201dexecute.php\u201d\n\nfor better and fresh results you can use bruteDir \n\nFor more Always join @DailyToolz", "creation_timestamp": "2023-04-29T18:20:49.000000Z"}, {"uuid": "39dd7e30-22b8-4302-a221-126b89607a63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/NeKaspersky/2755", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0431\u0440\u0435\u0448\u044c\u044e \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Cacti\n\n\u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Censys. \u041e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0447\u0430\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044f \u0433\u0440\u0430\u0444\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u043b\u044e\u0431\u043e\u0433\u043e \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043a \u0444\u0430\u0439\u043b\u0443 \"remote_agent.php\". \u0412 \u0445\u043e\u0434\u0435 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u041f\u041e \u043d\u0430 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0443\u0437\u043b\u0430\u0445. \n\n\u0411\u0440\u0435\u0448\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2022-46169\n\n\u041d\u0435\u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0439", "creation_timestamp": "2023-01-16T08:34:03.000000Z"}, {"uuid": "aef4cf3b-a1b6-48af-ae49-4ea2eab008ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46070", "type": "seen", "source": "https://t.me/ctinow/205130", "content": "https://ift.tt/FAiLQUn\nCVE-2022-46070", "creation_timestamp": "2024-03-11T23:26:59.000000Z"}, {"uuid": "f27103cd-df4c-4b90-8b78-6045cbae5304", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46070", "type": "seen", "source": "https://t.me/ctinow/205138", "content": "https://ift.tt/FAiLQUn\nCVE-2022-46070", "creation_timestamp": "2024-03-11T23:27:10.000000Z"}, {"uuid": "1163164e-e112-4da8-a62d-69bee7a2fc8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46499", "type": "seen", "source": "https://t.me/ctinow/202266", "content": "https://ift.tt/oOvX4yi\nCVE-2022-46499", "creation_timestamp": "2024-03-07T10:27:11.000000Z"}, {"uuid": "58d3df6c-4a4c-4dac-86b1-c5c72663e296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46498", "type": "seen", "source": "https://t.me/ctinow/202265", "content": "https://ift.tt/gvmIKtE\nCVE-2022-46498", "creation_timestamp": "2024-03-07T10:27:10.000000Z"}, {"uuid": "17cbf97c-7b16-401d-bdce-ee41548a3762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46497", "type": "seen", "source": "https://t.me/ctinow/202264", "content": "https://ift.tt/vypi6ZM\nCVE-2022-46497", "creation_timestamp": "2024-03-07T10:27:09.000000Z"}, {"uuid": "1845b306-51cf-4837-b7ac-18ec4e19a0d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46091", "type": "seen", "source": "https://t.me/ctinow/202263", "content": "https://ift.tt/JR7YX8t\nCVE-2022-46091", "creation_timestamp": "2024-03-07T10:27:08.000000Z"}, {"uuid": "8f1e2114-cac1-4d34-8268-9debb76ee71b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46499", "type": "seen", "source": "https://t.me/ctinow/202252", "content": "https://ift.tt/oOvX4yi\nCVE-2022-46499", "creation_timestamp": "2024-03-07T10:26:55.000000Z"}, {"uuid": "59f4726e-39e1-4248-abbf-a106f44022ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46498", "type": "seen", "source": "https://t.me/ctinow/202251", "content": "https://ift.tt/gvmIKtE\nCVE-2022-46498", "creation_timestamp": "2024-03-07T10:26:54.000000Z"}, {"uuid": "fcdd9c6c-fba3-4e7a-afd4-eb86c921a761", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46497", "type": "seen", "source": "https://t.me/ctinow/202250", "content": "https://ift.tt/vypi6ZM\nCVE-2022-46497", "creation_timestamp": "2024-03-07T10:26:53.000000Z"}, {"uuid": "1c36a8f1-fc38-4e6a-8aad-89997083202b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46091", "type": "seen", "source": "https://t.me/ctinow/202249", "content": "https://ift.tt/JR7YX8t\nCVE-2022-46091", "creation_timestamp": "2024-03-07T10:26:51.000000Z"}, {"uuid": "5369ebd5-dfd0-48d3-979c-33e8e8d858a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46089", "type": "seen", "source": "https://t.me/ctinow/202026", "content": "https://ift.tt/AYyIkT8\nCVE-2022-46089", "creation_timestamp": "2024-03-07T03:32:09.000000Z"}, {"uuid": "4a35901e-1108-4049-a884-9aceea34b38e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46089", "type": "seen", "source": "https://t.me/ctinow/202022", "content": "https://ift.tt/AYyIkT8\nCVE-2022-46089", "creation_timestamp": "2024-03-07T03:26:38.000000Z"}, {"uuid": "c4a29a5e-0b6d-4ba0-8ab4-b8a18e244b79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46088", "type": "seen", "source": "https://t.me/ctinow/200472", "content": "https://ift.tt/OpxSUfh\nCVE-2022-46088", "creation_timestamp": "2024-03-05T17:31:44.000000Z"}, {"uuid": "6e4f9a5f-87cb-4eef-ad90-09a3b8285e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46088", "type": "seen", "source": "https://t.me/ctinow/200469", "content": "https://ift.tt/OpxSUfh\nCVE-2022-46088", "creation_timestamp": "2024-03-05T17:27:25.000000Z"}, {"uuid": "dfc23ca6-7047-4bfa-8a68-b3649d449dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46908", "type": "seen", "source": "https://t.me/ctinow/182326", "content": "https://ift.tt/Pgc4kOh\nCVE-2022-46908 | Oracle MySQL Workbench 8.0.34 and prior Local Privilege Escalation", "creation_timestamp": "2024-02-09T23:26:47.000000Z"}, {"uuid": "8ac9c6b4-4a60-4ece-ae27-3ee2ca7e0819", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46751", "type": "seen", "source": "https://t.me/ctinow/180780", "content": "https://ift.tt/bgjioMx\nCVE-2022-46751 | Oracle Communications Cloud Native Core Automated Test Suite ATS Framework xml injection", "creation_timestamp": "2024-02-07T16:16:43.000000Z"}, {"uuid": "ec77a7fc-05a9-4d51-9681-6a4518a7e9e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46751", "type": "seen", "source": "https://t.me/ctinow/181952", "content": "https://ift.tt/8yTgdRn\nCVE-2022-46751 | Oracle Business Intelligence Enterprise Edition 6.4.0.0.0 Visual Analyzer unknown vulnerability", "creation_timestamp": "2024-02-09T10:51:22.000000Z"}, {"uuid": "6ab86383-cf81-4b88-ab5f-26ce14c0aa6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46710", "type": "seen", "source": "https://t.me/ctinow/175777", "content": "https://ift.tt/vrQDHmz\nCVE-2022-46710 | Apple macOS iCloud Link information disclosure", "creation_timestamp": "2024-01-30T09:41:33.000000Z"}, {"uuid": "0f7b9392-ebb1-4f22-b471-df2b6962e83a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46710", "type": "seen", "source": "https://t.me/ctinow/175776", "content": "https://ift.tt/cMfirZE\nCVE-2022-46710 | Apple iOS/iPadOS iCloud Link information disclosure", "creation_timestamp": "2024-01-30T09:41:32.000000Z"}, {"uuid": "729db44b-9c16-469f-9bba-504639a8cf8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46486", "type": "seen", "source": "https://t.me/ctinow/170997", "content": "https://ift.tt/qIipL1J\nCVE-2022-46486 | Scontain SCONE up to 5.7.x on Intel SGX __scone_dispatch information disclosure", "creation_timestamp": "2024-01-22T07:07:10.000000Z"}, {"uuid": "2cf24e6f-39eb-477f-8d73-e022eeb083b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46487", "type": "seen", "source": "https://t.me/ctinow/170918", "content": "https://ift.tt/9lcsr41\nCVE-2022-46487 | Scontain SCONE up to 5.7.x Floating Point __scone_entry observable behavioral discrepancy", "creation_timestamp": "2024-01-21T20:56:41.000000Z"}, {"uuid": "4836ca6d-9c90-4557-baf8-ecfb478f62b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46025", "type": "seen", "source": "https://t.me/ctinow/174858", "content": "https://ift.tt/2wBGlI3\nCVE-2022-46025 | Totolink N200RE v5 9.3.5u.6255_B20211224 Wi-Fi Information access control", "creation_timestamp": "2024-01-28T08:56:17.000000Z"}, {"uuid": "83a43521-75b1-4cea-a800-b1f31e4b47dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46721", "type": "seen", "source": "https://t.me/ctinow/169751", "content": "https://ift.tt/H57OtXi\nCVE-2022-46721 | Apple macOS Apple Neural Engine Privilege Escalation", "creation_timestamp": "2024-01-18T14:46:50.000000Z"}, {"uuid": "237b6c51-7fb6-4bda-ac0a-404d3f76b229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46480", "type": "seen", "source": "https://t.me/ctinow/158806", "content": "https://ift.tt/MxtlYNz\nCVE-2022-46480 | Ultraloq UL3 2nd Gen Smart Lock 02.27.0012 Bluetooth LE user session", "creation_timestamp": "2023-12-23T12:41:40.000000Z"}, {"uuid": "fc2441a4-368f-45ac-825c-31d153a1eba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46487", "type": "seen", "source": "https://t.me/ctinow/160748", "content": "https://ift.tt/wdVB3Xj\nCVE-2022-46487", "creation_timestamp": "2023-12-30T04:26:38.000000Z"}, {"uuid": "7277f3b5-9dab-4a99-9ff7-ac0c63e378fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46486", "type": "seen", "source": "https://t.me/ctinow/160747", "content": "https://ift.tt/DLiIBPo\nCVE-2022-46486", "creation_timestamp": "2023-12-30T04:26:37.000000Z"}, {"uuid": "abc2884d-08e5-446b-a4f6-e75521da1c9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46387", "type": "seen", "source": "https://t.me/cibsecurity/70279", "content": "\u203c CVE-2023-39150 \u203c\n\nConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fix for CVE-2022-46387.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T16:22:53.000000Z"}, {"uuid": "13d4127b-20bb-4705-92ae-db9008a3eda3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46025", "type": "seen", "source": "https://t.me/ctinow/165648", "content": "https://ift.tt/lO0b8e3\nCVE-2022-46025", "creation_timestamp": "2024-01-10T09:26:37.000000Z"}, {"uuid": "b3d84cb3-fe96-481a-b798-d5f78e9c3c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46836", "type": "seen", "source": "https://t.me/ctinow/157637", "content": "https://ift.tt/eRdrZAl\nCVE-2022-46836 Exploit", "creation_timestamp": "2023-12-21T12:18:51.000000Z"}, {"uuid": "a109ed5f-bae6-47a8-b13b-3c1b6f62cf6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46486", "type": "seen", "source": "https://t.me/ctinow/164503", "content": "https://ift.tt/D5JM6jG\nCVE-2022-46486 Exploit", "creation_timestamp": "2024-01-08T17:16:36.000000Z"}, {"uuid": "e429934d-452a-417c-a55b-dea7ad064665", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46487", "type": "seen", "source": "https://t.me/ctinow/163742", "content": "https://ift.tt/dRt6oXf\nCVE-2022-46487 Exploit", "creation_timestamp": "2024-01-05T22:16:47.000000Z"}, {"uuid": "56362203-f3d1-401d-a211-9c93468b9d7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46839", "type": "seen", "source": "https://t.me/ctinow/163495", "content": "https://ift.tt/EicXtIW\nCVE-2022-46839", "creation_timestamp": "2024-01-05T12:31:41.000000Z"}, {"uuid": "fe0df593-61c1-4513-a298-457c6b3d6f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46869", "type": "seen", "source": "https://t.me/cibsecurity/69600", "content": "\u203c CVE-2022-46869 \u203c\n\nLocal privilege escalation during installation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-01T00:13:18.000000Z"}, {"uuid": "82628b21-d689-4008-b6f1-8f9f7fa4e601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46868", "type": "seen", "source": "https://t.me/cibsecurity/69552", "content": "\u203c CVE-2022-46868 \u203c\n\nLocal privilege escalation during recovery due to improper soft link handling. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-31T18:13:12.000000Z"}, {"uuid": "a9225f29-1b87-4fa5-84e6-1f1515b0fa87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46783", "type": "seen", "source": "https://t.me/cibsecurity/69288", "content": "\u203c CVE-2022-46783 \u203c\n\nAn issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-28T16:16:53.000000Z"}, {"uuid": "2ca17a68-deb9-463c-94c8-54d617f74f8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46884", "type": "seen", "source": "https://t.me/cibsecurity/69125", "content": "\u203c CVE-2022-46884 \u203c\n\nA potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at an inopportune time. This could have lead to memory corruption or a potentially exploitable crash.*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 106. This vulnerability affects Firefox < 106.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T20:13:01.000000Z"}, {"uuid": "a458ed26-808c-4e52-b981-315c1dc48ef6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46751", "type": "seen", "source": "https://t.me/cibsecurity/68874", "content": "\u203c CVE-2022-46751 \u203c\n\nImproper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache Software Foundation Apache Ivy.This issue affects any version of Apache Ivy prior to 2.5.2.When Apache Ivy prior to 2.5.2 parses XML files - either its own configuration, Ivy files or Apache Maven POMs - it will allow downloading external document type definitions and expand any entity references contained therein when used.This can be used to exfiltrate data, access resources only the machine running Ivy has access to or disturb the execution of Ivy in different ways.Starting with Ivy 2.5.2 DTD processing is disabled by default except when parsing Maven POMs where the default is to allow DTD processing but only to include a DTD snippet shipping with Ivy that is needed to deal with existing Maven POMs that are not valid XML files but are nevertheless accepted by Maven. Access can be be made more lenient via newly introduced system properties where needed.Users of Ivy prior to version 2.5.2 can use Java system properties to restrict processing of external DTDs, see the section about \"JAXP Properties for External Access restrictions\" inside Oracle's \"Java API for XML Processing (JAXP) Security Guide\".\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-21T12:40:52.000000Z"}, {"uuid": "47674a86-8a42-40bc-bf00-37e1d6243994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46857", "type": "seen", "source": "https://t.me/cibsecurity/66885", "content": "\u203c CVE-2022-46857 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in SiteAlert plugin <=\u00c2\u00a01.9.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-18T16:30:55.000000Z"}, {"uuid": "fcc0d67d-7bd1-4ed6-8afd-cc366fea4989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46725", "type": "seen", "source": "https://t.me/cibsecurity/68526", "content": "\u203c CVE-2022-46725 \u203c\n\nA spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue is fixed in iOS 16.4 and iPadOS 16.4. Visiting a malicious website may lead to address bar spoofing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T02:25:52.000000Z"}, {"uuid": "726c578c-b9fb-4a96-bb32-c925313af7d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46706", "type": "seen", "source": "https://t.me/cibsecurity/68503", "content": "\u203c CVE-2022-46706 \u203c\n\nA type confusion issue was addressed with improved state handling. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to execute arbitrary code with kernel privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T02:19:44.000000Z"}, {"uuid": "d8e05af9-f267-4942-9225-cd1ec1adeac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46329", "type": "seen", "source": "https://t.me/cibsecurity/68314", "content": "\u203c CVE-2022-46329 \u203c\n\nProtection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-11T07:32:32.000000Z"}, {"uuid": "7ff4a0a5-7355-4ec3-9371-05073f414996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4623", "type": "seen", "source": "https://t.me/cibsecurity/65933", "content": "\u203c CVE-2022-4623 \u203c\n\nThe ND Shortcodes WordPress plugin before 7.0 does not validate and escape numerous of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-04T12:28:28.000000Z"}, {"uuid": "4f71378b-7f74-4b5d-8b56-02836281aef0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46485", "type": "seen", "source": "https://t.me/cibsecurity/67598", "content": "\u203c CVE-2022-46485 \u203c\n\nData Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a \"Text Field\", \"Comment Field\" or \"Contact Details\".\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T18:39:25.000000Z"}, {"uuid": "7d6779f4-dcfb-455e-a232-0174e665415b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46484", "type": "seen", "source": "https://t.me/cibsecurity/67596", "content": "\u203c CVE-2022-46484 \u203c\n\nInformation disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-02T18:39:23.000000Z"}, {"uuid": "2abd5cdc-44b4-415a-9a00-de7e1126eccc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4608", "type": "seen", "source": "https://t.me/cibsecurity/67292", "content": "\u203c CVE-2022-4608 \u203c\n\nA vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can only be exploited, if the HCI 60870-5-104 is configured with support for IEC 62351-3. After session resumption interval is expired an RTU500 initiated update of session parameters causes an unexpected restart due to a stack overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T12:28:28.000000Z"}, {"uuid": "89376a19-651e-451a-afb1-0b426011582e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46900", "type": "seen", "source": "https://t.me/cibsecurity/67271", "content": "\u203c CVE-2022-46900 \u203c\n\nAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal in the Task Exec filename. The Vocera Report Console contains various jobs that are executed on the server at specified intervals, e.g., backup, etc. An authenticated user has the ability to modify these entries and set the executable path and parameters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:31.000000Z"}, {"uuid": "e2641faa-e6dc-4728-889e-915300d9910e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46902", "type": "seen", "source": "https://t.me/cibsecurity/67268", "content": "\u203c CVE-2022-46902 \u203c\n\nAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is a Path Traversal for an Unzip operation. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. During the unzip operation, the code takes file paths from the ZIP archive and writes them to a Vocera temporary directory. Unfortunately, the code does not properly check if the file paths include directory traversal payloads that would escape the intended destination.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:25.000000Z"}, {"uuid": "f6b5dcd9-6108-4ef8-819b-ffc55632adf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46899", "type": "seen", "source": "https://t.me/cibsecurity/67262", "content": "\u203c CVE-2022-46899 \u203c\n\nAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Arbitrary File Upload. The BaseController class, that each of the service controllers derives from, allows for the upload of arbitrary files. If the HTTP request is a multipart/form-data POST request, any parameters with a filename entry will have their content written to a file in the Vocera upload-staging directory with the specified filename in the parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:17.000000Z"}, {"uuid": "2010fc05-678f-4b1d-a1fb-ca2e33113c65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46901", "type": "seen", "source": "https://t.me/cibsecurity/67256", "content": "\u203c CVE-2022-46901 \u203c\n\nAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This includes system tasks, and backing up, loading, and clearing of the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:08.000000Z"}, {"uuid": "41211b51-2423-430e-aa32-7e7b5df3feb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46898", "type": "seen", "source": "https://t.me/cibsecurity/67254", "content": "\u203c CVE-2022-46898 \u203c\n\nAn issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the \"restore SQL data\" filename. The Vocera Report Console contains a websocket function that allows for the restoration of the database from a ZIP archive that expects a SQL import file. The filename provided is not properly sanitized and allows for the inclusion of a path-traversal payload that can be used to escape the intended Vocera restoration directory. An attacker could exploit this vulnerability to point to a crafted ZIP archive that contains SQL commands that could be executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-26T00:27:06.000000Z"}, {"uuid": "9451a370-376a-400c-b1e8-432597ca9fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46794", "type": "seen", "source": "https://t.me/cibsecurity/64690", "content": "\u203c CVE-2022-46794 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in weightbasedshipping.Com WooCommerce Weight Based Shipping plugin <=\u00c2\u00a05.4.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:08.000000Z"}, {"uuid": "274f950f-e905-411a-8fd9-20d7baf24dc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46816", "type": "seen", "source": "https://t.me/cibsecurity/64686", "content": "\u203c CVE-2022-46816 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Booking Ultra Pro Appointments Booking Calendar Plugin plugin <=\u00c2\u00a01.1.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:04.000000Z"}, {"uuid": "50c686c5-18be-416c-aaed-9182e441e3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46651", "type": "seen", "source": "https://t.me/cibsecurity/66525", "content": "\u203c CVE-2022-46651 \u203c\n\nApache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considered low since it requires someone with access to Connection resources specifically updating the connection to exploit it. Users should upgrade to version 2.6.3 or later which has removed the vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T14:45:28.000000Z"}, {"uuid": "afd5f4d7-66db-4a17-bc8f-0670f154ed2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46819", "type": "seen", "source": "https://t.me/cibsecurity/63737", "content": "\u203c CVE-2022-46819 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Continuous announcement scroller plugin <=\u00c2\u00a013.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:25.000000Z"}, {"uuid": "d085ef18-5744-41f8-bee8-7e07a4cffb0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46817", "type": "seen", "source": "https://t.me/cibsecurity/63740", "content": "\u203c CVE-2022-46817 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Flyzoo Flyzoo Chat plugin <=\u00c2\u00a02.3.3 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:28.000000Z"}, {"uuid": "49741547-5425-493c-a1ee-1994c3e6af75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46377", "type": "seen", "source": "https://t.me/cibsecurity/63803", "content": "\u203c CVE-2022-46377 \u203c\n\nAn out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no IP address argument is provided to the `PORT` command.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-29T20:48:54.000000Z"}, {"uuid": "917ac67c-d2b5-400c-aca0-b81d86d66e6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46861", "type": "seen", "source": "https://t.me/cibsecurity/63732", "content": "\u203c CVE-2022-46861 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Zia Imtiaz Custom Login Page Styler for WordPress plugin <=\u00c2\u00a06.2 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T14:14:17.000000Z"}, {"uuid": "4ae1382f-7edf-4527-a57e-2bab606387a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46378", "type": "seen", "source": "https://t.me/cibsecurity/63813", "content": "\u203c CVE-2022-46378 \u203c\n\nAn out-of-bounds read vulnerability exists in the PORT command parameter extraction functionality of Weston Embedded uC-FTPs v 1.98.00. A specially-crafted set of network packets can lead to denial of service. An attacker can send packets to trigger this vulnerability.This vulnerability occurs when no port argument is provided to the `PORT` command.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-10T20:19:51.000000Z"}, {"uuid": "72ff01fa-b8a2-4284-85f6-6ab150269c55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46799", "type": "seen", "source": "https://t.me/cibsecurity/63423", "content": "\u203c CVE-2022-46799 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Easy Testimonial Slider and Form plugin <=\u00c2\u00a01.0.15 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-08T16:51:23.000000Z"}, {"uuid": "47fa8ba5-19ba-4088-80e8-3deba4cb7e0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/sysadm_in_up/1477", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689\n\nhttps://github.com/zhuowei/WDBFontOverwrite", "creation_timestamp": "2026-07-30T00:03:05.789888Z"}, {"uuid": "ac257beb-b2e4-4890-8260-f21e63bbdd8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46680", "type": "seen", "source": "https://t.me/cibsecurity/64538", "content": "\u203c CVE-2022-46680 \u203c\n\nA CWE-319: Cleartext transmission of sensitive information vulnerability exists that couldcause disclosure of sensitive information, denial of service, or modification of data if an attackeris able to intercept network traffic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-22T23:43:59.000000Z"}, {"uuid": "9d412dbc-5122-4c4b-a6c9-b724c4b7a6a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46851", "type": "seen", "source": "https://t.me/cibsecurity/64637", "content": "\u203c CVE-2022-46851 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Starter Templates plugin <=\u00c2\u00a03.1.20 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T18:26:30.000000Z"}, {"uuid": "d8e30ca1-3a4d-440d-82cf-baca8c308d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46813", "type": "seen", "source": "https://t.me/cibsecurity/64634", "content": "\u203c CVE-2022-46813 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner plugin <=\u00c2\u00a03.1.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T18:26:24.000000Z"}, {"uuid": "3591392c-8a37-4673-902b-1c4806068f56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46853", "type": "seen", "source": "https://t.me/cibsecurity/64632", "content": "\u203c CVE-2022-46853 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <=\u00c2\u00a05.0.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T18:26:23.000000Z"}, {"uuid": "c9279bfe-3a62-4d86-a6a9-96d5cf697299", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46658", "type": "seen", "source": "https://t.me/cibsecurity/64586", "content": "\u203c CVE-2022-46658 \u203c\n\nThe affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T02:25:54.000000Z"}, {"uuid": "1e991d4b-3b4f-45ca-ac26-5f01907ddd37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46738", "type": "seen", "source": "https://t.me/cibsecurity/64585", "content": "\u203c CVE-2022-46738 \u203c\n\nThe affected product exposes multiple sensitive data fields of the affected product. An attacker can use the SNMP command to get device mac address and login as admin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-23T02:25:53.000000Z"}, {"uuid": "d5bd5fbd-8938-4f91-b314-be4fd5a2c1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46886", "type": "seen", "source": "https://t.me/cibsecurity/62199", "content": "\u203c CVE-2022-46886 \u203c\n\nThere exists an open redirect within the response list update functionality of ServiceNow. This allows attackers to redirect users to arbitrary domains when clicking on a URL within a service-now domain.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T00:26:25.000000Z"}, {"uuid": "97878c73-3c6b-4be9-b0cf-5cd0af6d6684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46396", "type": "seen", "source": "https://t.me/cibsecurity/61930", "content": "\u203c CVE-2022-46396 \u203c\n\nAn issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T00:23:48.000000Z"}, {"uuid": "9ea10133-52b5-4212-9f3e-99332860f611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46703", "type": "seen", "source": "https://t.me/cibsecurity/61790", "content": "\u203c CVE-2022-46703 \u203c\n\nA logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2. An app may be able to read sensitive location information\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T22:23:05.000000Z"}, {"uuid": "6e207368-2ced-4300-a2d5-797a581cafcc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46717", "type": "seen", "source": "https://t.me/cibsecurity/61788", "content": "\u203c CVE-2022-46717 \u203c\n\nA logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch may be able to view user photos via accessibility features\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T22:23:03.000000Z"}, {"uuid": "e6afab3f-88e0-425d-ab69-7dbde713c901", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46716", "type": "seen", "source": "https://t.me/cibsecurity/61787", "content": "\u203c CVE-2022-46716 \u203c\n\nA logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2. Private Relay functionality did not match system settings\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T22:23:02.000000Z"}, {"uuid": "d6eb4676-abbb-4024-a8fc-330abdb00a62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46709", "type": "seen", "source": "https://t.me/cibsecurity/61786", "content": "\u203c CVE-2022-46709 \u203c\n\nA memory corruption issue was addressed with improved state management. This issue is fixed in iOS 16. An app may be able to execute arbitrary code with kernel privileges\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T22:23:00.000000Z"}, {"uuid": "c74b13b3-84e5-4d75-9f58-ceb0c7d7a055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46864", "type": "seen", "source": "https://t.me/cibsecurity/63603", "content": "\u203c CVE-2022-46864 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Umair Saleem Woocommerce Custom Checkout Fields Editor With Drag & Drop plugin <=\u00c2\u00a00.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:42.000000Z"}, {"uuid": "03538a21-d271-48f2-9419-7ec6865625f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46781", "type": "seen", "source": "https://t.me/cibsecurity/61569", "content": "\u203c CVE-2022-46781 \u203c\n\nAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outside of buffer bounds. This affects Valhall r29p0 through r41p0 before r42p0 and Avalon r41p0 before r42p0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T20:27:08.000000Z"}, {"uuid": "77bc082b-aa31-44e8-93ca-715d2a5ad36a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46858", "type": "seen", "source": "https://t.me/cibsecurity/63595", "content": "\u203c CVE-2022-46858 \u203c\n\nUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Amin A.Rezapour Product Specifications for Woocommerce plugin <=\u00c2\u00a00.6.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:29.000000Z"}, {"uuid": "b9c7bcbf-10ba-4138-bdbc-bfb9f7db7432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46844", "type": "seen", "source": "https://t.me/cibsecurity/63608", "content": "\u203c CVE-2022-46844 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PixelGrade PixFields plugin <=\u00c2\u00a00.7.0 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T16:38:50.000000Z"}, {"uuid": "23b78cc8-078b-4fa0-afd8-c0292131e73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46848", "type": "seen", "source": "https://t.me/cibsecurity/60880", "content": "\u203c CVE-2022-46848 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T12:39:04.000000Z"}, {"uuid": "b486fe59-87c6-487b-914d-979f9bddb8ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46863", "type": "seen", "source": "https://t.me/cibsecurity/60878", "content": "\u203c CVE-2022-46863 \u203c\n\nAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Event Manager plugin <= 9.6.4 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T12:38:59.000000Z"}, {"uuid": "42c8f040-456d-4a35-9078-9b70c7f83d37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46397", "type": "seen", "source": "https://t.me/cibsecurity/60991", "content": "\u203c CVE-2022-46397 \u203c\n\nFP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CBC Mode.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T02:14:58.000000Z"}, {"uuid": "235709d8-8070-4454-8d17-01bc3da2a1e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46855", "type": "seen", "source": "https://t.me/cibsecurity/60876", "content": "\u203c CVE-2022-46855 \u203c\n\nAuth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP Darko Responsive Pricing Table plugin <= 5.1.6 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T12:38:57.000000Z"}, {"uuid": "3b6e9803-d6ab-412b-a1e3-2546cb6150f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46302", "type": "seen", "source": "https://t.me/cibsecurity/62528", "content": "\u203c CVE-2022-46302 \u203c\n\nBroad access controls could allow site users to directly interact with the system Apache installation when providing the reverse proxy configurations for Tribe29's Checkmk <= 2.1.0p6, Checkmk <= 2.0.0p27, and all versions of Checkmk 1.6.0 (EOL) allowing an attacker to perform remote code execution with root privileges on the underlying host.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-20T18:30:56.000000Z"}, {"uuid": "1a939648-cade-4e27-8f35-a69f5e3adeed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46854", "type": "seen", "source": "https://t.me/cibsecurity/60262", "content": "\u203c CVE-2022-46854 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad \u00e2\u20ac\u201c Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T19:31:44.000000Z"}, {"uuid": "94edc7fc-40cd-4cf6-a955-c0cac361c127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46867", "type": "seen", "source": "https://t.me/cibsecurity/60261", "content": "\u203c CVE-2022-46867 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Chasil Universal Star Rating plugin <= 2.1.0 version.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-17T19:31:43.000000Z"}, {"uuid": "9db80b34-7fa1-4d28-8e14-853f87e6b05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4652", "type": "seen", "source": "https://t.me/cibsecurity/59922", "content": "\u203c CVE-2022-4652 \u203c\n\nThe Video Background WordPress plugin before 2.7.5 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:24.000000Z"}, {"uuid": "eb7244cb-ea66-4c16-8829-de2c63835b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46773", "type": "seen", "source": "https://t.me/cibsecurity/60094", "content": "\u203c CVE-2022-46773 \u203c\n\nIBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T23:30:15.000000Z"}, {"uuid": "bc389aa1-5013-4e31-a17b-ebc8c7ae0d58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46774", "type": "seen", "source": "https://t.me/cibsecurity/60078", "content": "\u203c CVE-2022-46774 \u203c\n\nIBM Manage Application 8.8.0 and 8.9.0 in the IBM Maximo Application Suite is vulnerable to incorrect default permissions which could give access to a user to actions that they should not have access to. IBM X-Force ID: 242953.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-15T21:30:03.000000Z"}, {"uuid": "5267b663-9cbf-4306-8ad4-f11d5f014b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46842", "type": "seen", "source": "https://t.me/cibsecurity/57421", "content": "\u203c CVE-2022-46842 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in JS Help Desk plugin <= 2.7.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:13.000000Z"}, {"uuid": "ead685af-5090-4d40-9a00-45889d534428", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4661", "type": "seen", "source": "https://t.me/cibsecurity/59920", "content": "\u203c CVE-2022-4661 \u203c\n\nThe Widgets for WooCommerce Products on Elementor WordPress plugin before 1.0.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-13T19:23:22.000000Z"}, {"uuid": "d44d3629-ffbe-499e-a8d9-e8d22b8728b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46752", "type": "seen", "source": "https://t.me/cibsecurity/59680", "content": "\u203c CVE-2022-46752 \u203c\n\nDell BIOS contains an Improper Authorization vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-08T20:23:19.000000Z"}, {"uuid": "56da514c-0370-4e7d-ac60-fbf78c8bac5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46394", "type": "seen", "source": "https://t.me/cibsecurity/59689", "content": "\u203c CVE-2022-46394 \u203c\n\nAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Valhall r39p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-08T22:24:02.000000Z"}, {"uuid": "625d61c3-9637-4b2a-af35-d5129f16bb28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46395", "type": "seen", "source": "https://t.me/cibsecurity/59479", "content": "\u203c CVE-2022-46395 \u203c\n\nAn issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r0p0 through r32p0, Bifrost r0p0 through r41p0 before r42p0, Valhall r19p0 through r41p0 before r42p0, and Avalon r41p0 before r42p0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-06T16:12:53.000000Z"}, {"uuid": "7c9fe6da-17d6-4e47-879b-e67a3e8e3127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46257", "type": "seen", "source": "https://t.me/cibsecurity/59599", "content": "\u203c CVE-2022-46257 \u203c\n\nAn information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resulting in the repository names being shown in the UI. To exploit this vulnerability, an attacker would need access to the GHES instance, permissions to modify GitHub Actions runner groups, and successfully guess the obfuscated ID of private repositories. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.7 and was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5. This vulnerability was reported via the GitHub Bug Bounty program.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-07T20:23:38.000000Z"}, {"uuid": "b43febfe-e870-4420-b95b-b8009065e0c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46637", "type": "seen", "source": "https://t.me/cibsecurity/58643", "content": "\u203c CVE-2022-46637 \u203c\n\nProlink router PRS1841 was discovered to contain hardcoded credentials for its Telnet and FTP services.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T00:47:00.000000Z"}, {"uuid": "2bc1580c-061b-4b38-98e0-879f03600170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46973", "type": "seen", "source": "https://t.me/cibsecurity/59401", "content": "\u203c CVE-2022-46973 \u203c\n\nReport v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-04T00:35:25.000000Z"}, {"uuid": "617bf9ff-5c46-4028-b764-3a83f2babcc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46934", "type": "seen", "source": "https://t.me/cibsecurity/57348", "content": "\u203c CVE-2022-46934 \u203c\n\nkkFileView v4.1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T22:14:23.000000Z"}, {"uuid": "8d6ce0bb-c019-4379-862f-96898b33ffb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46805", "type": "seen", "source": "https://t.me/cibsecurity/59252", "content": "\u203c CVE-2022-46805 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 leading to activation/deactivation of plugin rulesets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:53.000000Z"}, {"uuid": "1a6b04aa-19bd-4292-b50f-38c5542d9d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46815", "type": "seen", "source": "https://t.me/cibsecurity/57424", "content": "\u203c CVE-2022-46815 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Lauri Karisola / WP Trio Conditional Shipping for WooCommerce plugin <= 2.3.1 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:16.000000Z"}, {"uuid": "908d0cbe-8f07-4ecb-83e1-ac58bfa9f6a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46552", "type": "seen", "source": "https://t.me/cibsecurity/57394", "content": "\u203c CVE-2022-46552 \u203c\n\nD-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution (RCE) vulnerability via the lan(0)_dhcps_staticlist parameter. This vulnerability is exploited via a crafted POST request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T16:14:50.000000Z"}, {"uuid": "c22a174f-d9da-4c4d-91e6-3353455f1bd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "seen", "source": "https://t.me/cibsecurity/57393", "content": "\u203c CVE-2022-46604 \u203c\n\nAn issue in Tecrail Responsive FileManager v9.9.5 and below allows attackers to bypass the file extension check mechanism and upload a crafted PHP file, leading to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T16:14:49.000000Z"}, {"uuid": "7ea6bd48-cff1-494b-b85a-81728a04d053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46965", "type": "seen", "source": "https://t.me/cibsecurity/57391", "content": "\u203c CVE-2022-46965 \u203c\n\nPrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-02T15:41:26.000000Z"}, {"uuid": "d75bb546-5ab9-4c97-80d1-e834875f69a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4634", "type": "seen", "source": "https://t.me/cibsecurity/57432", "content": "\u203c CVE-2022-4634 \u203c\n\nAll versions prior to Delta Electronic\u00e2\u20ac\u2122s CNCSoft version 1.01.34 (running ScreenEditor versions 1.01.5 and prior) are vulnerable to a stack-based buffer overflow, which could allow an attacker to remotely execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:19.000000Z"}, {"uuid": "6bb523c8-a097-4531-bf36-013a9198c7e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4645", "type": "seen", "source": "https://t.me/cibsecurity/59387", "content": "\u203c CVE-2022-4645 \u203c\n\nLibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit e8131125.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-03T18:34:44.000000Z"}, {"uuid": "9e1b742c-f938-4b63-b8a9-a0a91c3abf8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46501", "type": "seen", "source": "https://t.me/cibsecurity/59350", "content": "\u203c CVE-2022-46501 \u203c\n\nAccruent LLC Maintenance Connection 2021 (all) & 2022.2 was discovered to contain a SQL injection vulnerability via the E-Mail to Work Order function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-03T00:47:40.000000Z"}, {"uuid": "7d5630fa-30a8-45a4-b8bf-53ff2152e844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46679", "type": "seen", "source": "https://t.me/cibsecurity/57273", "content": "\u203c CVE-2022-46679 \u203c\n\nDell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T12:14:16.000000Z"}, {"uuid": "63f0b11a-a2b0-406c-8446-1a2daa81c6ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46585", "type": "seen", "source": "https://t.me/cibsecurity/55647", "content": "\u203c CVE-2022-46585 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the REMOTE_USER parameter in the get_access (sub_45AC2C) function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:27:35.000000Z"}, {"uuid": "f0e4ad9e-d30f-46ca-ad86-3ad348e39530", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46588", "type": "seen", "source": "https://t.me/cibsecurity/55646", "content": "\u203c CVE-2022-46588 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the sys_service parameter in the setup_wizard_mydlink (sub_4104B8) function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:27:34.000000Z"}, {"uuid": "e2c99631-b7fc-4cc3-95cf-d99ec8cd0c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46601", "type": "seen", "source": "https://t.me/cibsecurity/55644", "content": "\u203c CVE-2022-46601 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the setbg_num parameter in the icp_setbg_img (sub_41DD68) function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:27:32.000000Z"}, {"uuid": "efa131ce-5a7a-48e1-ae12-5429527e524b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46798", "type": "seen", "source": "https://t.me/cibsecurity/59238", "content": "\u203c CVE-2022-46798 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in HasThemes ShopLentor plugin <= 2.5.1 leading to plugin settings change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:38.000000Z"}, {"uuid": "0d81c1d5-735d-4ac5-92e9-1391e6e09b94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46806", "type": "seen", "source": "https://t.me/cibsecurity/59235", "content": "\u203c CVE-2022-46806 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in VillaTheme Cart All In One For WooCommerce plugin <= 1.1.10 leading to cart modification.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T18:33:35.000000Z"}, {"uuid": "cbfdf333-fb0a-4a1c-984b-a3e59e2111ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46797", "type": "seen", "source": "https://t.me/cibsecurity/59230", "content": "\u203c CVE-2022-46797 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in Conversios All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce plugin <= 5.2.3 leads to plugin settings change.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T16:33:38.000000Z"}, {"uuid": "51c44531-b73e-4d74-84e2-a017ae454588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46785", "type": "seen", "source": "https://t.me/cibsecurity/58828", "content": "\u203c CVE-2022-46785 \u203c\n\nSquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T00:48:34.000000Z"}, {"uuid": "4878b3c7-f888-4e09-8930-2738e2141827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46784", "type": "seen", "source": "https://t.me/cibsecurity/58829", "content": "\u203c CVE-2022-46784 \u203c\n\nSquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T00:48:35.000000Z"}, {"uuid": "ecacd05f-6d2b-4f31-97bc-ef8570c59fa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46836", "type": "seen", "source": "https://t.me/cibsecurity/58534", "content": "\u203c CVE-2022-46836 \u203c\n\nPHP code injection in watolib auth.php and hosttags.php in Tribe29's Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker to inject and execute PHP code which will be executed upon request of the vulnerable component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:15:58.000000Z"}, {"uuid": "90dd3fde-ff0a-4a70-ad79-d06420ff6b28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46303", "type": "seen", "source": "https://t.me/cibsecurity/58531", "content": "\u203c CVE-2022-46303 \u203c\n\nCommand injection in SMS notifications in Tribe29 Checkmk <= 2.1.0p10, Checkmk <= 2.0.0p27, and Checkmk <= 1.6.0p29 allows an attacker with User Management permissions, as well as LDAP administrators in certain scenarios, to perform arbitrary commands within the context of the application's local permissions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:15:56.000000Z"}, {"uuid": "1040724d-2ade-4043-b69c-e6330e3f7480", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46440", "type": "seen", "source": "https://t.me/cibsecurity/58843", "content": "\u203c CVE-2022-46440 \u203c\n\nttftool v0.9.2 was discovered to contain a segmentation violation via the readU16 function at ttf.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T07:18:52.000000Z"}, {"uuid": "c0f8a5dd-1d82-48de-8a1c-3525580929f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46786", "type": "seen", "source": "https://t.me/cibsecurity/58822", "content": "\u203c CVE-2022-46786 \u203c\n\nSquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T22:18:48.000000Z"}, {"uuid": "c11da46d-dc60-40e5-b7b1-e428ac1e2ac1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4696", "type": "seen", "source": "https://t.me/cibsecurity/56340", "content": "\u203c CVE-2022-4696 \u203c\n\nThere exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is missing the IO_WQ_WORK_FILES flag, which signals that the operation won't use current->nsproxy, so its reference counter is not increased. This assumption is not always true as calling io_splice on specific files will call the get_uts function which will use current->nsproxy leading to invalidly decreasing its reference counter later causing the use-after-free vulnerability. We recommend upgrading to version 5.10.160 or above\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T16:29:24.000000Z"}, {"uuid": "953aa33e-2374-475e-9caa-e6c4c540169f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46163", "type": "seen", "source": "https://t.me/cibsecurity/56293", "content": "\u203c CVE-2022-46163 \u203c\n\nTravel support program is a rails app to support the travel support program of openSUSE (TSP). Sensitive user data (bank account details, password Hash) can be extracted via Ransack query injection. Every deployment of travel-support-program below the patched version is affected. The travel-support-program uses the Ransack library to implement search functionality. In its default configuration, Ransack will allow for query conditions based on properties of associated database objects [1]. The `*_start`, `*_end` or `*_cont` search matchers [2] can then be abused to exfiltrate sensitive string values of associated database objects via character-by-character brute-force (A match is indicated by the returned JSON not being empty). A single bank account number can be extracted with <200 requests, a password hash can be extracted with ~1200 requests, all within a few minutes. The problem has been patched in commit d22916275c51500b4004933ff1b0a69bc807b2b7. In order to work around this issue, you can also cherry pick that patch, however it will not work without the Rails 5.0 migration that was done in #150, which in turn had quite a few pull requests it depended on.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T00:38:43.000000Z"}, {"uuid": "9928e792-a33c-4453-831b-82b3de3f7c02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4666", "type": "seen", "source": "https://t.me/cibsecurity/58593", "content": "\u203c CVE-2022-4666 \u203c\n\nThe Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:56.000000Z"}, {"uuid": "30375be6-7ffd-459b-84ce-7395b4eec2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4669", "type": "seen", "source": "https://t.me/cibsecurity/58567", "content": "\u203c CVE-2022-4669 \u203c\n\nThe Page Builder: Live Composer WordPress plugin through 1.5.22 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:39.000000Z"}, {"uuid": "180ae513-0ee5-4c55-bd35-cd79676024d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4622", "type": "seen", "source": "https://t.me/cibsecurity/58566", "content": "\u203c CVE-2022-4622 \u203c\n\nThe Login Logout Menu WordPress plugin through 1.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:16:38.000000Z"}, {"uuid": "6af04044-be4a-4157-bb72-80cd5e5e18d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46475", "type": "seen", "source": "https://t.me/cibsecurity/56626", "content": "\u203c CVE-2022-46475 \u203c\n\nD-Link DIR 645A1 1.06B01_Beta01 was discovered to contain a stack overflow via the service= variable in the genacgi_main function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T00:15:29.000000Z"}, {"uuid": "cae30bf3-8a51-4d52-8906-894311781e5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46648", "type": "seen", "source": "https://t.me/cibsecurity/56577", "content": "\u203c CVE-2022-46648 \u203c\n\nruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a repository containing a specially crafted filename to the product. This vulnerability is different from CVE-2022-47318.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T12:25:07.000000Z"}, {"uuid": "ff8f9d7c-0501-457c-acc1-f8d482282019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46891", "type": "seen", "source": "https://t.me/cibsecurity/56576", "content": "\u203c CVE-2022-46891 \u203c\n\nAn issue was discovered in the Arm Mali GPU Kernel Driver. There is a use-after-free. A non-privileged user can make improper GPU processing operations to gain access to already freed memory. This affects Midgard r13p0 through r32p0, Bifrost r1p0 through r40p0, and Valhall r19p0 through r40p0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T12:25:03.000000Z"}, {"uuid": "6924a7cb-0cdc-45bd-b0c6-4e2de0428592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4621", "type": "seen", "source": "https://t.me/cibsecurity/56602", "content": "\u203c CVE-2022-4621 \u203c\n\nPanasonic Sanyo CCTV Network Cameras versions 1.02-05 and 2.03-0x are vulnerable to CSRFs that can be exploited to allow an attacker to perform changes with administrator level privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T20:40:17.000000Z"}, {"uuid": "7845446b-d1b6-4a91-a8ff-0570e9c0c76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4655", "type": "seen", "source": "https://t.me/cibsecurity/56557", "content": "\u203c CVE-2022-4655 \u203c\n\nThe Welcart e-Commerce WordPress plugin before 2.8.9 does not validate and escapes one of its shortcode attributes, which could allow users with a role as low as a contributor to perform a Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T18:30:12.000000Z"}, {"uuid": "77f05ba8-44c8-40bc-a60c-eb1711e887d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4658", "type": "seen", "source": "https://t.me/cibsecurity/56556", "content": "\u203c CVE-2022-4658 \u203c\n\nThe RSSImport WordPress plugin through 4.6.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T18:30:11.000000Z"}, {"uuid": "3572f2ee-cec1-4487-bf8c-3dd5369c5443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4648", "type": "seen", "source": "https://t.me/cibsecurity/56550", "content": "\u203c CVE-2022-4648 \u203c\n\nThe Real Testimonials WordPress plugin before 2.6.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T18:24:26.000000Z"}, {"uuid": "34a7c1c7-9e5b-4ab7-8b70-6ccf35f972b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46367", "type": "seen", "source": "https://t.me/cibsecurity/56435", "content": "\u203c CVE-2022-46367 \u203c\n\nRumpus - FTP server Cross-site request forgery (CSRF) \u00e2\u20ac\u201c Privilege escalation vulnerability that may allow privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T18:30:38.000000Z"}, {"uuid": "1a4b04a5-42f7-4237-bfec-5ac82aa7e9de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46372", "type": "seen", "source": "https://t.me/cibsecurity/56434", "content": "\u203c CVE-2022-46372 \u203c\n\nAlotcer - AR7088H-A firmware version 16.10.3 Command execution Improper validation of unspecified input field may allow Authenticated command execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T18:30:37.000000Z"}, {"uuid": "7d999923-827e-4343-8a7f-2bd730b83797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46371", "type": "seen", "source": "https://t.me/cibsecurity/56433", "content": "\u203c CVE-2022-46371 \u203c\n\nAlotcer - AR7088H-A firmware version 16.10.3 Information disclosure. Unspecified error message contains the default administrator user name.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T18:30:36.000000Z"}, {"uuid": "c4bc3114-341d-43e3-88fb-038d580aa08f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46368", "type": "seen", "source": "https://t.me/cibsecurity/56430", "content": "\u203c CVE-2022-46368 \u203c\n\nRumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) \u00e2\u20ac\u201c vulnerability may allow unauthorized action on behalf of authenticated users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T18:30:30.000000Z"}, {"uuid": "e222fa24-31fc-4bff-9f25-e9b5d60fe8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4653", "type": "seen", "source": "https://t.me/cibsecurity/56538", "content": "\u203c CVE-2022-4653 \u203c\n\nThe Greenshift WordPress plugin before 4.8.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T18:24:06.000000Z"}, {"uuid": "13d75100-d84f-4832-a7c9-dd1c8daff538", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46093", "type": "seen", "source": "https://t.me/cibsecurity/56500", "content": "\u203c CVE-2022-46093 \u203c\n\nHospital Management System v1.0 is vulnerable to SQL Injection. Attackers can gain administrator privileges without the need for a password.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-14T00:36:35.000000Z"}, {"uuid": "348dabd9-9a96-4f0f-998b-72555f072067", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46503", "type": "seen", "source": "https://t.me/cibsecurity/56424", "content": "\u203c CVE-2022-46503 \u203c\n\nA cross-site scripting (XSS) vulnerability in the component /admin/register.php of Online Student Enrollment System v1.0 allows attackers to execute arbitrary web scripts via a crafted payload injected into the name parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T18:30:24.000000Z"}, {"uuid": "7c156663-0801-4ba1-9e71-55513a912cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46472", "type": "seen", "source": "https://t.me/cibsecurity/56454", "content": "\u203c CVE-2022-46472 \u203c\n\nHelmet Store Showroom Site v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /hss/classes/Users.php?f=delete.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T00:30:33.000000Z"}, {"uuid": "6d2150cf-27a1-4200-8574-2d7a68234848", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46502", "type": "seen", "source": "https://t.me/cibsecurity/56465", "content": "\u203c CVE-2022-46502 \u203c\n\nOnline Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T07:30:48.000000Z"}, {"uuid": "d2f2c8a1-2833-4433-a1a9-715149b6e6b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46471", "type": "seen", "source": "https://t.me/cibsecurity/56464", "content": "\u203c CVE-2022-46471 \u203c\n\nOnline Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter at /healthcare/Admin/consulting_detail.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T07:30:47.000000Z"}, {"uuid": "6afb5a46-d802-4aaa-8336-1a3970425895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46438", "type": "seen", "source": "https://t.me/cibsecurity/56460", "content": "\u203c CVE-2022-46438 \u203c\n\nA cross-site scripting (XSS) vulnerability in the /admin/article_category.php component of DouPHP v1.7 20221118 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the description parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T02:35:28.000000Z"}, {"uuid": "dba0d9ff-08f5-4ac1-bb22-64cb2ecc5c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46622", "type": "seen", "source": "https://t.me/cibsecurity/56457", "content": "\u203c CVE-2022-46622 \u203c\n\nA cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T00:30:39.000000Z"}, {"uuid": "7d860ad4-e8d2-4ddc-96d0-7eaf6ea9512b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46623", "type": "seen", "source": "https://t.me/cibsecurity/56456", "content": "\u203c CVE-2022-46623 \u203c\n\nJudging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T00:30:38.000000Z"}, {"uuid": "ba60fdfc-72f8-4db7-ba05-412ace8598e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46370", "type": "seen", "source": "https://t.me/cibsecurity/56428", "content": "\u203c CVE-2022-46370 \u203c\n\nRumpus - FTP server version 9.0.7.1 Improper Token Verification\u00e2\u20ac\u201c vulnerability may allow bypassing identity verification.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T18:30:28.000000Z"}, {"uuid": "d9a99316-2b2b-4dd6-b25b-6c8fed69afdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46892", "type": "seen", "source": "https://t.me/cibsecurity/58249", "content": "\u203c CVE-2022-46892 \u203c\n\nIn Ampere AltraMax and Ampere Altra before 2.10c, improper access controls allows the OS to reinitialize a disabled root complex.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-15T20:46:40.000000Z"}, {"uuid": "f1ece49d-834b-49f8-a603-dce83b4a825e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46176", "type": "seen", "source": "https://t.me/cibsecurity/56396", "content": "\u203c CVE-2022-46176 \u203c\n\nCargo is a Rust package manager. The Rust Security Response WG was notified that Cargo did not perform SSH host key verification when cloning indexes and dependencies via SSH. An attacker could exploit this to perform man-in-the-middle (MITM) attacks. This vulnerability has been assigned CVE-2022-46176. All Rust versions containing Cargo before 1.66.1 are vulnerable. Note that even if you don't explicitly use SSH for alternate registry indexes or crate dependencies, you might be affected by this vulnerability if you have configured git to replace HTTPS connections to GitHub with SSH (through git's [`url..insteadOf`][1] setting), as that'd cause you to clone the crates.io index through SSH. Rust 1.66.1 will ensure Cargo checks the SSH host key and abort the connection if the server's public key is not already trusted. We recommend everyone to upgrade as soon as possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T00:36:03.000000Z"}, {"uuid": "dd9851a0-12cc-4536-81f7-3db09f85401f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46649", "type": "seen", "source": "https://t.me/cibsecurity/57934", "content": "\u203c CVE-2022-46649 \u203c\n\nAcemanager in ALEOS before version 4.16 allows a user with valid credentials to manipulate the IP logging operation to execute arbitrary shell commands on the device.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-10T20:32:34.000000Z"}, {"uuid": "0437a183-39d3-4039-b686-174ca1691c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46650", "type": "seen", "source": "https://t.me/cibsecurity/57933", "content": "\u203c CVE-2022-46650 \u203c\n\nAcemanager in ALEOS before version 4.16 allows a user with valid credentials to reconfigure the device to expose the ACEManager credentials on the pre-login status page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-10T20:32:33.000000Z"}, {"uuid": "a0625129-d7e3-4d17-94b5-99a5a7cae2c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46823", "type": "seen", "source": "https://t.me/cibsecurity/56228", "content": "\u203c CVE-2022-46823 \u203c\n\nA vulnerability has been identified in Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.4), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.0 < V3.3.9), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.8). The affected module is vulnerable to reflected cross-site scripting (XSS) attacks. This could allow an attacker to extract sensitive information by tricking users into accessing a malicious link.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T14:28:33.000000Z"}, {"uuid": "d9b5a0bd-539f-4dcd-ad2b-4c9d2dad2a9b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46073", "type": "seen", "source": "https://t.me/cibsecurity/54531", "content": "\u203c CVE-2022-46073 \u203c\n\nHelmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:07.000000Z"}, {"uuid": "c2d75ad6-ebca-46fb-9937-5b83d95e97f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46862", "type": "seen", "source": "https://t.me/cibsecurity/58073", "content": "\u203c CVE-2022-46862 \u203c\n\nCross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master \u00e2\u20ac\u201c Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.7 versions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T14:35:41.000000Z"}, {"uuid": "9241556b-b17a-483a-8d37-94bd7ad76dbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46285", "type": "seen", "source": "https://t.me/cibsecurity/57697", "content": "\u203c CVE-2022-46285 \u203c\n\nA flaw was found in libXpm. This issue occurs when parsing a file with a comment not closed; the end-of-file condition will not be detected, leading to an infinite loop and resulting in a Denial of Service in the application linked to the library.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T22:23:22.000000Z"}, {"uuid": "f24745ec-d0e8-4328-875d-eb224369df7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46598", "type": "seen", "source": "https://t.me/cibsecurity/55633", "content": "\u203c CVE-2022-46598 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a command injection vulnerability via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_5g function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:27:15.000000Z"}, {"uuid": "259794b3-7be9-41b8-ae83-8158cf4cdc01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46663", "type": "seen", "source": "https://t.me/cibsecurity/57712", "content": "\u203c CVE-2022-46663 \u203c\n\nIn GNU Less before 609, crafted data can result in \"less -R\" not filtering ANSI escape sequences sent to the terminal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T00:24:26.000000Z"}, {"uuid": "ed98b34b-51d3-41e8-8cf1-c36bc41f31b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4670", "type": "seen", "source": "https://t.me/cibsecurity/57575", "content": "\u203c CVE-2022-4670 \u203c\n\nThe PDF.js Viewer WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:25.000000Z"}, {"uuid": "229b39ef-15f3-4b89-8388-04eb662c6a50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4664", "type": "seen", "source": "https://t.me/cibsecurity/57576", "content": "\u203c CVE-2022-4664 \u203c\n\nThe Logo Slider WordPress plugin before 3.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:26.000000Z"}, {"uuid": "c4ec6378-14fa-4bd4-a6be-8c5abb271221", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46496", "type": "seen", "source": "https://t.me/cibsecurity/57636", "content": "\u203c CVE-2022-46496 \u203c\n\nBTicino Door Entry HOMETOUCH for iOS 1.4.2 was discovered to be missing an SSL certificate.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T02:28:30.000000Z"}, {"uuid": "aad6683d-32c4-40c6-baab-b6641c420735", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4674", "type": "seen", "source": "https://t.me/cibsecurity/57587", "content": "\u203c CVE-2022-4674 \u203c\n\nThe Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:42.000000Z"}, {"uuid": "a1e99dcf-98fc-4857-bb0e-6f00282e63d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4697", "type": "seen", "source": "https://t.me/cibsecurity/55250", "content": "\u203c CVE-2022-4697 \u203c\n\nThe ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u00e2\u20ac\u02dcwp_user_cover_default_image_url\u00e2\u20ac\u2122 parameter in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:41.000000Z"}, {"uuid": "850b8762-52df-4ac7-b50e-067bfe98355b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4657", "type": "seen", "source": "https://t.me/cibsecurity/57574", "content": "\u203c CVE-2022-4657 \u203c\n\nThe Restaurant Menu WordPress plugin before 2.3.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:24.000000Z"}, {"uuid": "58c0e43b-bfc8-4e51-8ef9-260bcfa0a3d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46586", "type": "seen", "source": "https://t.me/cibsecurity/55612", "content": "\u203c CVE-2022-46586 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the qcawifi.wifi%d_vap%d.maclist parameter in the kick_ban_wifi_mac_allow (sub_415B00) function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:46.000000Z"}, {"uuid": "e808757b-2303-456e-afbb-f15674cbd973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46583", "type": "seen", "source": "https://t.me/cibsecurity/55609", "content": "\u203c CVE-2022-46583 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reboot_type parameter in the wizard_ipv6 (sub_41C380) function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:43.000000Z"}, {"uuid": "8b4ba1f2-02ed-44c4-85b6-abfb1c8bef5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46591", "type": "seen", "source": "https://t.me/cibsecurity/55599", "content": "\u203c CVE-2022-46591 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the reject_url parameter in the reject (sub_41BD60) function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:27.000000Z"}, {"uuid": "ab141121-3826-438f-801d-57d4c299d98d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46600", "type": "seen", "source": "https://t.me/cibsecurity/55596", "content": "\u203c CVE-2022-46600 \u203c\n\nTRENDnet TEW755AP 1.13B01 was discovered to contain a stack overflow via the wps_sta_enrollee_pin parameter in the action set_sta_enrollee_pin_24g function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T00:20:21.000000Z"}, {"uuid": "28ef31b4-30f6-44ff-a3ee-0c1bef90273d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4675", "type": "seen", "source": "https://t.me/cibsecurity/56850", "content": "\u203c CVE-2022-4675 \u203c\n\nThe Mongoose Page Plugin WordPress plugin before 1.9.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:25:22.000000Z"}, {"uuid": "92bf7a9d-652a-4fea-ba09-c086d7f1c996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46174", "type": "seen", "source": "https://t.me/cibsecurity/55467", "content": "\u203c CVE-2022-46174 \u203c\n\nefs-utils is a set of Utilities for Amazon Elastic File System (EFS). A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to receive NFS connections prior to applying the TLS tunnel. In affected versions, concurrent mount operations can allocate the same local port, leading to either failed mount operations or an inappropriate mapping from an EFS customer\u00e2\u20ac\u2122s local mount points to that customer\u00e2\u20ac\u2122s EFS file systems. This issue is patched in version v1.34.4. There is no recommended work around. We recommend affected users update the installed version of efs-utils to v1.34.4 or later.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T12:12:18.000000Z"}, {"uuid": "9f0a1a3c-c595-4f72-9e36-91bcee092ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46173", "type": "seen", "source": "https://t.me/cibsecurity/55466", "content": "\u203c CVE-2022-46173 \u203c\n\nElrond-GO is a go implementation for the Elrond Network protocol. Versions prior to 1.3.50 are subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data. The problem was a bad correlation between the transaction caches and the processing component. If the above-mentioned transaction was sent with more gas than required, the smart contract result (SCR transaction) that should have returned the leftover gas, would have been wrongly added to a cache that the processing unit did not consider. The node stopped notarizing metachain blocks. The fix was actually to extend the SCR transaction search in all other caches if it wasn't found in the correct (expected) sharded-cache. There are no known workarounds at this time. This issue has been patched in version 1.3.50.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T12:12:14.000000Z"}, {"uuid": "06d1e160-b158-4605-80df-b6214b3eff32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46172", "type": "seen", "source": "https://t.me/cibsecurity/55464", "content": "\u203c CVE-2022-46172 \u203c\n\nauthentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, and 2022.11.4, any authenticated user can create an arbitrary number of accounts through the default flows. This would circumvent any policy in a situation where it is undesirable for users to create new accounts by themselves. This may also affect other applications as these new basic accounts would exist throughout the SSO infrastructure. By default the newly created accounts cannot be logged into as no password reset exists by default. However password resets are likely to be enabled by most installations. This vulnerability pertains to the user context used in the default-user-settings-flow, /api/v3/flows/instances/default-user-settings-flow/execute/. This issue has been fixed in versions 2022.10.4 and 2022.11.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T12:12:12.000000Z"}, {"uuid": "7c0079f4-ff35-45e0-8b25-a748f46045c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46179", "type": "seen", "source": "https://t.me/cibsecurity/55462", "content": "\u203c CVE-2022-46179 \u203c\n\nLiuOS is a small Python project meant to imitate the functions of a regular operating system. Version 0.1.0 and prior of LiuOS allow an attacker to set the GITHUB_ACTIONS environment variable to anything other than null or true and skip authentication checks. This issue is patched in the latest commit (c658b4f3e57258acf5f6207a90c2f2169698ae22) by requiring the var to be set to true, causing a test script to run instead of being able to login. A potential workaround is to check for the GITHUB_ACTIONS environment variable and set it to \"\" (no quotes) to null the variable and force credential checks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T12:12:10.000000Z"}, {"uuid": "f95a6000-73fd-4bb5-9619-37876afda32f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46740", "type": "seen", "source": "https://t.me/cibsecurity/55505", "content": "\u203c CVE-2022-46740 \u203c\n\nThere is a denial of service vulnerability in the Wi-Fi module of the HUAWEI WS7100-20 Smart WiFi Router.Successful exploit could cause a denial of service (DoS) condition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T20:12:35.000000Z"}, {"uuid": "1c0e9a04-6bf8-4c2d-80a9-b606ca460f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4695", "type": "seen", "source": "https://t.me/cibsecurity/55424", "content": "\u203c CVE-2022-4695 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:46.000000Z"}, {"uuid": "ed873512-8d1e-408b-9021-39691481c9cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4694", "type": "seen", "source": "https://t.me/cibsecurity/55410", "content": "\u203c CVE-2022-4694 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:29.000000Z"}, {"uuid": "a6c8b2f5-824a-47d2-9a77-9f74cd003403", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4691", "type": "seen", "source": "https://t.me/cibsecurity/55418", "content": "\u203c CVE-2022-4691 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T18:13:40.000000Z"}, {"uuid": "f1d2862c-793d-4750-88e8-9296ea457074", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46764", "type": "seen", "source": "https://t.me/cibsecurity/55381", "content": "\u203c CVE-2022-46764 \u203c\n\nA SQL injection issue in the web API in TrueConf Server 5.2.0.10225 allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T14:15:32.000000Z"}, {"uuid": "0ae83f56-97b4-4265-a621-a7ce5e1aee0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46763", "type": "seen", "source": "https://t.me/cibsecurity/55382", "content": "\u203c CVE-2022-46763 \u203c\n\nA SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-27T07:41:21.000000Z"}, {"uuid": "6024a6e5-33f7-4aed-8e7c-ec9eb275b1c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46171", "type": "seen", "source": "https://t.me/cibsecurity/55242", "content": "\u203c CVE-2022-46171 \u203c\n\nTauri is a framework for building binaries for all major desktop platforms. The filesystem glob pattern wildcards `*`, `?`, and `[...]` match file path literals and leading dots by default, which unintentionally exposes sub folder content of allowed paths. Scopes without the wildcards are not affected. As `**` allows for sub directories the behavior there is also as expected. The issue has been patched in the latest release and was backported into the currently supported 1.x branches. There are no known workarounds at the time of publication.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T16:14:26.000000Z"}, {"uuid": "6c46a7b6-8fcb-4c68-8105-372a06577a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4690", "type": "seen", "source": "https://t.me/cibsecurity/55239", "content": "\u203c CVE-2022-4690 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:33.000000Z"}, {"uuid": "1f64a758-bf94-445c-8dad-092e16893553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4688", "type": "seen", "source": "https://t.me/cibsecurity/55238", "content": "\u203c CVE-2022-4688 \u203c\n\nImproper Authorization in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:33.000000Z"}, {"uuid": "a5b89497-be3e-406f-9ddb-f018dc18a90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4685", "type": "seen", "source": "https://t.me/cibsecurity/55237", "content": "\u203c CVE-2022-4685 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:32.000000Z"}, {"uuid": "7a6f0327-fe68-4efc-8dbf-56b0a9ebfedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4687", "type": "seen", "source": "https://t.me/cibsecurity/55236", "content": "\u203c CVE-2022-4687 \u203c\n\nIncorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:31.000000Z"}, {"uuid": "f0e68fb3-8cbc-4448-b4c7-4517d0a147c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4686", "type": "seen", "source": "https://t.me/cibsecurity/55235", "content": "\u203c CVE-2022-4686 \u203c\n\nImproper Authentication in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:29.000000Z"}, {"uuid": "aa9ffffc-fd95-4c5f-a792-473136644f07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46175", "type": "seen", "source": "https://t.me/cibsecurity/55283", "content": "\u203c CVE-2022-46175 \u203c\n\nJSON5 is an extension to the popular JSON file format that aims to be easier to write and maintain by hand (e.g. for config files). The `parse` method of the JSON5 library before and including version `2.2.1` does not restrict parsing of keys named `__proto__`, allowing specially crafted strings to pollute the prototype of the resulting object. This vulnerability pollutes the prototype of the object returned by `JSON5.parse` and not the global Object prototype, which is the commonly understood definition of Prototype Pollution. However, polluting the prototype of a single object can have significant security impact for an application if the object is later used in trusted operations. This vulnerability could allow an attacker to set arbitrary and unexpected keys on the object returned from `JSON5.parse`. The actual impact will depend on how applications utilize the returned object and how they filter unwanted keys, but could include denial of service, cross-site scripting, elevation of privilege, and in extreme cases, remote code execution. `JSON5.parse` should restrict parsing of `__proto__` keys when parsing JSON strings to objects. As a point of reference, the `JSON.parse` method included in JavaScript ignores `__proto__` keys. Simply changing `JSON5.parse` to `JSON.parse` in the examples above mitigates this vulnerability. This vulnerability is patched in json5 version 2.2.2 and later.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-24T11:04:32.000000Z"}, {"uuid": "9aaf706c-97ff-456c-a43d-7e19b80c60fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4684", "type": "seen", "source": "https://t.me/cibsecurity/55233", "content": "\u203c CVE-2022-4684 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:27.000000Z"}, {"uuid": "fcc294ac-58da-411c-887a-2b9e5488d43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4665", "type": "seen", "source": "https://t.me/cibsecurity/55230", "content": "\u203c CVE-2022-4665 \u203c\n\nUnrestricted Upload of File with Dangerous Type in GitHub repository ampache/ampache prior to 5.5.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T07:14:13.000000Z"}, {"uuid": "4b532846-ac6c-44db-a60e-8ac96d25b3dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4698", "type": "seen", "source": "https://t.me/cibsecurity/55247", "content": "\u203c CVE-2022-4698 \u203c\n\nThe ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:35.000000Z"}, {"uuid": "8ce71710-96ab-4e62-9996-1d643d9d9f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4683", "type": "seen", "source": "https://t.me/cibsecurity/55234", "content": "\u203c CVE-2022-4683 \u203c\n\nSensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:28.000000Z"}, {"uuid": "72c362d7-ceec-43d5-aa85-884b31239adb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4689", "type": "seen", "source": "https://t.me/cibsecurity/55232", "content": "\u203c CVE-2022-4689 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T14:14:26.000000Z"}, {"uuid": "b713a0a5-838a-43f8-8333-e7fe3a0f4b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46492", "type": "seen", "source": "https://t.me/cibsecurity/55228", "content": "\u203c CVE-2022-46492 \u203c\n\nnbnbk commit 879858451d53261d10f77d4709aee2d01c72c301 was discovered to contain an arbitrary file read vulnerability via the component /api/Index/getFileBinary.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T07:14:11.000000Z"}, {"uuid": "099a60c0-467a-4040-a876-39de62030814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46491", "type": "seen", "source": "https://t.me/cibsecurity/55222", "content": "\u203c CVE-2022-46491 \u203c\n\nA Cross-Site Request Forgery (CSRF) vulnerability in the Add Administrator function of the default version of nbnbk allows attackers to arbitrarily add Administrator accounts.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T02:14:06.000000Z"}, {"uuid": "7aeaafc1-0ed0-4574-bc19-c1d8d5d28f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46641", "type": "seen", "source": "https://t.me/cibsecurity/55257", "content": "\u203c CVE-2022-46641 \u203c\n\nD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the lan(0)_dhcps_staticlist parameter in the SetIpMacBindSettings function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:49.000000Z"}, {"uuid": "6946de02-598e-4c41-8a12-237cf070ccac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46493", "type": "seen", "source": "https://t.me/cibsecurity/55220", "content": "\u203c CVE-2022-46493 \u203c\n\nDefault version of nbnbk was discovered to contain an arbitrary file upload vulnerability via the component /api/User/download_img.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T02:14:02.000000Z"}, {"uuid": "81e3a240-208e-4f83-ae15-5072ee61548e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46642", "type": "seen", "source": "https://t.me/cibsecurity/55249", "content": "\u203c CVE-2022-46642 \u203c\n\nD-Link DIR-846 A1_FW100A43 was discovered to contain a command injection vulnerability via the auto_upgrade_hour parameter in the SetAutoUpgradeInfo function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-23T18:14:37.000000Z"}, {"uuid": "11db68cd-66f8-417a-bf47-580b04a6b855", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46873", "type": "seen", "source": "https://t.me/cibsecurity/55184", "content": "\u203c CVE-2022-46873 \u203c\n\nBecause Firefox did not implement the unsafe-hashes CSP directive, an attacker who was able to inject markup into a page otherwise protected by a Content Security Policy may have been able to inject executable script. This would be severely constrained by the specified Content Security Policy of the document. This vulnerability affects Firefox < 108.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:30:03.000000Z"}, {"uuid": "0f0cc0eb-5460-40ef-b2f3-19b38eb3d872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46872", "type": "seen", "source": "https://t.me/cibsecurity/55183", "content": "\u203c CVE-2022-46872 \u203c\n\nAn attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.*This bug only affects Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 108, Firefox ESR < 102.6, and Thunderbird < 102.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:30:02.000000Z"}, {"uuid": "667016e1-1c17-49eb-a04d-285c2f2b46bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46882", "type": "seen", "source": "https://t.me/cibsecurity/55180", "content": "\u203c CVE-2022-46882 \u203c\n\nA use-after-free in WebGL extensions could have led to a potentially exploitable crash. This vulnerability affects Firefox < 107, Firefox ESR < 102.6, and Thunderbird < 102.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:27:18.000000Z"}, {"uuid": "6455d3e8-261b-4888-8704-d09ceb3ce24a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46881", "type": "seen", "source": "https://t.me/cibsecurity/55167", "content": "\u203c CVE-2022-46881 \u203c\n\nAn optimization in WebGL was incorrect in some cases, and could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 106, Firefox ESR < 102.6, and Thunderbird < 102.6.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:27:00.000000Z"}, {"uuid": "69d3652e-d222-47a1-b97a-30d25811ddb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46883", "type": "seen", "source": "https://t.me/cibsecurity/55174", "content": "\u203c CVE-2022-46883 \u203c\n\nMozilla developers Gabriele Svelto, Yulia Startsev, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 106. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.*Note*: This advisory was added on December 13th, 2022 after discovering it was inadvertently left out of the original advisory. The fix was included in the original release of Firefox 107. This vulnerability affects Firefox < 107.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T22:27:11.000000Z"}, {"uuid": "3b18e1e4-77aa-4921-917f-989b4e44d74b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46691", "type": "seen", "source": "https://t.me/cibsecurity/54634", "content": "\u203c CVE-2022-46691 \u203c\n\nA memory consumption issue was addressed with improved memory handling. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T22:29:57.000000Z"}, {"uuid": "dde88178-b41b-4bd4-89e3-c10455f4de03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46694", "type": "seen", "source": "https://t.me/cibsecurity/54633", "content": "\u203c CVE-2022-46694 \u203c\n\nAn out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, iOS 15.7.2 and iPadOS 15.7.2, tvOS 16.2, watchOS 9.2. Parsing a maliciously crafted video file may lead to kernel code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T22:29:56.000000Z"}, {"uuid": "9be8e4a2-2bdb-48e4-848e-1a2edbf36502", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46692", "type": "seen", "source": "https://t.me/cibsecurity/54631", "content": "\u203c CVE-2022-46692 \u203c\n\nA logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T22:29:54.000000Z"}, {"uuid": "84b90dba-83a1-4ce7-ab4f-8e6ae884882d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46756", "type": "seen", "source": "https://t.me/cibsecurity/57268", "content": "\u203c CVE-2022-46756 \u203c\n\nDell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an attacker.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-25T12:34:50.000000Z"}, {"uuid": "2a8309a1-5a0b-4685-b29d-411248f04ee4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46359", "type": "seen", "source": "https://t.me/cibsecurity/57152", "content": "\u203c CVE-2022-46359 \u203c\n\nPotential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T12:37:12.000000Z"}, {"uuid": "08bb3586-efbd-4f40-8d5d-1428776036eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46639", "type": "seen", "source": "https://t.me/cibsecurity/56874", "content": "\u203c CVE-2022-46639 \u203c\n\nA vulnerability in the descarga_etiqueta.php component of Correos Prestashop 1.7.x allows attackers to execute a directory traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-24T05:39:58.000000Z"}, {"uuid": "08b9381b-c767-4383-b6a3-41929ccbed12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46087", "type": "seen", "source": "https://t.me/cibsecurity/57164", "content": "\u203c CVE-2022-46087 \u203c\n\nCloudSchool v3.0.1 is vulnerable to Cross Site Scripting (XSS). A normal user can steal session cookies of the admin users through notification received by the admin user.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T18:36:11.000000Z"}, {"uuid": "56df3d28-939b-4b5d-bd78-00cfa2016b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46358", "type": "seen", "source": "https://t.me/cibsecurity/57155", "content": "\u203c CVE-2022-46358 \u203c\n\nPotential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T12:37:16.000000Z"}, {"uuid": "d38a3293-d430-40ed-925b-26e56dce15d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46357", "type": "seen", "source": "https://t.me/cibsecurity/57147", "content": "\u203c CVE-2022-46357 \u203c\n\nPotential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T12:37:04.000000Z"}, {"uuid": "0e518e67-4d7b-4bd2-9962-73b766e7b587", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46356", "type": "seen", "source": "https://t.me/cibsecurity/57148", "content": "\u203c CVE-2022-46356 \u203c\n\nPotential vulnerabilities have been identified in HP Security Manager which may allow escalation of privilege, arbitrary code execution, and information disclosure.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T12:37:05.000000Z"}, {"uuid": "1daa796f-d408-4f39-b611-48490f611c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46959", "type": "seen", "source": "https://t.me/cibsecurity/56824", "content": "\u203c CVE-2022-46959 \u203c\n\nAn issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T07:53:04.000000Z"}, {"uuid": "231fe61f-9499-4b13-b71a-6dbb0632c244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46957", "type": "seen", "source": "https://t.me/cibsecurity/56987", "content": "\u203c CVE-2022-46957 \u203c\n\nSourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T00:43:56.000000Z"}, {"uuid": "3aee9165-44bc-4f8d-a8f0-19fc4c3901c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4693", "type": "seen", "source": "https://t.me/cibsecurity/56854", "content": "\u203c CVE-2022-4693 \u203c\n\nThe User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability. To bypass authentication, we only need to know the user\u00e2\u20ac\u2122s username. Depending on whose username we know, which can be easily queried because it is usually public data, we may even be given an administrative role on the website.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:31:12.000000Z"}, {"uuid": "7152a59e-8c89-4311-9acb-a45d56e5b8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4650", "type": "seen", "source": "https://t.me/cibsecurity/56852", "content": "\u203c CVE-2022-4650 \u203c\n\nThe HashBar WordPress plugin before 1.3.6 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:31:10.000000Z"}, {"uuid": "2ea3a828-9a73-4b63-9a7c-31d3d7451cd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46125", "type": "seen", "source": "https://t.me/cibsecurity/54543", "content": "\u203c CVE-2022-46125 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=client/manage_client&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:22.000000Z"}, {"uuid": "e287ebb3-43d5-48aa-8e96-5bc787d063c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46256", "type": "seen", "source": "https://t.me/cibsecurity/54542", "content": "\u203c CVE-2022-46256 \u203c\n\nA path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the instance. This vulnerability was fixed in versions 3.3.17, 3.4.12, 3.5.9, 3.6.5 and 3.7.2. This vulnerability was reported via the GitHub Bug Bounty program.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:21.000000Z"}, {"uuid": "314942f0-a317-463b-b595-008cec52aeb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46117", "type": "seen", "source": "https://t.me/cibsecurity/54541", "content": "\u203c CVE-2022-46117 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=view_product&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:20.000000Z"}, {"uuid": "97096110-2b29-49b6-ac78-34db90360b02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46124", "type": "seen", "source": "https://t.me/cibsecurity/54539", "content": "\u203c CVE-2022-46124 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=user/manage_user&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:15.000000Z"}, {"uuid": "5d1f0506-15bc-4f4b-bd7d-53f4758d34c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46443", "type": "seen", "source": "https://t.me/cibsecurity/54538", "content": "\u203c CVE-2022-46443 \u203c\n\nmesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:14.000000Z"}, {"uuid": "ddb8ef45-a752-4592-9e70-2f64e2319bef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46127", "type": "seen", "source": "https://t.me/cibsecurity/54537", "content": "\u203c CVE-2022-46127 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/classes/Master.php?f=delete_product.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:13.000000Z"}, {"uuid": "4cf1d7f4-e1f1-45b4-b50e-a8a7e6522bec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46119", "type": "seen", "source": "https://t.me/cibsecurity/54536", "content": "\u203c CVE-2022-46119 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:12.000000Z"}, {"uuid": "0d1fbd51-9b59-4982-9eef-b89fc2d952c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46072", "type": "seen", "source": "https://t.me/cibsecurity/54535", "content": "\u203c CVE-2022-46072 \u203c\n\nHelmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:11.000000Z"}, {"uuid": "99035caf-4e15-4fb2-8185-119198df2c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46120", "type": "seen", "source": "https://t.me/cibsecurity/54533", "content": "\u203c CVE-2022-46120 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/view_product&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:09.000000Z"}, {"uuid": "8dffbe98-2742-4e24-bb14-d745e577d471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46126", "type": "seen", "source": "https://t.me/cibsecurity/54532", "content": "\u203c CVE-2022-46126 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/brands/manage_brand.php?id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:08.000000Z"}, {"uuid": "b7d8f47e-ec16-4333-9cce-b42be7a31b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46142", "type": "seen", "source": "https://t.me/cibsecurity/54420", "content": "\u203c CVE-2022-46142 \u203c\n\nAffected devices store the CLI user passwords encrypted in flash memory. Attackers with physical access to the device could retrieve the file and decrypt the CLI user passwords.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:22:09.000000Z"}, {"uuid": "0a90213e-750d-4d85-8f90-a8d50be62a53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4672", "type": "seen", "source": "https://t.me/cibsecurity/56859", "content": "\u203c CVE-2022-4672 \u203c\n\nThe WordPress Simple Shopping Cart WordPress plugin before 4.6.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T18:31:20.000000Z"}, {"uuid": "32b592bd-7934-4068-acb0-2369e2d36fd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46135", "type": "seen", "source": "https://t.me/cibsecurity/54736", "content": "\u203c CVE-2022-46135 \u203c\n\nIn AeroCms v0.0.1, there is an arbitrary file upload vulnerability at /admin/posts.php?source=edit_post , through which we can upload webshell and control the web server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T18:37:37.000000Z"}, {"uuid": "562a55cc-f02a-47dc-8f5f-d0061f071c2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46457", "type": "seen", "source": "https://t.me/cibsecurity/55907", "content": "\u203c CVE-2022-46457 \u203c\n\nNASM v2.16 was discovered to contain a segmentation violation in the component ieee_write_file at /output/outieee.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T20:18:17.000000Z"}, {"uuid": "67b5dfd7-86b8-43e9-a2c2-3497c4491ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46476", "type": "seen", "source": "https://t.me/cibsecurity/56739", "content": "\u203c CVE-2022-46476 \u203c\n\nD-Link DIR-859 A1 1.05 was discovered to contain a command injection vulnerability via the service= variable in the soapcgi_main function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T02:22:07.000000Z"}, {"uuid": "ee91cb79-8280-49e1-91eb-5df1fbd1f523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46609", "type": "seen", "source": "https://t.me/cibsecurity/54518", "content": "\u203c CVE-2022-46609 \u203c\n\nPython3-RESTfulAPI commit d9907f14e9e25dcdb54f5b22252b0e9452e3970e and e772e0beee284c50946e94c54a1d43071ca78b74 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T18:22:43.000000Z"}, {"uuid": "b7bd914c-04b7-4082-af77-f4791ca06108", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46761", "type": "seen", "source": "https://t.me/cibsecurity/56067", "content": "\u203c CVE-2022-46761 \u203c\n\nThe system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T22:25:07.000000Z"}, {"uuid": "e4a9af94-e7fc-4d55-b52b-9f7e75b77bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46505", "type": "seen", "source": "https://t.me/cibsecurity/56671", "content": "\u203c CVE-2022-46505 \u203c\n\nAn issue in MatrixSSL 4.5.1-open and earlier leads to failure to securely check the SessionID field, resulting in the misuse of an all-zero MasterSecret that can decrypt secret data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-18T18:21:05.000000Z"}, {"uuid": "0167862c-026f-4a9a-81c2-951ba6bc9bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46058", "type": "seen", "source": "https://t.me/cibsecurity/54390", "content": "\u203c CVE-2022-46058 \u203c\n\nAeroCMS v0.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via add_post.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Comments text field.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T16:21:42.000000Z"}, {"uuid": "5f429d3d-03ed-47d7-81de-b7875d9c226b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46047", "type": "seen", "source": "https://t.me/cibsecurity/54389", "content": "\u203c CVE-2022-46047 \u203c\n\nAeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T16:21:42.000000Z"}, {"uuid": "082d3673-cdb7-4dc7-ae4f-a1c00ef8dbe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46061", "type": "seen", "source": "https://t.me/cibsecurity/54387", "content": "\u203c CVE-2022-46061 \u203c\n\nAeroCMS v0.0.1 is vulnerable to ClickJacking.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T16:21:39.000000Z"}, {"uuid": "e38a87fa-679a-40c4-8136-94231597b098", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46631", "type": "seen", "source": "https://t.me/cibsecurity/54651", "content": "\u203c CVE-2022-46631 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiSignalCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T00:23:50.000000Z"}, {"uuid": "f455e197-8102-419e-8574-ff075cac71f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46870", "type": "seen", "source": "https://t.me/cibsecurity/54664", "content": "\u203c CVE-2022-46870 \u203c\n\nAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Zeppelin allows logged-in users to execute arbitrary javascript in other users' browsers. This issue affects Apache Zeppelin before 0.8.2. Users are recommended to upgrade to a supported version of Zeppelin.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T16:24:23.000000Z"}, {"uuid": "e5938f4a-958b-42f4-bd98-2b776bd20307", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46074", "type": "seen", "source": "https://t.me/cibsecurity/54527", "content": "\u203c CVE-2022-46074 \u203c\n\nHelmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missing CSRF protection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:00.000000Z"}, {"uuid": "7069bd85-f406-4066-b4b8-83a48c7a87cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46137", "type": "seen", "source": "https://t.me/cibsecurity/54680", "content": "\u203c CVE-2022-46137 \u203c\n\nAeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T18:24:42.000000Z"}, {"uuid": "a955e7d3-f68a-4214-bd83-b988dad7818a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46404", "type": "seen", "source": "https://t.me/cibsecurity/54476", "content": "\u203c CVE-2022-46404 \u203c\n\nA command injection vulnerability has been identified in Atos Unify OpenScape 4000 Assistant and Unify OpenScape 4000 Manager (8 before R2.22.18, 10 before 0.28.13, and 10 R1 before R1.34.4) that may allow an unauthenticated attacker to upload arbitrary files and achieve administrative access to the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T00:22:08.000000Z"}, {"uuid": "1b4f5875-5600-42a0-a296-8fafc2492bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46634", "type": "seen", "source": "https://t.me/cibsecurity/54647", "content": "\u203c CVE-2022-46634 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the wscDisabled parameter in the setting/setWiFiWpsCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T00:23:43.000000Z"}, {"uuid": "fbecd93f-d2c2-4816-a07b-4b6a49d1c5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46700", "type": "seen", "source": "https://t.me/cibsecurity/54644", "content": "\u203c CVE-2022-46700 \u203c\n\nA memory corruption issue was addressed with improved input validation. This issue is fixed in Safari 16.2, tvOS 16.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may lead to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T22:30:08.000000Z"}, {"uuid": "bafdeb4d-2bb6-49fa-9283-01d1c923028a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46343", "type": "seen", "source": "https://t.me/cibsecurity/54564", "content": "\u203c CVE-2022-46343 \u203c\n\nA vulnerability was found in X.Org. This security flaw occurs because the handler for the ScreenSaverSetAttributes request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:22:58.000000Z"}, {"uuid": "ebf8cc77-5b06-4158-b2c2-78ad53cb1a1e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46121", "type": "seen", "source": "https://t.me/cibsecurity/54545", "content": "\u203c CVE-2022-46121 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/manage_product&id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:24.000000Z"}, {"uuid": "05e6b380-9cb5-414c-bd6b-356f2e00c9e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46059", "type": "seen", "source": "https://t.me/cibsecurity/54417", "content": "\u203c CVE-2022-46059 \u203c\n\nAeroCMS v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:22:07.000000Z"}, {"uuid": "210619fa-421c-495a-98d5-0a111d6ac17a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46341", "type": "seen", "source": "https://t.me/cibsecurity/54577", "content": "\u203c CVE-2022-46341 \u203c\n\nA vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked with a high keycode or button code. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:23:12.000000Z"}, {"uuid": "258dcecf-2a0a-4db0-aa23-d86061932cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46340", "type": "seen", "source": "https://t.me/cibsecurity/54572", "content": "\u203c CVE-2022-46340 \u203c\n\nA vulnerability was found in X.Org. This security flaw occurs becuase the swap handler for the XTestFakeInput request of the XTest extension may corrupt the stack if GenericEvents with lengths larger than 32 bytes are sent through a the XTestFakeInput request. This issue can lead to local privileges elevation on systems where the X server is running privileged and remote code execution for ssh X forwarding sessions. This issue does not affect systems where client and server use the same byte order.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:23:06.000000Z"}, {"uuid": "82cdeb89-8592-4167-8670-1f4dd91a5ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46342", "type": "seen", "source": "https://t.me/cibsecurity/54571", "content": "\u203c CVE-2022-46342 \u203c\n\nA vulnerability was found in X.Org. This security flaw occurs because the handler for the XvdiSelectVideoNotify request may write to memory after it has been freed. This issue can lead to local privileges elevation on systems where the X se\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T00:23:05.000000Z"}, {"uuid": "79689026-17b9-4644-918a-fa8bad9b3625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46996", "type": "seen", "source": "https://t.me/cibsecurity/54520", "content": "\u203c CVE-2022-46996 \u203c\n\nvSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T18:22:45.000000Z"}, {"uuid": "9eaa6dff-d673-4620-888b-b22e6d40552b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46997", "type": "seen", "source": "https://t.me/cibsecurity/54519", "content": "\u203c CVE-2022-46997 \u203c\n\nPasshunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T18:22:44.000000Z"}, {"uuid": "8dc6741a-30b1-4f00-999c-79cb176270f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46701", "type": "seen", "source": "https://t.me/cibsecurity/54629", "content": "\u203c CVE-2022-46701 \u203c\n\nThe issue was addressed with improved bounds checks. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2. Connecting to a malicious NFS server may lead to arbitrary code execution with kernel privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T22:29:51.000000Z"}, {"uuid": "d6265f21-1e77-4c0a-9a2f-6e4ca2a14874", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46698", "type": "seen", "source": "https://t.me/cibsecurity/54625", "content": "\u203c CVE-2022-46698 \u203c\n\nA logic issue was addressed with improved checks. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may disclose sensitive user information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-15T22:29:47.000000Z"}, {"uuid": "baff4adf-d3b5-4d28-bc95-b3086b970438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "seen", "source": "https://t.me/cibsecurity/54467", "content": "\u203c CVE-2022-46381 \u203c\n\nCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T00:21:59.000000Z"}, {"uuid": "68ef7b84-574f-417a-8e9b-2af65b782c29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46123", "type": "seen", "source": "https://t.me/cibsecurity/54530", "content": "\u203c CVE-2022-46123 \u203c\n\nHelmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/manage_category.php?id=.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-14T20:23:03.000000Z"}, {"uuid": "29f87820-79b8-4350-8897-02acfcbc168e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46603", "type": "seen", "source": "https://t.me/cibsecurity/56199", "content": "\u203c CVE-2022-46603 \u203c\n\nAn issue in Inkdrop v5.4.1 allows attackers to execute arbitrary commands via uploading a crafted markdown file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-10T02:28:13.000000Z"}, {"uuid": "f91de4d8-58db-403c-af9e-6a107a8b9c68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46160", "type": "seen", "source": "https://t.me/cibsecurity/54381", "content": "\u203c CVE-2022-46160 \u203c\n\nTuleap is an Open Source Suite to improve management of software developments and collaboration. In versions prior to 14.2.99.104, project level authorizations are not properly verified when accessing the project \"homepage\"/dashboards. Users not authorized to access a project may still be able to get some information provided by the widgets (e.g. number of members, content of the Notes widget...). This issue has been patched in Tuleap Community Edition 14.2.99.104, Tuleap Enterprise Edition 14.2-4, and Tuleap Enterprise Edition 14.1-5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T12:32:28.000000Z"}, {"uuid": "7641b260-158e-44f7-a8aa-c5974f33afee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46333", "type": "seen", "source": "https://t.me/cibsecurity/54095", "content": "\u203c CVE-2022-46333 \u203c\n\nThe admin user interface in Proofpoint Enterprise Protection (PPS/PoD) contains a command injection vulnerability that enables an admin to execute commands beyond their allowed scope. This affects all versions 8.19.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T22:41:03.000000Z"}, {"uuid": "e091672e-64f2-41b3-ab0f-c5eda0896edb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46904", "type": "seen", "source": "https://t.me/cibsecurity/54358", "content": "\u203c CVE-2022-46904 \u203c\n\nInsufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Self-XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T00:21:05.000000Z"}, {"uuid": "e7ec671d-d5e2-44f1-942d-3a5542a69707", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "https://t.me/cibsecurity/54448", "content": "\u203c CVE-2022-46364 \u203c\n\nA SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T20:21:54.000000Z"}, {"uuid": "03ca2188-2756-4b3e-ab2d-6038fa9006fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46062", "type": "seen", "source": "https://t.me/cibsecurity/54444", "content": "\u203c CVE-2022-46062 \u203c\n\nGym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T20:21:48.000000Z"}, {"uuid": "54c8a35d-5534-4e92-82ff-91b9e02f359d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46348", "type": "seen", "source": "https://t.me/cibsecurity/54438", "content": "\u203c CVE-2022-46348 \u203c\n\nA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19383)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:28:09.000000Z"}, {"uuid": "412b3aa2-b868-4bab-8b5b-fb7f067fce18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46355", "type": "seen", "source": "https://t.me/cibsecurity/54437", "content": "\u203c CVE-2022-46355 \u203c\n\nA vulnerability has been identified in SCALANCE X204RNA (HSR) (All versions < V3.2.7), SCALANCE X204RNA (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (HSR) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP) (All versions < V3.2.7), SCALANCE X204RNA EEC (PRP/HSR) (All versions < V3.2.7). The affected products are vulnerable to an \"Exposure of Sensitive Information to an Unauthorized Actor\" vulnerability by leaking sensitive data in the HTTP Referer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:28:08.000000Z"}, {"uuid": "af2e28ad-8126-471e-b768-7e960876f486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46143", "type": "seen", "source": "https://t.me/cibsecurity/54404", "content": "\u203c CVE-2022-46143 \u203c\n\nAffected devices do not check the TFTP blocksize correctly. This could allow an authenticated attacker to read from an uninitialized buffer that potentially contains previously allocated data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:21:49.000000Z"}, {"uuid": "236f746f-2eb2-4c27-bd6f-4a93fbd39bfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46906", "type": "seen", "source": "https://t.me/cibsecurity/54365", "content": "\u203c CVE-2022-46906 \u203c\n\nInsufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T00:21:15.000000Z"}, {"uuid": "434fdfe6-f9e4-42fe-b41f-ef298d9ff027", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46905", "type": "seen", "source": "https://t.me/cibsecurity/54364", "content": "\u203c CVE-2022-46905 \u203c\n\nInsufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an unauthenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Reflected XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T00:21:14.000000Z"}, {"uuid": "2dd49496-e308-4b5f-8fc8-2ef735b9e645", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46903", "type": "seen", "source": "https://t.me/cibsecurity/54361", "content": "\u203c CVE-2022-46903 \u203c\n\nInsufficient processing of user input in WebSoft HCM 2021.2.3.327 allows an authenticated attacker to inject arbitrary HTML tags into the page processed by the user's browser, including scripts in the JavaScript programming language, which leads to Stored XSS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T00:21:08.000000Z"}, {"uuid": "5e63128b-f435-4cb3-967d-af6632c90c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46346", "type": "seen", "source": "https://t.me/cibsecurity/54409", "content": "\u203c CVE-2022-46346 \u203c\n\nA vulnerability has been identified in Parasolid V33.1 (All versions < V33.1.264), Parasolid V34.0 (All versions < V34.0.252), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions < V35.0.170). The affected applications contain an out of bounds write past the end of an allocated structure while parsing specially crafted X_B files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19071)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:21:54.000000Z"}, {"uuid": "2db0453e-45cf-4b12-b85c-53fd1435e3f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46144", "type": "seen", "source": "https://t.me/cibsecurity/54407", "content": "\u203c CVE-2022-46144 \u203c\n\nA vulnerability has been identified in SCALANCE SC622-2C (All versions < V2.3), SCALANCE SC622-2C (All versions >= 2.3 < V3.0), SCALANCE SC626-2C (All versions < V2.3), SCALANCE SC626-2C (All versions >= 2.3 < V3.0), SCALANCE SC632-2C (All versions < V2.3), SCALANCE SC632-2C (All versions >= 2.3 < V3.0), SCALANCE SC636-2C (All versions < V2.3), SCALANCE SC636-2C (All versions >= 2.3 < V3.0), SCALANCE SC642-2C (All versions < V2.3), SCALANCE SC642-2C (All versions >= 2.3 < V3.0), SCALANCE SC646-2C (All versions < V2.3), SCALANCE SC646-2C (All versions >= 2.3 < V3.0). Affected devices do not properly process CLI commands after a user forcefully quitted the SSH connection. This could allow an authenticated attacker to make the CLI via SSH or serial interface irresponsive.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:21:52.000000Z"}, {"uuid": "5cde397d-0af0-4bff-8203-2de06b27f851", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46051", "type": "seen", "source": "https://t.me/cibsecurity/54406", "content": "\u203c CVE-2022-46051 \u203c\n\nThe approve parameter from the AeroCMS-v0.0.1 CMS system is vulnerable to SQL injection attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-13T18:21:51.000000Z"}, {"uuid": "27cdd493-9f8a-4430-a8cd-34e51e3f86b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46158", "type": "seen", "source": "https://t.me/cibsecurity/54205", "content": "\u203c CVE-2022-46158 \u203c\n\nPrestaShop is an open-source e-commerce solution. Versions prior to 1.7.8.8 did not properly restrict host filesystem access for users. Users may have been able to view the contents of the upload directory without appropriate permissions. This issue has been addressed and users are advised to upgrade to version 1.7.8.8. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-09T00:12:53.000000Z"}, {"uuid": "b1c12fba-20a5-493e-b769-7751d1341e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46153", "type": "seen", "source": "https://t.me/cibsecurity/54203", "content": "\u203c CVE-2022-46153 \u203c\n\nTraefik is an open source HTTP reverse proxy and load balancer. In affected versions there is a potential vulnerability in Traefik managing TLS connections. A router configured with a not well-formatted TLSOption is exposed with an empty TLSOption. For instance, a route secured using an mTLS connection set with a wrong CA file is exposed without verifying the client certificates. Users are advised to upgrade to version 2.9.6. Users unable to upgrade should check their logs to detect the error messages and fix your TLS options.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-09T00:12:51.000000Z"}, {"uuid": "f920f000-acc6-4842-9b2a-e9dcaa020b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46770", "type": "seen", "source": "https://t.me/cibsecurity/54139", "content": "\u203c CVE-2022-46770 \u203c\n\nqubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 through 239.255.255.255).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-07T22:11:53.000000Z"}, {"uuid": "85e32ce5-4a83-46a2-8a72-accea8aa7c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46161", "type": "seen", "source": "https://t.me/cibsecurity/54100", "content": "\u203c CVE-2022-46161 \u203c\n\npdfmake is an open source client/server side PDF printing in pure JavaScript. In versions up to and including 0.2.5 pdfmake contains an unsafe evaluation of user controlled input. Users of pdfmake are thus subject to arbitrary code execution in the context of the process running the pdfmake code. There are no known fixes for this issue. Users are advised to restrict access to trusted user input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T22:41:11.000000Z"}, {"uuid": "24d5d359-8d0d-4687-86d9-f380bc912d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46332", "type": "seen", "source": "https://t.me/cibsecurity/54097", "content": "\u203c CVE-2022-46332 \u203c\n\nThe Admin Smart Search feature in Proofpoint Enterprise Protection (PPS/PoD) contains a stored cross-site scripting vulnerability that enables an anonymous email sender to gain admin privileges within the user interface. This affects all versions 8.19.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T22:49:42.000000Z"}, {"uuid": "f818c3b7-af45-4941-8dfd-2ef259905c33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46166", "type": "seen", "source": "https://t.me/cibsecurity/54251", "content": "\u203c CVE-2022-46166 \u203c\n\nSpring boot admins is an open source administrative user interface for management of spring boot applications. All users who run Spring Boot Admin Server, having enabled Notifiers (e.g. Teams-Notifier) and write access to environment variables via UI are affected. Users are advised to upgrade to the most recent releases of Spring Boot Admin 2.6.10 and 2.7.8 to resolve this issue. Users unable to upgrade may disable any notifier or disable write access (POST request) on `/env` actuator endpoint.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-10T00:13:42.000000Z"}, {"uuid": "5645e396-f656-4bab-88f3-5b96f8a7cc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46157", "type": "seen", "source": "https://t.me/cibsecurity/54250", "content": "\u203c CVE-2022-46157 \u203c\n\nAkeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the versions aforementioned provides patched Apache HTTP server configuration file, for docker setup and in documentation sample, to fix this vulnerability. Community Edition users must change their Apache HTTP server configuration accordingly to be protected. The patch for Cloud Based Akeneo PIM Services customers has been applied since 30th October 2022. Users are advised to upgrade. Users unable to upgrade may Replace any reference to `` in their apache httpd configurations with: ``.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-10T00:13:41.000000Z"}, {"uuid": "749c101b-9b7c-410d-bad6-dc137ddd8ff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46168", "type": "seen", "source": "https://t.me/cibsecurity/55993", "content": "\u203c CVE-2022-46168 \u203c\n\nDiscourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 2.9.0.beta15 on the `beta` and `tests-passed` branches, recipients of a group SMTP email could see the email addresses of all other users inside the group SMTP topic. Most of the time this is not an issue as they are likely already familiar with one another's email addresses. This issue is patched in versions 2.8.14 and 2.9.0.beta15. The fix is that someone sending emails out via group SMTP to non-staged users masks those emails with blind carbon copy (BCC). Staged users are ones that have likely only interacted with the group via email, and will likely include other people who were CC'd on the original email to the group. As a workaround, disable group SMTP for any groups that have it enabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T20:19:18.000000Z"}, {"uuid": "9e63d136-3881-4298-b82e-07e4530fa52b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46792", "type": "seen", "source": "https://t.me/cibsecurity/54151", "content": "\u203c CVE-2022-46792 \u203c\n\nHasura GraphQL Engine before 2.15.2 mishandles row-level authorization in the Update Many API for Postgres backends. The fixed versions are 2.10.2, 2.11.3, 2.12.1, 2.13.2, 2.14.1, and 2.15.2. (Versions before 2.10.0 are unaffected.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T12:17:20.000000Z"}, {"uuid": "18008108-224e-448f-9275-0970626e393c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46762", "type": "seen", "source": "https://t.me/cibsecurity/56071", "content": "\u203c CVE-2022-46762 \u203c\n\nThe memory management module has a logic bypass vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-06T22:25:14.000000Z"}, {"uuid": "d47245f0-1df2-4e21-9bda-dec4691ecb32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46830", "type": "seen", "source": "https://t.me/cibsecurity/54191", "content": "\u203c CVE-2022-46830 \u203c\n\nIn JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:54.000000Z"}, {"uuid": "e2873ac5-b822-431b-bdd9-41255ea2c295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46829", "type": "seen", "source": "https://t.me/cibsecurity/54190", "content": "\u203c CVE-2022-46829 \u203c\n\nIn JetBrains JetBrains Gateway before 2022.3 a client could connect without a valid token if the host consented.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:53.000000Z"}, {"uuid": "443fc123-74b3-4579-872e-8fec5a53d2be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46831", "type": "seen", "source": "https://t.me/cibsecurity/54189", "content": "\u203c CVE-2022-46831 \u203c\n\nIn JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the \"Default Credential Provider Chain\" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:52.000000Z"}, {"uuid": "dbb8e358-e0cf-4085-9250-152904a6fb44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46826", "type": "seen", "source": "https://t.me/cibsecurity/54188", "content": "\u203c CVE-2022-46826 \u203c\n\nIn JetBrains IntelliJ IDEA before 2022.3 the built-in web server allowed an arbitrary file to be read by exploiting a path traversal vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:51.000000Z"}, {"uuid": "323169e1-754b-4b31-9d3c-b1f5d7479963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46824", "type": "seen", "source": "https://t.me/cibsecurity/54187", "content": "\u203c CVE-2022-46824 \u203c\n\nIn JetBrains IntelliJ IDEA before 2022.2.4 a buffer overflow in the fsnotifier daemon on macOS was possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:50.000000Z"}, {"uuid": "70847df8-0b25-4fb6-8bbb-b33eb089ee5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46827", "type": "seen", "source": "https://t.me/cibsecurity/54186", "content": "\u203c CVE-2022-46827 \u203c\n\nIn JetBrains IntelliJ IDEA before 2022.3 an XXE attack leading to SSRF via requests to custom plugin repositories was possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:46.000000Z"}, {"uuid": "e637ff13-9e8d-43c3-9cb0-ff3c42edc9e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46828", "type": "seen", "source": "https://t.me/cibsecurity/54184", "content": "\u203c CVE-2022-46828 \u203c\n\nIn JetBrains IntelliJ IDEA before 2022.3 a DYLIB injection on macOS was possible.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-08T20:12:44.000000Z"}, {"uuid": "767fa2f6-0ac3-4d0f-bc4b-57df6c52c438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46490", "type": "seen", "source": "https://t.me/cibsecurity/55969", "content": "\u203c CVE-2022-46490 \u203c\n\nGPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:14.000000Z"}, {"uuid": "04f91e2c-ddaf-44c9-be28-4ec9b773392e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46742", "type": "seen", "source": "https://t.me/cibsecurity/54118", "content": "\u203c CVE-2022-46742 \u203c\n\nCode injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-07T12:24:51.000000Z"}, {"uuid": "3d753e0c-7d15-4991-aee8-f231eb80d00c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46741", "type": "seen", "source": "https://t.me/cibsecurity/54114", "content": "\u203c CVE-2022-46741 \u203c\n\nOut-of-bounds read in gather_tree in PaddlePaddle before 2.4.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-07T12:22:20.000000Z"}, {"uuid": "a6303e35-8e48-4968-a8c5-2ba374fc338e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46769", "type": "seen", "source": "https://t.me/cibsecurity/56143", "content": "\u203c CVE-2022-46769 \u203c\n\nAn improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the site group feature. Upgrade to Apache Sling App CMS >= 1.1.4\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-09T14:27:27.000000Z"}, {"uuid": "7d656b0d-834f-4c69-9a2b-0f9977e42bd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46258", "type": "seen", "source": "https://t.me/cibsecurity/56163", "content": "\u203c CVE-2022-46258 \u203c\n\nAn incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed a repository-scoped token with read/write access to modify Action Workflow files without a Workflow scope. The Create or Update file contents API should enforce workflow scope. This vulnerability affected all versions of GitHub Enterprise Server prior to version 3.7 and was fixed in versions 3.3.16, 3.4.11, 3.5.8, and 3.6.4. This vulnerability was reported via the GitHub Bug Bounty program.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-09T20:27:42.000000Z"}, {"uuid": "8890c0d0-f8e5-4e1c-bd1d-a82893ac2248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46081", "type": "seen", "source": "https://t.me/cibsecurity/55845", "content": "\u203c CVE-2022-46081 \u203c\n\nIn Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T10:18:42.000000Z"}, {"uuid": "6bf9c174-20e3-411b-8c55-5d7f7643ddf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46146", "type": "seen", "source": "https://t.me/cibsecurity/53643", "content": "\u203c CVE-2022-46146 \u203c\n\nPrometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, i someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-29T16:28:47.000000Z"}, {"uuid": "106baf94-710a-4e14-9790-e1f42abee210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46177", "type": "seen", "source": "https://t.me/cibsecurity/56010", "content": "\u203c CVE-2022-46177 \u203c\n\nDiscourse is an option source discussion platform. Prior to version 2.8.14 on the `stable` branch and version 3.0.0.beta16 on the `beta` and `tests-passed` branches, when a user requests for a password reset link email, then changes their primary email, the old reset email is still valid. When the old reset email is used to reset the password, the Discourse account's primary email would be re-linked to the old email. If the old email address is compromised or has transferred ownership, this leads to an account takeover. This is however mitigated by the SiteSetting `email_token_valid_hours` which is currently 48 hours. Users should upgrade to versions 2.8.14 or 3.0.0.beta15 to receive a patch. As a workaround, lower `email_token_valid_hours ` as needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T22:19:23.000000Z"}, {"uuid": "883a5776-6a21-4e11-b930-0c3503b57575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46489", "type": "seen", "source": "https://t.me/cibsecurity/55965", "content": "\u203c CVE-2022-46489 \u203c\n\nGPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T18:22:07.000000Z"}, {"uuid": "c512dba1-0dc7-498e-8a50-0518024f02f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46545", "type": "seen", "source": "https://t.me/cibsecurity/54971", "content": "\u203c CVE-2022-46545 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/NatStaticSetting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:56.000000Z"}, {"uuid": "62aabeab-6ab4-407a-b003-e1993ea2fe83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46456", "type": "seen", "source": "https://t.me/cibsecurity/55912", "content": "\u203c CVE-2022-46456 \u203c\n\nNASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T20:18:22.000000Z"}, {"uuid": "2759733f-c450-4de2-998b-2af9e7b36155", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4663", "type": "seen", "source": "https://t.me/cibsecurity/55801", "content": "\u203c CVE-2022-4663 \u203c\n\nThe Members Import plugin for WordPress is vulnerable to Self Cross-Site Scripting via the user_login parameter in an imported CSV file in versions up to, and including, 1.4.2 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a site's administrator into uploading a CSV file with the malicious payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-03T16:17:09.000000Z"}, {"uuid": "1175174d-d37f-41f7-b1b9-262f2b63b43a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46180", "type": "seen", "source": "https://t.me/cibsecurity/55911", "content": "\u203c CVE-2022-46180 \u203c\n\nDiscourse Mermaid (discourse-mermaid-theme-component) allows users of Discourse, open-source forum software, to create graphs using the Mermaid syntax. Users of discourse-mermaid-theme-component version 1.0.0 who can create posts are able to inject arbitrary HTML on that post. The issue has been fixed on the `main` branch of the GitHub repository, with 1.1.0 named as a patched version. Admins can update the theme component through the admin UI. As a workaround, admins can temporarily disable discourse-mermaid-theme-component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T20:18:21.000000Z"}, {"uuid": "612fc04a-e344-42a0-bdde-8d199fc57ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46338", "type": "seen", "source": "https://t.me/cibsecurity/53704", "content": "\u203c CVE-2022-46338 \u203c\n\ng810-led 0.4.2, a LED configuration tool for Logitech Gx10 keyboards, contained a udev rule to make supported device nodes world-readable and writable, allowing any process on the system to read traffic from keyboards, including sensitive data.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T12:34:29.000000Z"}, {"uuid": "cb44e4ac-eed4-4705-add0-08d07e2000d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46150", "type": "seen", "source": "https://t.me/cibsecurity/53668", "content": "\u203c CVE-2022-46150 \u203c\n\nDiscourse is an open-source discussion platform. Prior to version 2.8.13 of the `stable` branch and version 2.9.0.beta14 of the `beta` and `tests-passed` branches, unauthorized users may learn of the existence of hidden tags and that they have been applied to topics that they have access to. This issue is patched in version 2.8.13 of the `stable` branch and version 2.9.0.beta14 of the `beta` and `tests-passed` branches. As a workaround, use the `disable_email` site setting to disable all emails to non-staff users.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-29T20:29:04.000000Z"}, {"uuid": "429097f8-6788-4519-8209-055f2e135656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46148", "type": "seen", "source": "https://t.me/cibsecurity/53667", "content": "\u203c CVE-2022-46148 \u203c\n\nDiscourse is an open-source messaging platform. In versions 2.8.10 and prior on the `stable` branch and versions 2.9.0.beta11 and prior on the `beta` and `tests-passed` branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS on sites which have modified or disabled Discourse\u00e2\u20ac\u2122s default Content Security Policy. This issue is patched in the latest stable, beta and tests-passed versions of Discourse.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-29T20:29:03.000000Z"}, {"uuid": "494c0e13-e917-4210-a6d4-8e3fa2787923", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46162", "type": "seen", "source": "https://t.me/cibsecurity/53740", "content": "\u203c CVE-2022-46162 \u203c\n\ndiscourse-bbcode is the official BBCode plugin for Discourse. Prior to commit 91478f5, CSS injection can occur when rendering content generated with the discourse-bccode plugin. This vulnerability only affects sites which have the discourse-bbcode plugin installed and enabled. This issue is patched in commit 91478f5. As a workaround, ensure that the Content Security Policy is enabled and monitor any posts that contain bbcode.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-01T02:30:05.000000Z"}, {"uuid": "e68d66fc-fc3a-441e-8d43-e589c98558b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46149", "type": "seen", "source": "https://t.me/cibsecurity/53732", "content": "\u203c CVE-2022-46149 \u203c\n\nCap'n Proto is a data interchange format and remote procedure call (RPC) system. Cap'n Proro prior to versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3, as well as versions of Cap'n Proto's Rust implementation prior to 0.13.7, 0.14.11, and 0.15.2 are vulnerable to out-of-bounds read due to logic error handling list-of-list. This issue may lead someone to remotely segfault a peer by sending it a malicious message, if the victim performs certain actions on a list-of-pointer type. Exfiltration of memory is possible if the victim performs additional certain actions on a list-of-pointer type. To be vulnerable, an application must perform a specific sequence of actions, described in the GitHub Security Advisory. The bug is present in inlined code, therefore the fix will require rebuilding dependent applications. Cap'n Proto has C++ fixes available in versions 0.7.1, 0.8.1, 0.9.2, and 0.10.3. The `capnp` Rust crate has fixes available in versions 0.13.7, 0.14.11, and 0.15.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-30T20:30:55.000000Z"}, {"uuid": "5a5f5281-b5ef-4f70-a8fc-5e90f9a43da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46152", "type": "seen", "source": "https://t.me/cibsecurity/53661", "content": "\u203c CVE-2022-46152 \u203c\n\nOP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The commands `OPTEE_MSG_CMD_OPEN_SESSION` and `OPTEE_MSG_CMD_INVOKE_COMMAND` can be executed from the normal world via an OP-TEE SMC. This function is not validating the `num_params` argument, which is only limited to `OPTEE_MSG_MAX_NUM_PARAMS` (127) in the function `get_cmd_buffer()`. Therefore, an attacker in the normal world can craft an SMC call that will cause out-of-bounds reading in `cleanup_shm_refs` and potentially freeing of fake-objects in the function `mobj_put()`. A normal-world attacker with permission to execute SMC instructions may exploit this flaw. Maintainers believe this problem permits local privilege escalation from the normal world to the secure world. Version 3.19.0 contains a fix for this issue. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-29T20:28:55.000000Z"}, {"uuid": "e32e183e-65d1-452e-ade1-873ef8a41229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46147", "type": "seen", "source": "https://t.me/cibsecurity/53613", "content": "\u203c CVE-2022-46147 \u203c\n\nDrag and Drop XBlock v2 implements a drag-and-drop style problem, where a learner has to drag items to zones on a target image. Versions prior to 3.0.0 are vulnerable to cross-site scripting in multiple XBlock Fields. Any platform that has deployed the XBlock may be impacted. Version 3.0.0 contains a patch for this issue. There are no known workarounds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-29T00:28:29.000000Z"}, {"uuid": "c5c3d392-ee3c-43c2-9375-25626ba06743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4619", "type": "seen", "source": "https://t.me/cibsecurity/54977", "content": "\u203c CVE-2022-4619 \u203c\n\nThe Sidebar Widgets by CodeLights plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u00e2\u20ac\u02dcExtra CSS class\u00e2\u20ac\u2122 parameter in versions up to, and including, 1.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:13:04.000000Z"}, {"uuid": "e82cc006-041f-41d0-94a6-f4b549e18b7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4604", "type": "seen", "source": "https://t.me/cibsecurity/54823", "content": "\u203c CVE-2022-4604 \u203c\n\nA vulnerability classified as problematic was found in wp-english-wp-admin Plugin up to 1.5.2. Affected by this vulnerability is the function register_endpoints of the file english-wp-admin.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.5.3 is able to address this issue. The name of the patch is ad4ba171c974c65c3456e7c6228f59f40783b33d. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216199.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T14:40:48.000000Z"}, {"uuid": "e6a3e1e8-e642-43d7-b394-12a888df4512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4603", "type": "seen", "source": "https://t.me/cibsecurity/54820", "content": "\u203c CVE-2022-4603 \u203c\n\n** DISPUTED ** A vulnerability classified as problematic has been found in ppp. Affected is the function dumpppp of the file pppdump/pppdump.c of the component pppdump. The manipulation of the argument spkt.buf/rpkt.buf leads to improper validation of array index. The real existence of this vulnerability is still doubted at the moment. The name of the patch is a75fb7b198eed50d769c80c36629f38346882cbf. It is recommended to apply a patch to fix this issue. VDB-216198 is the identifier assigned to this vulnerability. NOTE: pppdump is not used in normal process of setting up a PPP connection, is not installed setuid-root, and is not invoked automatically in any scenario.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-31T20:15:54.000000Z"}, {"uuid": "0e46acfc-10bb-4274-af18-c0b15f5efba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46771", "type": "seen", "source": "https://t.me/cibsecurity/54994", "content": "\u203c CVE-2022-46771 \u203c\n\nIBM UrbanCode Deploy (UCD) 6.2.0.0 through 6.2.7.18, 7.0.5.0 through 7.0.5.13, 7.1.0.0 through 7.1.2.9, 7.2.0.0 through 7.2.3.2 and 7.3.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 242273.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:36.000000Z"}, {"uuid": "74f945ae-3440-4287-810a-5365f61ef746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46912", "type": "seen", "source": "https://t.me/cibsecurity/54993", "content": "\u203c CVE-2022-46912 \u203c\n\nAn issue in the firmware update process of TP-Link TL-WR841N / TL-WA841ND V7 3.13.9 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:35.000000Z"}, {"uuid": "9afd266e-1672-4971-946c-0543b28a5870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46542", "type": "seen", "source": "https://t.me/cibsecurity/54970", "content": "\u203c CVE-2022-46542 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/addressNat.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:55.000000Z"}, {"uuid": "27c3104b-c3eb-4c27-b849-16b74bc5aeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4638", "type": "seen", "source": "https://t.me/cibsecurity/55094", "content": "\u203c CVE-2022-4638 \u203c\n\nA vulnerability classified as problematic was found in collective.contact.widget up to 1.12. This vulnerability affects the function title of the file src/collective/contact/widget/widgets.py. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 5da36305ca7ed433782be8901c47387406fcda12. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216496.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:15.000000Z"}, {"uuid": "c73e1877-62b2-414e-b711-ce347d5b211c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46334", "type": "seen", "source": "https://t.me/cibsecurity/55093", "content": "\u203c CVE-2022-46334 \u203c\n\nProofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:14.000000Z"}, {"uuid": "b4a39ff7-a8c6-4c4a-9bf8-d30cc49abfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4640", "type": "seen", "source": "https://t.me/cibsecurity/55092", "content": "\u203c CVE-2022-4640 \u203c\n\nA vulnerability has been found in Mingsoft MCMS 5.2.9 and classified as problematic. Affected by this vulnerability is the function save of the component Article Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216499.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:10.000000Z"}, {"uuid": "f020b0be-bf2d-41a9-8679-8528c4f61265", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4642", "type": "seen", "source": "https://t.me/cibsecurity/55091", "content": "\u203c CVE-2022-4642 \u203c\n\nA vulnerability was found in tatoeba2. It has been classified as problematic. This affects an unknown part of the component Profile Name Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version prod_2022-10-30 is able to address this issue. The name of the patch is 91110777fc8ddf1b4a2cf4e66e67db69b9700361. It is recommended to upgrade the affected component. The identifier VDB-216501 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:09.000000Z"}, {"uuid": "5c92301b-ee2f-457b-8651-e40af10c9513", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4637", "type": "seen", "source": "https://t.me/cibsecurity/55090", "content": "\u203c CVE-2022-4637 \u203c\n\nA vulnerability classified as problematic has been found in ep3-bs 1.8.0. This affects an unknown part. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to version 1.8.1 is able to address this issue. The name of the patch is ef49e709c8adecc3a83cdc6164a67162991d2213. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216495.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:08.000000Z"}, {"uuid": "bbdb7108-e6ac-4401-986d-f7cf343996ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4639", "type": "seen", "source": "https://t.me/cibsecurity/55089", "content": "\u203c CVE-2022-4639 \u203c\n\nA vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msg_info leads to format string. The attack may be initiated remotely. The name of the patch is b19f8a6046b080e4c2e28354a58556bb26040c6f. It is recommended to apply a patch to fix this issue. The identifier VDB-216497 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:07.000000Z"}, {"uuid": "af308462-a273-4625-8026-72b8864ef3b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46533", "type": "seen", "source": "https://t.me/cibsecurity/54969", "content": "\u203c CVE-2022-46533 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the limitSpeed parameter at /goform/SetClientState.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:54.000000Z"}, {"uuid": "00fc92e6-4570-483d-abb7-b5e6f5d19330", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46532", "type": "seen", "source": "https://t.me/cibsecurity/54968", "content": "\u203c CVE-2022-46532 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceMac parameter at /goform/addWifiMacFilter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:50.000000Z"}, {"uuid": "77574a8e-cd12-467d-8625-92c69de9f327", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46102", "type": "seen", "source": "https://t.me/cibsecurity/55126", "content": "\u203c CVE-2022-46102 \u203c\n\nAyaCMS 3.1.2 is vulnerable to Arbitrary file upload via /aya/module/admin/fst_down.inc.php\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T20:13:49.000000Z"}, {"uuid": "26ddbe83-a3b9-4555-8a80-79369b478713", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46101", "type": "seen", "source": "https://t.me/cibsecurity/55123", "content": "\u203c CVE-2022-46101 \u203c\n\nAyaCMS v3.1.2 was found to have a code flaw in the ust_sql.inc.php file, which allows attackers to cause command execution by inserting malicious code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T20:13:45.000000Z"}, {"uuid": "1cf6c4b5-6a77-46e6-a1a4-33fa8ef3b42f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4630", "type": "seen", "source": "https://t.me/cibsecurity/55064", "content": "\u203c CVE-2022-4630 \u203c\n\nSensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T20:12:55.000000Z"}, {"uuid": "8b63d11b-bd33-4ecc-b676-56e29239fe90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46399", "type": "seen", "source": "https://t.me/cibsecurity/54942", "content": "\u203c CVE-2022-46399 \u203c\n\nThe Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) is unresponsive with ConReqTimeoutZero.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T02:11:53.000000Z"}, {"uuid": "62c55b25-0c78-4e62-8f15-804e2a5550b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46095", "type": "seen", "source": "https://t.me/cibsecurity/55079", "content": "\u203c CVE-2022-46095 \u203c\n\nSourcecodester Covid-19 Directory on Vaccination System 1.0 was discovered to contain a Cross-Site Scripting (XSS) vulnerability via verification.php because the program does not verify the txtvaccinationID parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T22:13:10.000000Z"}, {"uuid": "2b86c1b5-9c5d-49f3-9e0f-7ce37dcb400d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4633", "type": "seen", "source": "https://t.me/cibsecurity/55084", "content": "\u203c CVE-2022-4633 \u203c\n\nA vulnerability was found in Auto Upload Images 3.3.1 and classified as problematic. Affected by this issue is some unknown functionality of the file src/setting-page.php of the component Settings Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. Upgrading to version 3.3.2 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. VDB-216482 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T22:13:15.000000Z"}, {"uuid": "6ec20545-ce53-4fde-9ed7-7c6d55d53bb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46321", "type": "seen", "source": "https://t.me/cibsecurity/55014", "content": "\u203c CVE-2022-46321 \u203c\n\nThe Wi-Fi module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:31.000000Z"}, {"uuid": "74ed0bd9-c94a-4df3-a8df-59ed81ac4dd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4615", "type": "seen", "source": "https://t.me/cibsecurity/54919", "content": "\u203c CVE-2022-4615 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T22:24:57.000000Z"}, {"uuid": "ad898dab-8b67-468a-8395-4c70930f3c7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46534", "type": "seen", "source": "https://t.me/cibsecurity/54959", "content": "\u203c CVE-2022-46534 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the speed_dir parameter at /goform/SetSpeedWan.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:41.000000Z"}, {"uuid": "c4cb0670-f2d8-44c7-af75-603e8435b296", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4612", "type": "seen", "source": "https://t.me/cibsecurity/54882", "content": "\u203c CVE-2022-4612 \u203c\n\nA vulnerability has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as problematic. This vulnerability affects unknown code. The manipulation leads to insufficiently protected credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. VDB-216274 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T18:11:33.000000Z"}, {"uuid": "7b3eefdc-27d6-403f-aea6-104a9cc984cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4610", "type": "seen", "source": "https://t.me/cibsecurity/54881", "content": "\u203c CVE-2022-4610 \u203c\n\nA vulnerability, which was classified as problematic, has been found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. Affected by this issue is some unknown functionality. The manipulation leads to risky cryptographic algorithm. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216272.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T18:11:32.000000Z"}, {"uuid": "a1de90c1-ffe1-4d12-be7c-b66fb0f9d69f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4641", "type": "seen", "source": "https://t.me/cibsecurity/55097", "content": "\u203c CVE-2022-4641 \u203c\n\nA vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. The name of the patch is 1e7bd9fab5401a2df18d2eabd802adcf0dcf1f15. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216500.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:17.000000Z"}, {"uuid": "2835030d-d2f6-44c6-a4eb-cd61e4cc03d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "seen", "source": "https://t.me/cibsecurity/55047", "content": "\u203c CVE-2022-46330 \u203c\n\nSquirrel.Windows is both a toolset and a library that provides installation and update functionality for Windows desktop applications. Installers generated by Squirrel.Windows 2.0.1 and earlier contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. As a result, arbitrary code may be executed with the privilege of the user invoking the installer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T12:13:32.000000Z"}, {"uuid": "bf8757ef-1c32-4ce3-a4a2-43c87933cc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46428", "type": "seen", "source": "https://t.me/cibsecurity/55006", "content": "\u203c CVE-2022-46428 \u203c\n\nTP-Link TL-WR1043ND V1 3.13.15 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:49.000000Z"}, {"uuid": "8a4c105e-955a-4e18-8bf6-89363219fa03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46910", "type": "seen", "source": "https://t.me/cibsecurity/55004", "content": "\u203c CVE-2022-46910 \u203c\n\nAn issue in the firmware update process of TP-Link TL-WA901ND V1 up to v3.11.2 and TL-WA901N V2 up to v3.12.16 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:47.000000Z"}, {"uuid": "d63b8db7-5304-4bde-99cb-4ae695abae87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46423", "type": "seen", "source": "https://t.me/cibsecurity/55003", "content": "\u203c CVE-2022-46423 \u203c\n\nAn exploitable firmware modification vulnerability was discovered on the Netgear WNR2000v1 router. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v1.2.3.7 and earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:46.000000Z"}, {"uuid": "9f87bad1-1fba-46da-8555-2491c9930137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46421", "type": "seen", "source": "https://t.me/cibsecurity/54954", "content": "\u203c CVE-2022-46421 \u203c\n\nImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Software Foundation Apache Airflow Hive Provider.This issue affects Apache Airflow Hive Provider: before 5.0.0.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T14:12:14.000000Z"}, {"uuid": "af2bf8e6-23f6-4f4c-833c-0f8482970773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4614", "type": "seen", "source": "https://t.me/cibsecurity/54905", "content": "\u203c CVE-2022-4614 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository alagrede/znote-app prior to 1.7.11.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T22:23:13.000000Z"}, {"uuid": "10b668e3-7753-40a3-bc87-3d70a22b40cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4643", "type": "seen", "source": "https://t.me/cibsecurity/55095", "content": "\u203c CVE-2022-4643 \u203c\n\nA vulnerability was found in docconv up to 1.3.4. It has been declared as critical. This vulnerability affects the function ConvertPDFImages of the file pdf_ocr.go. The manipulation of the argument path leads to os command injection. The attack can be initiated remotely. Upgrading to version 1.3.5 is able to address this issue. The name of the patch is b19021ade3d0b71c89d35cb00eb9e589a121faa5. It is recommended to upgrade the affected component. VDB-216502 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-22T00:13:15.000000Z"}, {"uuid": "160664ba-3113-4dd6-aeb8-c6ca89e1cc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46320", "type": "seen", "source": "https://t.me/cibsecurity/55029", "content": "\u203c CVE-2022-46320 \u203c\n\nThe kernel module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may cause memory overwriting.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:47.000000Z"}, {"uuid": "1993bb79-0927-4d91-a7fd-b7e081c21895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46319", "type": "seen", "source": "https://t.me/cibsecurity/55024", "content": "\u203c CVE-2022-46319 \u203c\n\nFingerprint calibration has a vulnerability of lacking boundary judgment. Successful exploitation of this vulnerability may cause out-of-bounds write.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:42.000000Z"}, {"uuid": "42752c96-582e-4e52-b6a0-f311f343e214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46310", "type": "seen", "source": "https://t.me/cibsecurity/55021", "content": "\u203c CVE-2022-46310 \u203c\n\nThe TelephonyProvider module has a vulnerability in obtaining values.Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:38.000000Z"}, {"uuid": "fbeee764-4f08-4998-bb4e-fd4bbbd3e26c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46317", "type": "seen", "source": "https://t.me/cibsecurity/55020", "content": "\u203c CVE-2022-46317 \u203c\n\nThe power consumption module has an out-of-bounds read vulnerability. Successful exploitation of this vulnerability may affect system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:37.000000Z"}, {"uuid": "bed9f4af-6973-4405-bd0e-aee4c34219bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46327", "type": "seen", "source": "https://t.me/cibsecurity/55018", "content": "\u203c CVE-2022-46327 \u203c\n\nSome smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:35.000000Z"}, {"uuid": "46cd70db-a7dd-424e-ba01-cf3dfa62a493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46318", "type": "seen", "source": "https://t.me/cibsecurity/55019", "content": "\u203c CVE-2022-46318 \u203c\n\nThe HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:36.000000Z"}, {"uuid": "c62f3242-f935-48d7-aa36-a9ccc79ee2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46324", "type": "seen", "source": "https://t.me/cibsecurity/55016", "content": "\u203c CVE-2022-46324 \u203c\n\nSome smartphones have the out-of-bounds write vulnerability. Successful exploitation of this vulnerability may cause system service exceptions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:33.000000Z"}, {"uuid": "ad54eebd-3140-4e35-8647-9b72c1749eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46316", "type": "seen", "source": "https://t.me/cibsecurity/55012", "content": "\u203c CVE-2022-46316 \u203c\n\nA thread security vulnerability exists in the authentication process. Successful exploitation of this vulnerability may affect data integrity, confidentiality, and availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:28.000000Z"}, {"uuid": "3d2d54f3-9442-4504-8dad-8d03aff1a62b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4632", "type": "seen", "source": "https://t.me/cibsecurity/55077", "content": "\u203c CVE-2022-4632 \u203c\n\nA vulnerability has been found in Auto Upload Images 3.3.1 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.2 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. The identifier VDB-216481 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T22:13:05.000000Z"}, {"uuid": "6a0bcf5d-599f-4f78-b842-f181cbb5d92f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46314", "type": "seen", "source": "https://t.me/cibsecurity/55013", "content": "\u203c CVE-2022-46314 \u203c\n\nThe IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:30.000000Z"}, {"uuid": "a7ef7f46-622c-47c7-adda-151a1682ec28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46096", "type": "seen", "source": "https://t.me/cibsecurity/55081", "content": "\u203c CVE-2022-46096 \u203c\n\nA Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid-19 Directory on Vaccination System v1.0 allows attackers to execute arbitrary code via the txtfullname parameter or txtphone parameter to register.php without logging in.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T22:13:12.000000Z"}, {"uuid": "7f307599-f34f-41a3-93dc-98fb00e2395d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4631", "type": "seen", "source": "https://t.me/cibsecurity/55080", "content": "\u203c CVE-2022-4631 \u203c\n\nA vulnerability, which was classified as problematic, was found in WP-Ban. Affected is an unknown function of the file ban-options.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is 22b925449c84faa9b7496abe4f8f5661cb5eb3bf. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216480.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T22:13:11.000000Z"}, {"uuid": "e26fb686-72eb-4e0c-8c0c-d9d1ae99b98c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46435", "type": "seen", "source": "https://t.me/cibsecurity/55009", "content": "\u203c CVE-2022-46435 \u203c\n\nAn issue in the firmware update process of TP-Link TL-WR941ND V2/V3 up to 3.13.9 and TL-WR941ND V4 up to 3.12.8 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:52.000000Z"}, {"uuid": "57d6aa2a-8e57-4f16-8d46-d9c8831682df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46434", "type": "seen", "source": "https://t.me/cibsecurity/54996", "content": "\u203c CVE-2022-46434 \u203c\n\nAn issue in the firmware update process of TP-Link TL-WA7510N v1 v3.12.6 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:38.000000Z"}, {"uuid": "b9e72706-291b-49c3-a759-5206b2b0d485", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46430", "type": "seen", "source": "https://t.me/cibsecurity/54995", "content": "\u203c CVE-2022-46430 \u203c\n\nTP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:37.000000Z"}, {"uuid": "c7e983d8-dd10-4dc7-9eaa-b26d24755593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46325", "type": "seen", "source": "https://t.me/cibsecurity/55023", "content": "\u203c CVE-2022-46325 \u203c\n\nSome smartphones have the out-of-bounds write vulnerability.Successful exploitation of this vulnerability may cause system service exceptions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:40.000000Z"}, {"uuid": "e8485250-6a1a-4229-aa4d-e4557ccb7f92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46139", "type": "seen", "source": "https://t.me/cibsecurity/55001", "content": "\u203c CVE-2022-46139 \u203c\n\nTP-Link TL-WR940N V4 3.16.9 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:44.000000Z"}, {"uuid": "e5fe5a1a-7d41-47d7-a77d-0aa65744c2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46914", "type": "seen", "source": "https://t.me/cibsecurity/55000", "content": "\u203c CVE-2022-46914 \u203c\n\nAn issue in the firmware update process of TP-LINK TL-WA801N / TL-WA801ND V1 v3.12.16 and earlier allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via uploading a crafted firmware image.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:43.000000Z"}, {"uuid": "559a578f-269e-457b-9c04-89a0724106a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46422", "type": "seen", "source": "https://t.me/cibsecurity/54999", "content": "\u203c CVE-2022-46422 \u203c\n\nAn issue in Netgear WNR2000 v1 1.2.3.7 and earlier allows authenticated attackers to cause a Denial of Service (DoS) via uploading a crafted firmware image during the firmware update process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:42.000000Z"}, {"uuid": "c0a87332-3792-4828-8ff0-3944493393f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46432", "type": "seen", "source": "https://t.me/cibsecurity/54997", "content": "\u203c CVE-2022-46432 \u203c\n\nAn exploitable firmware modification vulnerability was discovered on TP-Link TL-WR743ND V1. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v3.12.20 and earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:39.000000Z"}, {"uuid": "8bf36d2b-4379-41d5-a185-12507feff938", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46076", "type": "seen", "source": "https://t.me/cibsecurity/54984", "content": "\u203c CVE-2022-46076 \u203c\n\nD-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T20:12:23.000000Z"}, {"uuid": "ab2c03db-cec6-47bb-8751-ad2669d8b4c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46020", "type": "seen", "source": "https://t.me/cibsecurity/54978", "content": "\u203c CVE-2022-46020 \u203c\n\nWBCE CMS v1.5.4 can implement getshell by modifying the upload file type.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:13:05.000000Z"}, {"uuid": "873a80e3-4586-4b72-86de-24ae144008f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46548", "type": "seen", "source": "https://t.me/cibsecurity/54975", "content": "\u203c CVE-2022-46548 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/DhcpListClient.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:13:02.000000Z"}, {"uuid": "73c171c5-870e-4302-9298-0b21dd31ccc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46538", "type": "seen", "source": "https://t.me/cibsecurity/54974", "content": "\u203c CVE-2022-46538 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:13:01.000000Z"}, {"uuid": "05b09873-fc1e-49ec-81e8-e820df744750", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46547", "type": "seen", "source": "https://t.me/cibsecurity/54973", "content": "\u203c CVE-2022-46547 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the page parameter at /goform/VirtualSer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:57.000000Z"}, {"uuid": "fdc55614-f5f8-4462-9416-c1e9484dd135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46662", "type": "seen", "source": "https://t.me/cibsecurity/55043", "content": "\u203c CVE-2022-46662 \u203c\n\nRoxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if a malicious executable is placed on a certain path, the executable may be executed with the privilege of the Windows service. The affected product and versions are as follows: Roxio Creator LJB version number 12.2 build number 106B62B, version number 12.2 build number 106B63A, version number 12.2 build number 106B69A, version number 12.2 build number 106B71A, and version number 12.2 build number 106B74A)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T12:13:25.000000Z"}, {"uuid": "45d55b5b-8c33-4272-826c-498bc1539615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46282", "type": "seen", "source": "https://t.me/cibsecurity/55042", "content": "\u203c CVE-2022-46282 \u203c\n\nUse after free vulnerability in CX-Drive V3.00 and earlier allows a local attacker to execute arbitrary code by having a user to open a specially crafted file,\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T12:13:24.000000Z"}, {"uuid": "1b14d645-209d-416f-a219-2a1fd4ad3d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4617", "type": "seen", "source": "https://t.me/cibsecurity/55037", "content": "\u203c CVE-2022-4617 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.3.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T07:12:41.000000Z"}, {"uuid": "3a3b2c17-80b2-48d1-9a53-3e05d87fdd7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46313", "type": "seen", "source": "https://t.me/cibsecurity/55031", "content": "\u203c CVE-2022-46313 \u203c\n\nThe sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-21T00:12:49.000000Z"}, {"uuid": "7aa35b54-7d31-446c-989c-a63dcbac9a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46403", "type": "seen", "source": "https://t.me/cibsecurity/54939", "content": "\u203c CVE-2022-46403 \u203c\n\nThe Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) mishandles reject messages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T02:11:50.000000Z"}, {"uuid": "1d86dc90-ceaa-44ed-9b26-0e131f33e379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46401", "type": "seen", "source": "https://t.me/cibsecurity/54938", "content": "\u203c CVE-2022-46401 \u203c\n\nThe Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PauseEncReqPlainText before pairing is complete.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T02:11:49.000000Z"}, {"uuid": "0b77afb5-9b23-47cd-bcf7-e878c94bd9f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46402", "type": "seen", "source": "https://t.me/cibsecurity/54937", "content": "\u203c CVE-2022-46402 \u203c\n\nThe Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) accepts PairCon_rmSend with incorrect values.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T02:11:48.000000Z"}, {"uuid": "0d8ec4e8-cfba-424f-bf3b-151ae9271131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46544", "type": "seen", "source": "https://t.me/cibsecurity/54962", "content": "\u203c CVE-2022-46544 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the cmdinput parameter at /goform/exeCommand.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:44.000000Z"}, {"uuid": "e86bfbd1-9dc0-4ff2-9224-44da6427c339", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46531", "type": "seen", "source": "https://t.me/cibsecurity/54961", "content": "\u203c CVE-2022-46531 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/addWifiMacFilter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:43.000000Z"}, {"uuid": "4ba436e3-fd70-48cb-a325-778a76a03de3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46549", "type": "seen", "source": "https://t.me/cibsecurity/54960", "content": "\u203c CVE-2022-46549 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the deviceId parameter at /goform/saveParentControlInfo.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:42.000000Z"}, {"uuid": "9ed0253d-97f4-4951-8ee7-0ed3c40dae4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46424", "type": "seen", "source": "https://t.me/cibsecurity/54991", "content": "\u203c CVE-2022-46424 \u203c\n\nAn exploitable firmware modification vulnerability was discovered on the Netgear XWN5001 Powerline 500 WiFi Access Point. An attacker can conduct a MITM (Man-in-the-Middle) attack to modify the user-uploaded firmware image and bypass the CRC check, allowing attackers to execute arbitrary code or cause a Denial of Service (DoS). This affects v0.4.1.1 and earlier.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T22:12:33.000000Z"}, {"uuid": "d985d8c5-3bcc-42b9-b796-3321438ea101", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46540", "type": "seen", "source": "https://t.me/cibsecurity/54966", "content": "\u203c CVE-2022-46540 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/addressNat.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:48.000000Z"}, {"uuid": "3e076e6e-171b-4b44-9432-043601155da4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46546", "type": "seen", "source": "https://t.me/cibsecurity/54965", "content": "\u203c CVE-2022-46546 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the entrys parameter at /goform/RouteStatic.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:47.000000Z"}, {"uuid": "419b00ea-04c4-4ef7-a67e-539d06db2280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46550", "type": "seen", "source": "https://t.me/cibsecurity/54964", "content": "\u203c CVE-2022-46550 \u203c\n\nTenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T18:12:46.000000Z"}, {"uuid": "1959ea43-5e9f-4749-a2e8-c4c0a3b02b6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46400", "type": "seen", "source": "https://t.me/cibsecurity/54943", "content": "\u203c CVE-2022-46400 \u203c\n\nThe Microchip RN4870 module firmware 1.43 (and the Microchip PIC LightBlue Explorer Demo 4.2 DT100112) allows attackers to bypass passkey entry in legacy pairing.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-20T02:11:54.000000Z"}, {"uuid": "4f2cd7f3-d40c-43aa-b0f9-d5d2ad144db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4613", "type": "seen", "source": "https://t.me/cibsecurity/54884", "content": "\u203c CVE-2022-4613 \u203c\n\nA vulnerability was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome and classified as critical. This issue affects some unknown processing of the component Browser Extension Provisioning. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216275.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T18:11:35.000000Z"}, {"uuid": "2d6b8f95-cd23-44c9-864f-b865a7e53494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "seen", "source": "https://t.me/cibsecurity/54886", "content": "\u203c CVE-2022-4611 \u203c\n\nA vulnerability, which was classified as problematic, was found in Click Studios Passwordstate and Passwordstate Browser Extension Chrome. This affects an unknown part. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The identifier VDB-216273 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T18:11:37.000000Z"}, {"uuid": "26bf0b7e-6cbd-48ca-b12a-946efbcd7212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4607", "type": "seen", "source": "https://t.me/cibsecurity/54832", "content": "\u203c CVE-2022-4607 \u203c\n\nA vulnerability was found in 3D City Database OGC Web Feature Service up to 5.2.1. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to xml external entity reference. Upgrading to version 5.3.0 is able to address this issue. The name of the patch is 246f4e2a97ad81491c00a7ed72ce5e7c7f75050a. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216215.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-19T00:41:14.000000Z"}, {"uuid": "e558b189-96ce-4237-8e2c-ec2600586ab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46109", "type": "seen", "source": "https://t.me/cibsecurity/54774", "content": "\u203c CVE-2022-46109 \u203c\n\nTenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-16T20:24:44.000000Z"}, {"uuid": "736f7139-af66-43ca-bebf-4eccfb0ad592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4602", "type": "seen", "source": "https://t.me/cibsecurity/54824", "content": "\u203c CVE-2022-4602 \u203c\n\nA vulnerability was found in Shoplazza LifeStyle 1.1. It has been rated as problematic. This issue affects some unknown processing of the file /admin/api/theme-edit/ of the component Review Flow Handler. The manipulation of the argument Title leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-216197 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T14:40:52.000000Z"}, {"uuid": "415dfef4-b6b1-4b76-bcd5-1b952918d116", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46670", "type": "seen", "source": "https://t.me/cibsecurity/54788", "content": "\u203c CVE-2022-46670 \u203c\n\nRockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 and 1400 controllers contain a vulnerability that may give an attacker the ability to accomplish remote code execution. The vulnerability is an unauthenticated stored cross-site scripting vulnerability in the embedded webserver. The payload is transferred to the controller over SNMP and is rendered on the homepage of the embedded website.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-17T00:24:39.000000Z"}, {"uuid": "27cdb85f-acdb-4482-a96b-52341a57485c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4601", "type": "seen", "source": "https://t.me/cibsecurity/54817", "content": "\u203c CVE-2022-4601 \u203c\n\nA vulnerability was found in Shoplazza LifeStyle 1.1. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/api/theme-edit/ of the component Shipping/Member Discount/Icon. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-216196.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T14:40:42.000000Z"}, {"uuid": "e95bbc3c-5a21-45d0-b87a-3502e1beaa20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4600", "type": "seen", "source": "https://t.me/cibsecurity/54815", "content": "\u203c CVE-2022-4600 \u203c\n\nA vulnerability was found in Shoplazza LifeStyle 1.1. It has been classified as problematic. This affects an unknown part of the file /admin/api/theme-edit/ of the component Product Carousel Handler. The manipulation of the argument Heading/Description leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-216195.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-18T14:40:39.000000Z"}, {"uuid": "8fc7ac75-c0af-41ac-8aa5-95ad60eed150", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46412", "type": "seen", "source": "https://t.me/cibsecurity/53960", "content": "\u203c CVE-2022-46412 \u203c\n\nAn issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:39.000000Z"}, {"uuid": "e4b78a97-7143-40e4-bc68-d511e9ef1088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/cibsecurity/54031", "content": "\u203c CVE-2022-46169 \u203c\n\nCacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The vulnerability resides in the `remote_agent.php` file. This file can be accessed without authentication. This function retrieves the IP address of the client via `get_client_addr` and resolves this IP address to the corresponding hostname via `gethostbyaddr`. After this, it is verified that an entry within the `poller` table exists, where the hostname corresponds to the resolved hostname. If such an entry was found, the function returns `true` and the client is authorized. This authorization can be bypassed due to the implementation of the `get_client_addr` function. The function is defined in the file `lib/functions.php` and checks serval `$_SERVER` variables to determine the IP address of the client. The variables beginning with `HTTP_` can be arbitrarily set by an attacker. Since there is a default entry in the `poller` table with the hostname of the server running Cacti, an attacker can bypass the authentication e.g. by providing the header `Forwarded-For: `. This way the function `get_client_addr` returns the IP address of the server running Cacti. The following call to `gethostbyaddr` will resolve this IP address to the hostname of the server, which will pass the `poller` hostname check because of the default entry. After the authorization of the `remote_agent.php` file is bypassed, an attacker can trigger different actions. One of these actions is called `polldata`. The called function `poll_for_data` retrieves a few request parameters and loads the corresponding `poller_item` entries from the database. If the `action` of a `poller_item` equals `POLLER_ACTION_SCRIPT_PHP`, the function `proc_open` is used to execute a PHP script. The attacker-controlled parameter `$poller_id` is retrieved via the function `get_nfilter_request_var`, which allows arbitrary strings. This variable is later inserted into the string passed to `proc_open`, which leads to a command injection vulnerability. By e.g. providing the `poller_id=;id` the `id` command is executed. In order to reach the vulnerable call, the attacker must provide a `host_id` and `local_data_id`, where the `action` of the corresponding `poller_item` is set to `POLLER_ACTION_SCRIPT_PHP`. Both of these ids (`host_id` and `local_data_id`) can easily be bruteforced. The only requirement is that a `poller_item` with an `POLLER_ACTION_SCRIPT_PHP` action exists. This is very likely on a productive instance because this action is added by some predefined templates like `Device - Uptime` or `Device - Polling Time`. This command injection vulnerability allows an unauthenticated user to execute arbitrary commands if a `poller_item` with the `action` type `POLLER_ACTION_SCRIPT_PHP` (`2`) is configured. The authorization bypass should be prevented by not allowing an attacker to make `get_client_addr` (file `lib/functions.php`) return an arbitrary IP address. This could be done by not honoring the `HTTP_...` `$_SERVER` variables. If these should be kept for compatibility reasons it should at least be prevented to fake the IP address of the server running Cacti. This vulnerability has been addressed in both the 1.2.x and 1.3.x release branches with `1.2.23` being the first release containing the patch.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T00:40:20.000000Z"}, {"uuid": "465a47df-b279-49ea-8624-d15d8d3bf05b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46154", "type": "seen", "source": "https://t.me/cibsecurity/54090", "content": "\u203c CVE-2022-46154 \u203c\n\nKodexplorer is a chinese language web based file manager and browser based code editor. Versions prior to 4.50 did not prevent unauthenticated users from requesting arbitrary files from the host OS file system. As a result any files available to the host process may be accessed by arbitrary users. This issue has been addressed in version 4.50. Users are advised to upgrade. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T22:40:58.000000Z"}, {"uuid": "ceae80ac-ffb8-4545-ab0b-ae90198cbc9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46383", "type": "seen", "source": "https://t.me/cibsecurity/54068", "content": "\u203c CVE-2022-46383 \u203c\n\nRackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has exposed a privileged token via a public API endpoint (Incorrect Access Control). The token can be used to escalate privileges within the Digital Rebar system and grant full administrative access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T18:41:17.000000Z"}, {"uuid": "fce63c2a-21e4-40dd-a78b-7cfa5d9e3cc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46159", "type": "seen", "source": "https://t.me/cibsecurity/53808", "content": "\u203c CVE-2022-46159 \u203c\n\nDiscourse is an open-source discussion platform. In version 2.8.13 and prior on the `stable` branch and version 2.9.0.beta14 and prior on the `beta` and `tests-passed` branches, any authenticated user can create an unlisted topic. These topics, which are not readily available to other users, can take up unnecessary site resources. A patch for this issue is available in the `main` branch of Discourse. There are no known workarounds available.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-02T18:37:08.000000Z"}, {"uuid": "b474c7af-b928-4c0f-9d01-9e407a522f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46382", "type": "seen", "source": "https://t.me/cibsecurity/54066", "content": "\u203c CVE-2022-46382 \u203c\n\nRackN Digital Rebar through 4.6.14, 4.7 through 4.7.22, 4.8 through 4.8.5, 4.9 through 4.9.12, and 4.10 through 4.10.8 has Insecure Permissions. After signing into Digital Rebar, users are issued authentication tokens tied to their account to perform actions within Digital Rebar. During the validation process of these tokens, Digital Rebar did not check if the user account still exists. Deleted Digital Rebar users could still use their tokens to perform actions within Digital Rebar.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T18:41:14.000000Z"}, {"uuid": "d7c0704c-4b94-442d-91b7-caee0fd5f408", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46366", "type": "seen", "source": "https://t.me/cibsecurity/53799", "content": "\u203c CVE-2022-46366 \u203c\n\n** UNSUPPORTED WHEN ASSIGNED ** Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from CVE-2020-17531, which applies the the (also unsupported) 4.x version line. NOTE: This vulnerability only affects Apache Tapestry version line 3.x, which is no longer supported by the maintainer. Users are recommended to upgrade to a supported version line of Apache Tapestry.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-02T16:36:55.000000Z"}, {"uuid": "0933891f-b2b3-4458-b000-614ee0e82b8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46151", "type": "seen", "source": "https://t.me/cibsecurity/54047", "content": "\u203c CVE-2022-46151 \u203c\n\nQuerybook is an open source data querying UI. In affected versions user provided data is not escaped in the error field of the auth callback url in `querybook/server/app/auth/oauth_auth.py` and `querybook/server/app/auth/okta_auth.py`. This may allow attackers to perform reflected cross site scripting (XSS) if Content Security Policy (CSP) is not enabled or `unsafe-inline` is allowed. Users are advised to upgrade to the latest, patched version of querybook (version 3.14.2 or greater). Users unable to upgrade may enable CSP and not allow unsafe-inline or manually escape query parameters in a reverse proxy.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-06T07:41:16.000000Z"}, {"uuid": "02f542e2-04ea-4416-bf29-36b1f3528601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46405", "type": "seen", "source": "https://t.me/cibsecurity/53958", "content": "\u203c CVE-2022-46405 \u203c\n\nMastodon through 4.0.2 allows attackers to cause a denial of service (large Sidekiq pull queue) by creating bot accounts that follow attacker-controlled accounts on certain other servers associated with a wildcard DNS A record, such that there is uncontrolled recursion of attacker-generated messages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:37.000000Z"}, {"uuid": "1f216913-7bb0-4a43-a017-559c48fa7331", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46411", "type": "seen", "source": "https://t.me/cibsecurity/53959", "content": "\u203c CVE-2022-46411 \u203c\n\nAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. A default password is persisted after installation and may be discovered and used to escalate privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:38.000000Z"}, {"uuid": "d9862e5e-2ea1-42eb-a744-de70ae889b18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46413", "type": "seen", "source": "https://t.me/cibsecurity/53957", "content": "\u203c CVE-2022-46413 \u203c\n\nAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Authenticated remote command execution can occur via the management portal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:36.000000Z"}, {"uuid": "d6de2afa-32f4-44f3-8b7b-6ffdd4b93677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46391", "type": "seen", "source": "https://t.me/cibsecurity/53956", "content": "\u203c CVE-2022-46391 \u203c\n\nAWStats 7.x through 7.8 allows XSS in the hostinfo plugin due to printing a response from Net::XWhois without proper checks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:35.000000Z"}, {"uuid": "983d87d5-755c-4c4f-8c85-72b58b8aab2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46414", "type": "seen", "source": "https://t.me/cibsecurity/53954", "content": "\u203c CVE-2022-46414 \u203c\n\nAn issue was discovered in Veritas NetBackup Flex Scale through 3.0 and Access Appliance through 8.0.100. Unauthenticated remote command execution can occur via the management portal.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:33.000000Z"}, {"uuid": "0b1dcfb8-8f97-4b16-a5ad-d0934e2388c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46410", "type": "seen", "source": "https://t.me/cibsecurity/53953", "content": "\u203c CVE-2022-46410 \u203c\n\nAn issue was discovered in Veritas NetBackup Flex Scale through 3.0. An attacker with non-root privileges may escalate privileges to root by using specific commands.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-04T07:38:32.000000Z"}, {"uuid": "43045b03-d451-49df-a35e-f3843c4a213e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46145", "type": "seen", "source": "https://t.me/cibsecurity/53829", "content": "\u203c CVE-2022-46145 \u203c\n\nauthentik is an open-source identity provider. Versions prior to 2022.11.2 and 2022.10.2 are vulnerable to unauthorized user creation and potential account takeover. With the default flows, unauthenticated users can create new accounts in authentik. If a flow exists that allows for email-verified password recovery, this can be used to overwrite the email address of admin accounts and take over their accounts. authentik 2022.11.2 and 2022.10.2 fix this issue. As a workaround, a policy can be created and bound to the `default-user-settings-flow flow` with the contents `return request.user.is_authenticated`.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-02T20:37:35.000000Z"}, {"uuid": "f00cc533-ffa6-4e61-b631-e78c9a36aef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1477", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689\n\nhttps://github.com/zhuowei/WDBFontOverwrite", "creation_timestamp": "2026-08-04T04:00:04.094011Z"}, {"uuid": "98211403-bd3f-4bc4-ae6a-2f6e5ba443b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2995", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689 https://github.com/ginsudev/WDBFontOverwrite", "creation_timestamp": "2026-08-03T01:03:35.360089Z"}, {"uuid": "89112647-3dd4-4072-bdd6-bb351d4b183d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3015", "content": "Analyzing CVE-2022-46330 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330/", "creation_timestamp": "2026-08-03T01:05:45.526845Z"}, {"uuid": "142f0fe5-2902-41b0-beeb-d1ab4d234594", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13391", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/antisecc/CVE-2022-46169", "creation_timestamp": "2026-07-31T00:00:10.630474Z"}, {"uuid": "c9a27e69-92e1-4233-9131-e53451641bf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12717", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *ImprovedShell-for-CVE-2022-46169*\nGithub: https://github.com/ahanel13/ImprovedShell-for-CVE-2022-46169", "creation_timestamp": "2026-07-31T00:00:08.728799Z"}, {"uuid": "8a8f0756-66e3-4a78-9777-c63611f04fb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46080", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16297", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46080*\nGithub: https://github.com/yerodin/CVE-2022-46080", "creation_timestamp": "2026-07-31T00:00:37.950269Z"}, {"uuid": "c641f23d-1f4f-41d9-b247-74e7f857fb78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16482", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4611*\nGithub: https://github.com/fgsoftware1/CVE-2022-4611", "creation_timestamp": "2026-07-31T00:00:38.850059Z"}, {"uuid": "cdb58121-f0e3-46bc-82bb-ebc943e19812", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/16468", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4611*\nGithub: https://github.com/Phamchie/CVE-2022-4611", "creation_timestamp": "2026-07-31T00:00:38.893036Z"}, {"uuid": "8f3d900e-aced-4fd5-832a-5b806d3a2b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/thehackernews/2953", "content": "If you use Cacti for web-based monitoring, be sure to patch ASAP!\n\nA critical vulnerability [CVE-2022-46169] is being actively exploited in the wild and a majority of internet-exposed servers have not been patched yet.\n\nRead: https://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html", "creation_timestamp": "2023-01-14T09:17:05.000000Z"}, {"uuid": "3e2ae117-112b-4407-ae33-f38b8f6f0699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2540", "content": "#CVE-2022\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\nhttps://github.com/amitlttwo/CVE-2022-2414-Proof-Of-Concept\n\nFor CVE-2022-33891 Apache Spark: Emulation and Detection by West Shepherd\nhttps://github.com/ps-interactive/lab_security_apache_spark_emulation_detection\n\nCVE-2022-46169\n\nhttps://github.com/imjdl/CVE-2022-46169\n\n@BlueRedTeam", "creation_timestamp": "2022-12-27T19:38:43.000000Z"}, {"uuid": "b680486a-7280-493b-9e2d-7d9803c2e7b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2567", "content": "#CVE-2022\nProof-of-concept app to overwrite fonts on iOS using CVE-2022-46689.\nhttps://github.com/zhuowei/WDBFontOverwrite\n\nThis repo contains payload for the CVE-2022-36067\nhttps://github.com/Prathamrajgor/Exploit-For-CVE-2022-36067\n\nProof of concept for CVE-2022-30190 (Follina).\n\nhttps://github.com/winstxnhdw/CVE-2022-30190\n\n@BlueRedTeam", "creation_timestamp": "2023-01-21T16:19:17.000000Z"}, {"uuid": "2ff0d35f-adad-4e18-907a-a251acd70198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46020", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2569", "content": "#getshell\nWBCE CMS v1.5.4 can implement getshell by modifying the upload file type. CVE project by @Sn0wAlice\nhttps://github.com/Live-Hack-CVE/CVE-2022-46020\n\n#webshell\nA polymorphic webshell generator\n\nhttps://github.com/evaannn/delorean\n\n@BlueRedTeam", "creation_timestamp": "2023-01-24T06:19:45.000000Z"}, {"uuid": "32b2f7de-7871-4606-b261-6ef6cf7700d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/BlueRedTeam/2556", "content": "#CVE-2022\n7-Zip CVE-2022-29072 Mitigation - CHM file - This script detects if the .chm file exists and removes it.\n\nhttps://github.com/Phantomiman/7-Zip.chm-mitigiation\n\n#CVE-2022\nPoC for Acronis Arbitrary File Read - CVE-2022-45451\nhttps://github.com/alfarom256/CVE-2022-45451\n\n#webshell\nwebshell alfa php\n\nhttps://github.com/xstro04002/alfa-shell\n\nCVE-2022-25765 pdfkit <0.8.6 command injection.\n\nhttps://github.com/shamo0/PDFkit-CMD-Injection\n\nGet root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug), using the testcase extracted from Apple's XNU source.\n\nhttps://github.com/Conradoduart3/Nft-Grabber-Stealer-Exploit-Cve-2022-Steal-BlockHain-Hack-Nft\n\n@BlueRedTeam", "creation_timestamp": "2023-01-10T19:38:54.000000Z"}, {"uuid": "2ddd6a98-63a8-4bb2-861d-9b59b8450420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4646", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2565", "content": "#CVE-2022\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-20607\n\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-4646\n\nPoC for the CVE-2022-41082 Vulnerability Effecting Microsoft Exchange Servers\n\nhttps://github.com/balki97/CVE-2022-41082-POC\n\nCVE-2022-2602\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\nCVE-2022-2602\nhttps://github.com/Live-Hack-CVE/CVE-2022-4633\n\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-25574\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-36966\n\n@BlueRedTeam", "creation_timestamp": "2023-01-29T12:39:15.000000Z"}, {"uuid": "b32ae314-975e-4651-9aae-c13174a672f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4633", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2565", "content": "#CVE-2022\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-20607\n\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-4646\n\nPoC for the CVE-2022-41082 Vulnerability Effecting Microsoft Exchange Servers\n\nhttps://github.com/balki97/CVE-2022-41082-POC\n\nCVE-2022-2602\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\nCVE-2022-2602\nhttps://github.com/Live-Hack-CVE/CVE-2022-4633\n\nTOP All bugbounty pentesting CVE-2022- POC Exp\u00a0 RCE example payload\u00a0 Things\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-25574\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation via DKOM\n\nhttps://github.com/Live-Hack-CVE/CVE-2022-36966\n\n@BlueRedTeam", "creation_timestamp": "2023-01-29T12:39:15.000000Z"}, {"uuid": "4ce677b0-8fd5-446f-ab44-bcee0f4ff675", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46175", "type": "seen", "source": "https://t.me/canyoupwnme/6834", "content": "CVE-2022-46175: JSON5 Prototype Pollution Vulnerability\nhttps://securityonline.info/cve-2022-46175-json5-prototype-pollution-vulnerability/", "creation_timestamp": "2022-12-26T08:42:39.000000Z"}, {"uuid": "9ff39bff-035d-41d6-92e9-9add576cbee9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/Safarchand/CVE-2022-46169", "creation_timestamp": "2026-07-31T01:00:03.825427Z"}, {"uuid": "8a44712b-b20d-48b2-8e5d-4b9912aba71e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12146", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/MarkStrendin/CVE-2022-46169", "creation_timestamp": "2026-07-31T01:00:04.093340Z"}, {"uuid": "0f125afc-e9ff-48fb-8c41-e577ad6b86e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12234", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/BKreisel/CVE-2022-46169", "creation_timestamp": "2026-07-31T01:00:04.322114Z"}, {"uuid": "eb35f5f6-cb20-417e-bcc5-571f23b3ee73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/13220", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-cve-2022-46169-exploit*\nGithub: https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit", "creation_timestamp": "2026-07-31T01:00:07.118334Z"}, {"uuid": "2a5cf102-7842-4a34-bc99-d4da0c7fce37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46663", "type": "seen", "source": "https://t.me/cultofwire/1098", "content": "ANSI Terminal security in 2023 and finding 10 CVEs.\n\n\u041a\u0440\u0443\u0442\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442 \u0414\u044d\u0432\u0438\u0434\u0430 \u041b\u0438\u0434\u0431\u0435\u0439\u0442\u0430 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 10 CVE \u0434\u043b\u044f \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (Remote Code Execution, RCE), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.\n\n\u041c\u0435\u043d\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: \nThe Terminal Escapes: Engineering unexpected execution from command line interfaces\n\n\u041d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 CVE \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430:\n- CVE-2022-45872 - iTerm2 DECRQSS\n- CVE-2022-44702 - Windows Terminal + WSL working directory\n- CVE-2022-47583 - mintty DECRQSS\n- CVE-2022-45063 - xterm OSC 50\n- CVE-2022-46387 - ConEmu Title\n- CVE-2023-39150 - ConEmu Title Take 2\n- CVE-2022-4170  - rxvt-unicode background\n- CVE-2022-23465 - SwiftTerm DECRQSS\n- CVE-2022-46663 - less OSC 8\n- CVE-2023-39726 - mintty OSC 50\n- CVE-2023-40359 - xterm ReGIS\n- CVE-2023-40216 - OpenBSD wscons parameter overflow", "creation_timestamp": "2023-11-08T13:02:31.000000Z"}, {"uuid": "e372acda-84bc-4ad9-927f-12bfa190a8d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46387", "type": "seen", "source": "https://t.me/cultofwire/1098", "content": "ANSI Terminal security in 2023 and finding 10 CVEs.\n\n\u041a\u0440\u0443\u0442\u043e\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0442 \u0414\u044d\u0432\u0438\u0434\u0430 \u041b\u0438\u0434\u0431\u0435\u0439\u0442\u0430 \u043f\u043e \u043f\u043e\u0438\u0441\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432 \u0441 \u0430\u043a\u0446\u0435\u043d\u0442\u043e\u043c \u043d\u0430 \u041f\u041e \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u043a\u043e\u0434\u043e\u043c. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e 10 CVE \u0434\u043b\u044f \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u043e\u0432 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (Remote Code Execution, RCE), \u0430 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438.\n\n\u041c\u0435\u043d\u0435\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0437\u0434\u0435\u0441\u044c: \nThe Terminal Escapes: Engineering unexpected execution from command line interfaces\n\n\u041d\u0430\u0439\u0434\u0435\u043d\u043d\u044b\u0435 CVE \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430\u0445 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430:\n- CVE-2022-45872 - iTerm2 DECRQSS\n- CVE-2022-44702 - Windows Terminal + WSL working directory\n- CVE-2022-47583 - mintty DECRQSS\n- CVE-2022-45063 - xterm OSC 50\n- CVE-2022-46387 - ConEmu Title\n- CVE-2023-39150 - ConEmu Title Take 2\n- CVE-2022-4170  - rxvt-unicode background\n- CVE-2022-23465 - SwiftTerm DECRQSS\n- CVE-2022-46663 - less OSC 8\n- CVE-2023-39726 - mintty OSC 50\n- CVE-2023-40359 - xterm ReGIS\n- CVE-2023-40216 - OpenBSD wscons parameter overflow", "creation_timestamp": "2023-11-08T13:02:31.000000Z"}, {"uuid": "463cda5e-8845-452c-97ce-a619614a42e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46175", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/6854", "content": "CVE-2022-46175: JSON5 Prototype Pollution Vulnerability\n\nhttps://securityonline.info/cve-2022-46175-json5-prototype-pollution-vulnerability/", "creation_timestamp": "2023-02-02T11:44:54.000000Z"}, {"uuid": "e67a36c6-7294-4f08-853a-52ce0c63825b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46871", "type": "seen", "source": "https://t.me/Russian_OSINT/2677", "content": "\ud83d\udea4 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ASUS \u043f\u0440\u0438\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u00ab\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u0442\u044c\u0441\u044f\u00bb\n\nASUS \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0443 \u0441 \u043a\u0443\u043c\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043e\u043f\u0430\u0441\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0430\u0445. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \"Latest security updates\" \u043e\u0442 06/19/2023 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\u2194\ufe0f \u0412 \u043d\u043e\u0432\u043e\u0439 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u0435\u0432\u044f\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0432\u044b\u0441\u043e\u043a\u0438\u0435 \u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435. \u0412 \u0441\u043f\u0438\u0441\u043a\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442\u0441\u044f CVE-2023-28702, CVE-2023-28703, CVE-2023-31195, CVE-2022-46871, CVE-2022-38105, CVE-2022-35401, CVE-2018-1160, CVE-2022-38393, CVE-2022-26376.\n\n\u0412 \u0441\u043f\u0438\u0441\u043e\u043a \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u0445\u043e\u0434\u044f\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0434\u0435\u043b\u0438: GT6, GT-AXE16000, GT-AX11000 PRO, GT-AX6000, GT-AX11000, GS-AX5400, GS-AX3000, XT9, XT8, XT8 V2, RT-AX86U PRO, RT-AX86U, RT-AX86S, RT-AX82U, RT-AX58U, RT-AX3000, TUF-AX6000 \u0438 TUF-AX5400.\n\nhttps://www.asus.com/content/asus-product-security-advisory/#:~:text=06/19/2023%20New%20firmware%20with%20accumulate%20security%20updates\n\n\u270b @Russian_OSINT", "creation_timestamp": "2023-06-19T19:55:30.000000Z"}, {"uuid": "adb036d3-7c4d-42c0-ad35-a15b6888fdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/CNArsenal/387", "content": "Cacti remote_agent.php \u8fdc\u7a0b\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e CVE-2022-46169\nCacti < 1.2.17-1.2.22\napp=\"Cacti-\u76d1\u63a7\u7cfb\u7edf\"\n\n\nGET /remote_agent.php?action=polldata&local_data_ids[0]=6&host_id=1&poller_id=id>1.txt\nX-Forwarded-For: 127.0.0.1\n\n#exploit #poc", "creation_timestamp": "2024-08-20T17:04:12.000000Z"}, {"uuid": "fd06cd89-cfe4-44c2-af63-eb4000a80368", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11976", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/cacti-CVE-2022-46169", "creation_timestamp": "2026-07-31T02:00:04.299122Z"}, {"uuid": "34a30670-feb8-46f6-94af-ddcd1aa362af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11886", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/yassinebk/CVE-2022-46169", "creation_timestamp": "2026-07-31T02:00:03.947192Z"}, {"uuid": "c86ed738-df67-4039-8db6-fccfe572c95d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11883", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/sAsPeCt488/CVE-2022-46169", "creation_timestamp": "2026-07-31T02:00:03.993596Z"}, {"uuid": "b5a81c63-7517-49fc-a173-fb5b41b9f430", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11997", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169-CACTI-1.2.22*\nGithub: https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22", "creation_timestamp": "2026-07-31T02:00:04.436397Z"}, {"uuid": "0830cf33-802a-4979-9c44-95b79cabe9a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11996", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/CVE-2022-46169", "creation_timestamp": "2026-07-31T02:00:04.481439Z"}, {"uuid": "7a19ca6b-2a65-4adf-a0b6-29c41388992f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11994", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *cve-2022-46718-leaky-location*\nGithub: https://github.com/biscuitehh/cve-2022-46718-leaky-location", "creation_timestamp": "2026-07-31T02:00:04.522013Z"}, {"uuid": "6194e860-a4df-4f61-bd39-94f7b7c48777", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7314", "content": "#exploit\n1. CVE-2022-46169:\nCritical vulnerability affects Cacti network graphing solution\nhttps://securityonline.info/cve-2022-46169-critical-vulnerability-affects-cacti-network-graphing-solution\n\n2. Linux PrivEsc(2) - Scheduled Tasks (cron)\nhttps://medium.com/@tinopreter/linux-privesc-2-scheduled-tasks-cron-b23c4c4df152\n\n3. CVE-2022-45313/45315:\nMikrotik RouterOs <7.5/7.6 was discovered to contain an OOB R/ in the hotspot vuln/snmp process\nhttps://github.com/cq674350529/pocs_slides/tree/master/advisory/MikroTik/CVE-2022-45313\nhttps://github.com/cq674350529/pocs_slides/tree/master/advisory/MikroTik/CVE-2022-45315\n\n@pocfather_bot", "creation_timestamp": "2022-12-07T11:01:06.000000Z"}, {"uuid": "8dc6a3d0-bd0c-4bb9-bd6e-3cdb17506b51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7381", "content": "#exploit\n1. CVE-2022-41050:\nA vulnerability in the MS Windows' User-Mode Printer Drivers\nhttps://ssd-disclosure.com/win32k-user-mode-printer-drivers-startdoc-uaf\n\n2. CVE-2022-46689:\nmacOS Dirty Cow bug\nhttps://github.com/zhuowei/MacDirtyCowDemo\n\n3. CVE-2022-39198:\nApache Dubbo Hession Deserialization Vulnerability Gadgets Bypass\nhttps://xz.aliyun.com/t/11961", "creation_timestamp": "2022-12-18T20:23:10.000000Z"}, {"uuid": "3ac6d072-ae5f-4ae3-a87a-143d2ab2983f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46146", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7281", "content": "#exploit\n1. CVE-2022-3328:\nRace condition in snap-confine's must_mkdir_and_open_with_perms()\nhttps://seclists.org/oss-sec/2022/q4/164\n\n2. CVE-2022-46146:\nAuthentication Bypass in Open-Source Prometheus Project\nhttps://securityonline.info/cve-2022-46146-authentication-bypass-in-open-source-prometheus-project\n\n3. CVE-2022-4116:\nQuarkus Java framework RCE\nhttps://joebeeton.github.io\n]-> https://github.com/JoeBeeton/simple-request-attacks", "creation_timestamp": "2022-12-02T11:01:15.000000Z"}, {"uuid": "d4e3223c-3480-41ed-8fb6-0ae3a8afb981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7492", "content": "#exploit\n1. CVE-2022-46164:\nNodeBB Account Takeover Flaw\nhttps://github.com/stephenbradshaw/CVE-2022-46164-poc\n\n2. CVE-2022-23087:\n\"Escaping from bhyve\"\nhttps://www.synacktiv.com/publications/escaping-from-bhyve.html\nhttps://github.com/synacktiv/bhyve", "creation_timestamp": "2023-01-05T11:30:20.000000Z"}, {"uuid": "7c230542-3aec-4c63-83a8-351728e17a6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46630", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7516", "content": "#Threat_Research\n1. Exploit Party: Bring Your Own Vulnerable Driver Attacks\nhttps://fourcore.io/blogs/bring-your-own-vulnerable-driver-attack\n2. Analyzing CVE-2022-46630 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330", "creation_timestamp": "2023-01-09T11:01:39.000000Z"}, {"uuid": "81d56154-9504-4907-be65-62b4d3c6f64b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7516", "content": "#Threat_Research\n1. Exploit Party: Bring Your Own Vulnerable Driver Attacks\nhttps://fourcore.io/blogs/bring-your-own-vulnerable-driver-attack\n2. Analyzing CVE-2022-46630 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330", "creation_timestamp": "2023-01-09T11:01:39.000000Z"}, {"uuid": "c860bad1-cbdc-4475-944d-1f1666c726fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46660", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7928", "content": "#SCADA_Security\nHacking ICS Historians:\nThe Pivot Point from IT to OT  (CVE-2022-46732, CVE-2022-46660, CVE-2022-43494, CVE-2022-46331, CVE-2022-38469)\nhttps://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot", "creation_timestamp": "2023-03-15T11:02:01.000000Z"}, {"uuid": "a2b41d76-b6ad-493a-a3aa-f7f47c8ed9dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7928", "content": "#SCADA_Security\nHacking ICS Historians:\nThe Pivot Point from IT to OT  (CVE-2022-46732, CVE-2022-46660, CVE-2022-43494, CVE-2022-46331, CVE-2022-38469)\nhttps://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot", "creation_timestamp": "2023-03-15T11:02:01.000000Z"}, {"uuid": "aacb53a3-af96-4a1d-8fcf-ec6aab6ad668", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46331", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7928", "content": "#SCADA_Security\nHacking ICS Historians:\nThe Pivot Point from IT to OT  (CVE-2022-46732, CVE-2022-46660, CVE-2022-43494, CVE-2022-46331, CVE-2022-38469)\nhttps://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot", "creation_timestamp": "2023-03-15T11:02:01.000000Z"}, {"uuid": "6fb269a4-7dad-4dac-872a-3226fa4ae018", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46552", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8068", "content": "#exploit\n1. CVE-2022-46552:\nD-Link DIR-846 - RCE\nhttps://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html\n\n2. RCE Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack\nhttps://www.legitsecurity.com/blog/remote-code-execution-vulnerability-in-azure-pipelines-can-lead-to-software-supply-chain-attack\n\n3. Citrix 22.2.1/23.1.1 - LPE\nhttps://packetstormsecurity.com/files/171716/Citrix-22.2.1.103-23.1.1.11-Local-Privilege-Escalation.html", "creation_timestamp": "2023-04-06T18:30:03.000000Z"}, {"uuid": "37c290c2-2c55-432a-82f1-a8ae89b8cae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46697", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/8083", "content": "#exploit\n1. CVE-2022-46697:\nOut-of-bounds access in IOMobileFrameBuffer\nhttps://github.com/antoniozekic/Proof-of-concepts/tree/main/CVE-2022-46697\n\n2. CVE-2022-38053, CVE-2023-21742, CVE-2023-21717:\nSharePoint Webpart Property Traversal\nhttps://testbnull.medium.com/ph%C3%A2n-t%C3%ADch-l%E1%BB%97-h%E1%BB%95ng-sharepoint-webpart-property-traversal-cve-2022-38053-cve-2023-21742-bc6931698a5f\n\n3. CVE-2023-23398:\nMicrosoft Excel Spoofing\nhttps://packetstormsecurity.com/files/171752/Microsoft-Excel-Spoofing.html", "creation_timestamp": "2023-04-09T13:17:01.000000Z"}, {"uuid": "cd65fa24-7857-4234-9aae-93bebb7f0297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8091", "content": "#exploit\n1. Exploit for elevation of privilege vulnerability in QuickHeal's Seqrite EPS\nhttps://github.com/0xinfection/epscalate\n\n2. Cloud Exploit Framework\nhttps://github.com/Rnalter/ThunderCloud\n\n3. CVE-2022-46604:\nResponsive FileManager 9.9.5 Remote Shell Upload\nhttps://packetstormsecurity.com/files/171720/Responsive-FileManager-9.9.5-Remote-Shell-Upload.html", "creation_timestamp": "2023-04-10T10:59:01.000000Z"}, {"uuid": "4a1b1c69-50cd-441a-a669-060ee96039ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8229", "content": "#exploit\n1. CVE-2022-46718:\niOS Vulnerability Exposes Sensitive Location Data\nhttps://github.com/biscuitehh/cve-2022-46718-leaky-location\n\n2. Fortigate 7.0.1 Stack Overflow\nhttps://packetstormsecurity.com/files/172082/Fortigate-7.0.1-Stack-Overflow.html\n]-> https://code610.blogspot.com/2023/04/fuzzing-fortigate-7.html", "creation_timestamp": "2023-05-03T13:26:14.000000Z"}, {"uuid": "db5b11d1-06ad-413b-8107-d0651dde546c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46164", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/4519", "content": "CVE-2022-46164 exploit \n\nRead\n\n#exploit #CVE \n\u2014\u2014\u2014\u2014\u2014\u2014\u200c\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-01-17T00:38:48.000000Z"}, {"uuid": "c6d323c6-0137-4572-a4ab-ce091195e197", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46723", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/11156", "content": "#exploit\n1. Zero-Click Calendar invite - Critical 0-click vulnerability chain in macOS (CVE-2022-46723)\nhttps://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b\n\n2. CVE-2024-2879:\nWP LayerSlider - Unauth SQLI\nhttps://github.com/herculeszxc/CVE-2024-2879", "creation_timestamp": "2024-09-19T18:16:15.000000Z"}, {"uuid": "08e89ef0-b2b2-40f7-a53d-9d96a2c86d87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/LearnExploit/4441", "content": "Get root on macOS 13.0.1 with CVE-2022-46689 (macOS equivalent of the Dirty Cow bug)\n\nGithub \n\n#CVE #macOS \n\u2014\u2014\u2014\u2014\u2014\u2014\n0Day.Today\n@LearnExploit\n@Tech_Army", "creation_timestamp": "2023-01-04T10:02:39.000000Z"}, {"uuid": "5574d166-5fcf-4242-a584-c60976bc5511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10613", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/icebreack/CVE-2022-46169", "creation_timestamp": "2026-07-31T06:00:03.676784Z"}, {"uuid": "9f818dd2-70e2-41ca-b43d-7f772c3bc888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10300", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46169_unauth_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46169_unauth_remote_code_execution", "creation_timestamp": "2026-07-31T07:00:03.854856Z"}, {"uuid": "ed4a162b-ef49-498f-9624-bd8bc5babd08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10320", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *ResponsiveFileManager-CVE-2022-46604*\nGithub: https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604", "creation_timestamp": "2026-07-31T07:00:03.906199Z"}, {"uuid": "14e589fb-c8d6-4f1d-aff3-16fb476d5b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46723", "type": "published-proof-of-concept", "source": "https://t.me/Rootsec_2/4472", "content": "#exploit\n1. Zero-Click Calendar invite - Critical 0-click vulnerability chain in macOS (CVE-2022-46723)\nhttps://mikko-kenttala.medium.com/zero-click-calendar-invite-critical-zero-click-vulnerability-chain-in-macos-a7a434fc887b\n\n2. CVE-2024-2879:\nWP LayerSlider - Unauth SQLI\nhttps://github.com/herculeszxc/CVE-2024-2879", "creation_timestamp": "2024-09-19T15:13:51.000000Z"}, {"uuid": "4b9bc0a4-0ee9-4834-a70b-f3aff909bf59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9799", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *cacti-rce-cve-2022-46169-vulnerable-application*\nGithub: https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application", "creation_timestamp": "2026-07-31T09:00:03.916724Z"}, {"uuid": "0005d8fa-d771-4644-b2b8-fa6c7cb9d285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46196", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9599", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46196_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46196_poc", "creation_timestamp": "2026-07-31T10:00:04.864488Z"}, {"uuid": "a4f09383-a283-4e31-8ec8-f36068f6b67b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9601", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46169_poc", "creation_timestamp": "2026-07-31T10:00:05.051403Z"}, {"uuid": "1af7766d-8599-4179-9ff7-4331809bc080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46836", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9311", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46836_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46836_remote_code_execution", "creation_timestamp": "2026-07-31T11:00:03.739834Z"}, {"uuid": "7d2ca5b7-6486-4591-9bfd-912f26b592b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8780", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46463*\nGithub: https://github.com/404tk/CVE-2022-46463", "creation_timestamp": "2026-07-31T13:00:04.082980Z"}, {"uuid": "518d032e-4f19-4c38-9760-ffbbe4c28e92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46087", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46087*\nGithub: https://github.com/G37SYS73M/CVE-2022-46087", "creation_timestamp": "2026-07-31T13:00:04.117349Z"}, {"uuid": "3810f185-fb3c-4e49-8c52-d6e99587ea14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-05)", "content": "", "creation_timestamp": "2026-05-05T00:00:00.000000Z"}, {"uuid": "bf5135fa-ef1b-4c31-8f6d-78e2e694631d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8759", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/doosec101/CVE-2022-46169", "creation_timestamp": "2026-07-31T14:00:05.398979Z"}, {"uuid": "c2b5c5c6-ebd1-44a9-b0ce-402ab450f593", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak_8ZYRyADH7od6Bkg", "content": "", "creation_timestamp": "2026-08-29T23:00:14.492814Z"}, {"uuid": "6d16e79e-82d0-46ac-973b-a90fe692b643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/5588", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46169\nGithub: https://github.com/imjdl/CVE-2022-46169\nDescribe: \nCacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The vulnerability resides in the `remote_agent.php` file. This file can be accessed without authentication. This function retrieves the IP address of the client via `get_client_addr` and resolves this IP address to the corresponding hostname via `gethostbyaddr`. After this, it is verified that an entry within the `poller` table exists, where the hostname corresponds to the resolved hostname. If such an entry was found, the function returns `true` and the client is authorized. This authorization can be bypassed due to the implementation of the `get_client_addr` function. The function is defined in the file `lib/functions.php` and checks serval `$_SERVER` variables to determine the IP address of the client. The variables beginning with `HTTP_` can be arbitrarily set by an attacker. Since there is a default entry in the `poller` table with the hostname of the server running Cacti, an attacker can bypass the authentication e.g. by providing the header `Forwarded-For: `. This way the function `get_client_addr` returns the IP address of the server running Cacti. The following call to `gethostbyaddr` will resolve this IP address to the hostname of the server, which will pass the `poller` hostname check because of the default entry. After the authorization of the `remote_agent.php` file is bypassed, an attacker can trigger different actions. One of these actions is called `polldata`. The called function `poll_for_data` retrieves a few request parameters and loads the corresponding `poller_item` entries from the database. If the `action` of a `poller_item` equals `POLLER_ACTION_SCRIPT_PHP`, the function `proc_open` is used to execute a PHP script. The attacker-controlled parameter `$poller_id` is retrieved via the function `get_nfilter_request_var`, which allows arbitrary strings. This variable is later inserted into the string passed to `proc_open`, which leads to a command injection vulnerability. By e.g. providing the `poller_id=;id` the `id` command is executed. In order to reach the vulnerable call, the attacker must provide a `host_id` and `local_data_id`, where the `action` of the corresponding `poller_item` is set to `POLLER_ACTION_SCRIPT_PHP`. Both of these ids (`host_id` and `local_data_id`) can easily be bruteforced. The only requirement is that a `poller_item` with an `POLLER_ACTION_SCRIPT_PHP` action exists. This is very likely on a productive instance because this action is added by some predefined templates like `Device - Uptime` or `Device - Polling Time`. This command injection vulnerability allows an unauthenticated user to execute arbitrary commands if a `poller_item` with the `action` type `POLLER_ACTION_SCRIPT_PHP` (`2`) is configured. The authorization bypass should be prevented by not allowing an attacker to make `get_client_addr` (file `lib/functions.php`) return an arbitrary IP address. This could be done by not honoring the `HTTP_...` `$_SERVER` variables. If these should be kept for compatibility reasons it should at least be prevented to fake the IP address of the server running Cacti. This vulnerability has been addressed in both the 1.2.x and 1.3.x release branches with `1.2.23` being the first release containing the patch.", "creation_timestamp": "2026-07-31T20:00:04.277490Z"}, {"uuid": "7fb19652-40d4-4962-9c5d-f08b92234e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/5863", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46381\nGithub: https://github.com/amitlttwo/CVE-2022-46381\nDescribe: \nCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.", "creation_timestamp": "2026-07-31T20:00:04.777388Z"}, {"uuid": "7e34f065-bb2e-404f-bfb8-74ee89a392e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak_8ZYRyADH7od6Bkg", "content": "", "creation_timestamp": "2026-08-30T00:00:24.332897Z"}, {"uuid": "449eb9ba-d60b-4d9f-8a2e-5c67d1774295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/5588", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46169\nGithub: https://github.com/imjdl/CVE-2022-46169\nDescribe: \nCacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The vulnerability resides in the `remote_agent.php` file. This file can be accessed without authentication. This function retrieves the IP address of the client via `get_client_addr` and resolves this IP address to the corresponding hostname via `gethostbyaddr`. After this, it is verified that an entry within the `poller` table exists, where the hostname corresponds to the resolved hostname. If such an entry was found, the function returns `true` and the client is authorized. This authorization can be bypassed due to the implementation of the `get_client_addr` function. The function is defined in the file `lib/functions.php` and checks serval `$_SERVER` variables to determine the IP address of the client. The variables beginning with `HTTP_` can be arbitrarily set by an attacker. Since there is a default entry in the `poller` table with the hostname of the server running Cacti, an attacker can bypass the authentication e.g. by providing the header `Forwarded-For: `. This way the function `get_client_addr` returns the IP address of the server running Cacti. The following call to `gethostbyaddr` will resolve this IP address to the hostname of the server, which will pass the `poller` hostname check because of the default entry. After the authorization of the `remote_agent.php` file is bypassed, an attacker can trigger different actions. One of these actions is called `polldata`. The called function `poll_for_data` retrieves a few request parameters and loads the corresponding `poller_item` entries from the database. If the `action` of a `poller_item` equals `POLLER_ACTION_SCRIPT_PHP`, the function `proc_open` is used to execute a PHP script. The attacker-controlled parameter `$poller_id` is retrieved via the function `get_nfilter_request_var`, which allows arbitrary strings. This variable is later inserted into the string passed to `proc_open`, which leads to a command injection vulnerability. By e.g. providing the `poller_id=;id` the `id` command is executed. In order to reach the vulnerable call, the attacker must provide a `host_id` and `local_data_id`, where the `action` of the corresponding `poller_item` is set to `POLLER_ACTION_SCRIPT_PHP`. Both of these ids (`host_id` and `local_data_id`) can easily be bruteforced. The only requirement is that a `poller_item` with an `POLLER_ACTION_SCRIPT_PHP` action exists. This is very likely on a productive instance because this action is added by some predefined templates like `Device - Uptime` or `Device - Polling Time`. This command injection vulnerability allows an unauthenticated user to execute arbitrary commands if a `poller_item` with the `action` type `POLLER_ACTION_SCRIPT_PHP` (`2`) is configured. The authorization bypass should be prevented by not allowing an attacker to make `get_client_addr` (file `lib/functions.php`) return an arbitrary IP address. This could be done by not honoring the `HTTP_...` `$_SERVER` variables. If these should be kept for compatibility reasons it should at least be prevented to fake the IP address of the server running Cacti. This vulnerability has been addressed in both the 1.2.x and 1.3.x release branches with `1.2.23` being the first release containing the patch.", "creation_timestamp": "2026-08-01T00:00:24.263938Z"}, {"uuid": "6380724a-85f0-4f24-93c6-a54d8359b18b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/5863", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46381\nGithub: https://github.com/amitlttwo/CVE-2022-46381\nDescribe: \nCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.", "creation_timestamp": "2026-08-01T00:00:24.699105Z"}, {"uuid": "93889dcb-e1d5-4da0-b10f-c23dec93a3c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8759", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/doosec101/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:30.922000Z"}, {"uuid": "145be7f0-2788-47ca-a3ef-f71d55a2dfde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8780", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46463*\nGithub: https://github.com/404tk/CVE-2022-46463", "creation_timestamp": "2026-08-01T00:00:31.146962Z"}, {"uuid": "3be8f350-e794-411b-8edd-20a746b7d124", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46087", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46087*\nGithub: https://github.com/G37SYS73M/CVE-2022-46087", "creation_timestamp": "2026-08-01T00:00:31.189583Z"}, {"uuid": "b40cd03c-d844-40e4-9aa0-d5711c740b6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46836", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9311", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46836_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46836_remote_code_execution", "creation_timestamp": "2026-08-01T00:00:34.074806Z"}, {"uuid": "60b8830b-1df1-45d3-bdcf-69422c9b2388", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46196", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9599", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46196_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46196_poc", "creation_timestamp": "2026-08-01T00:00:34.721453Z"}, {"uuid": "3250309a-9cd5-4d34-8846-6af90c138523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9601", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46169_poc", "creation_timestamp": "2026-08-01T00:00:34.908676Z"}, {"uuid": "74ddb9bd-4782-47e1-9e8c-417b97a7d570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10320", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *ResponsiveFileManager-CVE-2022-46604*\nGithub: https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604", "creation_timestamp": "2026-08-01T00:00:38.763260Z"}, {"uuid": "c07816f8-9866-41ce-a92c-bc93217157f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11997", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169-CACTI-1.2.22*\nGithub: https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22", "creation_timestamp": "2026-08-01T00:00:45.245513Z"}, {"uuid": "7d2917f0-a114-4d14-8323-66d3289b2c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11996", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:45.291570Z"}, {"uuid": "a9ff62ec-3b0b-4165-aed8-2a47bb08da92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11994", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *cve-2022-46718-leaky-location*\nGithub: https://github.com/biscuitehh/cve-2022-46718-leaky-location", "creation_timestamp": "2026-08-01T00:00:45.331515Z"}, {"uuid": "0d61dba9-e862-4d39-a020-7e7ef9a0ab40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/9799", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *cacti-rce-cve-2022-46169-vulnerable-application*\nGithub: https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application", "creation_timestamp": "2026-08-01T00:00:35.769010Z"}, {"uuid": "bedac7ac-f0d2-4c36-8112-714a861b8954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10300", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46169_unauth_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46169_unauth_remote_code_execution", "creation_timestamp": "2026-08-01T00:00:38.707977Z"}, {"uuid": "218732d6-6aad-4ed1-b82d-737deb7251ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10613", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/icebreack/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:39.590501Z"}, {"uuid": "e7bb7a5f-3da3-474a-b15f-a81724d8c8a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12234", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/BKreisel/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:45.919751Z"}, {"uuid": "b5da216c-e34b-4c46-83c4-944d544e2661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11886", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/yassinebk/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:44.697877Z"}, {"uuid": "bd44e311-4fe4-4261-b20f-613ccf9592c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11883", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/sAsPeCt488/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:44.747257Z"}, {"uuid": "a562fe74-4fb6-4e62-98b8-78c94d721ac3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11976", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/cacti-CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:45.099882Z"}, {"uuid": "a70a49d4-e94d-451e-9926-a0783858f13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/Safarchand/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:45.484423Z"}, {"uuid": "48a67225-366a-47f3-a3fd-51e723808d4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/12146", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/MarkStrendin/CVE-2022-46169", "creation_timestamp": "2026-08-01T00:00:45.716306Z"}, {"uuid": "d7d88087-2004-4abb-a11c-4072a8ebccb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "https://t.me/bagl3y_notes/282", "content": "\ud83d\udfe2 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u043b\u043e\u0433\u0438\u043d (\u044e\u0437\u0435\u0440 anonymous \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c) \u043d\u0430 FTP,  \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c employee-service.jar  \u27a1\ufe0f\u0440\u0435\u0432\u0435\u0440\u0441\u0438\u043c JAR \u0447\u0435\u0440\u0435\u0437 jadx-gui \u27a1\ufe0f\u043d\u0430\u0445\u043e\u0434\u0438\u043c SOAP-\u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0430 Apache CXF 3.2.14 (\u043f\u043e\u0440\u0442 8080) \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2022-46364 (Apache CXF SSRF/arbitrary file read \u0447\u0435\u0440\u0435\u0437 XOP:Include + MTOM multipart) \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0445\u043e\u0441\u0442\u0430 \u27a1\ufe0f \u0438\u0437 /proc//cmdline \u0438 /etc/systemd/system/hoverfly.service \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u043c \u043a\u0440\u0435\u0434\u044b \u0430\u0434\u043c\u0438\u043d\u0430 Hoverfly \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-54123 (Hoverfly command injection \u0432 /api/v2/hoverfly/middleware) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u043f\u043e\u0434 dev_ryan \u27a1\ufe0f \u0447\u0438\u0442\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442 Flask-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f SysWatch \u0438\u0437 world-readable /etc/syswatch.env, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0435\u043c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u0443\u044e \u043a\u0443\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 flask-unsign \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c command injection \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /service-status \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u043f\u043e\u0434 syswatch \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0431\u0430\u0433 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 symlink \u0432 root-\u0441\u043a\u0440\u0438\u043f\u0442\u0435 syswatch.sh \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f /root/.ssh/id_rsa\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - DevArea, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-04T13:00:25.346526Z"}, {"uuid": "d4920af3-a0fb-40ee-9786-f9279edaefac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/2995", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689 https://github.com/ginsudev/WDBFontOverwrite", "creation_timestamp": "2026-08-02T20:10:54.718371Z"}, {"uuid": "a169dc4a-e212-4221-8c18-b4047b4e3aa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3015", "content": "Analyzing CVE-2022-46330 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330/", "creation_timestamp": "2026-08-02T20:13:04.919318Z"}, {"uuid": "ef92877a-096c-40aa-8211-2197438901cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "https://t.me/bagl3y_notes/282", "content": "\ud83d\udfe2 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u043b\u043e\u0433\u0438\u043d (\u044e\u0437\u0435\u0440 anonymous \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c) \u043d\u0430 FTP,  \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c employee-service.jar  \u27a1\ufe0f\u0440\u0435\u0432\u0435\u0440\u0441\u0438\u043c JAR \u0447\u0435\u0440\u0435\u0437 jadx-gui \u27a1\ufe0f\u043d\u0430\u0445\u043e\u0434\u0438\u043c SOAP-\u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0430 Apache CXF 3.2.14 (\u043f\u043e\u0440\u0442 8080) \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2022-46364 (Apache CXF SSRF/arbitrary file read \u0447\u0435\u0440\u0435\u0437 XOP:Include + MTOM multipart) \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0445\u043e\u0441\u0442\u0430 \u27a1\ufe0f \u0438\u0437 /proc//cmdline \u0438 /etc/systemd/system/hoverfly.service \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u043c \u043a\u0440\u0435\u0434\u044b \u0430\u0434\u043c\u0438\u043d\u0430 Hoverfly \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-54123 (Hoverfly command injection \u0432 /api/v2/hoverfly/middleware) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u043f\u043e\u0434 dev_ryan \u27a1\ufe0f \u0447\u0438\u0442\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442 Flask-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f SysWatch \u0438\u0437 world-readable /etc/syswatch.env, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0435\u043c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u0443\u044e \u043a\u0443\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 flask-unsign \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c command injection \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /service-status \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u043f\u043e\u0434 syswatch \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0431\u0430\u0433 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 symlink \u0432 root-\u0441\u043a\u0440\u0438\u043f\u0442\u0435 syswatch.sh \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f /root/.ssh/id_rsa\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - DevArea, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-05T00:00:40.947395Z"}, {"uuid": "7e2037af-7a1c-4608-8749-af7bb2103b43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "published-proof-of-concept", "source": "https://t.me/sysadm_in_up/1477", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689\n\nhttps://github.com/zhuowei/WDBFontOverwrite", "creation_timestamp": "2026-08-05T00:00:56.746811Z"}, {"uuid": "093b8804-28e6-4634-a629-8353f670a902", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "https://t.me/bagl3y_notes/282", "content": "\ud83d\udfe2 \u041d\u043e\u0432\u044b\u0439 \u0432\u0438\u0434\u0435\u043e-\u0440\u0430\u0437\u0431\u043e\u0440 \ud83d\udc9a \u0442\u0430\u0447\u043a\u0438 \u043e\u0442 ippsec'a\n\n\n\u2049\ufe0f   \u0410\u043d\u043e\u043d\u0438\u043c\u043d\u044b\u0439 \u043b\u043e\u0433\u0438\u043d (\u044e\u0437\u0435\u0440 anonymous \u0441 \u043f\u0443\u0441\u0442\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u0435\u043c) \u043d\u0430 FTP,  \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u043c employee-service.jar  \u27a1\ufe0f\u0440\u0435\u0432\u0435\u0440\u0441\u0438\u043c JAR \u0447\u0435\u0440\u0435\u0437 jadx-gui \u27a1\ufe0f\u043d\u0430\u0445\u043e\u0434\u0438\u043c SOAP-\u0441\u0435\u0440\u0432\u0438\u0441 \u043d\u0430 Apache CXF 3.2.14 (\u043f\u043e\u0440\u0442 8080) \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2022-46364 (Apache CXF SSRF/arbitrary file read \u0447\u0435\u0440\u0435\u0437 XOP:Include + MTOM multipart) \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u0445\u043e\u0441\u0442\u0430 \u27a1\ufe0f \u0438\u0437 /proc//cmdline \u0438 /etc/systemd/system/hoverfly.service \u0432\u044b\u0442\u0430\u0441\u043a\u0438\u0432\u0430\u0435\u043c \u043a\u0440\u0435\u0434\u044b \u0430\u0434\u043c\u0438\u043d\u0430 Hoverfly \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c CVE-2025-54123 (Hoverfly command injection \u0432 /api/v2/hoverfly/middleware) \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u043f\u043e\u0434 dev_ryan \u27a1\ufe0f \u0447\u0438\u0442\u0430\u0435\u043c \u0441\u0435\u043a\u0440\u0435\u0442 Flask-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f SysWatch \u0438\u0437 world-readable /etc/syswatch.env, \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0435\u043c \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u0443\u044e \u043a\u0443\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 flask-unsign \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c command injection \u0432 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0435 /service-status \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0448\u0435\u043b\u043b\u0430 \u043f\u043e\u0434 syswatch \u27a1\ufe0f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c \u0431\u0430\u0433 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 symlink \u0432 root-\u0441\u043a\u0440\u0438\u043f\u0442\u0435 syswatch.sh \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f /root/.ssh/id_rsa\n\n#\ufe0f\u20e3\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u044d\u0442\u043e Linux box - DevArea, \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 Medium\n#\ufe0f\u20e3 \u0410 \u0432\u043e\u0442 \u0435\u0449\u0435 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0442 \u043a\u0440\u0443\u0442\u043e\u0433\u043e \u0447\u0435\u043b\u0430 - 0xdf\n\n\n\ud83c\udf39 \u041e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 \u043f\u043e\u0441\u0442\u044b \u043a\u0430\u043d\u0430\u043b\u0430 \n\n#video #HTB #ippsec #0xdf #Walkthroughs", "creation_timestamp": "2026-08-06T00:00:41.843026Z"}, {"uuid": "86322ba3-53d0-487a-875f-367eca10e3e3", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/269b842e-65d1-475e-8588-18c57f4558fd", "content": "", "creation_timestamp": "2026-06-19T12:46:59.354805Z"}, {"uuid": "c1f6787a-ef78-48d8-821b-04bfb14f219d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/28c2b948-b95d-4d76-bee6-93c590d24542", "content": "", "creation_timestamp": "2026-06-19T12:46:00.289150Z"}, {"uuid": "5221c724-47c0-4939-9217-b97c6eac4710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "content": "", "creation_timestamp": "2026-08-31T10:15:16.416993Z"}, {"uuid": "dcc967e6-9f50-4253-9fff-56b4ab8d765d", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/7310c228-ae8d-4561-be8c-0f1c41eb2a95", "content": "", "creation_timestamp": "2026-06-23T14:03:23.670525Z"}, {"uuid": "1b3d02ce-27dc-4648-a010-33984bdb18c2", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9006dff6-87cb-46ba-b72e-c56423228113", "content": "", "creation_timestamp": "2026-06-23T14:05:37.244582Z"}, {"uuid": "800ceadf-1c1a-4688-9a39-edd6eee1d446", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-46381", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aa33a71d-f0f8-478e-ae79-547cdb1ddcbe", "content": "", "creation_timestamp": "2026-06-30T09:23:44.006052Z"}, {"uuid": "e25b1128-1f22-4980-9c37-ebfdbb649903", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/06f63773-e1de-487c-a278-a466a8e0042d", "content": "", "creation_timestamp": "2026-06-30T09:42:40.260748Z"}, {"uuid": "112fd7cd-5356-4e6b-8a49-d164e0adb983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46292", "type": "seen", "source": "https://gist.github.com/alon710/5f5755a051ba9eb72ca8e6e99a859028", "content": "# CVE-2022-46292: CVE-2022-46292: Heap-Based Out-of-Bounds Write in Open Babel MOPAC Parser\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-07-06\n> **Full Report:** https://cvereports.com/reports/CVE-2022-46292\n\n## Summary\nA critical heap-based out-of-bounds write vulnerability exists in Open Babel 3.1.1 and master commit 530dbfa3 within the parsing of Translation Vectors in the MOPAC output file format parser. By supplying a crafted MOPAC file containing more than three translation vector entries under the Unit Cell Translation block, an attacker can corrupt heap memory. This vulnerability can lead to arbitrary code execution or denial of service.\n\n## TL;DR\nAn out-of-bounds write vulnerability in Open Babel's MOPAC output parser allows remote attackers to execute arbitrary code or cause a crash via a malformed file with excessive translation vectors.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-787 / CWE-119\n- **Attack Vector**: Network / Local\n- **CVSS v3.1 Score**: 9.8 (NVD) / 7.8 (OSV)\n- **EPSS Score**: 0.00816 (Percentile: 52.66%)\n- **Impact**: Arbitrary Code Execution / Denial of Service\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open Babel\n- **Open Babel**: <= 3.1.1 (Fixed in: `Commit 40e852138f21d586b7ccdce6329e7b23a87168bb`)\n\n## Mitigation\n\n- Upgrade Open Babel to a version containing the official patch (commit 40e852138f21d586b7ccdce6329e7b23a87168bb or later).\n- Deploy input validation filters (YARA rules) on ingress endpoints to drop malformed MOPAC files.\n- Isolate the file conversion processes using low-privilege execution sandboxes and containers.\n\n**Remediation Steps:**\n1. Identify all installations of Open Babel 3.1.1 or code matching commit 530dbfa3 in the environment.\n2. Apply commit 40e852138f21d586b7ccdce6329e7b23a87168bb to the source code or upgrade to the patched version.\n3. Recompile the binaries with modern mitigation features such as ASLR, DEP, and stack canaries.\n4. Verify the patch by running the regression test suite with the provided Proof of Concept file.\n\n## References\n\n- [Cisco Talos Vulnerability Report (TALOS-2022-1666)](https://www.talosintelligence.com/vulnerability_reports/TALOS-2022-1666)\n- [Open Babel Git Repository](https://github.com/openbabel/openbabel)\n- [CVE.org Official Entry](https://www.cve.org/CVERecord?id=CVE-2022-46292)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2022-46292) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-06T17:12:16.323238Z"}, {"uuid": "86df1066-e662-4b34-a123-e475af13a99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46333", "type": "seen", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.689286Z"}, {"uuid": "2f417a6e-6965-409c-ba48-11a202756ac2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46334", "type": "seen", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.733724Z"}, {"uuid": "1dfede7b-09b2-477e-a68e-40bb7fc2ed2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46332", "type": "seen", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:10.282500Z"}, {"uuid": "27c30464-e68a-47eb-961e-eb39c5ecd6db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/GithubRedTeam/92160", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-46169\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:38:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCacti Unauthenticated Command Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-13T22:00:11.493774Z"}, {"uuid": "b2d2cce6-de42-49a9-a8d7-90a37282c75b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46332", "type": "seen", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:18.812392Z"}, {"uuid": "d3e0961d-1ef8-430a-a617-8255f1353523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46334", "type": "seen", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.234586Z"}, {"uuid": "a7591f1e-25d5-4820-bb9c-cbecdce82ae7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/GithubRedTeam/92160", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-46169\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:38:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCacti Unauthenticated Command Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T00:00:19.882234Z"}, {"uuid": "cb37691e-c556-4bcc-a8cf-1e9c6ba1ca2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46333", "type": "seen", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-14T01:00:12.740173Z"}, {"uuid": "b8aaea3b-1fc4-4d86-91a9-eea6e728c9fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92160", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-46169\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a sh4den\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 3  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 2\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-06 08:38:55\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCacti Unauthenticated Command Injection\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:30.330456Z"}, {"uuid": "0c17b062-4740-4806-a072-77969ddd9372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46332", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.428998Z"}, {"uuid": "1d156b9c-c216-4a23-ab6f-4ae5a7e0ebd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46333", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.350132Z"}, {"uuid": "283ec17b-a258-4a95-b334-bc1a79622989", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46334", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/92344", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a proofpoint-Messaging-exploit-chain1\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a ly1g3\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-07 13:01:41\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nEmail -> RCE as root. CVE-2022-46332, CVE-2022-46333, CVE-2022-46334\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-15T00:00:31.388127Z"}, {"uuid": "9943d7ae-a64b-4140-b2a9-f0ae0aaf919d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-28)", "content": "", "creation_timestamp": "2026-08-29T10:15:20.735033Z"}, {"uuid": "438515d1-ce88-4861-bf42-30146b4e1671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-16T19:00:17.825840Z"}, {"uuid": "9a0ecefd-42f2-41de-8ff6-90ffdb5a8df5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "seen", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-17T00:00:33.537226Z"}, {"uuid": "b0baede9-1dde-4f89-ad9b-ef2015fe9be6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46364", "type": "published-proof-of-concept", "source": "Telegram/HeX7ZwgfClnVMcM_jrebWQOf2GFN8BPONV6LFlglDXbYYrI", "content": "", "creation_timestamp": "2026-07-18T00:00:25.616235Z"}, {"uuid": "8428279c-b821-4b4c-a69a-a509aeba8bd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "Telegram/Gb8E7051tk852HHDoXLjDtC-e550Fak_8ZYRyADH7od6Bkg", "content": "", "creation_timestamp": "2026-08-31T00:00:45.431520Z"}, {"uuid": "8e4bd702-dcfb-4403-8fc5-737778f02505", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46331", "type": "seen", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-26T02:02:31.217135Z"}, {"uuid": "ead552b9-6f94-4edb-b2fe-0e33fe7e5d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46660", "type": "seen", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-26T02:02:31.260418Z"}, {"uuid": "240e37ea-d126-4749-a958-02d8870dba93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46823", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-26T02:02:31.833338Z"}, {"uuid": "8e78e620-6556-4774-87ca-3c8dab7feda4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "seen", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-26T02:02:31.496761Z"}, {"uuid": "5ad89a07-9f74-43f7-adcb-060088c5e86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46331", "type": "seen", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-27T00:01:07.858339Z"}, {"uuid": "9564712c-6662-49c0-97c1-1f8cd55615ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46660", "type": "seen", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-27T00:01:08.725744Z"}, {"uuid": "350bf142-bdfc-4924-8a01-d7af51f4987e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "seen", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-27T00:01:08.969417Z"}, {"uuid": "d138a021-ba8e-485d-9eaf-34f164d86710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46823", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-27T00:01:09.337589Z"}, {"uuid": "25b9b0b5-6ba4-43ae-8990-b986a88ea38a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-28T02:00:04.459228Z"}, {"uuid": "6c030bce-2b53-40c8-882c-872bcf309d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46331", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-28T02:00:04.593429Z"}, {"uuid": "357dc21c-4bc4-4647-bc31-151b10e48644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46660", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-28T02:00:04.639966Z"}, {"uuid": "359a0094-7c73-4017-b380-6a45d73f7db8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46823", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-28T03:00:04.305896Z"}, {"uuid": "eba4b8a8-ef1f-43ec-9e56-859c7e84e1b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46732", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-29T00:00:51.589133Z"}, {"uuid": "20e4180a-01ff-4157-8107-8f216170bf04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46823", "type": "seen", "source": "https://t.me/EchelonEyes/1082", "content": "CISA \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b (CISA) \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435\u0439 \u043f\u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044f \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b Sewio, InHand Networks, Sauter Controls \u0438 Siemens.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 RTLS Studio Sewio \u2013 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0442\u044c \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0434\u043b\u044f \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u043e\u043c\u0435\u0449\u0435\u043d\u0438\u0439. \u041e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-45444 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 10,0), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0436\u0435\u0441\u0442\u043a\u043e \u0437\u0430\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u0430\u0440\u043e\u043b\u044f\u043c \u0434\u043b\u044f \u0438\u0437\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0437\u0430\u0445\u043e\u0434\u0438\u0442\u044c \u0432 \u0431\u0430\u0437\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043e\u043c. \u0422\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 (CVE-2022-47911 \u0438 CVE-2022-43483, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1) \u0438 \u043e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u0433\u0440\u0430\u043d\u0438\u0446 (CVE-2022-41989, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,1), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0445\u0430\u043a\u0435\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0412\u043e \u0432\u0442\u043e\u0440\u043e\u043c \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 CISA \u0443\u043a\u0430\u0437\u0430\u043b\u0430 \u043d\u0430 \u043f\u044f\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 InHand Networks InRouter 302 \u0438 InRouter 615, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u0421\u0440\u0435\u0434\u0438 \u043f\u0435\u0440\u0435\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u2013CVE-2023-22600, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 10,0.\n\n\u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 Sauter Controls Nova 220, Nova 230, Nova 106 \u0438 moduNet300, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2023-0053, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,5) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 (CVE-2023-0052, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,8).\n\n\u041d\u0430\u043a\u043e\u043d\u0435\u0446, \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043b\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0435\u0436\u0441\u0430\u0439\u0442\u043e\u0432\u043e\u0433\u043e \u0441\u043a\u0440\u0438\u043f\u0442\u0438\u043d\u0433\u0430 (XSS) \u0432 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0438 Siemens Mendix SAML (CVE-2022-46823, \u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 9,3), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u043c\u0430\u043d\u043e\u043c \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0432 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0449\u0435\u043b\u043a\u043d\u0443\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0432\u044f\u0437\u044c.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://www.cisa.gov/uscert/ncas/current-activity/2023/01/12/cisa-releases-twelve-industrial-control-systems-advisories \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #ICS #CISA", "creation_timestamp": "2026-07-29T00:00:50.680284Z"}, {"uuid": "62e58ad8-dad2-4725-a48a-2ce140f15263", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46331", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-29T00:00:51.730273Z"}, {"uuid": "9e266e5c-6787-4f04-a8cb-fe9b5b3b5979", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46660", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/1119", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 GE Historian \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0446\u0435\u043b\u044f\u0445 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u0441\u0431\u043e\u044f \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Claroty \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 GE Proficy Historian, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0445\u0430\u043a\u0435\u0440\u0430\u043c\u0438 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434. CISA \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445.\n\n\u0421\u0435\u0440\u0432\u0435\u0440\u044b Historian \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u044b \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f (ICS), \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043c\u043e\u0447\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b, \u0438 \u043c\u043e\u0433\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u043c\u0435\u0436\u0434\u0443 \u0418\u0422- \u0438 \u041e\u0422-\u0441\u0435\u0442\u044f\u043c\u0438. \u0422\u0430\u043a\u0430\u044f \u0440\u043e\u043b\u044c \u0434\u0435\u043b\u0430\u0435\u0442 \u0438\u0445 \u0437\u0430\u043c\u0430\u043d\u0447\u0438\u0432\u043e\u0439 \u043c\u0438\u0448\u0435\u043d\u044c\u044e \u0434\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439, \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0438\u043c\u0435\u044e\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,5. \u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 (CVE-2022-46732), \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u0443\u044e \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46660), \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 (CVE-2022-43494, CVE-2022-38469) \u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0444\u0430\u0439\u043b\u043e\u0432 (CVE-2022-46331).\n\n\u0412 \u0441\u0432\u043e\u0435\u043c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0438 \u0432 \u0431\u043b\u043e\u0433\u0435 Claroty \u043e\u0431\u044a\u044f\u0441\u043d\u0438\u043b\u0430, \u043a\u0430\u043a \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0438\u0442\u044c \u0434\u0432\u0435 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, CVE-2022-46732 \u0438 CVE-2022-46660, \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0435\u0440\u0435\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Proficy Historian, \u0438 \u043e\u043f\u0438\u0441\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u0432 \u0430\u0442\u0430\u043a. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0431\u0438\u0440\u0430\u0442\u044c \u0446\u0435\u043d\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441 \u0446\u0435\u043b\u044c\u044e \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u0438\u043b\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u0410\u0421\u0423 \u0422\u041f, \u0447\u0442\u043e\u0431\u044b \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0434\u0430\u0436\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u043e\u0432\u0440\u0435\u0434\u0438\u0442\u044c \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u0442\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0447\u0430\u0441\u0442\u044f\u043c \u0441\u0435\u0442\u0438 \u0438\u043b\u0438 \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\nGeneral Electric \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u0432 Proficy Historian 2023. \u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u044b.\n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://claroty.com/team82/research/hacking-ics-historians-the-pivot-point-from-it-to-ot \n\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #Historian", "creation_timestamp": "2026-07-29T00:00:51.775379Z"}, {"uuid": "3474db33-c2ac-4ce3-99c0-59796533154c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-25)", "content": "", "creation_timestamp": "2026-08-26T10:15:34.151958Z"}, {"uuid": "ded73ad2-3edf-4181-963b-c6e4659310cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/18192", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/4m4Sec/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:10.740174Z"}, {"uuid": "3232795c-7890-40fa-870c-f357b49808c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/Safarchand/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.326260Z"}, {"uuid": "0c8367e1-64d7-403a-ae17-ac0441e3313b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46836", "type": "seen", "source": "https://t.me/CVEhub/9311", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46836_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46836_remote_code_execution", "creation_timestamp": "2026-07-29T12:00:44.688749Z"}, {"uuid": "96692b10-42ec-4b54-9723-ca8c58da2238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "seen", "source": "https://t.me/CVEhub/16468", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4611*\nGithub: https://github.com/Phamchie/CVE-2022-4611", "creation_timestamp": "2026-07-29T12:00:18.187384Z"}, {"uuid": "f0cc5af8-ff56-4cf6-b4bb-158670467d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "seen", "source": "https://t.me/CVEhub/16482", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4611*\nGithub: https://github.com/fgsoftware1/CVE-2022-4611", "creation_timestamp": "2026-07-29T12:00:18.217738Z"}, {"uuid": "fb888258-6f3b-46c4-b29a-7630d60c94d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46080", "type": "seen", "source": "https://t.me/CVEhub/16297", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46080*\nGithub: https://github.com/yerodin/CVE-2022-46080", "creation_timestamp": "2026-07-29T12:00:18.675266Z"}, {"uuid": "12c24e47-756f-4e14-82c6-89de9bcb2e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/13391", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/antisecc/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:30.410094Z"}, {"uuid": "9c8cdca5-4f80-477c-8719-fc6c4d77a53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12234", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/BKreisel/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.015883Z"}, {"uuid": "103ca173-5ff1-458b-b656-51be34a0dcbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/13220", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-cve-2022-46169-exploit*\nGithub: https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit", "creation_timestamp": "2026-07-29T12:00:30.743741Z"}, {"uuid": "33bc25d6-0557-4c5d-80fd-5db5df6d0109", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12717", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *ImprovedShell-for-CVE-2022-46169*\nGithub: https://github.com/ahanel13/ImprovedShell-for-CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:31.446487Z"}, {"uuid": "7eddd9a4-7c6d-4785-b227-f8fabe87f99f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "seen", "source": "https://t.me/CVEhub/11994", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *cve-2022-46718-leaky-location*\nGithub: https://github.com/biscuitehh/cve-2022-46718-leaky-location", "creation_timestamp": "2026-07-29T12:00:34.463722Z"}, {"uuid": "5d934b32-e7e6-499b-870a-e73dbc00997f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11996", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.496467Z"}, {"uuid": "95d0e494-7757-4b0e-81d0-7f5ec0f423a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11997", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169-CACTI-1.2.22*\nGithub: https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22", "creation_timestamp": "2026-07-29T12:00:34.524419Z"}, {"uuid": "58210551-9471-48e7-a946-28c5d4fea9da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12146", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/MarkStrendin/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.139734Z"}, {"uuid": "dcab5ff4-dada-4fde-976b-5b9ab8017add", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11976", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/cacti-CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.611057Z"}, {"uuid": "ce6f4c09-4ba9-4b22-9e6e-3d0b2b18208c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11883", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/sAsPeCt488/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.857534Z"}, {"uuid": "88023faa-1340-4b17-8ea0-f03c85e3f8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11886", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/yassinebk/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:34.894973Z"}, {"uuid": "cad12279-cff2-46d2-ab6a-8f714fb2cccb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/9601", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46169_poc", "creation_timestamp": "2026-07-29T12:00:43.933178Z"}, {"uuid": "7e96177a-bd63-417c-bcd2-007e36dabae1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/10613", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/icebreack/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:39.251727Z"}, {"uuid": "c507a185-c8f0-48c8-bcd3-79abae7ba40c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "seen", "source": "https://t.me/CVEhub/10320", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *ResponsiveFileManager-CVE-2022-46604*\nGithub: https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604", "creation_timestamp": "2026-07-29T12:00:39.903412Z"}, {"uuid": "81e18f2d-a3ef-46ae-915b-b55c6f66031c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/10300", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46169_unauth_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46169_unauth_remote_code_execution", "creation_timestamp": "2026-07-29T12:00:39.934075Z"}, {"uuid": "5ef3684f-9da5-48a7-8581-4dcaa1f61639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/9799", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *cacti-rce-cve-2022-46169-vulnerable-application*\nGithub: https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application", "creation_timestamp": "2026-07-29T12:00:42.841983Z"}, {"uuid": "dfe5545a-a874-4b2b-8691-e4db9df598c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46196", "type": "seen", "source": "https://t.me/CVEhub/9599", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46196_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46196_poc", "creation_timestamp": "2026-07-29T12:00:44.232962Z"}, {"uuid": "f18e5e23-0490-44ed-9382-65c487d541d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46087", "type": "seen", "source": "https://t.me/CVEhub/8768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46087*\nGithub: https://github.com/G37SYS73M/CVE-2022-46087", "creation_timestamp": "2026-07-29T12:00:47.634495Z"}, {"uuid": "3b80c674-d5d4-47a4-a868-f0fdf4bf5213", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "seen", "source": "https://t.me/CVEhub/8780", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46463*\nGithub: https://github.com/404tk/CVE-2022-46463", "creation_timestamp": "2026-07-29T12:00:47.661167Z"}, {"uuid": "27e3bb0a-e166-4a29-b177-0c15af20fddc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/8759", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/doosec101/CVE-2022-46169", "creation_timestamp": "2026-07-29T12:00:47.833186Z"}, {"uuid": "824f39d0-deb5-4785-b062-a93a1c22fa88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "seen", "source": "https://t.me/CVEhub/5863", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46381\nGithub: https://github.com/amitlttwo/CVE-2022-46381\nDescribe: \nCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.", "creation_timestamp": "2026-07-29T12:00:52.901342Z"}, {"uuid": "c4a997a5-fd89-48fa-842f-130da8497d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/5588", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46169\nGithub: https://github.com/imjdl/CVE-2022-46169\nDescribe: \nCacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The vulnerability resides in the `remote_agent.php` file. This file can be accessed without authentication. This function retrieves the IP address of the client via `get_client_addr` and resolves this IP address to the corresponding hostname via `gethostbyaddr`. After this, it is verified that an entry within the `poller` table exists, where the hostname corresponds to the resolved hostname. If such an entry was found, the function returns `true` and the client is authorized. This authorization can be bypassed due to the implementation of the `get_client_addr` function. The function is defined in the file `lib/functions.php` and checks serval `$_SERVER` variables to determine the IP address of the client. The variables beginning with `HTTP_` can be arbitrarily set by an attacker. Since there is a default entry in the `poller` table with the hostname of the server running Cacti, an attacker can bypass the authentication e.g. by providing the header `Forwarded-For: `. This way the function `get_client_addr` returns the IP address of the server running Cacti. The following call to `gethostbyaddr` will resolve this IP address to the hostname of the server, which will pass the `poller` hostname check because of the default entry. After the authorization of the `remote_agent.php` file is bypassed, an attacker can trigger different actions. One of these actions is called `polldata`. The called function `poll_for_data` retrieves a few request parameters and loads the corresponding `poller_item` entries from the database. If the `action` of a `poller_item` equals `POLLER_ACTION_SCRIPT_PHP`, the function `proc_open` is used to execute a PHP script. The attacker-controlled parameter `$poller_id` is retrieved via the function `get_nfilter_request_var`, which allows arbitrary strings. This variable is later inserted into the string passed to `proc_open`, which leads to a command injection vulnerability. By e.g. providing the `poller_id=;id` the `id` command is executed. In order to reach the vulnerable call, the attacker must provide a `host_id` and `local_data_id`, where the `action` of the corresponding `poller_item` is set to `POLLER_ACTION_SCRIPT_PHP`. Both of these ids (`host_id` and `local_data_id`) can easily be bruteforced. The only requirement is that a `poller_item` with an `POLLER_ACTION_SCRIPT_PHP` action exists. This is very likely on a productive instance because this action is added by some predefined templates like `Device - Uptime` or `Device - Polling Time`. This command injection vulnerability allows an unauthenticated user to execute arbitrary commands if a `poller_item` with the `action` type `POLLER_ACTION_SCRIPT_PHP` (`2`) is configured. The authorization bypass should be prevented by not allowing an attacker to make `get_client_addr` (file `lib/functions.php`) return an arbitrary IP address. This could be done by not honoring the `HTTP_...` `$_SERVER` variables. If these should be kept for compatibility reasons it should at least be prevented to fake the IP address of the server running Cacti. This vulnerability has been addressed in both the 1.2.x and 1.3.x release branches with `1.2.23` being the first release containing the patch.", "creation_timestamp": "2026-07-29T12:00:53.300356Z"}, {"uuid": "c074acfc-e2f8-447f-bdaa-a90dfecfa7c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "seen", "source": "https://t.me/reverseame/3015", "content": "Analyzing CVE-2022-46330 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330/", "creation_timestamp": "2026-07-29T12:02:34.769826Z"}, {"uuid": "7bcb9ef6-297f-4777-89ea-a06fa77ddbfb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/reverseame/2995", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689 https://github.com/ginsudev/WDBFontOverwrite", "creation_timestamp": "2026-07-29T12:02:34.875970Z"}, {"uuid": "4b3e0c82-1042-4b67-bcd8-4e60fb00726a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/sysadm_in_up/1477", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689\n\nhttps://github.com/zhuowei/WDBFontOverwrite", "creation_timestamp": "2026-07-29T12:03:20.115439Z"}, {"uuid": "e141556d-89f9-4654-9ab8-4d54ab84831c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/18192", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/4m4Sec/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:00:09.098229Z"}, {"uuid": "ff2a9e9c-112d-46fc-a2b7-3f8539040a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "seen", "source": "https://t.me/CVEhub/16482", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4611*\nGithub: https://github.com/fgsoftware1/CVE-2022-4611", "creation_timestamp": "2026-07-30T00:00:37.796602Z"}, {"uuid": "3859bfec-87a2-4762-b4a6-bbd0588ab60f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4611", "type": "seen", "source": "https://t.me/CVEhub/16468", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-4611*\nGithub: https://github.com/Phamchie/CVE-2022-4611", "creation_timestamp": "2026-07-30T00:00:37.749926Z"}, {"uuid": "7831627d-5f4c-4d48-9a96-e2f0704ba6a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46080", "type": "seen", "source": "https://t.me/CVEhub/16297", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46080*\nGithub: https://github.com/yerodin/CVE-2022-46080", "creation_timestamp": "2026-07-30T00:00:38.567282Z"}, {"uuid": "9eed06ae-c51f-4506-ab94-2278dfcfd088", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12065", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/Safarchand/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:00.001418Z"}, {"uuid": "2b0bed95-5ffc-4e79-8a4d-08b9900af608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11883", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169*\nGithub: https://github.com/sAsPeCt488/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:00.739829Z"}, {"uuid": "488a1a30-07a2-4327-959c-8a3fdbff350c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/13220", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-cve-2022-46169-exploit*\nGithub: https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit", "creation_timestamp": "2026-07-30T00:00:55.679620Z"}, {"uuid": "8a3f2d78-7ad1-45b9-8fd2-65fbf0c6b4a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/13391", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/antisecc/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:00:55.063674Z"}, {"uuid": "c49e024f-f0eb-499e-ab2e-4b5e26acb27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12717", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *ImprovedShell-for-CVE-2022-46169*\nGithub: https://github.com/ahanel13/ImprovedShell-for-CVE-2022-46169", "creation_timestamp": "2026-07-30T00:00:56.975857Z"}, {"uuid": "15572036-b3dd-4887-8e7b-5408dfe9755a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/10613", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/icebreack/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:07.417987Z"}, {"uuid": "e2012a55-e4b6-44af-b9b4-f87e917d669d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12234", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/BKreisel/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:00:59.535939Z"}, {"uuid": "14d48909-edc9-4ce5-9dc9-9ce2ab4d3160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/12146", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/MarkStrendin/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:00:59.736632Z"}, {"uuid": "9c305ea8-a71b-4897-94d8-f99cfe964553", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46718", "type": "seen", "source": "https://t.me/CVEhub/11994", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *cve-2022-46718-leaky-location*\nGithub: https://github.com/biscuitehh/cve-2022-46718-leaky-location", "creation_timestamp": "2026-07-30T00:01:00.192661Z"}, {"uuid": "5d6408ef-e4b2-4f89-b242-95b747ad1c4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11996", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:00.242555Z"}, {"uuid": "1a5e0e93-4279-4e44-a52c-1b30708077dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11997", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *CVE-2022-46169-CACTI-1.2.22*\nGithub: https://github.com/FredBrave/CVE-2022-46169-CACTI-1.2.22", "creation_timestamp": "2026-07-30T00:01:00.291102Z"}, {"uuid": "f494cadd-f17f-4845-93f9-ca54b0fea6b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11976", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *cacti-CVE-2022-46169*\nGithub: https://github.com/Ruycraft1514/cacti-CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:00.429785Z"}, {"uuid": "b87642b6-a82e-4653-85f5-7d26cf8ee389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/11886", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/yassinebk/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:00.785986Z"}, {"uuid": "3b3acec9-60fb-4eca-86f5-448aac63f748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46604", "type": "seen", "source": "https://t.me/CVEhub/10320", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *ResponsiveFileManager-CVE-2022-46604*\nGithub: https://github.com/galoget/ResponsiveFileManager-CVE-2022-46604", "creation_timestamp": "2026-07-30T00:01:08.982570Z"}, {"uuid": "6f7f6d9d-0759-44d0-8dcd-daa4cf32c4ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/10300", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#bypass\nName: *CVE-2022-46169_unauth_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46169_unauth_remote_code_execution", "creation_timestamp": "2026-07-30T00:01:09.022517Z"}, {"uuid": "4bf354b4-5fd0-4f9d-b1a3-c1187c35bb40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/9799", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#rce\nName: *cacti-rce-cve-2022-46169-vulnerable-application*\nGithub: https://github.com/m3ssap0/cacti-rce-cve-2022-46169-vulnerable-application", "creation_timestamp": "2026-07-30T00:01:13.124818Z"}, {"uuid": "3a50c7b7-690b-4c4e-9471-0e506a75b974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/9601", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46169_poc", "creation_timestamp": "2026-07-30T00:01:13.880735Z"}, {"uuid": "b12fbdaf-395c-4a6c-aba7-0b80a6d782be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46196", "type": "seen", "source": "https://t.me/CVEhub/9599", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46196_poc*\nGithub: https://github.com/devAL3X/CVE-2022-46196_poc", "creation_timestamp": "2026-07-30T00:01:14.130112Z"}, {"uuid": "44a13f53-a9b7-4322-8838-2749e014d79f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46836", "type": "seen", "source": "https://t.me/CVEhub/9311", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46836_remote_code_execution*\nGithub: https://github.com/JacobEbben/CVE-2022-46836_remote_code_execution", "creation_timestamp": "2026-07-30T00:01:14.873708Z"}, {"uuid": "68ce0eca-b831-412e-9520-0d6e9219fa04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46087", "type": "seen", "source": "https://t.me/CVEhub/8768", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46087*\nGithub: https://github.com/G37SYS73M/CVE-2022-46087", "creation_timestamp": "2026-07-30T00:01:17.485910Z"}, {"uuid": "32159426-99fa-43ed-bea2-14a76395e2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46463", "type": "seen", "source": "https://t.me/CVEhub/8780", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46463*\nGithub: https://github.com/404tk/CVE-2022-46463", "creation_timestamp": "2026-07-30T00:01:17.528673Z"}, {"uuid": "17d3410f-f1e0-4307-8e96-420e5ed4ec90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/8759", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-46169*\nGithub: https://github.com/doosec101/CVE-2022-46169", "creation_timestamp": "2026-07-30T00:01:18.489158Z"}, {"uuid": "55f47a76-b00a-4c6f-9af5-8dfce20fe6fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46381", "type": "seen", "source": "https://t.me/CVEhub/5863", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46381\nGithub: https://github.com/amitlttwo/CVE-2022-46381\nDescribe: \nCertain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.", "creation_timestamp": "2026-07-30T00:01:30.258456Z"}, {"uuid": "eff4fdc6-ecc1-429d-8101-f473ada092ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/CVEhub/5588", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-46169\nGithub: https://github.com/imjdl/CVE-2022-46169\nDescribe: \nCacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbitrary code on a server running Cacti, if a specific data source was selected for any monitored device. The vulnerability resides in the `remote_agent.php` file. This file can be accessed without authentication. This function retrieves the IP address of the client via `get_client_addr` and resolves this IP address to the corresponding hostname via `gethostbyaddr`. After this, it is verified that an entry within the `poller` table exists, where the hostname corresponds to the resolved hostname. If such an entry was found, the function returns `true` and the client is authorized. This authorization can be bypassed due to the implementation of the `get_client_addr` function. The function is defined in the file `lib/functions.php` and checks serval `$_SERVER` variables to determine the IP address of the client. The variables beginning with `HTTP_` can be arbitrarily set by an attacker. Since there is a default entry in the `poller` table with the hostname of the server running Cacti, an attacker can bypass the authentication e.g. by providing the header `Forwarded-For: `. This way the function `get_client_addr` returns the IP address of the server running Cacti. The following call to `gethostbyaddr` will resolve this IP address to the hostname of the server, which will pass the `poller` hostname check because of the default entry. After the authorization of the `remote_agent.php` file is bypassed, an attacker can trigger different actions. One of these actions is called `polldata`. The called function `poll_for_data` retrieves a few request parameters and loads the corresponding `poller_item` entries from the database. If the `action` of a `poller_item` equals `POLLER_ACTION_SCRIPT_PHP`, the function `proc_open` is used to execute a PHP script. The attacker-controlled parameter `$poller_id` is retrieved via the function `get_nfilter_request_var`, which allows arbitrary strings. This variable is later inserted into the string passed to `proc_open`, which leads to a command injection vulnerability. By e.g. providing the `poller_id=;id` the `id` command is executed. In order to reach the vulnerable call, the attacker must provide a `host_id` and `local_data_id`, where the `action` of the corresponding `poller_item` is set to `POLLER_ACTION_SCRIPT_PHP`. Both of these ids (`host_id` and `local_data_id`) can easily be bruteforced. The only requirement is that a `poller_item` with an `POLLER_ACTION_SCRIPT_PHP` action exists. This is very likely on a productive instance because this action is added by some predefined templates like `Device - Uptime` or `Device - Polling Time`. This command injection vulnerability allows an unauthenticated user to execute arbitrary commands if a `poller_item` with the `action` type `POLLER_ACTION_SCRIPT_PHP` (`2`) is configured. The authorization bypass should be prevented by not allowing an attacker to make `get_client_addr` (file `lib/functions.php`) return an arbitrary IP address. This could be done by not honoring the `HTTP_...` `$_SERVER` variables. If these should be kept for compatibility reasons it should at least be prevented to fake the IP address of the server running Cacti. This vulnerability has been addressed in both the 1.2.x and 1.3.x release branches with `1.2.23` being the first release containing the patch.", "creation_timestamp": "2026-07-30T00:01:30.699455Z"}, {"uuid": "2f92b7e0-9a19-4438-8ca2-515423c59c78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46330", "type": "seen", "source": "https://t.me/reverseame/3015", "content": "Analyzing CVE-2022-46330 (DLL Hijacking in Squirrel.Windows)\nhttps://archcloudlabs.com/projects/cve-2022-46330/", "creation_timestamp": "2026-07-30T00:02:33.031617Z"}, {"uuid": "66c05054-f26c-4e44-9df8-f9c3f2cd2045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://t.me/reverseame/2995", "content": "Proof-of-concept app to overwrite fonts on iOS using CVE-2022-46689 https://github.com/ginsudev/WDBFontOverwrite", "creation_timestamp": "2026-07-30T00:02:33.120118Z"}, {"uuid": "843997c8-62a2-47dc-b937-8316a6f1129a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-29)", "content": "", "creation_timestamp": "2026-08-30T10:15:07.442107Z"}, {"uuid": "0090414a-2b22-4106-bb81-62c925900575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46552", "type": "seen", "source": "https://t.me/cissp/6742", "content": "exploit\n1. CVE-2022-46552:\nD-Link DIR-846 - RCE\nhttps://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html\n\n2. RCE Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack\nhttps://www.legitsecurity.com/blog/remote-code-execution-vulnerability-in-azure-pipelines-can-lead-to-software-supply-chain-attack\n\n3. Citrix 22.2.1/23.1.1 - LPE\nhttps://packetstormsecurity.com/files/171716/Citrix-22.2.1.103-23.1.1.11-Local-Privilege-Escalation.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.17", "creation_timestamp": "2026-09-01T17:00:21.287714Z"}, {"uuid": "3fee12c2-3ebd-483a-ab5d-1d109206117a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/cissp/6478", "content": "If you use Cacti for web-based monitoring, be sure to patch ASAP!\nA critical vulnerability [CVE-2022-46169] is being actively exploited in the wild and a majority of internet-exposed servers have not been patched yet.\nRead: https://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.24", "creation_timestamp": "2026-09-01T17:00:24.122479Z"}, {"uuid": "2debc897-092a-4970-8068-25938ef4873a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46740", "type": "seen", "source": "https://t.me/hacking_Attack/109427", "content": "STEP2: Pick the attack module you wish      1) Frames detected at the moment of connectivity disruption, one-by-one\n    2) Sequence of frames till the moment a disruption was detected (BETA)\n  STEP3: The first mode of DoS802.11, tests all the frames that the fuzzer detected up to that moment. It is a second hand filtering to separate the true positive from the false positive frames. In case  a frame is positive, i.e., causes a DoS to the associated STA, an exploit is being produced automatically.\n  STEP4: DoS802.11 exits when the log files have been considered.  **The rest to modules are currently in BETA mode.  Vulnerabilities  So far, the fuzzer managed to identify the following CVE IDs, by exploiting different Management frames:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2022-32654 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32654)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32655 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32655)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32656 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32656)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32657 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32657)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32658)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32659)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986/mt8518s/mt8532  Both  Published  6.7 (Medium)      CVE-2022-46740 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46740)  WS7100-20  Both  Published  6.5 (Medium)      We would like also to thank the MediaTek and Huawei security teams, for acknowledging and fixing these security issues, as stated in the following two security advisories: MediaTek (https://corp.mediatek.com/product-security-acknowledgements) and Huawei (https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-dosvihswr-8f632df1-en).  Moreover, by following the methodology of the work titled \"How is your Wi-Fi connection today? DoS attacks on WPA3-SAE\" (https://www.sciencedirect.com/science/article/pii/S221421262100243X), the fuzzer can identify the same SAE vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) which are linked to the below CVE IDs:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2021-37910 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37910)  All ASUS RX-based models  WPA3-SAE  Published  5.3 (medium)      CVE-2021-40288 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40288)  AX10v1  WPA3-SAE  Published  7.5 (high)      CVE-2021-41753 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41753)  DIR-x1560/DIR-X6060  WPA3-SAE  Published  7.5 (high)      CVE-2021-41788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41788)  mt7603E/mt7612/mt7613\nmt7615/mt7622/mt7628", "creation_timestamp": "2026-09-01T20:00:54.862251Z"}, {"uuid": "9b145887-b8b1-4a0d-b097-d1e364ab97dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46620", "type": "seen", "source": "https://t.me/hacking_Attack/84440", "content": "Exploit Collector\nMOV.AI Robotics Engine 2.2.3-3 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-ZkI_NEmJcds/WWlvjl_lr_I/AAAAAAAAIQo/28S1w7dyZRc0PebCQs4RPEz7Silw5ZbpgCLcBGAs/s1600/h95.png \nMOV.AI Robotics Engine version 2.2.3-3 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | b4fade716d8cdd82f18de5a3e6c65b0d1b1d58bb728ae8e16d265e61aa6541f7\n\nDownload\nVendor Name: MOV.AI\nProduct Name: MOV.AI Robotics Engine\nVendor Home Page:  https://www.mov.ai\nAffected Version(s): MOV.AI Robotics Engine v2.2.3-3\nPatch Release: MOV.AI Robotics Engine v2.2.3-4\nPatched Version Release: 22 September 2022\nVulnerability Type: Reflected XSS (CWE-79)\nCVE Reference: CVE-2022-46620\nAuthor of Advisory: Thurein Soe\nVendor Description:\nMOV.AI is a Robotics Engine platform based on ROS. It is packaged in an\nintuitive web-based interface to develop autonomous mobile robots (AMRs)\nand automated guided vehicles (AGVs). It integrates with navigation,\nlocalization, calibration, and the enterprise-grade tools they need for\nadvanced automation.\n\nVulnerability description:\nPost Reflected cross-site scripting (XSS) vulnerability in MOV.AI Robotics\nEngine v2.2.3-3 version allowing an attacker to execute arbitrary\njavascript in the context of RCS application due to inadequate sanitization\nof user-supplied data. During the Assessment, it was possible to send\narbitrary JavaScript, and the server returned as part of an application\nresponse body due to insufficient input validation.\n\nVulnerable Parameters:\n\ndashboard/users/admin2\ndashboard/groups\nAdminBoard\n\nImpact:\nCross-Site Scripting issues occur when an application uses untrusted data\nsupplied by untrusted users in a web browser without sufficient prior\nvalidation or escaping. A potential attacker can embed untrusted code\nwithin a client-side script to be executed by the browser while\ninterpreting the page. Attackers utilize XSS vulnerabilities to execute\nscripts in a legitimate user's browser leading to user credentials theft,\nsession hijacking, website defacement, or redirection to malicious sites.\n\nReferences:\nhttps://www.immuniweb.com/vulnerability/cross-site-scripting.html\n\nDisclosure Timeline:\n06 July 2022: Found security vulnerability during a security assessment\n08 July 2022: Customer reported finding a security vulnerability to MOV.AI\n15 September 2022: further details of remediation steps sent to MOV.AI\n22 September 2022: Patch released for MOV.AI Customer by MOV.AI\n\nCredits:\nThurein Soe\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:11.580363Z"}, {"uuid": "6d370f61-9507-4d01-8ad5-017cb5537622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46740", "type": "seen", "source": "https://t.me/hacking_Attack/109427", "content": "STEP2: Pick the attack module you wish      1) Frames detected at the moment of connectivity disruption, one-by-one\n    2) Sequence of frames till the moment a disruption was detected (BETA)\n  STEP3: The first mode of DoS802.11, tests all the frames that the fuzzer detected up to that moment. It is a second hand filtering to separate the true positive from the false positive frames. In case  a frame is positive, i.e., causes a DoS to the associated STA, an exploit is being produced automatically.\n  STEP4: DoS802.11 exits when the log files have been considered.  **The rest to modules are currently in BETA mode.  Vulnerabilities  So far, the fuzzer managed to identify the following CVE IDs, by exploiting different Management frames:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2022-32654 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32654)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32655 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32655)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32656 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32656)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32657 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32657)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32658)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32659)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986/mt8518s/mt8532  Both  Published  6.7 (Medium)      CVE-2022-46740 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46740)  WS7100-20  Both  Published  6.5 (Medium)      We would like also to thank the MediaTek and Huawei security teams, for acknowledging and fixing these security issues, as stated in the following two security advisories: MediaTek (https://corp.mediatek.com/product-security-acknowledgements) and Huawei (https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-dosvihswr-8f632df1-en).  Moreover, by following the methodology of the work titled \"How is your Wi-Fi connection today? DoS attacks on WPA3-SAE\" (https://www.sciencedirect.com/science/article/pii/S221421262100243X), the fuzzer can identify the same SAE vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) which are linked to the below CVE IDs:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2021-37910 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37910)  All ASUS RX-based models  WPA3-SAE  Published  5.3 (medium)      CVE-2021-40288 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40288)  AX10v1  WPA3-SAE  Published  7.5 (high)      CVE-2021-41753 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41753)  DIR-x1560/DIR-X6060  WPA3-SAE  Published  7.5 (high)      CVE-2021-41788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41788)  mt7603E/mt7612/mt7613\nmt7615/mt7622/mt7628", "creation_timestamp": "2026-09-02T01:01:15.409932Z"}, {"uuid": "3cf255d1-89b0-4e4d-8e0d-cbd84fd51042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46620", "type": "seen", "source": "https://t.me/hacking_Attack/84440", "content": "Exploit Collector\nMOV.AI Robotics Engine 2.2.3-3 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-ZkI_NEmJcds/WWlvjl_lr_I/AAAAAAAAIQo/28S1w7dyZRc0PebCQs4RPEz7Silw5ZbpgCLcBGAs/s1600/h95.png \nMOV.AI Robotics Engine version 2.2.3-3 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | b4fade716d8cdd82f18de5a3e6c65b0d1b1d58bb728ae8e16d265e61aa6541f7\n\nDownload\nVendor Name: MOV.AI\nProduct Name: MOV.AI Robotics Engine\nVendor Home Page:  https://www.mov.ai\nAffected Version(s): MOV.AI Robotics Engine v2.2.3-3\nPatch Release: MOV.AI Robotics Engine v2.2.3-4\nPatched Version Release: 22 September 2022\nVulnerability Type: Reflected XSS (CWE-79)\nCVE Reference: CVE-2022-46620\nAuthor of Advisory: Thurein Soe\nVendor Description:\nMOV.AI is a Robotics Engine platform based on ROS. It is packaged in an\nintuitive web-based interface to develop autonomous mobile robots (AMRs)\nand automated guided vehicles (AGVs). It integrates with navigation,\nlocalization, calibration, and the enterprise-grade tools they need for\nadvanced automation.\n\nVulnerability description:\nPost Reflected cross-site scripting (XSS) vulnerability in MOV.AI Robotics\nEngine v2.2.3-3 version allowing an attacker to execute arbitrary\njavascript in the context of RCS application due to inadequate sanitization\nof user-supplied data. During the Assessment, it was possible to send\narbitrary JavaScript, and the server returned as part of an application\nresponse body due to insufficient input validation.\n\nVulnerable Parameters:\n\ndashboard/users/admin2\ndashboard/groups\nAdminBoard\n\nImpact:\nCross-Site Scripting issues occur when an application uses untrusted data\nsupplied by untrusted users in a web browser without sufficient prior\nvalidation or escaping. A potential attacker can embed untrusted code\nwithin a client-side script to be executed by the browser while\ninterpreting the page. Attackers utilize XSS vulnerabilities to execute\nscripts in a legitimate user's browser leading to user credentials theft,\nsession hijacking, website defacement, or redirection to malicious sites.\n\nReferences:\nhttps://www.immuniweb.com/vulnerability/cross-site-scripting.html\n\nDisclosure Timeline:\n06 July 2022: Found security vulnerability during a security assessment\n08 July 2022: Customer reported finding a security vulnerability to MOV.AI\n15 September 2022: further details of remediation steps sent to MOV.AI\n22 September 2022: Patch released for MOV.AI Customer by MOV.AI\n\nCredits:\nThurein Soe\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:28.094977Z"}, {"uuid": "c52e00fb-313e-4a9a-9843-bd98fced8f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "Telegram/bZaMmO-XIUCPbxkgfWz6v9gklldRF2gJsOiIgBUpuIWSNvg", "content": "", "creation_timestamp": "2026-09-02T05:00:04.090804Z"}, {"uuid": "0a479d8d-b545-43fd-a8fc-deba2d78c50f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46552", "type": "seen", "source": "https://t.me/cissp/6742", "content": "exploit\n1. CVE-2022-46552:\nD-Link DIR-846 - RCE\nhttps://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html\n\n2. RCE Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack\nhttps://www.legitsecurity.com/blog/remote-code-execution-vulnerability-in-azure-pipelines-can-lead-to-software-supply-chain-attack\n\n3. Citrix 22.2.1/23.1.1 - LPE\nhttps://packetstormsecurity.com/files/171716/Citrix-22.2.1.103-23.1.1.11-Local-Privilege-Escalation.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.17", "creation_timestamp": "2026-09-02T01:04:01.652513Z"}, {"uuid": "d2ebbff5-d328-4d12-b9f1-22816ffe22cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://t.me/cissp/6478", "content": "If you use Cacti for web-based monitoring, be sure to patch ASAP!\nA critical vulnerability [CVE-2022-46169] is being actively exploited in the wild and a majority of internet-exposed servers have not been patched yet.\nRead: https://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.24", "creation_timestamp": "2026-09-02T01:04:05.761526Z"}, {"uuid": "186da473-b85d-49d3-90e0-fdda00b35e66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-01)", "content": "", "creation_timestamp": "2026-09-02T10:15:11.503761Z"}, {"uuid": "83528787-4880-46ee-83e2-00d8e17e72eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "published-proof-of-concept", "source": "Telegram/bZaMmO-XIUCPbxkgfWz6v9gklldRF2gJsOiIgBUpuIWSNvg", "content": "", "creation_timestamp": "2026-09-03T00:00:44.236048Z"}, {"uuid": "75002103-7b19-464e-8d58-0f3e4de766e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46031", "type": "seen", "source": "https://gist.github.com/1731249586/6656c4616664e3bf64e7083926dc0566", "content": "## Vulnerability Details\n\n### CVE-2022-46031\n- **Vendor**: Sourcecodester\n- **Product**: Simple Image Gallery Web App v1.0\n- **Component**: login.php\n- **Vulnerability Type**: SQL Injection\n- **Description**: Simple Image Gallery Web App v1.0 is vulnerable to SQL Injection via the login.php component.\n- **Status**: Fixed / Patched\n\n### CVE-2022-46032\n- **Vendor**: Sourcecodester\n- **Product**: Simple Image Gallery Web App v1.0\n- **Component**: /classes/User.php\n- **Vulnerability Type**: Arbitrary File Upload\n- **Description**: Simple Image Gallery Web App v1.0 is vulnerable to Arbitrary File Upload via /classes/User.php.\n- **Status**: Fixed / Patched", "creation_timestamp": "2026-09-03T14:43:22.498006Z"}, {"uuid": "23bab542-0c28-49d5-8856-8357d0d521f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46032", "type": "seen", "source": "https://gist.github.com/1731249586/6656c4616664e3bf64e7083926dc0566", "content": "## Vulnerability Details\n\n### CVE-2022-46031\n- **Vendor**: Sourcecodester\n- **Product**: Simple Image Gallery Web App v1.0\n- **Component**: login.php\n- **Vulnerability Type**: SQL Injection\n- **Description**: Simple Image Gallery Web App v1.0 is vulnerable to SQL Injection via the login.php component.\n- **Status**: Fixed / Patched\n\n### CVE-2022-46032\n- **Vendor**: Sourcecodester\n- **Product**: Simple Image Gallery Web App v1.0\n- **Component**: /classes/User.php\n- **Vulnerability Type**: Arbitrary File Upload\n- **Description**: Simple Image Gallery Web App v1.0 is vulnerable to Arbitrary File Upload via /classes/User.php.\n- **Status**: Fixed / Patched", "creation_timestamp": "2026-09-03T14:43:22.550177Z"}, {"uuid": "5387ceac-dd73-44a4-b5e8-4e8a11d8a80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46740", "type": "seen", "source": "https://t.me/hacking_Attack/109427", "content": "STEP2: Pick the attack module you wish      1) Frames detected at the moment of connectivity disruption, one-by-one\n    2) Sequence of frames till the moment a disruption was detected (BETA)\n  STEP3: The first mode of DoS802.11, tests all the frames that the fuzzer detected up to that moment. It is a second hand filtering to separate the true positive from the false positive frames. In case  a frame is positive, i.e., causes a DoS to the associated STA, an exploit is being produced automatically.\n  STEP4: DoS802.11 exits when the log files have been considered.  **The rest to modules are currently in BETA mode.  Vulnerabilities  So far, the fuzzer managed to identify the following CVE IDs, by exploiting different Management frames:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2022-32654 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32654)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32655 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32655)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32656 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32656)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32657 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32657)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32658)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32659)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986/mt8518s/mt8532  Both  Published  6.7 (Medium)      CVE-2022-46740 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46740)  WS7100-20  Both  Published  6.5 (Medium)      We would like also to thank the MediaTek and Huawei security teams, for acknowledging and fixing these security issues, as stated in the following two security advisories: MediaTek (https://corp.mediatek.com/product-security-acknowledgements) and Huawei (https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-dosvihswr-8f632df1-en).  Moreover, by following the methodology of the work titled \"How is your Wi-Fi connection today? DoS attacks on WPA3-SAE\" (https://www.sciencedirect.com/science/article/pii/S221421262100243X), the fuzzer can identify the same SAE vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) which are linked to the below CVE IDs:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2021-37910 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37910)  All ASUS RX-based models  WPA3-SAE  Published  5.3 (medium)      CVE-2021-40288 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40288)  AX10v1  WPA3-SAE  Published  7.5 (high)      CVE-2021-41753 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41753)  DIR-x1560/DIR-X6060  WPA3-SAE  Published  7.5 (high)      CVE-2021-41788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41788)  mt7603E/mt7612/mt7613\nmt7615/mt7622/mt7628", "creation_timestamp": "2026-09-04T11:00:04.094906Z"}, {"uuid": "10cd5c50-2205-4b15-a627-a69019edcb57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46620", "type": "seen", "source": "https://t.me/hacking_Attack/84440", "content": "Exploit Collector\nMOV.AI Robotics Engine 2.2.3-3 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-ZkI_NEmJcds/WWlvjl_lr_I/AAAAAAAAIQo/28S1w7dyZRc0PebCQs4RPEz7Silw5ZbpgCLcBGAs/s1600/h95.png \nMOV.AI Robotics Engine version 2.2.3-3 suffers from multiple cross site scripting vulnerabilities.\n\nSHA-256 | b4fade716d8cdd82f18de5a3e6c65b0d1b1d58bb728ae8e16d265e61aa6541f7\n\nDownload\nVendor Name: MOV.AI\nProduct Name: MOV.AI Robotics Engine\nVendor Home Page:  https://www.mov.ai\nAffected Version(s): MOV.AI Robotics Engine v2.2.3-3\nPatch Release: MOV.AI Robotics Engine v2.2.3-4\nPatched Version Release: 22 September 2022\nVulnerability Type: Reflected XSS (CWE-79)\nCVE Reference: CVE-2022-46620\nAuthor of Advisory: Thurein Soe\nVendor Description:\nMOV.AI is a Robotics Engine platform based on ROS. It is packaged in an\nintuitive web-based interface to develop autonomous mobile robots (AMRs)\nand automated guided vehicles (AGVs). It integrates with navigation,\nlocalization, calibration, and the enterprise-grade tools they need for\nadvanced automation.\n\nVulnerability description:\nPost Reflected cross-site scripting (XSS) vulnerability in MOV.AI Robotics\nEngine v2.2.3-3 version allowing an attacker to execute arbitrary\njavascript in the context of RCS application due to inadequate sanitization\nof user-supplied data. During the Assessment, it was possible to send\narbitrary JavaScript, and the server returned as part of an application\nresponse body due to insufficient input validation.\n\nVulnerable Parameters:\n\ndashboard/users/admin2\ndashboard/groups\nAdminBoard\n\nImpact:\nCross-Site Scripting issues occur when an application uses untrusted data\nsupplied by untrusted users in a web browser without sufficient prior\nvalidation or escaping. A potential attacker can embed untrusted code\nwithin a client-side script to be executed by the browser while\ninterpreting the page. Attackers utilize XSS vulnerabilities to execute\nscripts in a legitimate user's browser leading to user credentials theft,\nsession hijacking, website defacement, or redirection to malicious sites.\n\nReferences:\nhttps://www.immuniweb.com/vulnerability/cross-site-scripting.html\n\nDisclosure Timeline:\n06 July 2022: Found security vulnerability during a security assessment\n08 July 2022: Customer reported finding a security vulnerability to MOV.AI\n15 September 2022: further details of remediation steps sent to MOV.AI\n22 September 2022: Patch released for MOV.AI Customer by MOV.AI\n\nCredits:\nThurein Soe\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T00:00:10.313771Z"}, {"uuid": "19bd726a-68ca-4120-846c-a59d4fff8446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46740", "type": "seen", "source": "https://t.me/hacking_Attack/109427", "content": "STEP2: Pick the attack module you wish      1) Frames detected at the moment of connectivity disruption, one-by-one\n    2) Sequence of frames till the moment a disruption was detected (BETA)\n  STEP3: The first mode of DoS802.11, tests all the frames that the fuzzer detected up to that moment. It is a second hand filtering to separate the true positive from the false positive frames. In case  a frame is positive, i.e., causes a DoS to the associated STA, an exploit is being produced automatically.\n  STEP4: DoS802.11 exits when the log files have been considered.  **The rest to modules are currently in BETA mode.  Vulnerabilities  So far, the fuzzer managed to identify the following CVE IDs, by exploiting different Management frames:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2022-32654 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32654)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32655 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32655)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32656 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32656)  mt5221/mt7603/mt7613\nmt7615/mt7622/mt7628\nmt7629/mt7663/mt7668\nmt7682/mt7686/mt7687\nmt7697/mt7902/mt7915\nmt7916/mt7921/mt7933\nmt7981/mt7986/mt8167S\nmt8175/mt8362A/mt8365\nmt8385/mt8518S/mt8532\nmt8695/mt8696/mt8788  Both  Published  6.7 (Medium)      CVE-2022-32657 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32657)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32658 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32658)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986  Both  Published  6.7 (Medium)      CVE-2022-32659 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32659)  mt7603/mt7613/mt7615\nmt7622/mt7628/mt7629\nmt7915/mt7916/mt7981\nmt7986/mt8518s/mt8532  Both  Published  6.7 (Medium)      CVE-2022-46740 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-46740)  WS7100-20  Both  Published  6.5 (Medium)      We would like also to thank the MediaTek and Huawei security teams, for acknowledging and fixing these security issues, as stated in the following two security advisories: MediaTek (https://corp.mediatek.com/product-security-acknowledgements) and Huawei (https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-dosvihswr-8f632df1-en).  Moreover, by following the methodology of the work titled \"How is your Wi-Fi connection today? DoS attacks on WPA3-SAE\" (https://www.sciencedirect.com/science/article/pii/S221421262100243X), the fuzzer can identify the same SAE vulnerabilities (https://www.kitploit.com/search/label/vulnerabilities) which are linked to the below CVE IDs:      CVE IDs  Vulnerable Devices/Chipsets  WPA2/WPA3-SAE  Status  Score      CVE-2021-37910 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-37910)  All ASUS RX-based models  WPA3-SAE  Published  5.3 (medium)      CVE-2021-40288 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40288)  AX10v1  WPA3-SAE  Published  7.5 (high)      CVE-2021-41753 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41753)  DIR-x1560/DIR-X6060  WPA3-SAE  Published  7.5 (high)      CVE-2021-41788 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-41788)  mt7603E/mt7612/mt7613\nmt7615/mt7622/mt7628", "creation_timestamp": "2026-09-05T01:00:31.089070Z"}, {"uuid": "6a5e5bbb-6e58-40bf-a302-9d3ebe3dddf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46505", "type": "seen", "source": "Telegram/XELY7yMiVU7lDAG5jTnGWxzdDQm-g3hGd-rJzK0iCImTLgM", "content": "", "creation_timestamp": "2026-09-06T15:00:04.344329Z"}, {"uuid": "899ca84a-c9af-4c77-ba66-c369b3e013a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/cllamasllamas/ee311b4ae1fae2c9979460515978c9dd", "content": "{\n  \"name\": \"CyPwn IPA Library (Cleaned)\",\n  \"identifier\": \"xyz.cypwn.ipalibrary\",\n  \"subtitle\": \"CyPwn cleaned - unique bundleIdentifiers only\",\n  \"iconURL\": \"https://repo.cypwn.xyz/assets/images/cypwn_small.png\",\n  \"website\": \"https://ipa.cypwn.xyz\",\n  \"sourceURL\": \"https://your-host.com/cypwn-cleaned.json\",\n  \"tintColor\": \"FFC300\",\n  \"featuredApps\": [\n    \"Ed0ardo.CyPwnStore\"\n  ],\n  \"crypto\": {\n    \"btc\": \"bc1qy5xq4xdw4w83gpauxskassck4rwvpe7xdlvtws\"\n  },\n  \"apps\": [\n    {\n      \"name\": \"Stremio-2.0.6\",\n      \"bundleIdentifier\": \"com.stremio.pal\",\n      \"developerName\": \"Stremio-2.0.6 x CyPwn\",\n      \"version\": \"2.0.6\",\n      \"versionDate\": \"2026-07-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Stremio-2.0.6.ipa\",\n      \"localizedDescription\": \"\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-2.0.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 77175193,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Stremio-2.0.6/Stremio-2.0.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"PowerWarriors_18.0\",\n      \"bundleIdentifier\": \"com.ZombiAriel.Power-Warriors\",\n      \"developerName\": \"PowerWarriors_18.0 x CyPwn\",\n      \"version\": \"18\",\n      \"versionDate\": \"2026-07-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PowerWarriors_18.0.ipa\",\n      \"localizedDescription\": \"Power Warriors iOS port by mancha\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PowerWarriors_18.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 174126530,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PowerWarriors_18.0/PowerWarriors_18.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CloverPit-1.4.8\",\n      \"bundleIdentifier\": \"com.PanikArcade.CloverPit\",\n      \"developerName\": \"CloverPit-1.4.8 x CyPwn\",\n      \"version\": \"1.4.8\",\n      \"versionDate\": \"2026-07-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CloverPit-1.4.8.ipa\",\n      \"localizedDescription\": \"A rogue-lite slot machine nightmare\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CloverPit-1.4.8.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 146328780,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-4.png\"\n      ]\n    },\n    {\n      \"name\": \"Stremio-1.3.6\",\n      \"bundleIdentifier\": \"com.stremio.ios\",\n      \"developerName\": \"Stremio-1.3.6 x CyPwn\",\n      \"version\": \"1.3.6\",\n      \"versionDate\": \"2026-02-24\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Stremio-1.3.6.ipa\",\n      \"localizedDescription\": \"Watch videos, movies, TV series and TV channels instantly.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-1.3.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 79429632,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Stremio-1.3.6/Stremio-1.3.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Vesc_Tool_6.06.2\",\n      \"bundleIdentifier\": \"com.vesc-project.vesc-tool\",\n      \"developerName\": \"Vesc_Tool_6.06.2 x CyPwn\",\n      \"version\": \"6.06.2\",\n      \"versionDate\": \"2026-02-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Vesc_Tool_6.06.2.ipa\",\n      \"localizedDescription\": \"Configure your VESC Ecosystem\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Vesc_Tool_6.06.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 90450165,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Terraria_4.5.0\",\n      \"bundleIdentifier\": \"com.505games.terraria\",\n      \"developerName\": \"Terraria_4.5.0 x CyPwn\",\n      \"version\": \"4.5.0\",\n      \"versionDate\": \"2026-01-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Terraria_4.5.0.ipa\",\n      \"localizedDescription\": \"Terraria 4.5.0\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Terraria_4.5.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 189278453,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Terraria_4.5.0/Terraria_4.5.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Violyn_1_4_4-2\",\n      \"bundleIdentifier\": \"Lilliana.Violyn\",\n      \"developerName\": \"Violyn_1_4_4-2 x CyPwn\",\n      \"version\": \"1.4.4\",\n      \"versionDate\": \"2026-01-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Violyn_1_4_4-2.ipa\",\n      \"localizedDescription\": \"Search and download from CyDown\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Violyn_1_4_4-2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1279262,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Violyn_1_4_4-2/Violyn_1_4_4-2-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Violyn_1_4_4-2/Violyn_1_4_4-2-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Violyn_1_4_4-2/Violyn_1_4_4-2-2.png\"\n      ]\n    },\n    {\n      \"name\": \"iTorrent\",\n      \"bundleIdentifier\": \"com.xitrix.iTorrent2\",\n      \"developerName\": \"iTorrent x CyPwn\",\n      \"version\": \"2.1.1\",\n      \"versionDate\": \"2025-12-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iTorrent.ipa\",\n      \"localizedDescription\": \"iTorrent v2.1.1-1 by XITRIX iOS 16+\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iTorrent.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8357150,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTorrent/iTorrent-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTorrent/iTorrent-1.png\"\n      ]\n    },\n    {\n      \"name\": \"True_Skate_1.5.102\",\n      \"bundleIdentifier\": \"com.trueaxis.skate\",\n      \"developerName\": \"True_Skate_1.5.102 x CyPwn\",\n      \"version\": \"1.5.102\",\n      \"versionDate\": \"2025-12-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/True_Skate_1.5.102.ipa\",\n      \"localizedDescription\": \"The ultimate skateboarding sim\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/True_Skate_1.5.102.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 121519472,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/True_Skate_1.5.102/True_Skate_1.5.102-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Gopeed-v1.8.3-ios\",\n      \"bundleIdentifier\": \"com.gopeed.gopeed\",\n      \"developerName\": \"Gopeed-v1.8.3-ios x CyPwn\",\n      \"version\": \"1.8.3\",\n      \"versionDate\": \"2025-12-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Gopeed-v1.8.3-ios.ipa\",\n      \"localizedDescription\": \"A modern download manager\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed-v1.8.3-ios.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 41366323,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Gopeed-v1.8.3-ios/Gopeed-v1.8.3-ios-0.png\"\n      ]\n    },\n    {\n      \"name\": \"OldOS\",\n      \"bundleIdentifier\": \"com.zrc.BudgetingBuddy\",\n      \"developerName\": \"OldOS x CyPwn\",\n      \"version\": \"2.0.7\",\n      \"versionDate\": \"2025-12-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/OldOS.ipa\",\n      \"localizedDescription\": \"Recreating iOS 4 in Swift.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 83267420,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-4.png\"\n      ]\n    },\n    {\n      \"name\": \"InjectionIPA_v5.0\",\n      \"bundleIdentifier\": \"injectionDylibToIpa.Sniper\",\n      \"developerName\": \"InjectionIPA_v5.0 x CyPwn\",\n      \"version\": \"5.0\",\n      \"versionDate\": \"2025-12-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/InjectionIPA_v5.0.ipa\",\n      \"localizedDescription\": \"Dylib injector tool\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/InjectionIPA_v5.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 4424990,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/InjectionIPA_v5.0/InjectionIPA_v5.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"DLiPA_v1.1\",\n      \"bundleIdentifier\": \"com.ahmedbafkir.dlipa\",\n      \"developerName\": \"DLiPA_v1.1 x CyPwn\",\n      \"version\": \"1.1\",\n      \"versionDate\": \"2025-12-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DLiPA_v1.1.ipa\",\n      \"localizedDescription\": \"An iOS app inspired by ipatool.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DLiPA_v1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 480112,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/DLiPA_v1.1/DLiPA_v1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Fortnite+Release-7.40-CL-5011364\",\n      \"bundleIdentifier\": \"3bda04b065c347de824ac05c8bb874bf\",\n      \"developerName\": \"Fortnite+Release-7.40-CL-5011364 x CyPwn\",\n      \"version\": \"7.40.2\",\n      \"versionDate\": \"2025-11-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Fortnite+Release-7.40-CL-5011364.ipa\",\n      \"localizedDescription\": \"Fortnite season 7 private server\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Fortnite+Release-7.40-CL-5011364.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 98859745,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Fortnite+Release-7.40-CL-5011364/Fortnite+Release-7.40-CL-5011364-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Fortnite+Release-7.40-CL-5011364/Fortnite+Release-7.40-CL-5011364-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Fortnite+Release-7.40-CL-5011364/Fortnite+Release-7.40-CL-5011364-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Spotube-iOS\",\n      \"bundleIdentifier\": \"oss.krtirtho.spotube.stable\",\n      \"developerName\": \"Spotube-iOS x CyPwn\",\n      \"version\": \"5.1.0\",\n      \"versionDate\": \"2025-11-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Spotube-iOS.ipa\",\n      \"localizedDescription\": \"Open source music client\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Spotube-iOS.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 34980495,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-4.png\"\n      ]\n    },\n    {\n      \"name\": \"PotatoIM\",\n      \"bundleIdentifier\": \"org.potatochat.PotatoEnterprise\",\n      \"developerName\": \"PotatoIM x CyPwn\",\n      \"version\": \"2.47.207251\",\n      \"versionDate\": \"2025-10-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PotatoIM.ipa\",\n      \"localizedDescription\": \"Chinese Telegram Clone\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PotatoIM.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 160390184,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PotatoIM/PotatoIM-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Asspp_2.3\",\n      \"bundleIdentifier\": \"wiki.qaq.Asspp\",\n      \"developerName\": \"Asspp_2.3 x CyPwn\",\n      \"version\": \"2.3\",\n      \"versionDate\": \"2025-09-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Asspp_2.3.ipa\",\n      \"localizedDescription\": \"Multi-account App Store management\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Asspp_2.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 10223616,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Asspp_2.3/Asspp_2.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"GoCoEdit_23.0\",\n      \"bundleIdentifier\": \"com.gogolith.gocoed\",\n      \"developerName\": \"GoCoEdit_23.0 x CyPwn\",\n      \"version\": \"23.0\",\n      \"versionDate\": \"2025-09-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/GoCoEdit_23.0.ipa\",\n      \"localizedDescription\": \"Fast iOS Remote & Local Code Editor\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/GoCoEdit_23.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14722007,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/GoCoEdit_23.0/GoCoEdit_23.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Deltarune_v727\",\n      \"bundleIdentifier\": \"com.ates.DELTARUNE\",\n      \"developerName\": \"Deltarune_v727 x CyPwn\",\n      \"version\": \"0\",\n      \"versionDate\": \"2025-08-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Deltarune_v727.ipa\",\n      \"localizedDescription\": \"Deltarune chapter 1-4\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Deltarune_v727.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 495777218,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Deltarune_v727/Deltarune_v727-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Deltarune_v727/Deltarune_v727-1.png\"\n      ]\n    },\n    {\n      \"name\": \"BazaartPremium_10.8.0\",\n      \"bundleIdentifier\": \"co.bazaart.app\",\n      \"developerName\": \"BazaartPremium_10.8.0 x CyPwn\",\n      \"version\": \"10.8.0\",\n      \"versionDate\": \"2025-08-29\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/BazaartPremium_10.8.0.ipa\",\n      \"localizedDescription\": \"Bazaart Premium unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/BazaartPremium_10.8.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 71837941,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/BazaartPremium_10.8.0/BazaartPremium_10.8.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VPN_FAST\",\n      \"bundleIdentifier\": \"com.hedef.vpnunlimitedproxy\",\n      \"developerName\": \"VPN_FAST x CyPwn\",\n      \"version\": \"1.8.6\",\n      \"versionDate\": \"2025-08-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VPN_FAST.ipa\",\n      \"localizedDescription\": \"Premium unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_FAST.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 25333596,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_FAST/VPN_FAST-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_FAST/VPN_FAST-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_FAST/VPN_FAST-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Tasks_Create_Live_Activities\",\n      \"bundleIdentifier\": \"rihab.liveTasks\",\n      \"developerName\": \"Tasks_Create_Live_Activities x CyPwn\",\n      \"version\": \"1.01\",\n      \"versionDate\": \"2025-08-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Tasks_Create_Live_Activities.ipa\",\n      \"localizedDescription\": \"Tasks cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Tasks_Create_Live_Activities.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 288655,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Tasks_Create_Live_Activities/Tasks_Create_Live_Activities-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Tasks_Create_Live_Activities/Tasks_Create_Live_Activities-1.png\"\n      ]\n    },\n    {\n      \"name\": \"ChatGPTw15\",\n      \"bundleIdentifier\": \"com.akuma.chatgptv15\",\n      \"developerName\": \"ChatGPTw15 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-08-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ChatGPTw15.ipa\",\n      \"localizedDescription\": \"ChatGPT for iOS 15!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ChatGPTw15.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2537553,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ChatGPTw15/ChatGPTw15-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VPN_Proxy_Master\",\n      \"bundleIdentifier\": \"net.dreamdownloader.vpn\",\n      \"developerName\": \"VPN_Proxy_Master x CyPwn\",\n      \"version\": \"2.2.8\",\n      \"versionDate\": \"2025-08-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VPN_Proxy_Master.ipa\",\n      \"localizedDescription\": \"VPN - Proxy Master cracked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Proxy_Master.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 13841203,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Proxy_Master/VPN_Proxy_Master-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Proxy_Master/VPN_Proxy_Master-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Proxy_Master/VPN_Proxy_Master-2.png\"\n      ]\n    },\n    {\n      \"name\": \"VPN_Freedom\",\n      \"bundleIdentifier\": \"com.vfulup.vpn\",\n      \"developerName\": \"VPN_Freedom x CyPwn\",\n      \"version\": \"1.2.2\",\n      \"versionDate\": \"2025-08-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VPN_Freedom.ipa\",\n      \"localizedDescription\": \"VPN Freedom cracked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Freedom.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6039797,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Freedom/VPN_Freedom-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Freedom/VPN_Freedom-1.png\"\n      ]\n    },\n    {\n      \"name\": \"bitchat_1.2.1\",\n      \"bundleIdentifier\": \"nochat.bitchat.hehbveh\",\n      \"developerName\": \"bitchat_1.2.1 x CyPwn\",\n      \"version\": \"1.2.1\",\n      \"versionDate\": \"2025-08-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/bitchat_1.2.1.ipa\",\n      \"localizedDescription\": \"bitchat for iOS 15 and up!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2243952,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/bitchat_1.2.1/bitchat_1.2.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"The_Free_VPN\",\n      \"bundleIdentifier\": \"com.thefreevpn\",\n      \"developerName\": \"The_Free_VPN x CyPwn\",\n      \"version\": \"1.10.1\",\n      \"versionDate\": \"2025-08-02\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/The_Free_VPN.ipa\",\n      \"localizedDescription\": \"The Free VPN\u2122 crack!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/The_Free_VPN.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 102341017,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/The_Free_VPN/The_Free_VPN-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/The_Free_VPN/The_Free_VPN-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/The_Free_VPN/The_Free_VPN-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Shark_Arsenal_4.0.14\",\n      \"bundleIdentifier\": \"com.blackshark.peripheral.community\",\n      \"developerName\": \"Shark_Arsenal_4.0.14 x CyPwn\",\n      \"version\": \"4.0.14\",\n      \"versionDate\": \"2025-07-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Shark_Arsenal_4.0.14.ipa\",\n      \"localizedDescription\": \"Control Black Shark gear on iOS\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Shark_Arsenal_4.0.14.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 79754690,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Shark_Arsenal_4.0.14/Shark_Arsenal_4.0.14-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FileBrowser_Pro_25.7\",\n      \"bundleIdentifier\": \"com.stratospherix.filebrowserbiz\",\n      \"developerName\": \"FileBrowser_Pro_25.7 x CyPwn\",\n      \"version\": \"25.7\",\n      \"versionDate\": \"2025-07-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FileBrowser_Pro_25.7.ipa\",\n      \"localizedDescription\": \"FileBrowser Pro 25.7\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.7.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 28416409,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/FileBrowser_Pro_25.7/FileBrowser_Pro_25.7-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Amethyst_1.0\",\n      \"bundleIdentifier\": \"org.angelauramc.amethyst\",\n      \"developerName\": \"Amethyst_1.0 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-07-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Amethyst_1.0.ipa\",\n      \"localizedDescription\": \"Minecraft: Java Edition Launcher\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Amethyst_1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 30125588,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Amethyst_1.0/Amethyst_1.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Bitchat\",\n      \"bundleIdentifier\": \"chat.bitchat\",\n      \"developerName\": \"Bitchat x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2025-07-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/bitchat_1.0.0_1752444072.ipa\",\n      \"localizedDescription\": \"Decentralized Bluetooth mesh chat.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.0.0_1752444072.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 563496,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Bitchat/bitchat_1.0.0_1752444072-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Bitchat/bitchat_1.0.0_1752444072-1.png\"\n      ]\n    },\n    {\n      \"name\": \"Little Nightmares\",\n      \"bundleIdentifier\": \"com.playdigious.littlenightmares\",\n      \"developerName\": \"Little Nightmares x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2025-07-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LittleNightmares_1.0.2.ipa\",\n      \"localizedDescription\": \"Play as Six, a lone child trapped in the Maw, a vast metal vessel filled with monstrous adults. Escape before it\u2019s too late.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LittleNightmares_1.0.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 13371337,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Little Nightmares/LittleNightmares_1.0.2-0.jpg\"\n      ]\n    },\n    {\n      \"name\": \"SQLiteFlow_5.8.6\",\n      \"bundleIdentifier\": \"com.hyperobjc.SQLiteFlow-iOS\",\n      \"developerName\": \"SQLiteFlow_5.8.6 x CyPwn\",\n      \"version\": \"5.8.6\",\n      \"versionDate\": \"2025-06-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SQLiteFlow_5.8.6.ipa\",\n      \"localizedDescription\": \"SQLiteFlow 5.8.6\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SQLiteFlow_5.8.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 4466933,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/SQLiteFlow_5.8.6/SQLiteFlow_5.8.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Scrcpy_Remote_2.4\",\n      \"bundleIdentifier\": \"com.mobile.scrcpy-ios\",\n      \"developerName\": \"Scrcpy_Remote_2.4 x CyPwn\",\n      \"version\": \"2.4\",\n      \"versionDate\": \"2025-05-22\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Scrcpy_Remote_2.4.ipa\",\n      \"localizedDescription\": \"scrcpy for iOS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Scrcpy_Remote_2.4.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9678356,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Scrcpy_Remote_2.4/Scrcpy_Remote_2.4-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FTPManager_8.5.4\",\n      \"bundleIdentifier\": \"com.skyjos.ftpmanager\",\n      \"developerName\": \"FTPManager_8.5.4 x CyPwn\",\n      \"version\": \"8.5.4\",\n      \"versionDate\": \"2025-05-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FTPManager_8.5.4.ipa\",\n      \"localizedDescription\": \"Fully featured FTP client\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FTPManager_8.5.4.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 24222105,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/FTPManager_8.5.4/FTPManager_8.5.4-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Stremio_1.0.1-17\",\n      \"bundleIdentifier\": \"com.stremio.one\",\n      \"developerName\": \"Stremio_1.0.1-17 x CyPwn\",\n      \"version\": \"1.0.1\",\n      \"versionDate\": \"2025-05-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Stremio_1.0.1-17.ipa\",\n      \"localizedDescription\": \"Stremio 1.0.1-17\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio_1.0.1-17.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 64026050,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Stremio_1.0.1-17/Stremio_1.0.1-17-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Theta_1.5\",\n      \"bundleIdentifier\": \"com.burbn.instagram\",\n      \"developerName\": \"Theta_1.5 x CyPwn\",\n      \"version\": \"380.0.0\",\n      \"versionDate\": \"2025-05-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Theta_1.5.ipa\",\n      \"localizedDescription\": \"Instagram tweak by objc_msgSend\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Theta_1.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 234807623,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Theta_1.5/Theta_1.5-0.png\"\n      ]\n    },\n    {\n      \"name\": \"UniversalPaperclips\",\n      \"bundleIdentifier\": \"com.everybodyhouse.paperclipsuniquetest\",\n      \"developerName\": \"UniversalPaperclips x CyPwn\",\n      \"version\": \"2.1.0\",\n      \"versionDate\": \"2025-05-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/UniversalPaperclips.ipa\",\n      \"localizedDescription\": \"Classic clicker\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/UniversalPaperclips.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 16850616,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/UniversalPaperclips/UniversalPaperclips-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Pokecut_4.4.2\",\n      \"bundleIdentifier\": \"com.seawardhyacinth.pokecut\",\n      \"developerName\": \"Pokecut_4.4.2 x CyPwn\",\n      \"version\": \"4.4.2\",\n      \"versionDate\": \"2025-05-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Pokecut_4.4.2.ipa\",\n      \"localizedDescription\": \"Pokecut Max for free.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Pokecut_4.4.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 184538890,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Pokecut_4.4.2/Pokecut_4.4.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"ProCam_14.7.3\",\n      \"bundleIdentifier\": \"gemini.ProCam-2\",\n      \"developerName\": \"ProCam_14.7.3 x CyPwn\",\n      \"version\": \"14.7.3\",\n      \"versionDate\": \"2025-05-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ProCam_14.7.3.ipa\",\n      \"localizedDescription\": \"Best premium all-in-one camera app.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCam_14.7.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 69048729,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCam_14.7.3/ProCam_14.7.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"maid2_0_7\",\n      \"bundleIdentifier\": \"com.danemadsen.maid\",\n      \"developerName\": \"maid2_0_7 x CyPwn\",\n      \"version\": \"2.0.7\",\n      \"versionDate\": \"2025-05-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/maid2_0_7.ipa\",\n      \"localizedDescription\": \"Cross-platform Flutter ai app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/maid2_0_7.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 31604080,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/maid2_0_7/maid2_0_7-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Ignited_1.8.5\",\n      \"bundleIdentifier\": \"com.litritt.ignited\",\n      \"developerName\": \"Ignited_1.8.5 x CyPwn\",\n      \"version\": \"1.8.5\",\n      \"versionDate\": \"2025-05-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Ignited_1.8.5.ipa\",\n      \"localizedDescription\": \"Ignited v1.8.5 for iOS 15\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Ignited_1.8.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 65556971,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Ignited_1.8.5/Ignited_1.8.5-0.png\"\n      ]\n    },\n    {\n      \"name\": \"EeveeSpotify-5.9.5-9.0.36\",\n      \"bundleIdentifier\": \"com.spotify.client\",\n      \"developerName\": \"EeveeSpotify-5.9.5-9.0.36 x CyPwn\",\n      \"version\": \"9.0.36\",\n      \"versionDate\": \"2025-04-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/EeveeSpotify-5.9.5-9.0.36.ipa\",\n      \"localizedDescription\": \"EeveeSpotify-5.9.5-9.0.36\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.9.5-9.0.36.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 84190167,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/EeveeSpotify-5.9.5-9.0.36/EeveeSpotify-5.9.5-9.0.36-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Balatro_1.0.1o\",\n      \"bundleIdentifier\": \"org.htf65jud.balatro\",\n      \"developerName\": \"Balatro_1.0.1o x CyPwn\",\n      \"version\": \"1.0.1o\",\n      \"versionDate\": \"2025-04-24\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Balatro_1.0.1o.ipa\",\n      \"localizedDescription\": \"Balatro_1.0.1o\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Balatro_1.0.1o.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 61708697,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Balatro_1.0.1o/Balatro_1.0.1o-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CrazyCattle3D_1.0.0\",\n      \"bundleIdentifier\": \"com.nathan.cc3dios\",\n      \"developerName\": \"CrazyCattle3D_1.0.0 x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2025-04-22\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CrazyCattle3D_1.0.0.ipa\",\n      \"localizedDescription\": \"Crazy Cattle 3D Battle Royale\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CrazyCattle3D_1.0.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 59422801,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CrazyCattle3D_1.0.0/CrazyCattle3D_1.0.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FL_Studio_Mobile_4.7.7_SatellaJailed\",\n      \"bundleIdentifier\": \"com.imageline.FLStudioMobileHD\",\n      \"developerName\": \"FL_Studio_Mobile_4.7.7_SatellaJailed x CyPwn\",\n      \"version\": \"4.7.7\",\n      \"versionDate\": \"2025-04-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FL_Studio_Mobile_4.7.7_SatellaJailed.ipa\",\n      \"localizedDescription\": \"FL Studio Mobile 4.7.7 Satella\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FL_Studio_Mobile_4.7.7_SatellaJailed.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 234409164,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/FL_Studio_Mobile_4.7.7_SatellaJailed/FL_Studio_Mobile_4.7.7_SatellaJailed-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Photomath_8.42.0\",\n      \"bundleIdentifier\": \"com.microblink.PhotoMath\",\n      \"developerName\": \"Photomath_8.42.0 x CyPwn\",\n      \"version\": \"8.42.0\",\n      \"versionDate\": \"2025-04-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Photomath_8.42.0.ipa\",\n      \"localizedDescription\": \"Photomath 8.42.0 Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Photomath_8.42.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17196646,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Photomath_8.42.0/Photomath_8.42.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"iTransmission\",\n      \"bundleIdentifier\": \"com.plusmediapps.itransmission\",\n      \"developerName\": \"iTransmission x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-03-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iTransmission.ipa\",\n      \"localizedDescription\": \"Another torrent client for iOS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iTransmission.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3722444,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTransmission/iTransmission-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTransmission/iTransmission-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTransmission/iTransmission-2.png\"\n      ]\n    },\n    {\n      \"name\": \"LumaFusion_3.0.10_iOS_15.0\",\n      \"bundleIdentifier\": \"com.luma-touch.LumaFusion\",\n      \"developerName\": \"LumaFusion_3.0.10_iOS_15.0 x CyPwn\",\n      \"version\": \"3.0.10\",\n      \"versionDate\": \"2025-03-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LumaFusion_3.0.10_iOS_15.0.ipa\",\n      \"localizedDescription\": \"LumaFusion 3.0.10\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LumaFusion_3.0.10_iOS_15.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 128461045,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/LumaFusion_3.0.10_iOS_15.0/LumaFusion_3.0.10_iOS_15.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CyPwnStore_7.1\",\n      \"bundleIdentifier\": \"Ed0ardo.CyPwnStore\",\n      \"developerName\": \"CyPwnStore_7.1 x CyPwn\",\n      \"version\": \"7.1\",\n      \"versionDate\": \"2025-03-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CyPwnStore_7.1.ipa\",\n      \"localizedDescription\": \"Download CyPwn Debs and Apps easily\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CyPwnStore_7.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 875048,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CyPwnStore_7.1/CyPwnStore_7.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Remoter_Pro_6.2.1\",\n      \"bundleIdentifier\": \"com.remoterlabs.remotercomplete\",\n      \"developerName\": \"Remoter_Pro_6.2.1 x CyPwn\",\n      \"version\": \"6.2.1\",\n      \"versionDate\": \"2025-03-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Remoter_Pro_6.2.1.ipa\",\n      \"localizedDescription\": \"A powerful remote desktop client.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Remoter_Pro_6.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 24798822,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Remoter_Pro_6.2.1/Remoter_Pro_6.2.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Screens_4.12.11\",\n      \"bundleIdentifier\": \"com.edovia.screens.3.ios\",\n      \"developerName\": \"Screens_4.12.11 x CyPwn\",\n      \"version\": \"4.12.11\",\n      \"versionDate\": \"2025-03-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Screens_4.12.11.ipa\",\n      \"localizedDescription\": \"Take control of your computers.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Screens_4.12.11.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 11335106,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Screens_4.12.11/Screens_4.12.11-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Jump_9.8.0\",\n      \"bundleIdentifier\": \"4GU63N96WE.com.p5sys.jumpdesktop\",\n      \"developerName\": \"Jump_9.8.0 x CyPwn\",\n      \"version\": \"9.8.0\",\n      \"versionDate\": \"2025-03-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Jump_9.8.0.ipa\",\n      \"localizedDescription\": \"RDP and VNC application\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Jump_9.8.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 28405923,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Jump_9.8.0/Jump_9.8.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Age_of_History_II_Europe_1.0713\",\n      \"bundleIdentifier\": \"age.of.civilizations2.jakowski.lukasz.ios.europe\",\n      \"developerName\": \"Age_of_History_II_Europe_1.0713 x CyPwn\",\n      \"version\": \"1.0713\",\n      \"versionDate\": \"2025-03-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Age_of_History_II_Europe_1.0713.ipa\",\n      \"localizedDescription\": \"Age of History II Europe\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Age_of_History_II_Europe_1.0713.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 157905059,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Age_of_History_II_Europe_1.0713/Age_of_History_II_Europe_1.0713-0.png\"\n      ]\n    },\n    {\n      \"name\": \"fGet_1.5.19_NoAds\",\n      \"bundleIdentifier\": \"com.penguinbit.fastdownload\",\n      \"developerName\": \"fGet_1.5.19_NoAds x CyPwn\",\n      \"version\": \"1.5.19\",\n      \"versionDate\": \"2025-02-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/fGet_1.5.19_NoAds.ipa\",\n      \"localizedDescription\": \"Fast file downloader/manager\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/fGet_1.5.19_NoAds.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14501806,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/fGet_1.5.19_NoAds/fGet_1.5.19_NoAds-0.png\"\n      ]\n    },\n    {\n      \"name\": \"atvTools_1.5.0\",\n      \"bundleIdentifier\": \"dev.vodik7.atvtools.atvTools\",\n      \"developerName\": \"atvTools_1.5.0 x CyPwn\",\n      \"version\": \"1.5.0\",\n      \"versionDate\": \"2025-02-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/atvTools_1.5.0.ipa\",\n      \"localizedDescription\": \"Must-have app for Android/Google TV\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/atvTools_1.5.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 20908605,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/atvTools_1.5.0/atvTools_1.5.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Notepad-_1.0\",\n      \"bundleIdentifier\": \"com.meepo.Notepad\",\n      \"developerName\": \"Notepad-_1.0 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-02-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Notepad-_1.0.ipa\",\n      \"localizedDescription\": \"A convenient coding notepad for iOS\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Notepad-_1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 608389,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Notepad-_1.0/Notepad-_1.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"HollowKnight\",\n      \"bundleIdentifier\": \"com.GLESign.HollowKnight\",\n      \"developerName\": \"HollowKnight x CyPwn\",\n      \"version\": \"1.5.78.11833\",\n      \"versionDate\": \"2025-02-02\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HollowKnight.ipa\",\n      \"localizedDescription\": \"iOS port of Hollow Knight. Created by: GLESign\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HollowKnight.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1056964608,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/HollowKnight/HollowKnight-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Textastic_9.9.3\",\n      \"bundleIdentifier\": \"com.textasticapp.textastic-universal\",\n      \"developerName\": \"Textastic_9.9.3 x CyPwn\",\n      \"version\": \"9.9.3\",\n      \"versionDate\": \"2025-01-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Textastic_9.9.3.ipa\",\n      \"localizedDescription\": \"Advanced code editor for iPhone\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Textastic_9.9.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8671723,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Textastic_9.9.3/Textastic_9.9.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"TS.Notes_0.1\",\n      \"bundleIdentifier\": \"com.swiftsphere.notes\",\n      \"developerName\": \"TS.Notes_0.1 x CyPwn\",\n      \"version\": \"0.1\",\n      \"versionDate\": \"2025-01-24\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/TS.Notes_0.1.ipa\",\n      \"localizedDescription\": \"Simple and intuitive notes app.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/TS.Notes_0.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 505149,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/TS.Notes_0.1/TS.Notes_0.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Picsew_3.11.4_Pro\",\n      \"bundleIdentifier\": \"com.sugarmo.ScrollClip\",\n      \"developerName\": \"Picsew_3.11.4_Pro x CyPwn\",\n      \"version\": \"3.11.4\",\n      \"versionDate\": \"2025-01-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Picsew_3.11.4_Pro.ipa\",\n      \"localizedDescription\": \"Screenshot stitching tool\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsew_3.11.4_Pro.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 35347496,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picsew_3.11.4_Pro/Picsew_3.11.4_Pro-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picsew_3.11.4_Pro/Picsew_3.11.4_Pro-1.png\"\n      ]\n    },\n    {\n      \"name\": \"iota6.0-13.1.0\",\n      \"bundleIdentifier\": \"com.toyopagroup.picaboo\",\n      \"developerName\": \"iota6.0-13.1.0 x CyPwn\",\n      \"version\": \"13.1.0\",\n      \"versionDate\": \"2024-12-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iota6.0-13.1.0.ipa\",\n      \"localizedDescription\": \"Read the full description first!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iota6.0-13.1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 191197347,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/iota6.0-13.1.0/iota6.0-13.1.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"TransparentIcons_1.7.2\",\n      \"bundleIdentifier\": \"com.noahgilmore.transparent-icons\",\n      \"developerName\": \"TransparentIcons_1.7.2 x CyPwn\",\n      \"version\": \"1.7.2\",\n      \"versionDate\": \"2024-10-27\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/TransparentIcons_1.7.2.ipa\",\n      \"localizedDescription\": \"Transparent App Icons\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/TransparentIcons_1.7.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6773800,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/TransparentIcons_1.7.2/TransparentIcons_1.7.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CarrotPremium_6.1.3\",\n      \"bundleIdentifier\": \"com.grailr.CARROTweather\",\n      \"developerName\": \"CarrotPremium_6.1.3 x CyPwn\",\n      \"version\": \"6.1.3\",\n      \"versionDate\": \"2024-10-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CarrotPremium_6.1.3.ipa\",\n      \"localizedDescription\": \"Carrot Premium Ultra membership\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CarrotPremium_6.1.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 105056829,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CarrotPremium_6.1.3/CarrotPremium_6.1.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"GeniePro_7.1.2\",\n      \"bundleIdentifier\": \"co.appnation.geniechat\",\n      \"developerName\": \"GeniePro_7.1.2 x CyPwn\",\n      \"version\": \"7.1.2\",\n      \"versionDate\": \"2024-10-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/GeniePro_7.1.2.ipa\",\n      \"localizedDescription\": \"Genie Al Chat Pro crack by Blatant\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/GeniePro_7.1.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 60156805,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/GeniePro_7.1.2/GeniePro_7.1.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"DuolingoMax_7.37.1\",\n      \"bundleIdentifier\": \"com.duolingo.DuolingoMobile\",\n      \"developerName\": \"DuolingoMax_7.37.1 x CyPwn\",\n      \"version\": \"7.37.1\",\n      \"versionDate\": \"2024-09-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DuolingoMax_7.37.1.ipa\",\n      \"localizedDescription\": \"Duolingo Max unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DuolingoMax_7.37.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 111914516,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/DuolingoMax_7.37.1/DuolingoMax_7.37.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Alook_Browser_20.1\",\n      \"bundleIdentifier\": \"com.ld.TakeBrowser\",\n      \"developerName\": \"Alook_Browser_20.1 x CyPwn\",\n      \"version\": \"20.1\",\n      \"versionDate\": \"2024-08-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Alook_Browser_20.1.ipa\",\n      \"localizedDescription\": \"Ayy look, a browser!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Alook_Browser_20.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 12016680,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Alook_Browser_20.1/Alook_Browser_20.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"WallcraftPro_3.19\",\n      \"bundleIdentifier\": \"com.wallpaperscraft.wallpapers\",\n      \"developerName\": \"WallcraftPro_3.19 x CyPwn\",\n      \"version\": \"3.19\",\n      \"versionDate\": \"2024-08-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WallcraftPro_3.19.ipa\",\n      \"localizedDescription\": \"Wallcraft Wallpapers Pro unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WallcraftPro_3.19.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 69698846,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/WallcraftPro_3.19/WallcraftPro_3.19-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Phantom_VPN_3.9.6_PhantomReset\",\n      \"bundleIdentifier\": \"com.avira.vpn\",\n      \"developerName\": \"Phantom_VPN_3.9.6_PhantomReset x CyPwn\",\n      \"version\": \"3.9.6\",\n      \"versionDate\": \"2024-08-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Phantom_VPN_3.9.6_PhantomReset.ipa\",\n      \"localizedDescription\": \"Phantom VPN with PhantomReset\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Phantom_VPN_3.9.6_PhantomReset.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 29213327,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Phantom_VPN_3.9.6_PhantomReset/Phantom_VPN_3.9.6_PhantomReset-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VlogNow_1.82.1_Cracked\",\n      \"bundleIdentifier\": \"com.frontrow.vlog\",\n      \"developerName\": \"VlogNow_1.82.1_Cracked x CyPwn\",\n      \"version\": \"1.82.1\",\n      \"versionDate\": \"2024-08-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VlogNow_1.82.1_Cracked.ipa\",\n      \"localizedDescription\": \"VlogNow_1.82.1_Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VlogNow_1.82.1_Cracked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 239809331,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VlogNow_1.82.1_Cracked/VlogNow_1.82.1_Cracked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Picsart_25.5.1_Cracked\",\n      \"bundleIdentifier\": \"com.picsart.studio\",\n      \"developerName\": \"Picsart_25.5.1_Cracked x CyPwn\",\n      \"version\": \"25.5.1\",\n      \"versionDate\": \"2024-08-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Picsart_25.5.1_Cracked.ipa\",\n      \"localizedDescription\": \"Picsart_25.5.1_Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsart_25.5.1_Cracked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 104417198,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picsart_25.5.1_Cracked/Picsart_25.5.1_Cracked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CapCut_12.0_Cracked\",\n      \"bundleIdentifier\": \"com.lemon.lvoverseas\",\n      \"developerName\": \"CapCut_12.0_Cracked x CyPwn\",\n      \"version\": \"12.0\",\n      \"versionDate\": \"2024-08-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CapCut_12.0_Cracked.ipa\",\n      \"localizedDescription\": \"CapCut_12.0_Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CapCut_12.0_Cracked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 136870625,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CapCut_12.0_Cracked/CapCut_12.0_Cracked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"HelloWeatherVIP_3.13.6\",\n      \"bundleIdentifier\": \"hello-weather-app\",\n      \"developerName\": \"HelloWeatherVIP_3.13.6 x CyPwn\",\n      \"version\": \"3.13.15\",\n      \"versionDate\": \"2024-07-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HelloWeatherVIP_3.13.6.ipa\",\n      \"localizedDescription\": \"HelloWeather VIP Lifetime by Sultan\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HelloWeatherVIP_3.13.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 10297016,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/HelloWeatherVIP_3.13.6/HelloWeatherVIP_3.13.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VidList_1.2\",\n      \"bundleIdentifier\": \"com.vh.vhub\",\n      \"developerName\": \"VidList_1.2 x CyPwn\",\n      \"version\": \"1.2\",\n      \"versionDate\": \"2024-07-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VidList_1.2.ipa\",\n      \"localizedDescription\": \"NSFW\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_1.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 20006830,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VidList_1.2/VidList_1.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"AIChatSmithPremium-7.0.0\",\n      \"bundleIdentifier\": \"co.vulcanlabs.moodtracker\",\n      \"developerName\": \"AIChatSmithPremium-7.0.0 x CyPwn\",\n      \"version\": \"7.0.0\",\n      \"versionDate\": \"2024-07-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AIChatSmithPremium-7.0.0.ipa\",\n      \"localizedDescription\": \"Premium OpenAI GPT-4o app!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AIChatSmithPremium-7.0.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 74941726,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/AIChatSmithPremium-7.0.0/AIChatSmithPremium-7.0.0-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/AIChatSmithPremium-7.0.0/AIChatSmithPremium-7.0.0.jpeg\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/AIChatSmithPremium-7.0.0/AIChatSmithPremium-7.0.0_0.jpeg\"\n      ]\n    },\n    {\n      \"name\": \"ESign_5.0_noLogs_V1.1\",\n      \"bundleIdentifier\": \"nologs.xyz.yyyue.esign\",\n      \"developerName\": \"ESign_5.0_noLogs_V1.1 x CyPwn\",\n      \"version\": \"5.0.0\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ESign_5.0_noLogs_V1.1.ipa\",\n      \"localizedDescription\": \"IPA signer, tweak injector\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ESign_5.0_noLogs_V1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8042577,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ESign_5.0_noLogs_V1.1/ESign_5.0_noLogs_V1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Haaretz_Heb_Unlocked\",\n      \"bundleIdentifier\": \"com.haaretz.hebrew.iphone\",\n      \"developerName\": \"Haaretz_Heb_Unlocked x CyPwn\",\n      \"version\": \"5.2.176\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Haaretz_Heb_Unlocked.ipa\",\n      \"localizedDescription\": \"The Haaretz iPhone app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Heb_Unlocked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 30565990,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Haaretz_Heb_Unlocked/Haaretz_Heb_Unlocked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Haaretz_Eng_Unlocked\",\n      \"bundleIdentifier\": \"com.haaretz.english.iphone\",\n      \"developerName\": \"Haaretz_Eng_Unlocked x CyPwn\",\n      \"version\": \"5.60\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Haaretz_Eng_Unlocked.ipa\",\n      \"localizedDescription\": \"The Haaretz iPhone app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Eng_Unlocked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17836277,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Haaretz_Eng_Unlocked/Haaretz_Eng_Unlocked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"TheMarker_Heb_Unlocked\",\n      \"bundleIdentifier\": \"com.haaretz.TheMarker\",\n      \"developerName\": \"TheMarker_Heb_Unlocked x CyPwn\",\n      \"version\": \"4.2.52\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/TheMarker_Heb_Unlocked.ipa\",\n      \"localizedDescription\": \"Hebrew-language daily business news\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/TheMarker_Heb_Unlocked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17490247,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/TheMarker_Heb_Unlocked/TheMarker_Heb_Unlocked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Spark_3.9.12\",\n      \"bundleIdentifier\": \"com.readdle.smartemail\",\n      \"developerName\": \"Spark_3.9.12 x CyPwn\",\n      \"version\": \"3.9.12\",\n      \"versionDate\": \"2024-07-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Spark_3.9.12.ipa\",\n      \"localizedDescription\": \"Injected with premium!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.12.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 189079224,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spark_3.9.12/Spark_3.9.12-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Climax\",\n      \"bundleIdentifier\": \"dev.objcmsgsend.Climax\",\n      \"developerName\": \"Climax x CyPwn\",\n      \"version\": \"2.1\",\n      \"versionDate\": \"2024-07-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Climax.ipa\",\n      \"localizedDescription\": \"A long awaited rewrite for Climax\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Climax.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 964689,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax_0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax_1.png\"\n      ]\n    },\n    {\n      \"name\": \"callrecorder\",\n      \"bundleIdentifier\": \"com.zuev.recorder.Z9HHLMN695\",\n      \"developerName\": \"callrecorder x CyPwn\",\n      \"version\": \"2.93\",\n      \"versionDate\": \"2024-07-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/callrecorder.ipa\",\n      \"localizedDescription\": \"Call Recorder with Premium hacked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/callrecorder.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 111505571,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/callrecorder/callrecorder-0.png\"\n      ]\n    },\n    {\n      \"name\": \"trailforks_hacked\",\n      \"bundleIdentifier\": \"com.pinkbike.trailforks\",\n      \"developerName\": \"trailforks_hacked x CyPwn\",\n      \"version\": \"2024.2.6\",\n      \"versionDate\": \"2024-07-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/trailforks_hacked.ipa\",\n      \"localizedDescription\": \"Trailforks: Offline Bike Maps\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/trailforks_hacked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 101732843,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/trailforks_hacked/trailforks_hacked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CAPerfHUDSwift\",\n      \"bundleIdentifier\": \"ca.bomberfish.CAPerfHudSwift\",\n      \"developerName\": \"CAPerfHUDSwift x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2024-06-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CAPerfHUDSwift.ipa\",\n      \"localizedDescription\": \"CAPerfHUD alternative.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CAPerfHUDSwift.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1059061,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CAPerfHUDSwift/CAPerfHUDSwift-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Speedtest_VPN_Premium_5.4.0\",\n      \"bundleIdentifier\": \"com.ookla.speedtest\",\n      \"developerName\": \"Speedtest_VPN_Premium_5.4.0 x CyPwn\",\n      \"version\": \"5.4.0\",\n      \"versionDate\": \"2024-06-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Speedtest_VPN_Premium_5.4.0.ipa\",\n      \"localizedDescription\": \"Premium unlimited VPN\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Speedtest_VPN_Premium_5.4.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 55144611,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Speedtest_VPN_Premium_5.4.0/Speedtest_VPN_Premium_5.4.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Egern-1.19.1\",\n      \"bundleIdentifier\": \"com.bytecrossing.Egern\",\n      \"developerName\": \"Egern-1.19.1 x CyPwn\",\n      \"version\": \"1.19.1\",\n      \"versionDate\": \"2024-05-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Egern-1.19.1.ipa\",\n      \"localizedDescription\": \"Powerful networking tool.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Egern-1.19.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 16777216,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Egern-1.19.1/Egern-1.19.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Mimo_6.48.0_Premium\",\n      \"bundleIdentifier\": \"com.getmimo.mimo\",\n      \"developerName\": \"Mimo_6.48.0_Premium x CyPwn\",\n      \"version\": \"6.48.0\",\n      \"versionDate\": \"2024-05-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Mimo_6.48.0_Premium.ipa\",\n      \"localizedDescription\": \"Injected with premium!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Mimo_6.48.0_Premium.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 35064381,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Mimo_6.48.0_Premium/Mimo_6.48.0_Premium-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Discord_228.1_Pyoncord\",\n      \"bundleIdentifier\": \"com.hammerandchisel.discord\",\n      \"developerName\": \"Discord_228.1_Pyoncord x CyPwn\",\n      \"version\": \"228.1\",\n      \"versionDate\": \"2024-05-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Discord_228.1_Pyoncord_DiscordNoTrack.ipa\",\n      \"localizedDescription\": \"Discord mod.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Discord_228.1_Pyoncord_DiscordNoTrack.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 99425976,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Discord_228.1_Pyoncord/Discord_228.1_Pyoncord_DiscordNoTrack-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Nicegram_1.6.2\",\n      \"bundleIdentifier\": \"app.nicegram\",\n      \"developerName\": \"Nicegram_1.6.2 x CyPwn\",\n      \"version\": \"1.6.2\",\n      \"versionDate\": \"2024-05-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Nicegram_1.6.2.ipa\",\n      \"localizedDescription\": \"Nicegram Premium for free!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Nicegram_1.6.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 93228892,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Nicegram_1.6.2/Nicegram_1.6.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Gopeed_1.5.6\",\n      \"bundleIdentifier\": \"com.gopeed\",\n      \"developerName\": \"Gopeed_1.5.6 x CyPwn\",\n      \"version\": \"1.5.6\",\n      \"versionDate\": \"2024-04-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Gopeed_1.5.6.ipa\",\n      \"localizedDescription\": \"A modern download manager.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.5.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 86717235,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Gopeed_1.5.6/Gopeed_1.5.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"LiveContainer_2.0\",\n      \"bundleIdentifier\": \"com.kdt.livecontainer\",\n      \"developerName\": \"LiveContainer_2.0 x CyPwn\",\n      \"version\": \"2.0\",\n      \"versionDate\": \"2024-04-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LiveContainer_2.0.ipa\",\n      \"localizedDescription\": \"Run apps without installing them!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveContainer_2.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 103362,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/LiveContainer_2.0/LiveContainer_2.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"BundleReader\",\n      \"bundleIdentifier\": \"com.iRayanKhan.BundleReader\",\n      \"developerName\": \"BundleReader x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2024-04-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/BundleReader.ipa\",\n      \"localizedDescription\": \"See ipa contents\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/BundleReader.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 71536,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/BundleReader/BundleReader-0.png\"\n      ]\n    },\n    {\n      \"name\": \"APNS_Demo\",\n      \"bundleIdentifier\": \"com.RayanKhan.APNS-Demo\",\n      \"developerName\": \"APNS_Demo x CyPwn\",\n      \"version\": \"1.00\",\n      \"versionDate\": \"2024-04-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/APNS_Demo.ipa\",\n      \"localizedDescription\": \"SwiftUI app to test notifications.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/APNS_Demo.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 77445,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/APNS_Demo/APNS_Demo-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Flightradar24_9.17.0\",\n      \"bundleIdentifier\": \"se.resenatverket.FlightRadar24-Free\",\n      \"developerName\": \"Flightradar24_9.17.0 x CyPwn\",\n      \"version\": \"9.17.0\",\n      \"versionDate\": \"2024-02-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Flightradar24_9.17.0.ipa\",\n      \"localizedDescription\": \"FlightRadar24 Gold Subscription\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Flightradar24_9.17.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 113088921,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0.jpeg\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0_0.jpeg\"\n      ]\n    },\n    {\n      \"name\": \"GameSeagull\",\n      \"bundleIdentifier\": \"com.gamerdelights.gamepigeon\",\n      \"developerName\": \"GameSeagull x CyPwn\",\n      \"version\": \"2.0.12\",\n      \"versionDate\": \"2024-01-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/GameSeagull.ipa\",\n      \"localizedDescription\": \"GamePigeon Hacks!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/GameSeagull.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 90271907,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/GameSeagull/GameSeagull-0.png\"\n      ]\n    },\n    {\n      \"name\": \"ToonSquid_1.10.1_ipa.store\",\n      \"bundleIdentifier\": \"com.keiwando.toonsquid\",\n      \"developerName\": \"ToonSquid_1.10.1_ipa.store x CyPwn\",\n      \"version\": \"1.10.1\",\n      \"versionDate\": \"2024-01-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ToonSquid_1.10.1_ipa.store.ipa\",\n      \"localizedDescription\": \"ToonSquid\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ToonSquid_1.10.1_ipa.store.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 27640463,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ToonSquid_1.10.1_ipa.store/ToonSquid_1.10.1_ipa.store-0.png\"\n      ]\n    },\n    {\n      \"name\": \"WazePlus_4.100.0\",\n      \"bundleIdentifier\": \"com.waze.iphone\",\n      \"developerName\": \"WazePlus_4.100.0 x CyPwn\",\n      \"version\": \"4.100.0\",\n      \"versionDate\": \"2023-12-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WazePlus_4.100.0.ipa\",\n      \"localizedDescription\": \"A better way to Waze\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WazePlus_4.100.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 58290339,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/WazePlus_4.100.0/WazePlus_4.100.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"NFC_Tools_2.27\",\n      \"bundleIdentifier\": \"com.wakdev.wdnfc\",\n      \"developerName\": \"NFC_Tools_2.27 x CyPwn\",\n      \"version\": \"2.27\",\n      \"versionDate\": \"2023-12-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/NFC_Tools_2.27.ipa\",\n      \"localizedDescription\": \"Free Pro (Satella)\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/NFC_Tools_2.27.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3030384,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/NFC_Tools_2.27/NFC_Tools_2.27-0.png\"\n      ]\n    },\n    {\n      \"name\": \"EzFN-10.0\",\n      \"bundleIdentifier\": \"5f796ef4752841bdb647c1a4a0783fe9\",\n      \"developerName\": \"EzFN-10.0 x CyPwn\",\n      \"version\": \"10.00.0\",\n      \"versionDate\": \"2023-11-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/EzFN-10.0.ipa\",\n      \"localizedDescription\": \"EZFN Season X leak\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/EzFN-10.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 76514590,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/EzFN-10.0/EzFN-10.0-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/EzFN-10.0/EzFN-10.0-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/EzFN-10.0/EzFN-10.0-2.png\"\n      ]\n    },\n    {\n      \"name\": \"CryptoMiner\",\n      \"bundleIdentifier\": \"com.mysterytag.cryptominer\",\n      \"developerName\": \"CryptoMiner x CyPwn\",\n      \"version\": \"0.5\",\n      \"versionDate\": \"2023-10-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/com.mysterytag.cryptominer.ipa\",\n      \"localizedDescription\": \"Free iAP - SatellaJailed\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/com.mysterytag.cryptominer.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 68975329,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Amen_Break_Generator\",\n      \"bundleIdentifier\": \"com.jacekdojwa.abg\",\n      \"developerName\": \"Amen_Break_Generator x CyPwn\",\n      \"version\": \"2.0.6\",\n      \"versionDate\": \"2023-10-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Amen_Break_Generator-2.0.6.ipa\",\n      \"localizedDescription\": \"drum loops sampled and remixed\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Amen_Break_Generator-2.0.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14281605,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"playSub_2023.1.1\",\n      \"bundleIdentifier\": \"dk.mbh.play-Sub\",\n      \"developerName\": \"playSub_2023.1.1 x CyPwn\",\n      \"version\": \"2023.1.1\",\n      \"versionDate\": \"2023-09-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/playSub_2023.1.1.ipa\",\n      \"localizedDescription\": \"Delightful Subsonic Music Client\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/playSub_2023.1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 15770583,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/playSub_2023.1.1/playSub_2023.1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Picasso_v2_Beta_5\",\n      \"bundleIdentifier\": \"net.sourceloc.Picasso\",\n      \"developerName\": \"Picasso_v2_Beta_5 x CyPwn\",\n      \"version\": \"2.0\",\n      \"versionDate\": \"2023-08-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Picasso_v2_Beta_5.ipa\",\n      \"localizedDescription\": \"Picasso v2 cracked for MDC users.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Picasso_v2_Beta_5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3795845,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-4.png\"\n      ]\n    },\n    {\n      \"name\": \"PropCashapp\",\n      \"bundleIdentifier\": \"Cash-App-by-ivglitched\",\n      \"developerName\": \"PropCashapp x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2023-08-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PropCashapp.ipa\",\n      \"localizedDescription\": \"Fake CashApp for prop use\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PropCashapp.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1698693,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PropCashapp/PropCashapp-0.png\"\n      ]\n    },\n    {\n      \"name\": \"ProCamera\",\n      \"bundleIdentifier\": \"com.cocologics.ProCamera\",\n      \"developerName\": \"ProCamera x CyPwn\",\n      \"version\": \"16.3\",\n      \"versionDate\": \"2023-07-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ProCamera.ipa\",\n      \"localizedDescription\": \"ProCamera\u2026 fo free!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCamera.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 72582430,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-3.png\"\n      ]\n    },\n    {\n      \"name\": \"Suffuse3\",\n      \"bundleIdentifier\": \"com.firecore.infuse\",\n      \"developerName\": \"Suffuse3 x CyPwn\",\n      \"version\": \"7.5.8\",\n      \"versionDate\": \"2023-07-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Suffuse3.ipa\",\n      \"localizedDescription\": \"Infuse 7 with Pro unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Suffuse3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 43432017,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Suffuse3/Suffuse3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Apollo_1.15.11+Artemis1.3\",\n      \"bundleIdentifier\": \"com.christianselig.Apollo\",\n      \"developerName\": \"Apollo_1.15.11+Artemis1.3 x CyPwn\",\n      \"version\": \"1.15.11\",\n      \"versionDate\": \"2023-07-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Apollo_1.15.11+Artemis1.3.ipa\",\n      \"localizedDescription\": \"Apollo aint dead\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Apollo_1.15.11+Artemis1.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 92589260,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Apollo_1.15.11+Artemis1.3/Apollo_1.15.11+Artemis1.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Dystopia\",\n      \"bundleIdentifier\": \"com.CarbonDev.Dystopia\",\n      \"developerName\": \"Dystopia x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2023-06-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Dystopia.ipa\",\n      \"localizedDescription\": \"Alternative to Apollo for Reddit\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14648606,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Dystopia/Dystopia-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Dystopia/Dystopia-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Dystopia/Dystopia-2.png\"\n      ]\n    },\n    {\n      \"name\": \"YTMusicUltimate_v1.4.1_YTM6.03.1\",\n      \"bundleIdentifier\": \"com.google.ios.youtubemusic\",\n      \"developerName\": \"YTMusicUltimate_v1.4.1_YTM6.03.1 x CyPwn\",\n      \"version\": \"6.03.1\",\n      \"versionDate\": \"2023-05-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/YTMusicUltimate_v1.4.1_YTM6.03.1.ipa\",\n      \"localizedDescription\": \"YTMusicUltimate 1.4.1 by Ginsu. Premium features unlocked.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/YTMusicUltimate_v1.4.1_YTM6.03.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 57220792,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/YTMusicUltimate_v1.4.1_YTM6.03.1/YTMusicUltimate_v1.4.1_YTM6.03.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"RaceControlF1\",\n      \"bundleIdentifier\": \"cypwn.RaceControlF1.1.0\",\n      \"developerName\": \"RaceControlF1 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2023-04-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/RaceControlF1.ipa\",\n      \"localizedDescription\": \"Comprehensive F1 App\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/RaceControlF1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5253365,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"AppDB_1.1.5\",\n      \"bundleIdentifier\": \"cypwn.AppDB_1.1.5.1.1.5\",\n      \"developerName\": \"AppDB_1.1.5 x CyPwn\",\n      \"version\": \"1.1.5\",\n      \"versionDate\": \"2023-04-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AppDB_1.1.5.ipa\",\n      \"localizedDescription\": \"A fully-featured iOS client for appdb.to written in Swift 5.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AppDB_1.1.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 24410849,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PeriodicTablePRO_1.124\",\n      \"bundleIdentifier\": \"cypwn.PeriodicTablePRO_1.124.1.124\",\n      \"developerName\": \"PeriodicTablePRO_1.124 x CyPwn\",\n      \"version\": \"1.124\",\n      \"versionDate\": \"2023-03-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PeriodicTablePRO_1.124.ipa\",\n      \"localizedDescription\": \"Chemistry in your phone!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PeriodicTablePRO_1.124.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 15225323,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-4.png\"\n      ]\n    },\n    {\n      \"name\": \"Whitelist\",\n      \"bundleIdentifier\": \"cypwn.Whitelist.1.1.0\",\n      \"developerName\": \"Whitelist x CyPwn\",\n      \"version\": \"1.1.0\",\n      \"versionDate\": \"2023-03-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Whitelist.ipa\",\n      \"localizedDescription\": \"Jailed iOS app to un-blacklist all enterprise-signed apps\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Whitelist.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 599193,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"DramaFlix_1.1.0\",\n      \"bundleIdentifier\": \"cypwn.DramaFlix_1.1.0.1.1.0\",\n      \"developerName\": \"DramaFlix_1.1.0 x CyPwn\",\n      \"version\": \"1.1.0\",\n      \"versionDate\": \"2023-03-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DramaFlix_1.1.0.ipa\",\n      \"localizedDescription\": \"Movie app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DramaFlix_1.1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 11817451,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/DramaFlix_1.1.0/DramaFlix_1.1.0.ipa106.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/DramaFlix_1.1.0/DramaFlix_1.1.0.ipa310.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/DramaFlix_1.1.0/DramaFlix_1.1.0.ipa655.png\"\n      ]\n    },\n    {\n      \"name\": \"Cowabunga10\",\n      \"bundleIdentifier\": \"cypwn.Cowabunga10.10.0.0\",\n      \"developerName\": \"Cowabunga10 x CyPwn\",\n      \"version\": \"10.0.0\",\n      \"versionDate\": \"2023-03-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Cowabunga10.ipa\",\n      \"localizedDescription\": \"OS 14.0-15.7.1 & 16.0-16.1.2 MacDirtyCow ToolBox\\r\\n\\r\\n**Latest release as of 3/23**\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Cowabunga10.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 21558722,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Cowabunga10/Cowabunga10-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Cowabunga10/Cowabunga10-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Cowabunga10/Cowabunga10-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Dead_Cells_plus_v3.2.2\",\n      \"bundleIdentifier\": \"cypwn.Dead_Cells_plus_v3.2.2.3.2.2\",\n      \"developerName\": \"Dead_Cells_plus_v3.2.2 x CyPwn\",\n      \"version\": \"3.2.2\",\n      \"versionDate\": \"2023-03-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Dead_Cells_plus_v3.2.2.ipa\",\n      \"localizedDescription\": \"Death is not the end..\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Dead_Cells_plus_v3.2.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 937626173,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PicsArtGold_21.8.6\",\n      \"bundleIdentifier\": \"cypwn.PicsArtGold_21.8.6.21.8.6\",\n      \"developerName\": \"PicsArtGold_21.8.6 x CyPwn\",\n      \"version\": \"21.8.6\",\n      \"versionDate\": \"2023-03-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PicsArtGold_21.8.6.ipa\",\n      \"localizedDescription\": \"Picsart Gold Subscription\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PicsArtGold_21.8.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 85238743,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PelletDodge\",\n      \"bundleIdentifier\": \"cypwn.PelletDodge.b0.8.5\",\n      \"developerName\": \"PelletDodge x CyPwn\",\n      \"version\": \"b0.8.5\",\n      \"versionDate\": \"2023-02-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PelletDodge.ipa\",\n      \"localizedDescription\": \"This version is obsolete.\\nPlease use the TestFlight version:\\nhttps://testflight.apple.com/join/NmEZZ8xp\\nPellet Dodge is a simple, yet challenging game where you must dash through over 40 levels to save your friend, who\u2019s being used as power for something more sinister. Developed by MysticalDevelopers, one of our fellow jailbreaker\u2019s (Evil Monkey) very own son, Lag!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PelletDodge.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 301570457,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-3.png\"\n      ]\n    },\n    {\n      \"name\": \"FacebookNoAds_401.0\",\n      \"bundleIdentifier\": \"cypwn.FacebookNoAds_401.0.401.0\",\n      \"developerName\": \"FacebookNoAds_401.0 x CyPwn\",\n      \"version\": \"401.0\",\n      \"versionDate\": \"2023-02-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FacebookNoAds_401.0.ipa\",\n      \"localizedDescription\": \"Free & Open Source Tweak for Facebook https:// github.com/haoict/facebook-no-ads/releases. Features:- Remove Ads - Download Video (long press to download) - Download Story - Download Profile Picture - Disable Story Seen - Hide Composer on News Feed - Hide Stories on News Feed\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FacebookNoAds_401.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 132760207,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"DarkCloud_6.16.1\",\n      \"bundleIdentifier\": \"cypwn.DarkCloud_6.16.1.6.16.1\",\n      \"developerName\": \"DarkCloud_6.16.1 x CyPwn\",\n      \"version\": \"6.16.1\",\n      \"versionDate\": \"2023-02-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DarkCloud_6.16.1.ipa\",\n      \"localizedDescription\": \"SoundCloud w/ DarkCloud by CodeyMoore\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DarkCloud_6.16.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 56025415,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"WDBFontOverwrite\",\n      \"bundleIdentifier\": \"cypwn.WDBFontOverwrite.1.10.7-1\",\n      \"developerName\": \"WDBFontOverwrite x CyPwn\",\n      \"version\": \"1.10.7-1\",\n      \"versionDate\": \"2023-02-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WDBFontOverwrite.ipa\",\n      \"localizedDescription\": \"Proof-of-concept app to overwrite fonts on iOS 16.1.2 and below using CVE-2022-46689.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WDBFontOverwrite.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5347737,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/WDBFontOverwrite/WDBFontOverwrite-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/WDBFontOverwrite/WDBFontOverwrite-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/WDBFontOverwrite/WDBFontOverwrite-2.png\"\n      ]\n    },\n    {\n      \"name\": \"KillMyOTA-1.1\",\n      \"bundleIdentifier\": \"cypwn.KillMyOTA-1.1.1.1\",\n      \"developerName\": \"KillMyOTA-1.1 x CyPwn\",\n      \"version\": \"1.1\",\n      \"versionDate\": \"2023-01-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/KillMyOTA-1.1.ipa\",\n      \"localizedDescription\": \"OTA Killer for iOS 15.0 - 16.1.2.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/KillMyOTA-1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 339435,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/KillMyOTA-1.1/KillMyOTA-1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FilzaEscaped16\",\n      \"bundleIdentifier\": \"cypwn.FilzaEscaped16.3.7\",\n      \"developerName\": \"FilzaEscaped16 x CyPwn\",\n      \"version\": \"3.7\",\n      \"versionDate\": \"2023-01-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FilzaEscaped16.ipa\",\n      \"localizedDescription\": \"FilzaEscaped16\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FilzaEscaped16.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14648606,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SantanderEscaped-0.3\",\n      \"bundleIdentifier\": \"cypwn.SantanderEscaped-0.3.1.0\",\n      \"developerName\": \"SantanderEscaped-0.3 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2023-01-29\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SantanderEscaped-0.3.ipa\",\n      \"localizedDescription\": \"A new, enhanced File Manager for iOS devices with the tccd exploit for full file access.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SantanderEscaped-0.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 4791992,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"BeReal_0.31.0\",\n      \"bundleIdentifier\": \"cypwn.BeReal_0.31.0.0.31.0\",\n      \"developerName\": \"BeReal_0.31.0 x CyPwn\",\n      \"version\": \"0.31.0\",\n      \"versionDate\": \"2023-01-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/BeReal_0.31.0.ipa\",\n      \"localizedDescription\": \"BeRealUnBlur\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/BeReal_0.31.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 21904752,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Ally_2.0.23\",\n      \"bundleIdentifier\": \"cypwn.Ally_2.0.23.2.0.23\",\n      \"developerName\": \"Ally_2.0.23 x CyPwn\",\n      \"version\": \"2.0.23\",\n      \"versionDate\": \"2023-01-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Ally_2.0.23.ipa\",\n      \"localizedDescription\": \"Amiibo diary. Amiibo maker.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Ally_2.0.23.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9510584,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Keka_1.0.1\",\n      \"bundleIdentifier\": \"cypwn.Keka_1.0.1.1.0.1\",\n      \"developerName\": \"Keka_1.0.1 x CyPwn\",\n      \"version\": \"1.0.1\",\n      \"versionDate\": \"2023-01-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Keka_1.0.1.ipa\",\n      \"localizedDescription\": \"The file archiver\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Keka_1.0.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 13505658,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"McClockface.1.5.1\",\n      \"bundleIdentifier\": \"cypwn.McClockface.1.5.1.1.5.1\",\n      \"developerName\": \"McClockface.1.5.1 x CyPwn\",\n      \"version\": \"1.5.1\",\n      \"versionDate\": \"2023-01-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/McClockface.1.5.1.ipa\",\n      \"localizedDescription\": \"Add beautiful timepiece widgets to your home screen with McClockface.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/McClockface.1.5.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5012193,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/McClockface.1.5.1/McClockface.1.5.1-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/McClockface.1.5.1/McClockface.1.5.1-1.png\"\n      ]\n    },\n    {\n      \"name\": \"Naiad\",\n      \"bundleIdentifier\": \"cypwn.Naiad.1.0\",\n      \"developerName\": \"Naiad x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-12-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Naiad.ipa\",\n      \"localizedDescription\": \"Offline, high-resolution AI image generation\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Naiad.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17249075,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SharkMessenger_388.0\",\n      \"bundleIdentifier\": \"cypwn.SharkMessenger_388.0.388.0\",\n      \"developerName\": \"SharkMessenger_388.0 x CyPwn\",\n      \"version\": \"388.0\",\n      \"versionDate\": \"2022-11-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SharkMessenger_388.0.ipa\",\n      \"localizedDescription\": \"Shark 2.2.1 + Facebook Messenger 388.0\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SharkMessenger_388.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 61865984,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Sonic_3.5\",\n      \"bundleIdentifier\": \"cypwn.Sonic_3.5.3.5\",\n      \"developerName\": \"Sonic_3.5 x CyPwn\",\n      \"version\": \"3.5\",\n      \"versionDate\": \"2022-11-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Sonic_3.5.ipa\",\n      \"localizedDescription\": \"Sonic Tone Generator cracked. Eject water from your speakers and more!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Sonic_3.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 20950548,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Summon_1.8_Satella\",\n      \"bundleIdentifier\": \"cypwn.Summon_1.8_Satella.1.8\",\n      \"developerName\": \"Summon_1.8_Satella x CyPwn\",\n      \"version\": \"1.8\",\n      \"versionDate\": \"2022-11-27\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Summon_1.8_Satella.ipa\",\n      \"localizedDescription\": \"Open Links in Apps! An ultra-efficient Safari Extension that helps you opens sites in app. Choose between over 200+ apps to open from Safari. Use Satella to purchase unlimited with \u201cClick and Cancel\u201d method.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Summon_1.8_Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 607805,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Vinegar_2.4.2\",\n      \"bundleIdentifier\": \"cypwn.Vinegar_2.4.2.2.4.2\",\n      \"developerName\": \"Vinegar_2.4.2 x CyPwn\",\n      \"version\": \"2.4.2\",\n      \"versionDate\": \"2022-11-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Vinegar_2.4.2.ipa\",\n      \"localizedDescription\": \"Vinegar is a Safari extension that replaces the YouTube player with a minimal HTML video tag. It removes ads, restores picture-in-picture, and keeps videos playing in the background.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Vinegar_2.4.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 215521,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"HeadsUp_5.1.41_Satella\",\n      \"bundleIdentifier\": \"cypwn.HeadsUp_5.1.41_Satella.5.1.41\",\n      \"developerName\": \"HeadsUp_5.1.41_Satella x CyPwn\",\n      \"version\": \"5.1.41\",\n      \"versionDate\": \"2022-11-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HeadsUp_5.1.41_Satella.ipa\",\n      \"localizedDescription\": \"Satella injected for free in-app purchases. Tip: Disable receipts in satella settings then buy card packs. App may crash after clicking to buy stuff but they will appear on app restart. Turn off the Satella Enable switch before playing games to avoid further crashing.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HeadsUp_5.1.41_Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 187191787,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Pandolife1.1a_2211.1\",\n      \"bundleIdentifier\": \"cypwn.Pandolife1.1a_2211.1.2211.1\",\n      \"developerName\": \"Pandolife1.1a_2211.1 x CyPwn\",\n      \"version\": \"2211.1\",\n      \"versionDate\": \"2022-11-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Pandolife1.1a_2211.1.ipa\",\n      \"localizedDescription\": \"Pandora v2211.1 with Pandolife v1.1a by Julio Verne.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Pandolife1.1a_2211.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 84148224,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"StarVPN_3.6.0\",\n      \"bundleIdentifier\": \"cypwn.StarVPN_3.6.0.3.6.0\",\n      \"developerName\": \"StarVPN_3.6.0 x CyPwn\",\n      \"version\": \"3.6.0\",\n      \"versionDate\": \"2022-11-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/StarVPN_3.6.0.ipa\",\n      \"localizedDescription\": \"Premium unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/StarVPN_3.6.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6501171,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"RadarbotVIP_8.7.1\",\n      \"bundleIdentifier\": \"cypwn.RadarbotVIP_8.7.1.8.7.1\",\n      \"developerName\": \"RadarbotVIP_8.7.1 x CyPwn\",\n      \"version\": \"8.7.1\",\n      \"versionDate\": \"2022-11-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/RadarbotVIP_8.7.1.ipa\",\n      \"localizedDescription\": \"VIP unlocked. Cracked by @Sopranox\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/RadarbotVIP_8.7.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 71355596,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"VidList_0.5.1\",\n      \"bundleIdentifier\": \"cypwn.VidList_0.5.1.0.5.1\",\n      \"developerName\": \"VidList_0.5.1 x CyPwn\",\n      \"version\": \"0.5.1\",\n      \"versionDate\": \"2022-11-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VidList_0.5.1.ipa\",\n      \"localizedDescription\": \"NSFW\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_0.5.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5326766,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"cl1m4x\",\n      \"bundleIdentifier\": \"cypwn.cl1m4x.1.3\",\n      \"developerName\": \"cl1m4x x CyPwn\",\n      \"version\": \"1.3\",\n      \"versionDate\": \"2022-11-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/cl1m4x.ipa\",\n      \"localizedDescription\": \"v1.3 by Kanji - Eat some c0rn. Blow your h0rn. Watch some \u2026\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/cl1m4x.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17343447,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ChromaHue_2.1.0\",\n      \"bundleIdentifier\": \"cypwn.ChromaHue_2.1.0.2.1.0\",\n      \"developerName\": \"ChromaHue_2.1.0 x CyPwn\",\n      \"version\": \"2.1.0\",\n      \"versionDate\": \"2022-11-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ChromaHue_2.1.0.ipa\",\n      \"localizedDescription\": \"Create clean wallpapers w/ gradients and edge outlines.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ChromaHue_2.1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2936012,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Ulysses_27.3k\",\n      \"bundleIdentifier\": \"cypwn.Ulysses_27.3k.27.3\",\n      \"developerName\": \"Ulysses_27.3k x CyPwn\",\n      \"version\": \"27.3\",\n      \"versionDate\": \"2022-11-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Ulysses_27.3k.ipa\",\n      \"localizedDescription\": \"Ulysses writing app with the subscription cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Ulysses_27.3k.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 21359493,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PostBox-Pocket\",\n      \"bundleIdentifier\": \"cypwn.PostBox-Pocket.0.8.1\",\n      \"developerName\": \"PostBox-Pocket x CyPwn\",\n      \"version\": \"0.8.1\",\n      \"versionDate\": \"2022-11-02\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PostBox-Pocket.ipa\",\n      \"localizedDescription\": \"v0.8.1-7. AppStore release! Search cydia repos and download deb files. Extract themes for jailed device theming. Not used for installing debs.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-Pocket.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6113198,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SuperMario64_60FPS_1.2.1\",\n      \"bundleIdentifier\": \"cypwn.SuperMario64_60FPS_1.2.1.1.2.1\",\n      \"developerName\": \"SuperMario64_60FPS_1.2.1 x CyPwn\",\n      \"version\": \"1.2.1\",\n      \"versionDate\": \"2022-10-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SuperMario64_60FPS_1.2.1.ipa\",\n      \"localizedDescription\": \"Latest release v1.2.1 of Super Mario 64 port for iOS. 60FPS!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_60FPS_1.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9227468,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SuperMario64_30FPS_1.2.1\",\n      \"bundleIdentifier\": \"cypwn.SuperMario64_30FPS_1.2.1.1.2.1\",\n      \"developerName\": \"SuperMario64_30FPS_1.2.1 x CyPwn\",\n      \"version\": \"1.2.1\",\n      \"versionDate\": \"2022-10-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SuperMario64_30FPS_1.2.1.ipa\",\n      \"localizedDescription\": \"Latest release v1.2.1 of Super Mario 64 port for iOS. 30FPS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_30FPS_1.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8420065,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SuperMario64\",\n      \"bundleIdentifier\": \"cypwn.SuperMario64.1.0.0\",\n      \"developerName\": \"SuperMario64 x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2022-10-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SuperMario64.ipa\",\n      \"localizedDescription\": \"Original release v1.0.0 of Super Mario 64 port for iOS. 60FPS!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 31237079,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"FRLegends++\",\n      \"bundleIdentifier\": \"cypwn.FRLegends++.0.3.2\",\n      \"developerName\": \"FRLegends++ x CyPwn\",\n      \"version\": \"0.3.2\",\n      \"versionDate\": \"2022-10-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FRLegends++.ipa\",\n      \"localizedDescription\": \"FR Legends v0.3.2 - Unlimited money, coins, & livery layers. Requires free iOSgods login.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FRLegends++.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 100369694,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"WallpapersCentralPro_1.5.2\",\n      \"bundleIdentifier\": \"cypwn.WallpapersCentralPro_1.5.2.1.5.2\",\n      \"developerName\": \"WallpapersCentralPro_1.5.2 x CyPwn\",\n      \"version\": \"1.5.2\",\n      \"versionDate\": \"2022-09-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WallpapersCentralPro_1.5.2.ipa\",\n      \"localizedDescription\": \"Thousands of wallpapers at your fingertips. Pro features unlocked by clicking Buy on lifetime subscription, then Cancel.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WallpapersCentralPro_1.5.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 28206694,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"LiveWallpapersForMe_2.42.2\",\n      \"bundleIdentifier\": \"cypwn.LiveWallpapersForMe_2.42.2.2.42.2\",\n      \"developerName\": \"LiveWallpapersForMe_2.42.2 x CyPwn\",\n      \"version\": \"2.42.2\",\n      \"versionDate\": \"2022-09-27\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LiveWallpapersForMe_2.42.2.ipa\",\n      \"localizedDescription\": \"Premium unlocked. Cracked by @Sopranox\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveWallpapersForMe_2.42.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 127884328,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"YouCamPerfect_5.76.1\",\n      \"bundleIdentifier\": \"cypwn.YouCamPerfect_5.76.1.5.76.1\",\n      \"developerName\": \"YouCamPerfect_5.76.1 x CyPwn\",\n      \"version\": \"5.76.1\",\n      \"versionDate\": \"2022-09-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/YouCamPerfect_5.76.1.ipa\",\n      \"localizedDescription\": \"Premium unlocked. Cracked by @Sopranox\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/YouCamPerfect_5.76.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 131009085,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Star_Map_2.6_Satella\",\n      \"bundleIdentifier\": \"cypwn.Star_Map_2.6_Satella.2.6\",\n      \"developerName\": \"Star_Map_2.6_Satella x CyPwn\",\n      \"version\": \"2.6\",\n      \"versionDate\": \"2022-09-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Star_Map_2.6_Satella.ipa\",\n      \"localizedDescription\": \"StarMap with Satella Jailed injection. Unlock all pro features for free. Click buy then cancel when it asks for apple id confirmation.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Star_Map_2.6_Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 32830914,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"RefacePro_3.12.0\",\n      \"bundleIdentifier\": \"cypwn.RefacePro_3.12.0.3.12.0\",\n      \"developerName\": \"RefacePro_3.12.0 x CyPwn\",\n      \"version\": \"3.12.0\",\n      \"versionDate\": \"2022-09-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/RefacePro_3.12.0.ipa\",\n      \"localizedDescription\": \"Reface: Face Swap Videos. Pro unlocked.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/RefacePro_3.12.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 55375298,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"AppCake+\",\n      \"bundleIdentifier\": \"cypwn.AppCake+.7.2.2\",\n      \"developerName\": \"AppCake+ x CyPwn\",\n      \"version\": \"7.2.2\",\n      \"versionDate\": \"2022-09-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AppCake+.ipa\",\n      \"localizedDescription\": \"AppCake7+ IPA store - Dark Mode - Bypasses verify screen - No Ads\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AppCake+.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17186160,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"NewOS\",\n      \"bundleIdentifier\": \"cypwn.NewOS.1.0\",\n      \"developerName\": \"NewOS x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-09-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/NewOS.ipa\",\n      \"localizedDescription\": \"Bring the iOS 11 experience in an app!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/NewOS.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 16410214,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"AddRepo\",\n      \"bundleIdentifier\": \"cypwn.AddRepo.1.0.2\",\n      \"developerName\": \"AddRepo x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2022-09-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AddRepo.ipa\",\n      \"localizedDescription\": \"App that can easily add repos to any package manager.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AddRepo.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2369781,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Root\",\n      \"bundleIdentifier\": \"cypwn.Root.1.0.0\",\n      \"developerName\": \"Root x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2022-09-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Root.ipa\",\n      \"localizedDescription\": \"The best Filza Escaped alternative for iOS 14.0 - 14.3. Other software versions will work with limited access\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Root.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2883584,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SleepCycle_Premium\",\n      \"bundleIdentifier\": \"cypwn.SleepCycle_Premium.6.22.34\",\n      \"developerName\": \"SleepCycle_Premium x CyPwn\",\n      \"version\": \"6.22.34\",\n      \"versionDate\": \"2022-09-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SleepCycle_Premium.ipa\",\n      \"localizedDescription\": \"Sleep Cycle Premium unlocked by Dz\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SleepCycle_Premium.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 83393249,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Alarmy_6.68.0+Satella\",\n      \"bundleIdentifier\": \"cypwn.Alarmy_6.68.0+Satella.6.68.0\",\n      \"developerName\": \"Alarmy_6.68.0+Satella x CyPwn\",\n      \"version\": \"6.68.0\",\n      \"versionDate\": \"2022-09-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Alarmy_6.68.0+Satella.ipa\",\n      \"localizedDescription\": \"Includes Satella Jailed to unlock all in-app purchases. Click the floating purple star icon to open Satella settings. Enable tweak and turn on Receipts. Click buy on any IAP, then hit cancel upon confirmation.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Alarmy_6.68.0+Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 122159104,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Adobe_Express_11.3.0+Satella\",\n      \"bundleIdentifier\": \"cypwn.Adobe_Express_11.3.0+Satella.11.3.0\",\n      \"developerName\": \"Adobe_Express_11.3.0+Satella x CyPwn\",\n      \"version\": \"11.3.0\",\n      \"versionDate\": \"2022-08-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Adobe_Express_11.3.0+Satella.ipa\",\n      \"localizedDescription\": \"Includes Satella Jailed to unlock all in-app purchases. Click the floating purple star icon to open Satella settings. Enable tweak and turn on Receipts. Click buy on any IAP, then hit cancel upon confirmation.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Adobe_Express_11.3.0+Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 75570872,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Adobe_Express_11.3.0+Satella/Adobe_Express_11.3.0+Satella.ipa366.png\"\n      ]\n    },\n    {\n      \"name\": \"Pixelmator2.7.3\",\n      \"bundleIdentifier\": \"cypwn.Pixelmator2.7.3.2.7.3\",\n      \"developerName\": \"Pixelmator2.7.3 x CyPwn\",\n      \"version\": \"2.7.3\",\n      \"versionDate\": \"2022-08-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Pixelmator2.7.3.ipa\",\n      \"localizedDescription\": \"Powerful, full-featured image editor for iOS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Pixelmator2.7.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 122746306,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"FineReader_PDF_Pro_15.4.2\",\n      \"bundleIdentifier\": \"cypwn.FineReader_PDF_Pro_15.4.2.15.4.2\",\n      \"developerName\": \"FineReader_PDF_Pro_15.4.2 x CyPwn\",\n      \"version\": \"15.4.2\",\n      \"versionDate\": \"2022-08-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FineReader_PDF_Pro_15.4.2.ipa\",\n      \"localizedDescription\": \"FineReader PDF Pro cracked by @Demoxing\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FineReader_PDF_Pro_15.4.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 64340623,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"VideoShow_5.7.5\",\n      \"bundleIdentifier\": \"cypwn.VideoShow_5.7.5.5.7.5\",\n      \"developerName\": \"VideoShow_5.7.5 x CyPwn\",\n      \"version\": \"5.7.5\",\n      \"versionDate\": \"2022-08-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VideoShow_5.7.5.ipa\",\n      \"localizedDescription\": \"VideoShow Pro cracked by @Demoxing\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VideoShow_5.7.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 96049561,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"iTablaPro_11.6.1\",\n      \"bundleIdentifier\": \"cypwn.iTablaPro_11.6.1.11.6.1\",\n      \"developerName\": \"iTablaPro_11.6.1 x CyPwn\",\n      \"version\": \"11.6.1\",\n      \"versionDate\": \"2022-08-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iTablaPro_11.6.1.ipa\",\n      \"localizedDescription\": \"iTablaPro cracked by @Demoxing\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iTablaPro_11.6.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 42760929,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"HdoPlay-1-0-2-JKCrack\",\n      \"bundleIdentifier\": \"cypwn.HdoPlay-1-0-2-JKCrack.1.0.2\",\n      \"developerName\": \"HdoPlay-1-0-2-JKCrack x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2022-08-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HdoPlay-1-0-2-JKCrack.ipa\",\n      \"localizedDescription\": \"Hdo Play - Movie Planner. Premium Cracked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HdoPlay-1-0-2-JKCrack.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8556380,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Santander\",\n      \"bundleIdentifier\": \"cypwn.Santander.1.0\",\n      \"developerName\": \"Santander x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-08-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Santander.ipa\",\n      \"localizedDescription\": \"Modern File Manager for iOS 14, 15, & 16. Still in beta. Expect bugs and permission issues on newer iOS versions\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Santander.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1426063,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Candy_Crush\",\n      \"bundleIdentifier\": \"cypwn.Candy_Crush.1.226.0\",\n      \"developerName\": \"Candy_Crush x CyPwn\",\n      \"version\": \"1.226.0\",\n      \"versionDate\": \"2022-08-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Candy_Crush.ipa\",\n      \"localizedDescription\": \"Candy Crush modded\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Candy_Crush.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 80069263,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Wallcraft_Pro_2.8\",\n      \"bundleIdentifier\": \"cypwn.Wallcraft_Pro_2.8.2.8\",\n      \"developerName\": \"Wallcraft_Pro_2.8 x CyPwn\",\n      \"version\": \"2.8\",\n      \"versionDate\": \"2022-08-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Wallcraft_Pro_2.8.ipa\",\n      \"localizedDescription\": \"Wallcraft Pro unlocked - Wallpapers for days\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Wallcraft_Pro_2.8.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 15707668,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Jaility\",\n      \"bundleIdentifier\": \"cypwn.Jaility.1.2\",\n      \"developerName\": \"Jaility x CyPwn\",\n      \"version\": \"1.2\",\n      \"versionDate\": \"2022-08-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Jaility.ipa\",\n      \"localizedDescription\": \"Respring your jailed iOS 15 device just like it was jailbroken. An example use case for this is when sideloaded apps wont appear on homescreen, simply respring with jaility to fix.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Jaility.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1205862,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Jaility/Jaility.ipa317.png\"\n      ]\n    },\n    {\n      \"name\": \"PostBox-0.8-beta\",\n      \"bundleIdentifier\": \"cypwn.PostBox-0.8-beta.0.8\",\n      \"developerName\": \"PostBox-0.8-beta x CyPwn\",\n      \"version\": \"0.8\",\n      \"versionDate\": \"2022-07-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PostBox-0.8-beta.ipa\",\n      \"localizedDescription\": \"An app for browsing tweak repos. Download and save debs on jailed devices to use for injecting and sideloading. This DOES NOT install tweaks on jailed devices, but you no longer need a jailbroken device to find and save deb files\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-0.8-beta.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 7245660,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"kok3shidoll_v2.2.1\",\n      \"bundleIdentifier\": \"cypwn.kok3shidoll_v2.2.1.2.2.1\",\n      \"developerName\": \"kok3shidoll_v2.2.1 x CyPwn\",\n      \"version\": \"2.2.1\",\n      \"versionDate\": \"2022-05-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/kok3shidoll_v2.2.1.ipa\",\n      \"localizedDescription\": \"iOS 9.3.x semi-untethered jailbreak\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/kok3shidoll_v2.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9101639,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Sync.ME_VIP_11.17.3\",\n      \"bundleIdentifier\": \"cypwn.Sync.ME_VIP_11.17.3.11.17.3\",\n      \"developerName\": \"Sync.ME_VIP_11.17.3 x CyPwn\",\n      \"version\": \"11.17.3\",\n      \"versionDate\": \"2022-05-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Sync.ME_VIP_11.17.3.ipa\",\n      \"localizedDescription\": \"\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Sync.ME_VIP_11.17.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 27724349,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"VivaVideo_VIP_9.3.6\",\n      \"bundleIdentifier\": \"cypwn.VivaVideo_VIP_9.3.6.9.3.6\",\n      \"developerName\": \"VivaVideo_VIP_9.3.6 x CyPwn\",\n      \"version\": \"9.3.6\",\n      \"versionDate\": \"2022-05-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VivaVideo_VIP_9.3.6.ipa\",\n      \"localizedDescription\": \"VivaVideo w/ VIP unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VivaVideo_VIP_9.3.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 87535124,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ClarityWallpaperPro7.2.6\",\n      \"bundleIdentifier\": \"cypwn.ClarityWallpaperPro7.2.6.7.2.6\",\n      \"developerName\": \"ClarityWallpaperPro7.2.6 x CyPwn\",\n      \"version\": \"7.2.6\",\n      \"versionDate\": \"2022-05-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ClarityWallpaperPro7.2.6.ipa\",\n      \"localizedDescription\": \"Endless Wallpapers. Pro IAP membership unlocked.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ClarityWallpaperPro7.2.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 43987763,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"DualgramPro_1.22\",\n      \"bundleIdentifier\": \"cypwn.DualgramPro_1.22.1.22\",\n      \"developerName\": \"DualgramPro_1.22 x CyPwn\",\n      \"version\": \"1.22\",\n      \"versionDate\": \"2022-05-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DualgramPro_1.22.ipa\",\n      \"localizedDescription\": \"Record front and back cameras. Pro unlocked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DualgramPro_1.22.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3617587,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"remoteMousePro_4.211\",\n      \"bundleIdentifier\": \"cypwn.remoteMousePro_4.211.4.211\",\n      \"developerName\": \"remoteMousePro_4.211 x CyPwn\",\n      \"version\": \"4.211\",\n      \"versionDate\": \"2022-05-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/remoteMousePro_4.211.ipa\",\n      \"localizedDescription\": \"Pro features unlocked. Control your Mac, Windows, and Linux from your iOS device.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/remoteMousePro_4.211.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 105644032,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Dystopia_0.01\",\n      \"bundleIdentifier\": \"cypwn.Dystopia_0.01.0.01\",\n      \"developerName\": \"Dystopia_0.01 x CyPwn\",\n      \"version\": \"0.01\",\n      \"versionDate\": \"2022-04-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Dystopia_0.01.ipa\",\n      \"localizedDescription\": \"Alternative to Apollo for Reddit\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia_0.01.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9971957,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Retro_0.2~88\",\n      \"bundleIdentifier\": \"cypwn.Retro_0.2~88.0.2\",\n      \"developerName\": \"Retro_0.2~88 x CyPwn\",\n      \"version\": \"0.2\",\n      \"versionDate\": \"2022-04-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Retro_0.2~88.ipa\",\n      \"localizedDescription\": \"Retro iPod ClickWheel Player with Spotify integration\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Retro_0.2~88.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 109439877,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ScreenshotX1.0\",\n      \"bundleIdentifier\": \"cypwn.ScreenshotX1.0.1.0\",\n      \"developerName\": \"ScreenshotX1.0 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-04-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ScreenshotX1.0.ipa\",\n      \"localizedDescription\": \"ScreenshotX by junesiphone\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenshotX1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 36406558,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ScreenSaver++1.3.1\",\n      \"bundleIdentifier\": \"cypwn.ScreenSaver++1.3.1.1.3.1\",\n      \"developerName\": \"ScreenSaver++1.3.1 x CyPwn\",\n      \"version\": \"1.3.1\",\n      \"versionDate\": \"2022-04-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ScreenSaver++1.3.1.ipa\",\n      \"localizedDescription\": \"SleepSaver modified\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenSaver++1.3.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 122809221,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"OldOS_1.0.18\",\n      \"bundleIdentifier\": \"cypwn.oldOS.oldOS\",\n      \"developerName\": \"OldOS_1.0.18 x CyPwn\",\n      \"version\": \"1.0.18\",\n      \"versionDate\": \"2022-04-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/OldOS_1.0.18.ipa\",\n      \"localizedDescription\": \"iOS 4 4 ur 4ne\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS_1.0.18.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 83865108,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Provenance2.1\",\n      \"bundleIdentifier\": \"org.provenance-emu.provenance\",\n      \"developerName\": \"Provenance2.1 x CyPwn\",\n      \"version\": \"2.1.0\",\n      \"versionDate\": \"2022-04-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Provenance2.1.ipa\",\n      \"localizedDescription\": \"Video game emulator\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Provenance2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 36123443,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    }\n  ],\n  \"news\": [\n    {\n      \"title\": \"Stremio-2.0.6 now available!\",\n      \"identifier\": \"cypwn.Stremio-2.0.6.2.0.6\",\n      \"caption\": \"Stremio-2.0.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-2.0.6.png\",\n      \"date\": \"2026-07-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PowerWarriors_18.0 now available!\",\n      \"identifier\": \"cypwn.PowerWarriors_18.0.18\",\n      \"caption\": \"PowerWarriors_18.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PowerWarriors_18.0.png\",\n      \"date\": \"2026-07-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Stremio-2.0.0 now available!\",\n      \"identifier\": \"cypwn.Stremio-2.0.0.2.0.0\",\n      \"caption\": \"Stremio-2.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-2.0.0.png\",\n      \"date\": \"2026-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CloverPit-1.4.8 now available!\",\n      \"identifier\": \"cypwn.CloverPit-1.4.8.1.4.8\",\n      \"caption\": \"CloverPit-1.4.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CloverPit-1.4.8.png\",\n      \"date\": \"2026-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Stremio-1.3.6 now available!\",\n      \"identifier\": \"cypwn.Stremio-1.3.6.1.3.6\",\n      \"caption\": \"Stremio-1.3.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-1.3.6.png\",\n      \"date\": \"2026-02-24\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Vesc_Tool_6.06.2 now available!\",\n      \"identifier\": \"cypwn.Vesc_Tool_6.06.2.6.06.2\",\n      \"caption\": \"Vesc_Tool_6.06.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Vesc_Tool_6.06.2.png\",\n      \"date\": \"2026-02-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Terraria_4.5.0 now available!\",\n      \"identifier\": \"cypwn.Terraria_4.5.0.4.5.0\",\n      \"caption\": \"Terraria_4.5.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Terraria_4.5.0.png\",\n      \"date\": \"2026-01-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Violyn_1_4_4-2 now available!\",\n      \"identifier\": \"cypwn.Violyn_1_4_4-2.1.4.4\",\n      \"caption\": \"Violyn_1_4_4-2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Violyn_1_4_4-2.png\",\n      \"date\": \"2026-01-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iTorrent now available!\",\n      \"identifier\": \"cypwn.iTorrent.2.1.1\",\n      \"caption\": \"iTorrent added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iTorrent.png\",\n      \"date\": \"2025-12-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"True_Skate_1.5.102 now available!\",\n      \"identifier\": \"cypwn.True_Skate_1.5.102.1.5.102\",\n      \"caption\": \"True_Skate_1.5.102 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/True_Skate_1.5.102.png\",\n      \"date\": \"2025-12-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed-v1.8.3-ios now available!\",\n      \"identifier\": \"cypwn.Gopeed-v1.8.3-ios.1.8.3\",\n      \"caption\": \"Gopeed-v1.8.3-ios added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed-v1.8.3-ios.png\",\n      \"date\": \"2025-12-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"OldOS now available!\",\n      \"identifier\": \"cypwn.OldOS.2.0.7\",\n      \"caption\": \"OldOS added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS.png\",\n      \"date\": \"2025-12-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"InjectionIPA_v5.0 now available!\",\n      \"identifier\": \"cypwn.InjectionIPA_v5.0.5.0\",\n      \"caption\": \"InjectionIPA_v5.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/InjectionIPA_v5.0.png\",\n      \"date\": \"2025-12-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DLiPA_v1.1 now available!\",\n      \"identifier\": \"cypwn.DLiPA_v1.1.1.1\",\n      \"caption\": \"DLiPA_v1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DLiPA_v1.1.png\",\n      \"date\": \"2025-12-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Fortnite+Release-7.40-CL-5011364 now available!\",\n      \"identifier\": \"cypwn.Fortnite+Release-7.40-CL-5011364.7.40.2\",\n      \"caption\": \"Fortnite+Release-7.40-CL-5011364 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Fortnite+Release-7.40-CL-5011364.png\",\n      \"date\": \"2025-11-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spotube-iOS now available!\",\n      \"identifier\": \"cypwn.Spotube-iOS.5.1.0\",\n      \"caption\": \"Spotube-iOS added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spotube-iOS.png\",\n      \"date\": \"2025-11-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PotatoIM now available!\",\n      \"identifier\": \"cypwn.PotatoIM.2.47.207251\",\n      \"caption\": \"PotatoIM added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PotatoIM.png\",\n      \"date\": \"2025-10-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Asspp_2.3 now available!\",\n      \"identifier\": \"cypwn.Asspp_2.3.2.3\",\n      \"caption\": \"Asspp_2.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Asspp_2.3.png\",\n      \"date\": \"2025-09-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GoCoEdit_23.0 now available!\",\n      \"identifier\": \"cypwn.GoCoEdit_23.0.23.0\",\n      \"caption\": \"GoCoEdit_23.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GoCoEdit_23.0.png\",\n      \"date\": \"2025-09-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Deltarune_v727 now available!\",\n      \"identifier\": \"cypwn.Deltarune_v727.0\",\n      \"caption\": \"Deltarune_v727 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Deltarune_v727.png\",\n      \"date\": \"2025-08-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"BazaartPremium_10.8.0 now available!\",\n      \"identifier\": \"cypwn.BazaartPremium_10.8.0.10.8.0\",\n      \"caption\": \"BazaartPremium_10.8.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/BazaartPremium_10.8.0.png\",\n      \"date\": \"2025-08-29\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VPN_FAST now available!\",\n      \"identifier\": \"cypwn.VPN_FAST.1.8.6\",\n      \"caption\": \"VPN_FAST added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_FAST.png\",\n      \"date\": \"2025-08-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Tasks_Create_Live_Activities now available!\",\n      \"identifier\": \"cypwn.Tasks_Create_Live_Activities.1.01\",\n      \"caption\": \"Tasks_Create_Live_Activities added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Tasks_Create_Live_Activities.png\",\n      \"date\": \"2025-08-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ChatGPTw15 now available!\",\n      \"identifier\": \"cypwn.ChatGPTw15.1.0\",\n      \"caption\": \"ChatGPTw15 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ChatGPTw15.png\",\n      \"date\": \"2025-08-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VPN_Proxy_Master now available!\",\n      \"identifier\": \"cypwn.VPN_Proxy_Master.2.2.8\",\n      \"caption\": \"VPN_Proxy_Master added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Proxy_Master.png\",\n      \"date\": \"2025-08-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VPN_Freedom now available!\",\n      \"identifier\": \"cypwn.VPN_Freedom.1.2.2\",\n      \"caption\": \"VPN_Freedom added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Freedom.png\",\n      \"date\": \"2025-08-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"bitchat_1.2.1 now available!\",\n      \"identifier\": \"cypwn.bitchat_1.2.1.1.2.1\",\n      \"caption\": \"bitchat_1.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.2.1.png\",\n      \"date\": \"2025-08-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"The_Free_VPN now available!\",\n      \"identifier\": \"cypwn.The_Free_VPN.1.10.1\",\n      \"caption\": \"The_Free_VPN added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/The_Free_VPN.png\",\n      \"date\": \"2025-08-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Shark_Arsenal_4.0.14 now available!\",\n      \"identifier\": \"cypwn.Shark_Arsenal_4.0.14.4.0.14\",\n      \"caption\": \"Shark_Arsenal_4.0.14 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Shark_Arsenal_4.0.14.png\",\n      \"date\": \"2025-07-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FileBrowser_Pro_25.7 now available!\",\n      \"identifier\": \"cypwn.FileBrowser_Pro_25.7.25.7\",\n      \"caption\": \"FileBrowser_Pro_25.7 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.7.png\",\n      \"date\": \"2025-07-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Amethyst_1.0 now available!\",\n      \"identifier\": \"cypwn.Amethyst_1.0.1.0\",\n      \"caption\": \"Amethyst_1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Amethyst_1.0.png\",\n      \"date\": \"2025-07-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Bitchat now available!\",\n      \"identifier\": \"cypwn.Bitchat.1.0.0\",\n      \"caption\": \"Bitchat added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.0.0_1752444072.png\",\n      \"date\": \"2025-07-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Little Nightmares now available!\",\n      \"identifier\": \"cypwn.Little Nightmares.1.0.2\",\n      \"caption\": \"Little Nightmares added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LittleNightmares_1.0.2.png\",\n      \"date\": \"2025-07-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SQLiteFlow_5.8.6 now available!\",\n      \"identifier\": \"cypwn.SQLiteFlow_5.8.6.5.8.6\",\n      \"caption\": \"SQLiteFlow_5.8.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SQLiteFlow_5.8.6.png\",\n      \"date\": \"2025-06-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FileBrowser_Pro_25.6 now available!\",\n      \"identifier\": \"cypwn.FileBrowser_Pro_25.6.25.6\",\n      \"caption\": \"FileBrowser_Pro_25.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.6.png\",\n      \"date\": \"2025-06-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FileBrowser_Pro_25.5 now available!\",\n      \"identifier\": \"cypwn.FileBrowser_Pro_25.5.25.5\",\n      \"caption\": \"FileBrowser_Pro_25.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.5.png\",\n      \"date\": \"2025-06-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Scrcpy_Remote_2.4 now available!\",\n      \"identifier\": \"cypwn.Scrcpy_Remote_2.4.2.4\",\n      \"caption\": \"Scrcpy_Remote_2.4 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Scrcpy_Remote_2.4.png\",\n      \"date\": \"2025-05-22\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"True_Skate_1.5.95 now available!\",\n      \"identifier\": \"cypwn.True_Skate_1.5.95.1.5.95\",\n      \"caption\": \"True_Skate_1.5.95 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/True_Skate_1.5.95.png\",\n      \"date\": \"2025-05-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FTPManager_8.5.4 now available!\",\n      \"identifier\": \"cypwn.FTPManager_8.5.4.8.5.4\",\n      \"caption\": \"FTPManager_8.5.4 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FTPManager_8.5.4.png\",\n      \"date\": \"2025-05-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Stremio_1.0.1-17 now available!\",\n      \"identifier\": \"cypwn.Stremio_1.0.1-17.1.0.1\",\n      \"caption\": \"Stremio_1.0.1-17 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio_1.0.1-17.png\",\n      \"date\": \"2025-05-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Theta_1.5 now available!\",\n      \"identifier\": \"cypwn.Theta_1.5.380.0.0\",\n      \"caption\": \"Theta_1.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Theta_1.5.png\",\n      \"date\": \"2025-05-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"UniversalPaperclips now available!\",\n      \"identifier\": \"cypwn.UniversalPaperclips.2.1.0\",\n      \"caption\": \"UniversalPaperclips added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/UniversalPaperclips.png\",\n      \"date\": \"2025-05-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Pokecut_4.4.2 now available!\",\n      \"identifier\": \"cypwn.Pokecut_4.4.2.4.4.2\",\n      \"caption\": \"Pokecut_4.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Pokecut_4.4.2.png\",\n      \"date\": \"2025-05-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ProCam_14.7.3 now available!\",\n      \"identifier\": \"cypwn.ProCam_14.7.3.14.7.3\",\n      \"caption\": \"ProCam_14.7.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCam_14.7.3.png\",\n      \"date\": \"2025-05-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"maid2_0_7 now available!\",\n      \"identifier\": \"cypwn.maid2_0_7.2.0.7\",\n      \"caption\": \"maid2_0_7 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/maid2_0_7.png\",\n      \"date\": \"2025-05-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Ignited_1.8.5 now available!\",\n      \"identifier\": \"cypwn.Ignited_1.8.5.1.8.5\",\n      \"caption\": \"Ignited_1.8.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Ignited_1.8.5.png\",\n      \"date\": \"2025-05-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.9.5-9.0.36 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.9.5-9.0.36.9.0.36\",\n      \"caption\": \"EeveeSpotify-5.9.5-9.0.36 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.9.5-9.0.36.png\",\n      \"date\": \"2025-04-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Balatro_1.0.1o now available!\",\n      \"identifier\": \"cypwn.Balatro_1.0.1o.1.0.1o\",\n      \"caption\": \"Balatro_1.0.1o added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Balatro_1.0.1o.png\",\n      \"date\": \"2025-04-24\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CrazyCattle3D_1.0.0 now available!\",\n      \"identifier\": \"cypwn.CrazyCattle3D_1.0.0.1.0.0\",\n      \"caption\": \"CrazyCattle3D_1.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CrazyCattle3D_1.0.0.png\",\n      \"date\": \"2025-04-22\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed_1.7.0 now available!\",\n      \"identifier\": \"cypwn.Gopeed_1.7.0.1.7.0\",\n      \"caption\": \"Gopeed_1.7.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.7.0.png\",\n      \"date\": \"2025-04-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GoCoEdit_22.3 now available!\",\n      \"identifier\": \"cypwn.GoCoEdit_22.3.22.3\",\n      \"caption\": \"GoCoEdit_22.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GoCoEdit_22.3.png\",\n      \"date\": \"2025-04-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FL_Studio_Mobile_4.7.7_SatellaJailed now available!\",\n      \"identifier\": \"cypwn.FL_Studio_Mobile_4.7.7_SatellaJailed.4.7.7\",\n      \"caption\": \"FL_Studio_Mobile_4.7.7_SatellaJailed added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FL_Studio_Mobile_4.7.7_SatellaJailed.png\",\n      \"date\": \"2025-04-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Photomath_8.42.0 now available!\",\n      \"identifier\": \"cypwn.Photomath_8.42.0.8.42.0\",\n      \"caption\": \"Photomath_8.42.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Photomath_8.42.0.png\",\n      \"date\": \"2025-04-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iTransmission now available!\",\n      \"identifier\": \"cypwn.iTransmission.1.0\",\n      \"caption\": \"iTransmission added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iTransmission.png\",\n      \"date\": \"2025-03-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LumaFusion_3.0.10_iOS_15.0 now available!\",\n      \"identifier\": \"cypwn.LumaFusion_3.0.10_iOS_15.0.3.0.10\",\n      \"caption\": \"LumaFusion_3.0.10_iOS_15.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LumaFusion_3.0.10_iOS_15.0.png\",\n      \"date\": \"2025-03-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CyPwnStore_7.1 now available!\",\n      \"identifier\": \"cypwn.CyPwnStore_7.1.7.1\",\n      \"caption\": \"CyPwnStore_7.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CyPwnStore_7.1.png\",\n      \"date\": \"2025-03-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.8.8-9.0.26 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.8.8-9.0.26.9.0.26\",\n      \"caption\": \"EeveeSpotify-5.8.8-9.0.26 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.8.8-9.0.26.png\",\n      \"date\": \"2025-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Remoter_Pro_6.2.1 now available!\",\n      \"identifier\": \"cypwn.Remoter_Pro_6.2.1.6.2.1\",\n      \"caption\": \"Remoter_Pro_6.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Remoter_Pro_6.2.1.png\",\n      \"date\": \"2025-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Screens_4.12.11 now available!\",\n      \"identifier\": \"cypwn.Screens_4.12.11.4.12.11\",\n      \"caption\": \"Screens_4.12.11 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Screens_4.12.11.png\",\n      \"date\": \"2025-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Jump_9.8.0 now available!\",\n      \"identifier\": \"cypwn.Jump_9.8.0.9.8.0\",\n      \"caption\": \"Jump_9.8.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Jump_9.8.0.png\",\n      \"date\": \"2025-03-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Age_of_History_II_Europe_1.0713 now available!\",\n      \"identifier\": \"cypwn.Age_of_History_II_Europe_1.0713.1.0713\",\n      \"caption\": \"Age_of_History_II_Europe_1.0713 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Age_of_History_II_Europe_1.0713.png\",\n      \"date\": \"2025-03-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed_1.6.10 now available!\",\n      \"identifier\": \"cypwn.Gopeed_1.6.10.1.6.10\",\n      \"caption\": \"Gopeed_1.6.10 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.6.10.png\",\n      \"date\": \"2025-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Theta_1_4 now available!\",\n      \"identifier\": \"cypwn.Theta_1_4.370.0.0\",\n      \"caption\": \"Theta_1_4 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Theta_1_4.png\",\n      \"date\": \"2025-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"fGet_1.5.19_NoAds now available!\",\n      \"identifier\": \"cypwn.fGet_1.5.19_NoAds.1.5.19\",\n      \"caption\": \"fGet_1.5.19_NoAds added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/fGet_1.5.19_NoAds.png\",\n      \"date\": \"2025-02-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"atvTools_1.5.0 now available!\",\n      \"identifier\": \"cypwn.atvTools_1.5.0.1.5.0\",\n      \"caption\": \"atvTools_1.5.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/atvTools_1.5.0.png\",\n      \"date\": \"2025-02-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Notepad-_1.0 now available!\",\n      \"identifier\": \"cypwn.Notepad-_1.0.1.0\",\n      \"caption\": \"Notepad-_1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Notepad-_1.0.png\",\n      \"date\": \"2025-02-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HollowKnight now available!\",\n      \"identifier\": \"cypwn.HollowKnight.1.5.78.11833\",\n      \"caption\": \"HollowKnight added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HollowKnight.png\",\n      \"date\": \"2025-02-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.8.6-9.0.14 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.8.6-9.0.14.9.0.14\",\n      \"caption\": \"EeveeSpotify-5.8.6-9.0.14 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.8.6-9.0.14.png\",\n      \"date\": \"2025-02-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Textastic_9.9.3 now available!\",\n      \"identifier\": \"cypwn.Textastic_9.9.3.9.9.3\",\n      \"caption\": \"Textastic_9.9.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Textastic_9.9.3.png\",\n      \"date\": \"2025-01-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"TS.Notes_0.1 now available!\",\n      \"identifier\": \"cypwn.TS.Notes_0.1.0.1\",\n      \"caption\": \"TS.Notes_0.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/TS.Notes_0.1.png\",\n      \"date\": \"2025-01-24\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picsew_3.11.4_Pro now available!\",\n      \"identifier\": \"cypwn.Picsew_3.11.4_Pro.3.11.4\",\n      \"caption\": \"Picsew_3.11.4_Pro added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsew_3.11.4_Pro.png\",\n      \"date\": \"2025-01-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iota6.0-13.1.0 now available!\",\n      \"identifier\": \"cypwn.iota6.0-13.1.0.13.1.0\",\n      \"caption\": \"iota6.0-13.1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iota6.0-13.1.0.png\",\n      \"date\": \"2024-12-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Violyn_1.4.2 now available!\",\n      \"identifier\": \"cypwn.Violyn_1.4.2.1.4.2\",\n      \"caption\": \"Violyn_1.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Violyn_1.4.2.png\",\n      \"date\": \"2024-11-22\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.8-8.9.90 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.8-8.9.90.8.9.90\",\n      \"caption\": \"EeveeSpotify-5.8-8.9.90 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.8-8.9.90.png\",\n      \"date\": \"2024-11-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"TransparentIcons_1.7.2 now available!\",\n      \"identifier\": \"cypwn.TransparentIcons_1.7.2.1.7.2\",\n      \"caption\": \"TransparentIcons_1.7.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/TransparentIcons_1.7.2.png\",\n      \"date\": \"2024-10-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CarrotPremium_6.1.3 now available!\",\n      \"identifier\": \"cypwn.CarrotPremium_6.1.3.6.1.3\",\n      \"caption\": \"CarrotPremium_6.1.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CarrotPremium_6.1.3.png\",\n      \"date\": \"2024-10-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GeniePro_7.1.2 now available!\",\n      \"identifier\": \"cypwn.GeniePro_7.1.2.7.1.2\",\n      \"caption\": \"GeniePro_7.1.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GeniePro_7.1.2.png\",\n      \"date\": \"2024-10-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b10_351.0.1 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b10_351.0.1.351.0.1\",\n      \"caption\": \"Regram_1.0-b10_351.0.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b10_351.0.1.png\",\n      \"date\": \"2024-10-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DuolingoMax_7.37.1 now available!\",\n      \"identifier\": \"cypwn.DuolingoMax_7.37.1.7.37.1\",\n      \"caption\": \"DuolingoMax_7.37.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DuolingoMax_7.37.1.png\",\n      \"date\": \"2024-09-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b10_347.2.5 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b10_347.2.5.347.2.5\",\n      \"caption\": \"Regram_1.0-b10_347.2.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b10_347.2.5.png\",\n      \"date\": \"2024-09-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-4.9-8.9.68 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-4.9-8.9.68.8.9.68\",\n      \"caption\": \"EeveeSpotify-4.9-8.9.68 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-4.9-8.9.68.png\",\n      \"date\": \"2024-08-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Alook_Browser_20.1 now available!\",\n      \"identifier\": \"cypwn.Alook_Browser_20.1.20.1\",\n      \"caption\": \"Alook_Browser_20.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Alook_Browser_20.1.png\",\n      \"date\": \"2024-08-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WallcraftPro_3.19 now available!\",\n      \"identifier\": \"cypwn.WallcraftPro_3.19.3.19\",\n      \"caption\": \"WallcraftPro_3.19 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WallcraftPro_3.19.png\",\n      \"date\": \"2024-08-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Phantom_VPN_3.9.6_PhantomReset now available!\",\n      \"identifier\": \"cypwn.Phantom_VPN_3.9.6_PhantomReset.3.9.6\",\n      \"caption\": \"Phantom_VPN_3.9.6_PhantomReset added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Phantom_VPN_3.9.6_PhantomReset.png\",\n      \"date\": \"2024-08-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VlogNow_1.82.1_Cracked now available!\",\n      \"identifier\": \"cypwn.VlogNow_1.82.1_Cracked.1.82.1\",\n      \"caption\": \"VlogNow_1.82.1_Cracked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VlogNow_1.82.1_Cracked.png\",\n      \"date\": \"2024-08-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picsart_25.5.1_Cracked now available!\",\n      \"identifier\": \"cypwn.Picsart_25.5.1_Cracked.25.5.1\",\n      \"caption\": \"Picsart_25.5.1_Cracked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsart_25.5.1_Cracked.png\",\n      \"date\": \"2024-08-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CapCut_12.0_Cracked now available!\",\n      \"identifier\": \"cypwn.CapCut_12.0_Cracked.12.0\",\n      \"caption\": \"CapCut_12.0_Cracked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CapCut_12.0_Cracked.png\",\n      \"date\": \"2024-08-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b8_343.0.0 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b8_343.0.0.343.0.0\",\n      \"caption\": \"Regram_1.0-b8_343.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b8_343.0.0.png\",\n      \"date\": \"2024-08-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picsart_25.4.2_Premium now available!\",\n      \"identifier\": \"cypwn.Picsart_25.4.2_Premium.25.4.2\",\n      \"caption\": \"Picsart_25.4.2_Premium added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsart_25.4.2_Premium.png\",\n      \"date\": \"2024-08-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HelloWeatherVIP_3.13.6 now available!\",\n      \"identifier\": \"cypwn.HelloWeatherVIP_3.13.6.3.13.15\",\n      \"caption\": \"HelloWeatherVIP_3.13.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HelloWeatherVIP_3.13.6.png\",\n      \"date\": \"2024-07-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VidList_1.2 now available!\",\n      \"identifier\": \"cypwn.VidList_1.2.1.2\",\n      \"caption\": \"VidList_1.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_1.2.png\",\n      \"date\": \"2024-07-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AIChatSmithPremium-7.0.0 now available!\",\n      \"identifier\": \"cypwn.AIChatSmithPremium-7.0.0.7.0.0\",\n      \"caption\": \"AIChatSmithPremium-7.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AIChatSmithPremium-7.0.0.png\",\n      \"date\": \"2024-07-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ESign_5.0_noLogs_V1.1 now available!\",\n      \"identifier\": \"cypwn.ESign_5.0_noLogs_V1.1.5.0.0\",\n      \"caption\": \"ESign_5.0_noLogs_V1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ESign_5.0_noLogs_V1.1.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Haaretz_Heb_Unlocked now available!\",\n      \"identifier\": \"cypwn.Haaretz_Heb_Unlocked.5.2.176\",\n      \"caption\": \"Haaretz_Heb_Unlocked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Heb_Unlocked.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Haaretz_Eng_Unlocked now available!\",\n      \"identifier\": \"cypwn.Haaretz_Eng_Unlocked.5.60\",\n      \"caption\": \"Haaretz_Eng_Unlocked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Eng_Unlocked.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"TheMarker_Heb_Unlocked now available!\",\n      \"identifier\": \"cypwn.TheMarker_Heb_Unlocked.4.2.52\",\n      \"caption\": \"TheMarker_Heb_Unlocked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/TheMarker_Heb_Unlocked.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spark_3.9.12 now available!\",\n      \"identifier\": \"cypwn.Spark_3.9.12.3.9.12\",\n      \"caption\": \"Spark_3.9.12 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.12.png\",\n      \"date\": \"2024-07-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Climax now available!\",\n      \"identifier\": \"cypwn.Climax.2.1\",\n      \"caption\": \"Climax added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Climax.png\",\n      \"date\": \"2024-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"callrecorder now available!\",\n      \"identifier\": \"cypwn.callrecorder.2.93\",\n      \"caption\": \"callrecorder added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/callrecorder.png\",\n      \"date\": \"2024-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spark_3.9.11 now available!\",\n      \"identifier\": \"cypwn.Spark_3.9.11.3.9.11\",\n      \"caption\": \"Spark_3.9.11 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.11.png\",\n      \"date\": \"2024-07-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"IGRocketRegram_1.0-b7_338.0.0 now available!\",\n      \"identifier\": \"cypwn.IGRocketRegram_1.0-b7_338.0.0.338.0.0\",\n      \"caption\": \"IGRocketRegram_1.0-b7_338.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/IGRocketRegram_1.0-b7_338.0.0.png\",\n      \"date\": \"2024-07-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"trailforks_hacked now available!\",\n      \"identifier\": \"cypwn.trailforks_hacked.2024.2.6\",\n      \"caption\": \"trailforks_hacked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/trailforks_hacked.png\",\n      \"date\": \"2024-07-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b7_335.1.8 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b7_335.1.8.335.1.8\",\n      \"caption\": \"Regram_1.0-b7_335.1.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b7_335.1.8.png\",\n      \"date\": \"2024-06-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CAPerfHUDSwift now available!\",\n      \"identifier\": \"cypwn.CAPerfHUDSwift.1.0.2\",\n      \"caption\": \"CAPerfHUDSwift added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CAPerfHUDSwift.png\",\n      \"date\": \"2024-06-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PicsArt_25.1.2 now available!\",\n      \"identifier\": \"cypwn.PicsArt_25.1.2.25.1.2\",\n      \"caption\": \"PicsArt_25.1.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PicsArt_25.1.2.png\",\n      \"date\": \"2024-06-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b7_335.0.8 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b7_335.0.8.335.0.8\",\n      \"caption\": \"Regram_1.0-b7_335.0.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b7_335.0.8.png\",\n      \"date\": \"2024-06-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Speedtest_VPN_Premium_5.4.0 now available!\",\n      \"identifier\": \"cypwn.Speedtest_VPN_Premium_5.4.0.5.4.0\",\n      \"caption\": \"Speedtest_VPN_Premium_5.4.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Speedtest_VPN_Premium_5.4.0.png\",\n      \"date\": \"2024-06-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Egern-1.19.1 now available!\",\n      \"identifier\": \"cypwn.Egern-1.19.1.1.19.1\",\n      \"caption\": \"Egern-1.19.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Egern-1.19.1.png\",\n      \"date\": \"2024-05-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Mimo_6.48.0_Premium now available!\",\n      \"identifier\": \"cypwn.Mimo_6.48.0_Premium.6.48.0\",\n      \"caption\": \"Mimo_6.48.0_Premium added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Mimo_6.48.0_Premium.png\",\n      \"date\": \"2024-05-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Discord_228.1_Pyoncord now available!\",\n      \"identifier\": \"cypwn.Discord_228.1_Pyoncord.228.1\",\n      \"caption\": \"Discord_228.1_Pyoncord added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Discord_228.1_Pyoncord_DiscordNoTrack.png\",\n      \"date\": \"2024-05-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spark_3.9.2 now available!\",\n      \"identifier\": \"cypwn.Spark_3.9.2.3.9.2\",\n      \"caption\": \"Spark_3.9.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.2.png\",\n      \"date\": \"2024-05-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Nicegram_1.6.2 now available!\",\n      \"identifier\": \"cypwn.Nicegram_1.6.2.1.6.2\",\n      \"caption\": \"Nicegram_1.6.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Nicegram_1.6.2.png\",\n      \"date\": \"2024-05-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed_1.5.6 now available!\",\n      \"identifier\": \"cypwn.Gopeed_1.5.6.1.5.6\",\n      \"caption\": \"Gopeed_1.5.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.5.6.png\",\n      \"date\": \"2024-04-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LiveContainer_2.0 now available!\",\n      \"identifier\": \"cypwn.LiveContainer_2.0.2.0\",\n      \"caption\": \"LiveContainer_2.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveContainer_2.0.png\",\n      \"date\": \"2024-04-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"BundleReader now available!\",\n      \"identifier\": \"cypwn.BundleReader.1.0\",\n      \"caption\": \"BundleReader added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/BundleReader.png\",\n      \"date\": \"2024-04-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"APNS_Demo now available!\",\n      \"identifier\": \"cypwn.APNS_Demo.1.00\",\n      \"caption\": \"APNS_Demo added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/APNS_Demo.png\",\n      \"date\": \"2024-04-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PhotoMathPlus_8.35.0 now available!\",\n      \"identifier\": \"cypwn.PhotoMathPlus_8.35.0.8.35.0\",\n      \"caption\": \"PhotoMathPlus_8.35.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PhotoMathPlus_8.35.0.png\",\n      \"date\": \"2024-04-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Bunny_Pyoncord_224.0 now available!\",\n      \"identifier\": \"cypwn.Bunny_Pyoncord_224.0.224.0\",\n      \"caption\": \"Bunny_Pyoncord_224.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Bunny_Pyoncord_224.0.png\",\n      \"date\": \"2024-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"MimoPro_6.43 now available!\",\n      \"identifier\": \"cypwn.MimoPro_6.43.6.43.0\",\n      \"caption\": \"MimoPro_6.43 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/MimoPro_6.43.png\",\n      \"date\": \"2024-04-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LiveContainer_1.0 now available!\",\n      \"identifier\": \"cypwn.LiveContainer_1.0.1.0\",\n      \"caption\": \"LiveContainer_1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveContainer_1.0.png\",\n      \"date\": \"2024-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Flightradar24_9.17.0 now available!\",\n      \"identifier\": \"cypwn.Flightradar24_9.17.0.9.17.0\",\n      \"caption\": \"Flightradar24_9.17.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Flightradar24_9.17.0.png\",\n      \"date\": \"2024-02-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spotify++8.6.94_CyPwn now available!\",\n      \"identifier\": \"cypwn.Spotify++8.6.94_CyPwn.8.6.94\",\n      \"caption\": \"Spotify++8.6.94_CyPwn added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spotify++8.6.94_CyPwn.png\",\n      \"date\": \"2024-01-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GameSeagull now available!\",\n      \"identifier\": \"cypwn.GameSeagull.2.0.12\",\n      \"caption\": \"GameSeagull added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GameSeagull.png\",\n      \"date\": \"2024-01-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ToonSquid_1.10.1_ipa.store now available!\",\n      \"identifier\": \"cypwn.ToonSquid_1.10.1_ipa.store.1.10.1\",\n      \"caption\": \"ToonSquid_1.10.1_ipa.store added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ToonSquid_1.10.1_ipa.store.png\",\n      \"date\": \"2024-01-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WazePlus_4.100.0 now available!\",\n      \"identifier\": \"cypwn.WazePlus_4.100.0.4.100.0\",\n      \"caption\": \"WazePlus_4.100.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WazePlus_4.100.0.png\",\n      \"date\": \"2023-12-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"NFC_Tools_2.27 now available!\",\n      \"identifier\": \"cypwn.NFC_Tools_2.27.2.27\",\n      \"caption\": \"NFC_Tools_2.27 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/NFC_Tools_2.27.png\",\n      \"date\": \"2023-12-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EzFN-10.0 now available!\",\n      \"identifier\": \"cypwn.EzFN-10.0.10.00.0\",\n      \"caption\": \"EzFN-10.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EzFN-10.0.png\",\n      \"date\": \"2023-11-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CryptoMiner now available!\",\n      \"identifier\": \"cypwn.CryptoMiner.0.5\",\n      \"caption\": \"CryptoMiner added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/com.mysterytag.cryptominer.png\",\n      \"date\": \"2023-10-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Amen_Break_Generator now available!\",\n      \"identifier\": \"cypwn.Amen_Break_Generator.2.0.6\",\n      \"caption\": \"Amen_Break_Generator added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Amen_Break_Generator-2.0.6.png\",\n      \"date\": \"2023-10-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"playSub_2023.1.1 now available!\",\n      \"identifier\": \"cypwn.playSub_2023.1.1.2023.1.1\",\n      \"caption\": \"playSub_2023.1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/playSub_2023.1.1.png\",\n      \"date\": \"2023-09-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picasso_v2_Beta_5 now available!\",\n      \"identifier\": \"cypwn.Picasso_v2_Beta_5.2.0\",\n      \"caption\": \"Picasso_v2_Beta_5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picasso_v2_Beta_5.png\",\n      \"date\": \"2023-08-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PropCashapp now available!\",\n      \"identifier\": \"cypwn.PropCashapp.1.0\",\n      \"caption\": \"PropCashapp added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PropCashapp.png\",\n      \"date\": \"2023-08-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ProCamera now available!\",\n      \"identifier\": \"cypwn.ProCamera.16.3\",\n      \"caption\": \"ProCamera added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCamera.png\",\n      \"date\": \"2023-07-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Suffuse3 now available!\",\n      \"identifier\": \"cypwn.Suffuse3.7.5.8\",\n      \"caption\": \"Suffuse3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Suffuse3.png\",\n      \"date\": \"2023-07-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Apollo_1.15.11+Artemis1.3 now available!\",\n      \"identifier\": \"cypwn.Apollo_1.15.11+Artemis1.3.1.15.11\",\n      \"caption\": \"Apollo_1.15.11+Artemis1.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Apollo_1.15.11+Artemis1.3.png\",\n      \"date\": \"2023-07-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Dystopia now available!\",\n      \"identifier\": \"cypwn.Dystopia.1.0.0\",\n      \"caption\": \"Dystopia added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia.png\",\n      \"date\": \"2023-06-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CyPwn_Store now available!\",\n      \"identifier\": \"cypwn.CyPwn_Store.7.0\",\n      \"caption\": \"CyPwn_Store added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CyPwn_Store.png\",\n      \"date\": \"2023-06-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"YTMusicUltimate_v1.4.1_YTM6.03.1 now available!\",\n      \"identifier\": \"cypwn.YTMusicUltimate_v1.4.1_YTM6.03.1.6.03.1\",\n      \"caption\": \"YTMusicUltimate_v1.4.1_YTM6.03.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/YTMusicUltimate_v1.4.1_YTM6.03.1.png\",\n      \"date\": \"2023-05-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"RaceControlF1 now available!\",\n      \"identifier\": \"cypwn.RaceControlF1.1.0\",\n      \"caption\": \"RaceControlF1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/RaceControlF1.png\",\n      \"date\": \"2023-04-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AppDB_1.1.5 now available!\",\n      \"identifier\": \"cypwn.AppDB_1.1.5.1.1.5\",\n      \"caption\": \"AppDB_1.1.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AppDB_1.1.5.png\",\n      \"date\": \"2023-04-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PeriodicTablePRO_1.124 now available!\",\n      \"identifier\": \"cypwn.PeriodicTablePRO_1.124.1.124\",\n      \"caption\": \"PeriodicTablePRO_1.124 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PeriodicTablePRO_1.124.png\",\n      \"date\": \"2023-03-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Whitelist now available!\",\n      \"identifier\": \"cypwn.Whitelist.1.1.0\",\n      \"caption\": \"Whitelist added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Whitelist.png\",\n      \"date\": \"2023-03-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DramaFlix_1.1.0 now available!\",\n      \"identifier\": \"cypwn.DramaFlix_1.1.0.1.1.0\",\n      \"caption\": \"DramaFlix_1.1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DramaFlix_1.1.0.png\",\n      \"date\": \"2023-03-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Cowabunga10 now available!\",\n      \"identifier\": \"cypwn.Cowabunga10.10.0.0\",\n      \"caption\": \"Cowabunga10 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Cowabunga10.png\",\n      \"date\": \"2023-03-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Dead_Cells_plus_v3.2.2 now available!\",\n      \"identifier\": \"cypwn.Dead_Cells_plus_v3.2.2.3.2.2\",\n      \"caption\": \"Dead_Cells_plus_v3.2.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Dead_Cells_plus_v3.2.2.png\",\n      \"date\": \"2023-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PicsArtGold_21.8.6 now available!\",\n      \"identifier\": \"cypwn.PicsArtGold_21.8.6.21.8.6\",\n      \"caption\": \"PicsArtGold_21.8.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PicsArtGold_21.8.6.png\",\n      \"date\": \"2023-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PelletDodge now available!\",\n      \"identifier\": \"cypwn.PelletDodge.b0.8.5\",\n      \"caption\": \"PelletDodge added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PelletDodge.png\",\n      \"date\": \"2023-02-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FacebookNoAds_401.0 now available!\",\n      \"identifier\": \"cypwn.FacebookNoAds_401.0.401.0\",\n      \"caption\": \"FacebookNoAds_401.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FacebookNoAds_401.0.png\",\n      \"date\": \"2023-02-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DarkCloud_6.16.1 now available!\",\n      \"identifier\": \"cypwn.DarkCloud_6.16.1.6.16.1\",\n      \"caption\": \"DarkCloud_6.16.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DarkCloud_6.16.1.png\",\n      \"date\": \"2023-02-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WDBFontOverwrite now available!\",\n      \"identifier\": \"cypwn.WDBFontOverwrite.1.10.7-1\",\n      \"caption\": \"WDBFontOverwrite added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WDBFontOverwrite.png\",\n      \"date\": \"2023-02-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"KillMyOTA-1.1 now available!\",\n      \"identifier\": \"cypwn.KillMyOTA-1.1.1.1\",\n      \"caption\": \"KillMyOTA-1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/KillMyOTA-1.1.png\",\n      \"date\": \"2023-01-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FilzaEscaped16 now available!\",\n      \"identifier\": \"cypwn.FilzaEscaped16.3.7\",\n      \"caption\": \"FilzaEscaped16 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FilzaEscaped16.png\",\n      \"date\": \"2023-01-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SantanderEscaped-0.3 now available!\",\n      \"identifier\": \"cypwn.SantanderEscaped-0.3.1.0\",\n      \"caption\": \"SantanderEscaped-0.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SantanderEscaped-0.3.png\",\n      \"date\": \"2023-01-29\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"BeReal_0.31.0 now available!\",\n      \"identifier\": \"cypwn.BeReal_0.31.0.0.31.0\",\n      \"caption\": \"BeReal_0.31.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/BeReal_0.31.0.png\",\n      \"date\": \"2023-01-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Ally_2.0.23 now available!\",\n      \"identifier\": \"cypwn.Ally_2.0.23.2.0.23\",\n      \"caption\": \"Ally_2.0.23 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Ally_2.0.23.png\",\n      \"date\": \"2023-01-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Keka_1.0.1 now available!\",\n      \"identifier\": \"cypwn.Keka_1.0.1.1.0.1\",\n      \"caption\": \"Keka_1.0.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Keka_1.0.1.png\",\n      \"date\": \"2023-01-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"McClockface.1.5.1 now available!\",\n      \"identifier\": \"cypwn.McClockface.1.5.1.1.5.1\",\n      \"caption\": \"McClockface.1.5.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/McClockface.1.5.1.png\",\n      \"date\": \"2023-01-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Naiad now available!\",\n      \"identifier\": \"cypwn.Naiad.1.0\",\n      \"caption\": \"Naiad added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Naiad.png\",\n      \"date\": \"2022-12-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SharkMessenger_388.0 now available!\",\n      \"identifier\": \"cypwn.SharkMessenger_388.0.388.0\",\n      \"caption\": \"SharkMessenger_388.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SharkMessenger_388.0.png\",\n      \"date\": \"2022-11-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Sonic_3.5 now available!\",\n      \"identifier\": \"cypwn.Sonic_3.5.3.5\",\n      \"caption\": \"Sonic_3.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Sonic_3.5.png\",\n      \"date\": \"2022-11-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Summon_1.8_Satella now available!\",\n      \"identifier\": \"cypwn.Summon_1.8_Satella.1.8\",\n      \"caption\": \"Summon_1.8_Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Summon_1.8_Satella.png\",\n      \"date\": \"2022-11-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Vinegar_2.4.2 now available!\",\n      \"identifier\": \"cypwn.Vinegar_2.4.2.2.4.2\",\n      \"caption\": \"Vinegar_2.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Vinegar_2.4.2.png\",\n      \"date\": \"2022-11-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HeadsUp_5.1.41_Satella now available!\",\n      \"identifier\": \"cypwn.HeadsUp_5.1.41_Satella.5.1.41\",\n      \"caption\": \"HeadsUp_5.1.41_Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HeadsUp_5.1.41_Satella.png\",\n      \"date\": \"2022-11-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Pandolife1.1a_2211.1 now available!\",\n      \"identifier\": \"cypwn.Pandolife1.1a_2211.1.2211.1\",\n      \"caption\": \"Pandolife1.1a_2211.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Pandolife1.1a_2211.1.png\",\n      \"date\": \"2022-11-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"StarVPN_3.6.0 now available!\",\n      \"identifier\": \"cypwn.StarVPN_3.6.0.3.6.0\",\n      \"caption\": \"StarVPN_3.6.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/StarVPN_3.6.0.png\",\n      \"date\": \"2022-11-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"RadarbotVIP_8.7.1 now available!\",\n      \"identifier\": \"cypwn.RadarbotVIP_8.7.1.8.7.1\",\n      \"caption\": \"RadarbotVIP_8.7.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/RadarbotVIP_8.7.1.png\",\n      \"date\": \"2022-11-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VidList_0.5.1 now available!\",\n      \"identifier\": \"cypwn.VidList_0.5.1.0.5.1\",\n      \"caption\": \"VidList_0.5.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_0.5.1.png\",\n      \"date\": \"2022-11-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"cl1m4x now available!\",\n      \"identifier\": \"cypwn.cl1m4x.1.3\",\n      \"caption\": \"cl1m4x added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/cl1m4x.png\",\n      \"date\": \"2022-11-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ChromaHue_2.1.0 now available!\",\n      \"identifier\": \"cypwn.ChromaHue_2.1.0.2.1.0\",\n      \"caption\": \"ChromaHue_2.1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ChromaHue_2.1.0.png\",\n      \"date\": \"2022-11-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Ulysses_27.3k now available!\",\n      \"identifier\": \"cypwn.Ulysses_27.3k.27.3\",\n      \"caption\": \"Ulysses_27.3k added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Ulysses_27.3k.png\",\n      \"date\": \"2022-11-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PostBox-Pocket now available!\",\n      \"identifier\": \"cypwn.PostBox-Pocket.0.8.1\",\n      \"caption\": \"PostBox-Pocket added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-Pocket.png\",\n      \"date\": \"2022-11-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SuperMario64_60FPS_1.2.1 now available!\",\n      \"identifier\": \"cypwn.SuperMario64_60FPS_1.2.1.1.2.1\",\n      \"caption\": \"SuperMario64_60FPS_1.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_60FPS_1.2.1.png\",\n      \"date\": \"2022-10-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SuperMario64_30FPS_1.2.1 now available!\",\n      \"identifier\": \"cypwn.SuperMario64_30FPS_1.2.1.1.2.1\",\n      \"caption\": \"SuperMario64_30FPS_1.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_30FPS_1.2.1.png\",\n      \"date\": \"2022-10-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SuperMario64 now available!\",\n      \"identifier\": \"cypwn.SuperMario64.1.0.0\",\n      \"caption\": \"SuperMario64 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64.png\",\n      \"date\": \"2022-10-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FRLegends++ now available!\",\n      \"identifier\": \"cypwn.FRLegends++.0.3.2\",\n      \"caption\": \"FRLegends++ added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FRLegends++.png\",\n      \"date\": \"2022-10-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WallpapersCentralPro_1.5.2 now available!\",\n      \"identifier\": \"cypwn.WallpapersCentralPro_1.5.2.1.5.2\",\n      \"caption\": \"WallpapersCentralPro_1.5.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WallpapersCentralPro_1.5.2.png\",\n      \"date\": \"2022-09-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LiveWallpapersForMe_2.42.2 now available!\",\n      \"identifier\": \"cypwn.LiveWallpapersForMe_2.42.2.2.42.2\",\n      \"caption\": \"LiveWallpapersForMe_2.42.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveWallpapersForMe_2.42.2.png\",\n      \"date\": \"2022-09-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"YouCamPerfect_5.76.1 now available!\",\n      \"identifier\": \"cypwn.YouCamPerfect_5.76.1.5.76.1\",\n      \"caption\": \"YouCamPerfect_5.76.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/YouCamPerfect_5.76.1.png\",\n      \"date\": \"2022-09-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Star_Map_2.6_Satella now available!\",\n      \"identifier\": \"cypwn.Star_Map_2.6_Satella.2.6\",\n      \"caption\": \"Star_Map_2.6_Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Star_Map_2.6_Satella.png\",\n      \"date\": \"2022-09-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"RefacePro_3.12.0 now available!\",\n      \"identifier\": \"cypwn.RefacePro_3.12.0.3.12.0\",\n      \"caption\": \"RefacePro_3.12.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/RefacePro_3.12.0.png\",\n      \"date\": \"2022-09-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AppCake+ now available!\",\n      \"identifier\": \"cypwn.AppCake+.7.2.2\",\n      \"caption\": \"AppCake+ added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AppCake+.png\",\n      \"date\": \"2022-09-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"NewOS now available!\",\n      \"identifier\": \"cypwn.NewOS.1.0\",\n      \"caption\": \"NewOS added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/NewOS.png\",\n      \"date\": \"2022-09-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AddRepo now available!\",\n      \"identifier\": \"cypwn.AddRepo.1.0.2\",\n      \"caption\": \"AddRepo added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AddRepo.png\",\n      \"date\": \"2022-09-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Root now available!\",\n      \"identifier\": \"cypwn.Root.1.0.0\",\n      \"caption\": \"Root added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Root.png\",\n      \"date\": \"2022-09-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SleepCycle_Premium now available!\",\n      \"identifier\": \"cypwn.SleepCycle_Premium.6.22.34\",\n      \"caption\": \"SleepCycle_Premium added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SleepCycle_Premium.png\",\n      \"date\": \"2022-09-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Alarmy_6.68.0+Satella now available!\",\n      \"identifier\": \"cypwn.Alarmy_6.68.0+Satella.6.68.0\",\n      \"caption\": \"Alarmy_6.68.0+Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Alarmy_6.68.0+Satella.png\",\n      \"date\": \"2022-09-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Adobe_Express_11.3.0+Satella now available!\",\n      \"identifier\": \"cypwn.Adobe_Express_11.3.0+Satella.11.3.0\",\n      \"caption\": \"Adobe_Express_11.3.0+Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Adobe_Express_11.3.0+Satella.png\",\n      \"date\": \"2022-08-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Pixelmator2.7.3 now available!\",\n      \"identifier\": \"cypwn.Pixelmator2.7.3.2.7.3\",\n      \"caption\": \"Pixelmator2.7.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Pixelmator2.7.3.png\",\n      \"date\": \"2022-08-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FineReader_PDF_Pro_15.4.2 now available!\",\n      \"identifier\": \"cypwn.FineReader_PDF_Pro_15.4.2.15.4.2\",\n      \"caption\": \"FineReader_PDF_Pro_15.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FineReader_PDF_Pro_15.4.2.png\",\n      \"date\": \"2022-08-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VideoShow_5.7.5 now available!\",\n      \"identifier\": \"cypwn.VideoShow_5.7.5.5.7.5\",\n      \"caption\": \"VideoShow_5.7.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VideoShow_5.7.5.png\",\n      \"date\": \"2022-08-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iTablaPro_11.6.1 now available!\",\n      \"identifier\": \"cypwn.iTablaPro_11.6.1.11.6.1\",\n      \"caption\": \"iTablaPro_11.6.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iTablaPro_11.6.1.png\",\n      \"date\": \"2022-08-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HdoPlay-1-0-2-JKCrack now available!\",\n      \"identifier\": \"cypwn.HdoPlay-1-0-2-JKCrack.1.0.2\",\n      \"caption\": \"HdoPlay-1-0-2-JKCrack added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HdoPlay-1-0-2-JKCrack.png\",\n      \"date\": \"2022-08-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Santander now available!\",\n      \"identifier\": \"cypwn.Santander.1.0\",\n      \"caption\": \"Santander added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Santander.png\",\n      \"date\": \"2022-08-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Candy_Crush now available!\",\n      \"identifier\": \"cypwn.Candy_Crush.1.226.0\",\n      \"caption\": \"Candy_Crush added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Candy_Crush.png\",\n      \"date\": \"2022-08-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Wallcraft_Pro_2.8 now available!\",\n      \"identifier\": \"cypwn.Wallcraft_Pro_2.8.2.8\",\n      \"caption\": \"Wallcraft_Pro_2.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Wallcraft_Pro_2.8.png\",\n      \"date\": \"2022-08-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Jaility now available!\",\n      \"identifier\": \"cypwn.Jaility.1.2\",\n      \"caption\": \"Jaility added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Jaility.png\",\n      \"date\": \"2022-08-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PostBox-0.8-beta now available!\",\n      \"identifier\": \"cypwn.PostBox-0.8-beta.0.8\",\n      \"caption\": \"PostBox-0.8-beta added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-0.8-beta.png\",\n      \"date\": \"2022-07-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"kok3shidoll_v2.2.1 now available!\",\n      \"identifier\": \"cypwn.kok3shidoll_v2.2.1.2.2.1\",\n      \"caption\": \"kok3shidoll_v2.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/kok3shidoll_v2.2.1.png\",\n      \"date\": \"2022-05-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Sync.ME_VIP_11.17.3 now available!\",\n      \"identifier\": \"cypwn.Sync.ME_VIP_11.17.3.11.17.3\",\n      \"caption\": \"Sync.ME_VIP_11.17.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Sync.ME_VIP_11.17.3.png\",\n      \"date\": \"2022-05-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VivaVideo_VIP_9.3.6 now available!\",\n      \"identifier\": \"cypwn.VivaVideo_VIP_9.3.6.9.3.6\",\n      \"caption\": \"VivaVideo_VIP_9.3.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VivaVideo_VIP_9.3.6.png\",\n      \"date\": \"2022-05-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ClarityWallpaperPro7.2.6 now available!\",\n      \"identifier\": \"cypwn.ClarityWallpaperPro7.2.6.7.2.6\",\n      \"caption\": \"ClarityWallpaperPro7.2.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ClarityWallpaperPro7.2.6.png\",\n      \"date\": \"2022-05-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DualgramPro_1.22 now available!\",\n      \"identifier\": \"cypwn.DualgramPro_1.22.1.22\",\n      \"caption\": \"DualgramPro_1.22 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DualgramPro_1.22.png\",\n      \"date\": \"2022-05-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"remoteMousePro_4.211 now available!\",\n      \"identifier\": \"cypwn.remoteMousePro_4.211.4.211\",\n      \"caption\": \"remoteMousePro_4.211 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/remoteMousePro_4.211.png\",\n      \"date\": \"2022-05-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Dystopia_0.01 now available!\",\n      \"identifier\": \"cypwn.Dystopia_0.01.0.01\",\n      \"caption\": \"Dystopia_0.01 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia_0.01.png\",\n      \"date\": \"2022-04-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Retro_0.2~88 now available!\",\n      \"identifier\": \"cypwn.Retro_0.2~88.0.2\",\n      \"caption\": \"Retro_0.2~88 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Retro_0.2~88.png\",\n      \"date\": \"2022-04-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ScreenshotX1.0 now available!\",\n      \"identifier\": \"cypwn.ScreenshotX1.0.1.0\",\n      \"caption\": \"ScreenshotX1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenshotX1.0.png\",\n      \"date\": \"2022-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ScreenSaver++1.3.1 now available!\",\n      \"identifier\": \"cypwn.ScreenSaver++1.3.1.1.3.1\",\n      \"caption\": \"ScreenSaver++1.3.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenSaver++1.3.1.png\",\n      \"date\": \"2022-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"OldOS_1.0.18 now available!\",\n      \"identifier\": \"cypwn.OldOS_1.0.18.1.0.18\",\n      \"caption\": \"OldOS_1.0.18 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS_1.0.18.png\",\n      \"date\": \"2022-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Provenance2.1 now available!\",\n      \"identifier\": \"cypwn.Provenance2.1.2.1.0\",\n      \"caption\": \"Provenance2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Provenance2.1.png\",\n      \"date\": \"2022-04-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    }\n  ]\n}", "creation_timestamp": "2026-09-06T23:11:01.986954Z"}, {"uuid": "d9989b65-b90a-4fdb-9c8a-5dd595e14c2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://gist.github.com/cllamasllamas/ee311b4ae1fae2c9979460515978c9dd", "content": "{\n  \"name\": \"CyPwn IPA Library (Cleaned)\",\n  \"identifier\": \"xyz.cypwn.ipalibrary\",\n  \"subtitle\": \"CyPwn cleaned - unique bundleIdentifiers only\",\n  \"iconURL\": \"https://repo.cypwn.xyz/assets/images/cypwn_small.png\",\n  \"website\": \"https://ipa.cypwn.xyz\",\n  \"sourceURL\": \"https://your-host.com/cypwn-cleaned.json\",\n  \"tintColor\": \"FFC300\",\n  \"featuredApps\": [\n    \"Ed0ardo.CyPwnStore\"\n  ],\n  \"crypto\": {\n    \"btc\": \"bc1qy5xq4xdw4w83gpauxskassck4rwvpe7xdlvtws\"\n  },\n  \"apps\": [\n    {\n      \"name\": \"Stremio-2.0.6\",\n      \"bundleIdentifier\": \"com.stremio.pal\",\n      \"developerName\": \"Stremio-2.0.6 x CyPwn\",\n      \"version\": \"2.0.6\",\n      \"versionDate\": \"2026-07-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Stremio-2.0.6.ipa\",\n      \"localizedDescription\": \"\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-2.0.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 77175193,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Stremio-2.0.6/Stremio-2.0.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"PowerWarriors_18.0\",\n      \"bundleIdentifier\": \"com.ZombiAriel.Power-Warriors\",\n      \"developerName\": \"PowerWarriors_18.0 x CyPwn\",\n      \"version\": \"18\",\n      \"versionDate\": \"2026-07-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PowerWarriors_18.0.ipa\",\n      \"localizedDescription\": \"Power Warriors iOS port by mancha\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PowerWarriors_18.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 174126530,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PowerWarriors_18.0/PowerWarriors_18.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CloverPit-1.4.8\",\n      \"bundleIdentifier\": \"com.PanikArcade.CloverPit\",\n      \"developerName\": \"CloverPit-1.4.8 x CyPwn\",\n      \"version\": \"1.4.8\",\n      \"versionDate\": \"2026-07-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CloverPit-1.4.8.ipa\",\n      \"localizedDescription\": \"A rogue-lite slot machine nightmare\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CloverPit-1.4.8.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 146328780,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/CloverPit-1.4.8/CloverPit-1.4.8-4.png\"\n      ]\n    },\n    {\n      \"name\": \"Stremio-1.3.6\",\n      \"bundleIdentifier\": \"com.stremio.ios\",\n      \"developerName\": \"Stremio-1.3.6 x CyPwn\",\n      \"version\": \"1.3.6\",\n      \"versionDate\": \"2026-02-24\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Stremio-1.3.6.ipa\",\n      \"localizedDescription\": \"Watch videos, movies, TV series and TV channels instantly.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-1.3.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 79429632,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Stremio-1.3.6/Stremio-1.3.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Vesc_Tool_6.06.2\",\n      \"bundleIdentifier\": \"com.vesc-project.vesc-tool\",\n      \"developerName\": \"Vesc_Tool_6.06.2 x CyPwn\",\n      \"version\": \"6.06.2\",\n      \"versionDate\": \"2026-02-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Vesc_Tool_6.06.2.ipa\",\n      \"localizedDescription\": \"Configure your VESC Ecosystem\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Vesc_Tool_6.06.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 90450165,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Terraria_4.5.0\",\n      \"bundleIdentifier\": \"com.505games.terraria\",\n      \"developerName\": \"Terraria_4.5.0 x CyPwn\",\n      \"version\": \"4.5.0\",\n      \"versionDate\": \"2026-01-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Terraria_4.5.0.ipa\",\n      \"localizedDescription\": \"Terraria 4.5.0\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Terraria_4.5.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 189278453,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Terraria_4.5.0/Terraria_4.5.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Violyn_1_4_4-2\",\n      \"bundleIdentifier\": \"Lilliana.Violyn\",\n      \"developerName\": \"Violyn_1_4_4-2 x CyPwn\",\n      \"version\": \"1.4.4\",\n      \"versionDate\": \"2026-01-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Violyn_1_4_4-2.ipa\",\n      \"localizedDescription\": \"Search and download from CyDown\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Violyn_1_4_4-2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1279262,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Violyn_1_4_4-2/Violyn_1_4_4-2-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Violyn_1_4_4-2/Violyn_1_4_4-2-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Violyn_1_4_4-2/Violyn_1_4_4-2-2.png\"\n      ]\n    },\n    {\n      \"name\": \"iTorrent\",\n      \"bundleIdentifier\": \"com.xitrix.iTorrent2\",\n      \"developerName\": \"iTorrent x CyPwn\",\n      \"version\": \"2.1.1\",\n      \"versionDate\": \"2025-12-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iTorrent.ipa\",\n      \"localizedDescription\": \"iTorrent v2.1.1-1 by XITRIX iOS 16+\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iTorrent.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8357150,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTorrent/iTorrent-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTorrent/iTorrent-1.png\"\n      ]\n    },\n    {\n      \"name\": \"True_Skate_1.5.102\",\n      \"bundleIdentifier\": \"com.trueaxis.skate\",\n      \"developerName\": \"True_Skate_1.5.102 x CyPwn\",\n      \"version\": \"1.5.102\",\n      \"versionDate\": \"2025-12-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/True_Skate_1.5.102.ipa\",\n      \"localizedDescription\": \"The ultimate skateboarding sim\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/True_Skate_1.5.102.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 121519472,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/True_Skate_1.5.102/True_Skate_1.5.102-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Gopeed-v1.8.3-ios\",\n      \"bundleIdentifier\": \"com.gopeed.gopeed\",\n      \"developerName\": \"Gopeed-v1.8.3-ios x CyPwn\",\n      \"version\": \"1.8.3\",\n      \"versionDate\": \"2025-12-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Gopeed-v1.8.3-ios.ipa\",\n      \"localizedDescription\": \"A modern download manager\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed-v1.8.3-ios.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 41366323,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Gopeed-v1.8.3-ios/Gopeed-v1.8.3-ios-0.png\"\n      ]\n    },\n    {\n      \"name\": \"OldOS\",\n      \"bundleIdentifier\": \"com.zrc.BudgetingBuddy\",\n      \"developerName\": \"OldOS x CyPwn\",\n      \"version\": \"2.0.7\",\n      \"versionDate\": \"2025-12-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/OldOS.ipa\",\n      \"localizedDescription\": \"Recreating iOS 4 in Swift.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 83267420,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/OldOS/OldOS-4.png\"\n      ]\n    },\n    {\n      \"name\": \"InjectionIPA_v5.0\",\n      \"bundleIdentifier\": \"injectionDylibToIpa.Sniper\",\n      \"developerName\": \"InjectionIPA_v5.0 x CyPwn\",\n      \"version\": \"5.0\",\n      \"versionDate\": \"2025-12-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/InjectionIPA_v5.0.ipa\",\n      \"localizedDescription\": \"Dylib injector tool\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/InjectionIPA_v5.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 4424990,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/InjectionIPA_v5.0/InjectionIPA_v5.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"DLiPA_v1.1\",\n      \"bundleIdentifier\": \"com.ahmedbafkir.dlipa\",\n      \"developerName\": \"DLiPA_v1.1 x CyPwn\",\n      \"version\": \"1.1\",\n      \"versionDate\": \"2025-12-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DLiPA_v1.1.ipa\",\n      \"localizedDescription\": \"An iOS app inspired by ipatool.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DLiPA_v1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 480112,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/DLiPA_v1.1/DLiPA_v1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Fortnite+Release-7.40-CL-5011364\",\n      \"bundleIdentifier\": \"3bda04b065c347de824ac05c8bb874bf\",\n      \"developerName\": \"Fortnite+Release-7.40-CL-5011364 x CyPwn\",\n      \"version\": \"7.40.2\",\n      \"versionDate\": \"2025-11-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Fortnite+Release-7.40-CL-5011364.ipa\",\n      \"localizedDescription\": \"Fortnite season 7 private server\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Fortnite+Release-7.40-CL-5011364.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 98859745,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Fortnite+Release-7.40-CL-5011364/Fortnite+Release-7.40-CL-5011364-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Fortnite+Release-7.40-CL-5011364/Fortnite+Release-7.40-CL-5011364-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Fortnite+Release-7.40-CL-5011364/Fortnite+Release-7.40-CL-5011364-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Spotube-iOS\",\n      \"bundleIdentifier\": \"oss.krtirtho.spotube.stable\",\n      \"developerName\": \"Spotube-iOS x CyPwn\",\n      \"version\": \"5.1.0\",\n      \"versionDate\": \"2025-11-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Spotube-iOS.ipa\",\n      \"localizedDescription\": \"Open source music client\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Spotube-iOS.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 34980495,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spotube-iOS/Spotube-iOS-4.png\"\n      ]\n    },\n    {\n      \"name\": \"PotatoIM\",\n      \"bundleIdentifier\": \"org.potatochat.PotatoEnterprise\",\n      \"developerName\": \"PotatoIM x CyPwn\",\n      \"version\": \"2.47.207251\",\n      \"versionDate\": \"2025-10-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PotatoIM.ipa\",\n      \"localizedDescription\": \"Chinese Telegram Clone\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PotatoIM.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 160390184,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PotatoIM/PotatoIM-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Asspp_2.3\",\n      \"bundleIdentifier\": \"wiki.qaq.Asspp\",\n      \"developerName\": \"Asspp_2.3 x CyPwn\",\n      \"version\": \"2.3\",\n      \"versionDate\": \"2025-09-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Asspp_2.3.ipa\",\n      \"localizedDescription\": \"Multi-account App Store management\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Asspp_2.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 10223616,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Asspp_2.3/Asspp_2.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"GoCoEdit_23.0\",\n      \"bundleIdentifier\": \"com.gogolith.gocoed\",\n      \"developerName\": \"GoCoEdit_23.0 x CyPwn\",\n      \"version\": \"23.0\",\n      \"versionDate\": \"2025-09-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/GoCoEdit_23.0.ipa\",\n      \"localizedDescription\": \"Fast iOS Remote & Local Code Editor\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/GoCoEdit_23.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14722007,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/GoCoEdit_23.0/GoCoEdit_23.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Deltarune_v727\",\n      \"bundleIdentifier\": \"com.ates.DELTARUNE\",\n      \"developerName\": \"Deltarune_v727 x CyPwn\",\n      \"version\": \"0\",\n      \"versionDate\": \"2025-08-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Deltarune_v727.ipa\",\n      \"localizedDescription\": \"Deltarune chapter 1-4\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Deltarune_v727.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 495777218,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Deltarune_v727/Deltarune_v727-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Deltarune_v727/Deltarune_v727-1.png\"\n      ]\n    },\n    {\n      \"name\": \"BazaartPremium_10.8.0\",\n      \"bundleIdentifier\": \"co.bazaart.app\",\n      \"developerName\": \"BazaartPremium_10.8.0 x CyPwn\",\n      \"version\": \"10.8.0\",\n      \"versionDate\": \"2025-08-29\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/BazaartPremium_10.8.0.ipa\",\n      \"localizedDescription\": \"Bazaart Premium unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/BazaartPremium_10.8.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 71837941,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/BazaartPremium_10.8.0/BazaartPremium_10.8.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VPN_FAST\",\n      \"bundleIdentifier\": \"com.hedef.vpnunlimitedproxy\",\n      \"developerName\": \"VPN_FAST x CyPwn\",\n      \"version\": \"1.8.6\",\n      \"versionDate\": \"2025-08-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VPN_FAST.ipa\",\n      \"localizedDescription\": \"Premium unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_FAST.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 25333596,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_FAST/VPN_FAST-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_FAST/VPN_FAST-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_FAST/VPN_FAST-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Tasks_Create_Live_Activities\",\n      \"bundleIdentifier\": \"rihab.liveTasks\",\n      \"developerName\": \"Tasks_Create_Live_Activities x CyPwn\",\n      \"version\": \"1.01\",\n      \"versionDate\": \"2025-08-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Tasks_Create_Live_Activities.ipa\",\n      \"localizedDescription\": \"Tasks cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Tasks_Create_Live_Activities.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 288655,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Tasks_Create_Live_Activities/Tasks_Create_Live_Activities-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Tasks_Create_Live_Activities/Tasks_Create_Live_Activities-1.png\"\n      ]\n    },\n    {\n      \"name\": \"ChatGPTw15\",\n      \"bundleIdentifier\": \"com.akuma.chatgptv15\",\n      \"developerName\": \"ChatGPTw15 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-08-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ChatGPTw15.ipa\",\n      \"localizedDescription\": \"ChatGPT for iOS 15!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ChatGPTw15.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2537553,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ChatGPTw15/ChatGPTw15-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VPN_Proxy_Master\",\n      \"bundleIdentifier\": \"net.dreamdownloader.vpn\",\n      \"developerName\": \"VPN_Proxy_Master x CyPwn\",\n      \"version\": \"2.2.8\",\n      \"versionDate\": \"2025-08-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VPN_Proxy_Master.ipa\",\n      \"localizedDescription\": \"VPN - Proxy Master cracked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Proxy_Master.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 13841203,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Proxy_Master/VPN_Proxy_Master-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Proxy_Master/VPN_Proxy_Master-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Proxy_Master/VPN_Proxy_Master-2.png\"\n      ]\n    },\n    {\n      \"name\": \"VPN_Freedom\",\n      \"bundleIdentifier\": \"com.vfulup.vpn\",\n      \"developerName\": \"VPN_Freedom x CyPwn\",\n      \"version\": \"1.2.2\",\n      \"versionDate\": \"2025-08-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VPN_Freedom.ipa\",\n      \"localizedDescription\": \"VPN Freedom cracked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Freedom.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6039797,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Freedom/VPN_Freedom-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/VPN_Freedom/VPN_Freedom-1.png\"\n      ]\n    },\n    {\n      \"name\": \"bitchat_1.2.1\",\n      \"bundleIdentifier\": \"nochat.bitchat.hehbveh\",\n      \"developerName\": \"bitchat_1.2.1 x CyPwn\",\n      \"version\": \"1.2.1\",\n      \"versionDate\": \"2025-08-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/bitchat_1.2.1.ipa\",\n      \"localizedDescription\": \"bitchat for iOS 15 and up!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2243952,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/bitchat_1.2.1/bitchat_1.2.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"The_Free_VPN\",\n      \"bundleIdentifier\": \"com.thefreevpn\",\n      \"developerName\": \"The_Free_VPN x CyPwn\",\n      \"version\": \"1.10.1\",\n      \"versionDate\": \"2025-08-02\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/The_Free_VPN.ipa\",\n      \"localizedDescription\": \"The Free VPN\u2122 crack!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/The_Free_VPN.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 102341017,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/The_Free_VPN/The_Free_VPN-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/The_Free_VPN/The_Free_VPN-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/The_Free_VPN/The_Free_VPN-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Shark_Arsenal_4.0.14\",\n      \"bundleIdentifier\": \"com.blackshark.peripheral.community\",\n      \"developerName\": \"Shark_Arsenal_4.0.14 x CyPwn\",\n      \"version\": \"4.0.14\",\n      \"versionDate\": \"2025-07-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Shark_Arsenal_4.0.14.ipa\",\n      \"localizedDescription\": \"Control Black Shark gear on iOS\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Shark_Arsenal_4.0.14.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 79754690,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Shark_Arsenal_4.0.14/Shark_Arsenal_4.0.14-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FileBrowser_Pro_25.7\",\n      \"bundleIdentifier\": \"com.stratospherix.filebrowserbiz\",\n      \"developerName\": \"FileBrowser_Pro_25.7 x CyPwn\",\n      \"version\": \"25.7\",\n      \"versionDate\": \"2025-07-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FileBrowser_Pro_25.7.ipa\",\n      \"localizedDescription\": \"FileBrowser Pro 25.7\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.7.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 28416409,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/FileBrowser_Pro_25.7/FileBrowser_Pro_25.7-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Amethyst_1.0\",\n      \"bundleIdentifier\": \"org.angelauramc.amethyst\",\n      \"developerName\": \"Amethyst_1.0 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-07-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Amethyst_1.0.ipa\",\n      \"localizedDescription\": \"Minecraft: Java Edition Launcher\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Amethyst_1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 30125588,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Amethyst_1.0/Amethyst_1.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Bitchat\",\n      \"bundleIdentifier\": \"chat.bitchat\",\n      \"developerName\": \"Bitchat x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2025-07-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/bitchat_1.0.0_1752444072.ipa\",\n      \"localizedDescription\": \"Decentralized Bluetooth mesh chat.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.0.0_1752444072.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 563496,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Bitchat/bitchat_1.0.0_1752444072-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Bitchat/bitchat_1.0.0_1752444072-1.png\"\n      ]\n    },\n    {\n      \"name\": \"Little Nightmares\",\n      \"bundleIdentifier\": \"com.playdigious.littlenightmares\",\n      \"developerName\": \"Little Nightmares x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2025-07-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LittleNightmares_1.0.2.ipa\",\n      \"localizedDescription\": \"Play as Six, a lone child trapped in the Maw, a vast metal vessel filled with monstrous adults. Escape before it\u2019s too late.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LittleNightmares_1.0.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 13371337,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Little Nightmares/LittleNightmares_1.0.2-0.jpg\"\n      ]\n    },\n    {\n      \"name\": \"SQLiteFlow_5.8.6\",\n      \"bundleIdentifier\": \"com.hyperobjc.SQLiteFlow-iOS\",\n      \"developerName\": \"SQLiteFlow_5.8.6 x CyPwn\",\n      \"version\": \"5.8.6\",\n      \"versionDate\": \"2025-06-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SQLiteFlow_5.8.6.ipa\",\n      \"localizedDescription\": \"SQLiteFlow 5.8.6\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SQLiteFlow_5.8.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 4466933,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/SQLiteFlow_5.8.6/SQLiteFlow_5.8.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Scrcpy_Remote_2.4\",\n      \"bundleIdentifier\": \"com.mobile.scrcpy-ios\",\n      \"developerName\": \"Scrcpy_Remote_2.4 x CyPwn\",\n      \"version\": \"2.4\",\n      \"versionDate\": \"2025-05-22\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Scrcpy_Remote_2.4.ipa\",\n      \"localizedDescription\": \"scrcpy for iOS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Scrcpy_Remote_2.4.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9678356,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Scrcpy_Remote_2.4/Scrcpy_Remote_2.4-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FTPManager_8.5.4\",\n      \"bundleIdentifier\": \"com.skyjos.ftpmanager\",\n      \"developerName\": \"FTPManager_8.5.4 x CyPwn\",\n      \"version\": \"8.5.4\",\n      \"versionDate\": \"2025-05-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FTPManager_8.5.4.ipa\",\n      \"localizedDescription\": \"Fully featured FTP client\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FTPManager_8.5.4.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 24222105,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/FTPManager_8.5.4/FTPManager_8.5.4-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Stremio_1.0.1-17\",\n      \"bundleIdentifier\": \"com.stremio.one\",\n      \"developerName\": \"Stremio_1.0.1-17 x CyPwn\",\n      \"version\": \"1.0.1\",\n      \"versionDate\": \"2025-05-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Stremio_1.0.1-17.ipa\",\n      \"localizedDescription\": \"Stremio 1.0.1-17\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio_1.0.1-17.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 64026050,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Stremio_1.0.1-17/Stremio_1.0.1-17-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Theta_1.5\",\n      \"bundleIdentifier\": \"com.burbn.instagram\",\n      \"developerName\": \"Theta_1.5 x CyPwn\",\n      \"version\": \"380.0.0\",\n      \"versionDate\": \"2025-05-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Theta_1.5.ipa\",\n      \"localizedDescription\": \"Instagram tweak by objc_msgSend\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Theta_1.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 234807623,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Theta_1.5/Theta_1.5-0.png\"\n      ]\n    },\n    {\n      \"name\": \"UniversalPaperclips\",\n      \"bundleIdentifier\": \"com.everybodyhouse.paperclipsuniquetest\",\n      \"developerName\": \"UniversalPaperclips x CyPwn\",\n      \"version\": \"2.1.0\",\n      \"versionDate\": \"2025-05-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/UniversalPaperclips.ipa\",\n      \"localizedDescription\": \"Classic clicker\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/UniversalPaperclips.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 16850616,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/UniversalPaperclips/UniversalPaperclips-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Pokecut_4.4.2\",\n      \"bundleIdentifier\": \"com.seawardhyacinth.pokecut\",\n      \"developerName\": \"Pokecut_4.4.2 x CyPwn\",\n      \"version\": \"4.4.2\",\n      \"versionDate\": \"2025-05-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Pokecut_4.4.2.ipa\",\n      \"localizedDescription\": \"Pokecut Max for free.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Pokecut_4.4.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 184538890,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Pokecut_4.4.2/Pokecut_4.4.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"ProCam_14.7.3\",\n      \"bundleIdentifier\": \"gemini.ProCam-2\",\n      \"developerName\": \"ProCam_14.7.3 x CyPwn\",\n      \"version\": \"14.7.3\",\n      \"versionDate\": \"2025-05-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ProCam_14.7.3.ipa\",\n      \"localizedDescription\": \"Best premium all-in-one camera app.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCam_14.7.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 69048729,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCam_14.7.3/ProCam_14.7.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"maid2_0_7\",\n      \"bundleIdentifier\": \"com.danemadsen.maid\",\n      \"developerName\": \"maid2_0_7 x CyPwn\",\n      \"version\": \"2.0.7\",\n      \"versionDate\": \"2025-05-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/maid2_0_7.ipa\",\n      \"localizedDescription\": \"Cross-platform Flutter ai app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/maid2_0_7.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 31604080,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/maid2_0_7/maid2_0_7-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Ignited_1.8.5\",\n      \"bundleIdentifier\": \"com.litritt.ignited\",\n      \"developerName\": \"Ignited_1.8.5 x CyPwn\",\n      \"version\": \"1.8.5\",\n      \"versionDate\": \"2025-05-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Ignited_1.8.5.ipa\",\n      \"localizedDescription\": \"Ignited v1.8.5 for iOS 15\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Ignited_1.8.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 65556971,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Ignited_1.8.5/Ignited_1.8.5-0.png\"\n      ]\n    },\n    {\n      \"name\": \"EeveeSpotify-5.9.5-9.0.36\",\n      \"bundleIdentifier\": \"com.spotify.client\",\n      \"developerName\": \"EeveeSpotify-5.9.5-9.0.36 x CyPwn\",\n      \"version\": \"9.0.36\",\n      \"versionDate\": \"2025-04-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/EeveeSpotify-5.9.5-9.0.36.ipa\",\n      \"localizedDescription\": \"EeveeSpotify-5.9.5-9.0.36\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.9.5-9.0.36.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 84190167,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/EeveeSpotify-5.9.5-9.0.36/EeveeSpotify-5.9.5-9.0.36-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Balatro_1.0.1o\",\n      \"bundleIdentifier\": \"org.htf65jud.balatro\",\n      \"developerName\": \"Balatro_1.0.1o x CyPwn\",\n      \"version\": \"1.0.1o\",\n      \"versionDate\": \"2025-04-24\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Balatro_1.0.1o.ipa\",\n      \"localizedDescription\": \"Balatro_1.0.1o\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Balatro_1.0.1o.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 61708697,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Balatro_1.0.1o/Balatro_1.0.1o-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CrazyCattle3D_1.0.0\",\n      \"bundleIdentifier\": \"com.nathan.cc3dios\",\n      \"developerName\": \"CrazyCattle3D_1.0.0 x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2025-04-22\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CrazyCattle3D_1.0.0.ipa\",\n      \"localizedDescription\": \"Crazy Cattle 3D Battle Royale\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CrazyCattle3D_1.0.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 59422801,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CrazyCattle3D_1.0.0/CrazyCattle3D_1.0.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FL_Studio_Mobile_4.7.7_SatellaJailed\",\n      \"bundleIdentifier\": \"com.imageline.FLStudioMobileHD\",\n      \"developerName\": \"FL_Studio_Mobile_4.7.7_SatellaJailed x CyPwn\",\n      \"version\": \"4.7.7\",\n      \"versionDate\": \"2025-04-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FL_Studio_Mobile_4.7.7_SatellaJailed.ipa\",\n      \"localizedDescription\": \"FL Studio Mobile 4.7.7 Satella\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FL_Studio_Mobile_4.7.7_SatellaJailed.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 234409164,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/FL_Studio_Mobile_4.7.7_SatellaJailed/FL_Studio_Mobile_4.7.7_SatellaJailed-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Photomath_8.42.0\",\n      \"bundleIdentifier\": \"com.microblink.PhotoMath\",\n      \"developerName\": \"Photomath_8.42.0 x CyPwn\",\n      \"version\": \"8.42.0\",\n      \"versionDate\": \"2025-04-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Photomath_8.42.0.ipa\",\n      \"localizedDescription\": \"Photomath 8.42.0 Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Photomath_8.42.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17196646,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Photomath_8.42.0/Photomath_8.42.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"iTransmission\",\n      \"bundleIdentifier\": \"com.plusmediapps.itransmission\",\n      \"developerName\": \"iTransmission x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-03-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iTransmission.ipa\",\n      \"localizedDescription\": \"Another torrent client for iOS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iTransmission.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3722444,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTransmission/iTransmission-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTransmission/iTransmission-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/iTransmission/iTransmission-2.png\"\n      ]\n    },\n    {\n      \"name\": \"LumaFusion_3.0.10_iOS_15.0\",\n      \"bundleIdentifier\": \"com.luma-touch.LumaFusion\",\n      \"developerName\": \"LumaFusion_3.0.10_iOS_15.0 x CyPwn\",\n      \"version\": \"3.0.10\",\n      \"versionDate\": \"2025-03-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LumaFusion_3.0.10_iOS_15.0.ipa\",\n      \"localizedDescription\": \"LumaFusion 3.0.10\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LumaFusion_3.0.10_iOS_15.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 128461045,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/LumaFusion_3.0.10_iOS_15.0/LumaFusion_3.0.10_iOS_15.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CyPwnStore_7.1\",\n      \"bundleIdentifier\": \"Ed0ardo.CyPwnStore\",\n      \"developerName\": \"CyPwnStore_7.1 x CyPwn\",\n      \"version\": \"7.1\",\n      \"versionDate\": \"2025-03-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CyPwnStore_7.1.ipa\",\n      \"localizedDescription\": \"Download CyPwn Debs and Apps easily\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CyPwnStore_7.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 875048,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CyPwnStore_7.1/CyPwnStore_7.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Remoter_Pro_6.2.1\",\n      \"bundleIdentifier\": \"com.remoterlabs.remotercomplete\",\n      \"developerName\": \"Remoter_Pro_6.2.1 x CyPwn\",\n      \"version\": \"6.2.1\",\n      \"versionDate\": \"2025-03-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Remoter_Pro_6.2.1.ipa\",\n      \"localizedDescription\": \"A powerful remote desktop client.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Remoter_Pro_6.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 24798822,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Remoter_Pro_6.2.1/Remoter_Pro_6.2.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Screens_4.12.11\",\n      \"bundleIdentifier\": \"com.edovia.screens.3.ios\",\n      \"developerName\": \"Screens_4.12.11 x CyPwn\",\n      \"version\": \"4.12.11\",\n      \"versionDate\": \"2025-03-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Screens_4.12.11.ipa\",\n      \"localizedDescription\": \"Take control of your computers.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Screens_4.12.11.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 11335106,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Screens_4.12.11/Screens_4.12.11-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Jump_9.8.0\",\n      \"bundleIdentifier\": \"4GU63N96WE.com.p5sys.jumpdesktop\",\n      \"developerName\": \"Jump_9.8.0 x CyPwn\",\n      \"version\": \"9.8.0\",\n      \"versionDate\": \"2025-03-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Jump_9.8.0.ipa\",\n      \"localizedDescription\": \"RDP and VNC application\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Jump_9.8.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 28405923,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Jump_9.8.0/Jump_9.8.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Age_of_History_II_Europe_1.0713\",\n      \"bundleIdentifier\": \"age.of.civilizations2.jakowski.lukasz.ios.europe\",\n      \"developerName\": \"Age_of_History_II_Europe_1.0713 x CyPwn\",\n      \"version\": \"1.0713\",\n      \"versionDate\": \"2025-03-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Age_of_History_II_Europe_1.0713.ipa\",\n      \"localizedDescription\": \"Age of History II Europe\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Age_of_History_II_Europe_1.0713.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 157905059,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Age_of_History_II_Europe_1.0713/Age_of_History_II_Europe_1.0713-0.png\"\n      ]\n    },\n    {\n      \"name\": \"fGet_1.5.19_NoAds\",\n      \"bundleIdentifier\": \"com.penguinbit.fastdownload\",\n      \"developerName\": \"fGet_1.5.19_NoAds x CyPwn\",\n      \"version\": \"1.5.19\",\n      \"versionDate\": \"2025-02-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/fGet_1.5.19_NoAds.ipa\",\n      \"localizedDescription\": \"Fast file downloader/manager\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/fGet_1.5.19_NoAds.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14501806,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/fGet_1.5.19_NoAds/fGet_1.5.19_NoAds-0.png\"\n      ]\n    },\n    {\n      \"name\": \"atvTools_1.5.0\",\n      \"bundleIdentifier\": \"dev.vodik7.atvtools.atvTools\",\n      \"developerName\": \"atvTools_1.5.0 x CyPwn\",\n      \"version\": \"1.5.0\",\n      \"versionDate\": \"2025-02-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/atvTools_1.5.0.ipa\",\n      \"localizedDescription\": \"Must-have app for Android/Google TV\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/atvTools_1.5.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 20908605,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/atvTools_1.5.0/atvTools_1.5.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Notepad-_1.0\",\n      \"bundleIdentifier\": \"com.meepo.Notepad\",\n      \"developerName\": \"Notepad-_1.0 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2025-02-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Notepad-_1.0.ipa\",\n      \"localizedDescription\": \"A convenient coding notepad for iOS\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Notepad-_1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 608389,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Notepad-_1.0/Notepad-_1.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"HollowKnight\",\n      \"bundleIdentifier\": \"com.GLESign.HollowKnight\",\n      \"developerName\": \"HollowKnight x CyPwn\",\n      \"version\": \"1.5.78.11833\",\n      \"versionDate\": \"2025-02-02\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HollowKnight.ipa\",\n      \"localizedDescription\": \"iOS port of Hollow Knight. Created by: GLESign\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HollowKnight.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1056964608,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/HollowKnight/HollowKnight-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Textastic_9.9.3\",\n      \"bundleIdentifier\": \"com.textasticapp.textastic-universal\",\n      \"developerName\": \"Textastic_9.9.3 x CyPwn\",\n      \"version\": \"9.9.3\",\n      \"versionDate\": \"2025-01-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Textastic_9.9.3.ipa\",\n      \"localizedDescription\": \"Advanced code editor for iPhone\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Textastic_9.9.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8671723,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Textastic_9.9.3/Textastic_9.9.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"TS.Notes_0.1\",\n      \"bundleIdentifier\": \"com.swiftsphere.notes\",\n      \"developerName\": \"TS.Notes_0.1 x CyPwn\",\n      \"version\": \"0.1\",\n      \"versionDate\": \"2025-01-24\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/TS.Notes_0.1.ipa\",\n      \"localizedDescription\": \"Simple and intuitive notes app.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/TS.Notes_0.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 505149,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/TS.Notes_0.1/TS.Notes_0.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Picsew_3.11.4_Pro\",\n      \"bundleIdentifier\": \"com.sugarmo.ScrollClip\",\n      \"developerName\": \"Picsew_3.11.4_Pro x CyPwn\",\n      \"version\": \"3.11.4\",\n      \"versionDate\": \"2025-01-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Picsew_3.11.4_Pro.ipa\",\n      \"localizedDescription\": \"Screenshot stitching tool\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsew_3.11.4_Pro.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 35347496,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picsew_3.11.4_Pro/Picsew_3.11.4_Pro-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picsew_3.11.4_Pro/Picsew_3.11.4_Pro-1.png\"\n      ]\n    },\n    {\n      \"name\": \"iota6.0-13.1.0\",\n      \"bundleIdentifier\": \"com.toyopagroup.picaboo\",\n      \"developerName\": \"iota6.0-13.1.0 x CyPwn\",\n      \"version\": \"13.1.0\",\n      \"versionDate\": \"2024-12-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iota6.0-13.1.0.ipa\",\n      \"localizedDescription\": \"Read the full description first!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iota6.0-13.1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 191197347,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/iota6.0-13.1.0/iota6.0-13.1.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"TransparentIcons_1.7.2\",\n      \"bundleIdentifier\": \"com.noahgilmore.transparent-icons\",\n      \"developerName\": \"TransparentIcons_1.7.2 x CyPwn\",\n      \"version\": \"1.7.2\",\n      \"versionDate\": \"2024-10-27\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/TransparentIcons_1.7.2.ipa\",\n      \"localizedDescription\": \"Transparent App Icons\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/TransparentIcons_1.7.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6773800,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/TransparentIcons_1.7.2/TransparentIcons_1.7.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CarrotPremium_6.1.3\",\n      \"bundleIdentifier\": \"com.grailr.CARROTweather\",\n      \"developerName\": \"CarrotPremium_6.1.3 x CyPwn\",\n      \"version\": \"6.1.3\",\n      \"versionDate\": \"2024-10-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CarrotPremium_6.1.3.ipa\",\n      \"localizedDescription\": \"Carrot Premium Ultra membership\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CarrotPremium_6.1.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 105056829,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CarrotPremium_6.1.3/CarrotPremium_6.1.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"GeniePro_7.1.2\",\n      \"bundleIdentifier\": \"co.appnation.geniechat\",\n      \"developerName\": \"GeniePro_7.1.2 x CyPwn\",\n      \"version\": \"7.1.2\",\n      \"versionDate\": \"2024-10-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/GeniePro_7.1.2.ipa\",\n      \"localizedDescription\": \"Genie Al Chat Pro crack by Blatant\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/GeniePro_7.1.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 60156805,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/GeniePro_7.1.2/GeniePro_7.1.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"DuolingoMax_7.37.1\",\n      \"bundleIdentifier\": \"com.duolingo.DuolingoMobile\",\n      \"developerName\": \"DuolingoMax_7.37.1 x CyPwn\",\n      \"version\": \"7.37.1\",\n      \"versionDate\": \"2024-09-13\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DuolingoMax_7.37.1.ipa\",\n      \"localizedDescription\": \"Duolingo Max unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DuolingoMax_7.37.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 111914516,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/DuolingoMax_7.37.1/DuolingoMax_7.37.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Alook_Browser_20.1\",\n      \"bundleIdentifier\": \"com.ld.TakeBrowser\",\n      \"developerName\": \"Alook_Browser_20.1 x CyPwn\",\n      \"version\": \"20.1\",\n      \"versionDate\": \"2024-08-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Alook_Browser_20.1.ipa\",\n      \"localizedDescription\": \"Ayy look, a browser!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Alook_Browser_20.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 12016680,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Alook_Browser_20.1/Alook_Browser_20.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"WallcraftPro_3.19\",\n      \"bundleIdentifier\": \"com.wallpaperscraft.wallpapers\",\n      \"developerName\": \"WallcraftPro_3.19 x CyPwn\",\n      \"version\": \"3.19\",\n      \"versionDate\": \"2024-08-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WallcraftPro_3.19.ipa\",\n      \"localizedDescription\": \"Wallcraft Wallpapers Pro unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WallcraftPro_3.19.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 69698846,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/WallcraftPro_3.19/WallcraftPro_3.19-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Phantom_VPN_3.9.6_PhantomReset\",\n      \"bundleIdentifier\": \"com.avira.vpn\",\n      \"developerName\": \"Phantom_VPN_3.9.6_PhantomReset x CyPwn\",\n      \"version\": \"3.9.6\",\n      \"versionDate\": \"2024-08-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Phantom_VPN_3.9.6_PhantomReset.ipa\",\n      \"localizedDescription\": \"Phantom VPN with PhantomReset\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Phantom_VPN_3.9.6_PhantomReset.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 29213327,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Phantom_VPN_3.9.6_PhantomReset/Phantom_VPN_3.9.6_PhantomReset-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VlogNow_1.82.1_Cracked\",\n      \"bundleIdentifier\": \"com.frontrow.vlog\",\n      \"developerName\": \"VlogNow_1.82.1_Cracked x CyPwn\",\n      \"version\": \"1.82.1\",\n      \"versionDate\": \"2024-08-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VlogNow_1.82.1_Cracked.ipa\",\n      \"localizedDescription\": \"VlogNow_1.82.1_Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VlogNow_1.82.1_Cracked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 239809331,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VlogNow_1.82.1_Cracked/VlogNow_1.82.1_Cracked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Picsart_25.5.1_Cracked\",\n      \"bundleIdentifier\": \"com.picsart.studio\",\n      \"developerName\": \"Picsart_25.5.1_Cracked x CyPwn\",\n      \"version\": \"25.5.1\",\n      \"versionDate\": \"2024-08-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Picsart_25.5.1_Cracked.ipa\",\n      \"localizedDescription\": \"Picsart_25.5.1_Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsart_25.5.1_Cracked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 104417198,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picsart_25.5.1_Cracked/Picsart_25.5.1_Cracked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CapCut_12.0_Cracked\",\n      \"bundleIdentifier\": \"com.lemon.lvoverseas\",\n      \"developerName\": \"CapCut_12.0_Cracked x CyPwn\",\n      \"version\": \"12.0\",\n      \"versionDate\": \"2024-08-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CapCut_12.0_Cracked.ipa\",\n      \"localizedDescription\": \"CapCut_12.0_Cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CapCut_12.0_Cracked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 136870625,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CapCut_12.0_Cracked/CapCut_12.0_Cracked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"HelloWeatherVIP_3.13.6\",\n      \"bundleIdentifier\": \"hello-weather-app\",\n      \"developerName\": \"HelloWeatherVIP_3.13.6 x CyPwn\",\n      \"version\": \"3.13.15\",\n      \"versionDate\": \"2024-07-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HelloWeatherVIP_3.13.6.ipa\",\n      \"localizedDescription\": \"HelloWeather VIP Lifetime by Sultan\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HelloWeatherVIP_3.13.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 10297016,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/HelloWeatherVIP_3.13.6/HelloWeatherVIP_3.13.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"VidList_1.2\",\n      \"bundleIdentifier\": \"com.vh.vhub\",\n      \"developerName\": \"VidList_1.2 x CyPwn\",\n      \"version\": \"1.2\",\n      \"versionDate\": \"2024-07-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VidList_1.2.ipa\",\n      \"localizedDescription\": \"NSFW\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_1.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 20006830,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/VidList_1.2/VidList_1.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"AIChatSmithPremium-7.0.0\",\n      \"bundleIdentifier\": \"co.vulcanlabs.moodtracker\",\n      \"developerName\": \"AIChatSmithPremium-7.0.0 x CyPwn\",\n      \"version\": \"7.0.0\",\n      \"versionDate\": \"2024-07-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AIChatSmithPremium-7.0.0.ipa\",\n      \"localizedDescription\": \"Premium OpenAI GPT-4o app!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AIChatSmithPremium-7.0.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 74941726,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/AIChatSmithPremium-7.0.0/AIChatSmithPremium-7.0.0-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/AIChatSmithPremium-7.0.0/AIChatSmithPremium-7.0.0.jpeg\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/AIChatSmithPremium-7.0.0/AIChatSmithPremium-7.0.0_0.jpeg\"\n      ]\n    },\n    {\n      \"name\": \"ESign_5.0_noLogs_V1.1\",\n      \"bundleIdentifier\": \"nologs.xyz.yyyue.esign\",\n      \"developerName\": \"ESign_5.0_noLogs_V1.1 x CyPwn\",\n      \"version\": \"5.0.0\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ESign_5.0_noLogs_V1.1.ipa\",\n      \"localizedDescription\": \"IPA signer, tweak injector\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ESign_5.0_noLogs_V1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8042577,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ESign_5.0_noLogs_V1.1/ESign_5.0_noLogs_V1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Haaretz_Heb_Unlocked\",\n      \"bundleIdentifier\": \"com.haaretz.hebrew.iphone\",\n      \"developerName\": \"Haaretz_Heb_Unlocked x CyPwn\",\n      \"version\": \"5.2.176\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Haaretz_Heb_Unlocked.ipa\",\n      \"localizedDescription\": \"The Haaretz iPhone app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Heb_Unlocked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 30565990,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Haaretz_Heb_Unlocked/Haaretz_Heb_Unlocked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Haaretz_Eng_Unlocked\",\n      \"bundleIdentifier\": \"com.haaretz.english.iphone\",\n      \"developerName\": \"Haaretz_Eng_Unlocked x CyPwn\",\n      \"version\": \"5.60\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Haaretz_Eng_Unlocked.ipa\",\n      \"localizedDescription\": \"The Haaretz iPhone app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Eng_Unlocked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17836277,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Haaretz_Eng_Unlocked/Haaretz_Eng_Unlocked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"TheMarker_Heb_Unlocked\",\n      \"bundleIdentifier\": \"com.haaretz.TheMarker\",\n      \"developerName\": \"TheMarker_Heb_Unlocked x CyPwn\",\n      \"version\": \"4.2.52\",\n      \"versionDate\": \"2024-07-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/TheMarker_Heb_Unlocked.ipa\",\n      \"localizedDescription\": \"Hebrew-language daily business news\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/TheMarker_Heb_Unlocked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17490247,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/TheMarker_Heb_Unlocked/TheMarker_Heb_Unlocked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Spark_3.9.12\",\n      \"bundleIdentifier\": \"com.readdle.smartemail\",\n      \"developerName\": \"Spark_3.9.12 x CyPwn\",\n      \"version\": \"3.9.12\",\n      \"versionDate\": \"2024-07-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Spark_3.9.12.ipa\",\n      \"localizedDescription\": \"Injected with premium!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.12.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 189079224,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Spark_3.9.12/Spark_3.9.12-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Climax\",\n      \"bundleIdentifier\": \"dev.objcmsgsend.Climax\",\n      \"developerName\": \"Climax x CyPwn\",\n      \"version\": \"2.1\",\n      \"versionDate\": \"2024-07-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Climax.ipa\",\n      \"localizedDescription\": \"A long awaited rewrite for Climax\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Climax.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 964689,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax_0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Climax/Climax_1.png\"\n      ]\n    },\n    {\n      \"name\": \"callrecorder\",\n      \"bundleIdentifier\": \"com.zuev.recorder.Z9HHLMN695\",\n      \"developerName\": \"callrecorder x CyPwn\",\n      \"version\": \"2.93\",\n      \"versionDate\": \"2024-07-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/callrecorder.ipa\",\n      \"localizedDescription\": \"Call Recorder with Premium hacked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/callrecorder.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 111505571,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/callrecorder/callrecorder-0.png\"\n      ]\n    },\n    {\n      \"name\": \"trailforks_hacked\",\n      \"bundleIdentifier\": \"com.pinkbike.trailforks\",\n      \"developerName\": \"trailforks_hacked x CyPwn\",\n      \"version\": \"2024.2.6\",\n      \"versionDate\": \"2024-07-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/trailforks_hacked.ipa\",\n      \"localizedDescription\": \"Trailforks: Offline Bike Maps\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/trailforks_hacked.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 101732843,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/trailforks_hacked/trailforks_hacked-0.png\"\n      ]\n    },\n    {\n      \"name\": \"CAPerfHUDSwift\",\n      \"bundleIdentifier\": \"ca.bomberfish.CAPerfHudSwift\",\n      \"developerName\": \"CAPerfHUDSwift x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2024-06-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/CAPerfHUDSwift.ipa\",\n      \"localizedDescription\": \"CAPerfHUD alternative.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/CAPerfHUDSwift.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1059061,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/CAPerfHUDSwift/CAPerfHUDSwift-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Speedtest_VPN_Premium_5.4.0\",\n      \"bundleIdentifier\": \"com.ookla.speedtest\",\n      \"developerName\": \"Speedtest_VPN_Premium_5.4.0 x CyPwn\",\n      \"version\": \"5.4.0\",\n      \"versionDate\": \"2024-06-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Speedtest_VPN_Premium_5.4.0.ipa\",\n      \"localizedDescription\": \"Premium unlimited VPN\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Speedtest_VPN_Premium_5.4.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 55144611,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Speedtest_VPN_Premium_5.4.0/Speedtest_VPN_Premium_5.4.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Egern-1.19.1\",\n      \"bundleIdentifier\": \"com.bytecrossing.Egern\",\n      \"developerName\": \"Egern-1.19.1 x CyPwn\",\n      \"version\": \"1.19.1\",\n      \"versionDate\": \"2024-05-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Egern-1.19.1.ipa\",\n      \"localizedDescription\": \"Powerful networking tool.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Egern-1.19.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 16777216,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Egern-1.19.1/Egern-1.19.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Mimo_6.48.0_Premium\",\n      \"bundleIdentifier\": \"com.getmimo.mimo\",\n      \"developerName\": \"Mimo_6.48.0_Premium x CyPwn\",\n      \"version\": \"6.48.0\",\n      \"versionDate\": \"2024-05-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Mimo_6.48.0_Premium.ipa\",\n      \"localizedDescription\": \"Injected with premium!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Mimo_6.48.0_Premium.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 35064381,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Mimo_6.48.0_Premium/Mimo_6.48.0_Premium-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Discord_228.1_Pyoncord\",\n      \"bundleIdentifier\": \"com.hammerandchisel.discord\",\n      \"developerName\": \"Discord_228.1_Pyoncord x CyPwn\",\n      \"version\": \"228.1\",\n      \"versionDate\": \"2024-05-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Discord_228.1_Pyoncord_DiscordNoTrack.ipa\",\n      \"localizedDescription\": \"Discord mod.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Discord_228.1_Pyoncord_DiscordNoTrack.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 99425976,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Discord_228.1_Pyoncord/Discord_228.1_Pyoncord_DiscordNoTrack-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Nicegram_1.6.2\",\n      \"bundleIdentifier\": \"app.nicegram\",\n      \"developerName\": \"Nicegram_1.6.2 x CyPwn\",\n      \"version\": \"1.6.2\",\n      \"versionDate\": \"2024-05-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Nicegram_1.6.2.ipa\",\n      \"localizedDescription\": \"Nicegram Premium for free!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Nicegram_1.6.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 93228892,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Nicegram_1.6.2/Nicegram_1.6.2-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Gopeed_1.5.6\",\n      \"bundleIdentifier\": \"com.gopeed\",\n      \"developerName\": \"Gopeed_1.5.6 x CyPwn\",\n      \"version\": \"1.5.6\",\n      \"versionDate\": \"2024-04-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Gopeed_1.5.6.ipa\",\n      \"localizedDescription\": \"A modern download manager.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.5.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 86717235,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Gopeed_1.5.6/Gopeed_1.5.6-0.png\"\n      ]\n    },\n    {\n      \"name\": \"LiveContainer_2.0\",\n      \"bundleIdentifier\": \"com.kdt.livecontainer\",\n      \"developerName\": \"LiveContainer_2.0 x CyPwn\",\n      \"version\": \"2.0\",\n      \"versionDate\": \"2024-04-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LiveContainer_2.0.ipa\",\n      \"localizedDescription\": \"Run apps without installing them!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveContainer_2.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 103362,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/LiveContainer_2.0/LiveContainer_2.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"BundleReader\",\n      \"bundleIdentifier\": \"com.iRayanKhan.BundleReader\",\n      \"developerName\": \"BundleReader x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2024-04-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/BundleReader.ipa\",\n      \"localizedDescription\": \"See ipa contents\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/BundleReader.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 71536,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/BundleReader/BundleReader-0.png\"\n      ]\n    },\n    {\n      \"name\": \"APNS_Demo\",\n      \"bundleIdentifier\": \"com.RayanKhan.APNS-Demo\",\n      \"developerName\": \"APNS_Demo x CyPwn\",\n      \"version\": \"1.00\",\n      \"versionDate\": \"2024-04-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/APNS_Demo.ipa\",\n      \"localizedDescription\": \"SwiftUI app to test notifications.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/APNS_Demo.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 77445,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/APNS_Demo/APNS_Demo-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Flightradar24_9.17.0\",\n      \"bundleIdentifier\": \"se.resenatverket.FlightRadar24-Free\",\n      \"developerName\": \"Flightradar24_9.17.0 x CyPwn\",\n      \"version\": \"9.17.0\",\n      \"versionDate\": \"2024-02-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Flightradar24_9.17.0.ipa\",\n      \"localizedDescription\": \"FlightRadar24 Gold Subscription\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Flightradar24_9.17.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 113088921,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0.jpeg\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Flightradar24_9.17.0/Flightradar24_9.17.0_0.jpeg\"\n      ]\n    },\n    {\n      \"name\": \"GameSeagull\",\n      \"bundleIdentifier\": \"com.gamerdelights.gamepigeon\",\n      \"developerName\": \"GameSeagull x CyPwn\",\n      \"version\": \"2.0.12\",\n      \"versionDate\": \"2024-01-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/GameSeagull.ipa\",\n      \"localizedDescription\": \"GamePigeon Hacks!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/GameSeagull.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 90271907,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/GameSeagull/GameSeagull-0.png\"\n      ]\n    },\n    {\n      \"name\": \"ToonSquid_1.10.1_ipa.store\",\n      \"bundleIdentifier\": \"com.keiwando.toonsquid\",\n      \"developerName\": \"ToonSquid_1.10.1_ipa.store x CyPwn\",\n      \"version\": \"1.10.1\",\n      \"versionDate\": \"2024-01-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ToonSquid_1.10.1_ipa.store.ipa\",\n      \"localizedDescription\": \"ToonSquid\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ToonSquid_1.10.1_ipa.store.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 27640463,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ToonSquid_1.10.1_ipa.store/ToonSquid_1.10.1_ipa.store-0.png\"\n      ]\n    },\n    {\n      \"name\": \"WazePlus_4.100.0\",\n      \"bundleIdentifier\": \"com.waze.iphone\",\n      \"developerName\": \"WazePlus_4.100.0 x CyPwn\",\n      \"version\": \"4.100.0\",\n      \"versionDate\": \"2023-12-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WazePlus_4.100.0.ipa\",\n      \"localizedDescription\": \"A better way to Waze\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WazePlus_4.100.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 58290339,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/WazePlus_4.100.0/WazePlus_4.100.0-0.png\"\n      ]\n    },\n    {\n      \"name\": \"NFC_Tools_2.27\",\n      \"bundleIdentifier\": \"com.wakdev.wdnfc\",\n      \"developerName\": \"NFC_Tools_2.27 x CyPwn\",\n      \"version\": \"2.27\",\n      \"versionDate\": \"2023-12-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/NFC_Tools_2.27.ipa\",\n      \"localizedDescription\": \"Free Pro (Satella)\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/NFC_Tools_2.27.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3030384,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/NFC_Tools_2.27/NFC_Tools_2.27-0.png\"\n      ]\n    },\n    {\n      \"name\": \"EzFN-10.0\",\n      \"bundleIdentifier\": \"5f796ef4752841bdb647c1a4a0783fe9\",\n      \"developerName\": \"EzFN-10.0 x CyPwn\",\n      \"version\": \"10.00.0\",\n      \"versionDate\": \"2023-11-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/EzFN-10.0.ipa\",\n      \"localizedDescription\": \"EZFN Season X leak\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/EzFN-10.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 76514590,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/EzFN-10.0/EzFN-10.0-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/EzFN-10.0/EzFN-10.0-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/EzFN-10.0/EzFN-10.0-2.png\"\n      ]\n    },\n    {\n      \"name\": \"CryptoMiner\",\n      \"bundleIdentifier\": \"com.mysterytag.cryptominer\",\n      \"developerName\": \"CryptoMiner x CyPwn\",\n      \"version\": \"0.5\",\n      \"versionDate\": \"2023-10-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/com.mysterytag.cryptominer.ipa\",\n      \"localizedDescription\": \"Free iAP - SatellaJailed\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/com.mysterytag.cryptominer.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 68975329,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Amen_Break_Generator\",\n      \"bundleIdentifier\": \"com.jacekdojwa.abg\",\n      \"developerName\": \"Amen_Break_Generator x CyPwn\",\n      \"version\": \"2.0.6\",\n      \"versionDate\": \"2023-10-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Amen_Break_Generator-2.0.6.ipa\",\n      \"localizedDescription\": \"drum loops sampled and remixed\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Amen_Break_Generator-2.0.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14281605,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"playSub_2023.1.1\",\n      \"bundleIdentifier\": \"dk.mbh.play-Sub\",\n      \"developerName\": \"playSub_2023.1.1 x CyPwn\",\n      \"version\": \"2023.1.1\",\n      \"versionDate\": \"2023-09-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/playSub_2023.1.1.ipa\",\n      \"localizedDescription\": \"Delightful Subsonic Music Client\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/playSub_2023.1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 15770583,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/playSub_2023.1.1/playSub_2023.1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Picasso_v2_Beta_5\",\n      \"bundleIdentifier\": \"net.sourceloc.Picasso\",\n      \"developerName\": \"Picasso_v2_Beta_5 x CyPwn\",\n      \"version\": \"2.0\",\n      \"versionDate\": \"2023-08-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Picasso_v2_Beta_5.ipa\",\n      \"localizedDescription\": \"Picasso v2 cracked for MDC users.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Picasso_v2_Beta_5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3795845,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Picasso_v2_Beta_5/Picasso_v2_Beta_5-4.png\"\n      ]\n    },\n    {\n      \"name\": \"PropCashapp\",\n      \"bundleIdentifier\": \"Cash-App-by-ivglitched\",\n      \"developerName\": \"PropCashapp x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2023-08-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PropCashapp.ipa\",\n      \"localizedDescription\": \"Fake CashApp for prop use\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PropCashapp.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1698693,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PropCashapp/PropCashapp-0.png\"\n      ]\n    },\n    {\n      \"name\": \"ProCamera\",\n      \"bundleIdentifier\": \"com.cocologics.ProCamera\",\n      \"developerName\": \"ProCamera x CyPwn\",\n      \"version\": \"16.3\",\n      \"versionDate\": \"2023-07-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ProCamera.ipa\",\n      \"localizedDescription\": \"ProCamera\u2026 fo free!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCamera.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 72582430,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/ProCamera/ProCamera-3.png\"\n      ]\n    },\n    {\n      \"name\": \"Suffuse3\",\n      \"bundleIdentifier\": \"com.firecore.infuse\",\n      \"developerName\": \"Suffuse3 x CyPwn\",\n      \"version\": \"7.5.8\",\n      \"versionDate\": \"2023-07-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Suffuse3.ipa\",\n      \"localizedDescription\": \"Infuse 7 with Pro unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Suffuse3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 43432017,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Suffuse3/Suffuse3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Apollo_1.15.11+Artemis1.3\",\n      \"bundleIdentifier\": \"com.christianselig.Apollo\",\n      \"developerName\": \"Apollo_1.15.11+Artemis1.3 x CyPwn\",\n      \"version\": \"1.15.11\",\n      \"versionDate\": \"2023-07-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Apollo_1.15.11+Artemis1.3.ipa\",\n      \"localizedDescription\": \"Apollo aint dead\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Apollo_1.15.11+Artemis1.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 92589260,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Apollo_1.15.11+Artemis1.3/Apollo_1.15.11+Artemis1.3-0.png\"\n      ]\n    },\n    {\n      \"name\": \"Dystopia\",\n      \"bundleIdentifier\": \"com.CarbonDev.Dystopia\",\n      \"developerName\": \"Dystopia x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2023-06-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Dystopia.ipa\",\n      \"localizedDescription\": \"Alternative to Apollo for Reddit\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14648606,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Dystopia/Dystopia-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Dystopia/Dystopia-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Dystopia/Dystopia-2.png\"\n      ]\n    },\n    {\n      \"name\": \"YTMusicUltimate_v1.4.1_YTM6.03.1\",\n      \"bundleIdentifier\": \"com.google.ios.youtubemusic\",\n      \"developerName\": \"YTMusicUltimate_v1.4.1_YTM6.03.1 x CyPwn\",\n      \"version\": \"6.03.1\",\n      \"versionDate\": \"2023-05-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/YTMusicUltimate_v1.4.1_YTM6.03.1.ipa\",\n      \"localizedDescription\": \"YTMusicUltimate 1.4.1 by Ginsu. Premium features unlocked.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/YTMusicUltimate_v1.4.1_YTM6.03.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 57220792,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/YTMusicUltimate_v1.4.1_YTM6.03.1/YTMusicUltimate_v1.4.1_YTM6.03.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"RaceControlF1\",\n      \"bundleIdentifier\": \"cypwn.RaceControlF1.1.0\",\n      \"developerName\": \"RaceControlF1 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2023-04-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/RaceControlF1.ipa\",\n      \"localizedDescription\": \"Comprehensive F1 App\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/RaceControlF1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5253365,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"AppDB_1.1.5\",\n      \"bundleIdentifier\": \"cypwn.AppDB_1.1.5.1.1.5\",\n      \"developerName\": \"AppDB_1.1.5 x CyPwn\",\n      \"version\": \"1.1.5\",\n      \"versionDate\": \"2023-04-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AppDB_1.1.5.ipa\",\n      \"localizedDescription\": \"A fully-featured iOS client for appdb.to written in Swift 5.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AppDB_1.1.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 24410849,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PeriodicTablePRO_1.124\",\n      \"bundleIdentifier\": \"cypwn.PeriodicTablePRO_1.124.1.124\",\n      \"developerName\": \"PeriodicTablePRO_1.124 x CyPwn\",\n      \"version\": \"1.124\",\n      \"versionDate\": \"2023-03-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PeriodicTablePRO_1.124.ipa\",\n      \"localizedDescription\": \"Chemistry in your phone!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PeriodicTablePRO_1.124.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 15225323,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-3.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PeriodicTablePRO_1.124/PeriodicTablePRO_1.124-4.png\"\n      ]\n    },\n    {\n      \"name\": \"Whitelist\",\n      \"bundleIdentifier\": \"cypwn.Whitelist.1.1.0\",\n      \"developerName\": \"Whitelist x CyPwn\",\n      \"version\": \"1.1.0\",\n      \"versionDate\": \"2023-03-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Whitelist.ipa\",\n      \"localizedDescription\": \"Jailed iOS app to un-blacklist all enterprise-signed apps\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Whitelist.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 599193,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"DramaFlix_1.1.0\",\n      \"bundleIdentifier\": \"cypwn.DramaFlix_1.1.0.1.1.0\",\n      \"developerName\": \"DramaFlix_1.1.0 x CyPwn\",\n      \"version\": \"1.1.0\",\n      \"versionDate\": \"2023-03-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DramaFlix_1.1.0.ipa\",\n      \"localizedDescription\": \"Movie app\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DramaFlix_1.1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 11817451,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/DramaFlix_1.1.0/DramaFlix_1.1.0.ipa106.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/DramaFlix_1.1.0/DramaFlix_1.1.0.ipa310.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/DramaFlix_1.1.0/DramaFlix_1.1.0.ipa655.png\"\n      ]\n    },\n    {\n      \"name\": \"Cowabunga10\",\n      \"bundleIdentifier\": \"cypwn.Cowabunga10.10.0.0\",\n      \"developerName\": \"Cowabunga10 x CyPwn\",\n      \"version\": \"10.0.0\",\n      \"versionDate\": \"2023-03-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Cowabunga10.ipa\",\n      \"localizedDescription\": \"OS 14.0-15.7.1 & 16.0-16.1.2 MacDirtyCow ToolBox\\r\\n\\r\\n**Latest release as of 3/23**\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Cowabunga10.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 21558722,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Cowabunga10/Cowabunga10-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Cowabunga10/Cowabunga10-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/Cowabunga10/Cowabunga10-2.png\"\n      ]\n    },\n    {\n      \"name\": \"Dead_Cells_plus_v3.2.2\",\n      \"bundleIdentifier\": \"cypwn.Dead_Cells_plus_v3.2.2.3.2.2\",\n      \"developerName\": \"Dead_Cells_plus_v3.2.2 x CyPwn\",\n      \"version\": \"3.2.2\",\n      \"versionDate\": \"2023-03-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Dead_Cells_plus_v3.2.2.ipa\",\n      \"localizedDescription\": \"Death is not the end..\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Dead_Cells_plus_v3.2.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 937626173,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PicsArtGold_21.8.6\",\n      \"bundleIdentifier\": \"cypwn.PicsArtGold_21.8.6.21.8.6\",\n      \"developerName\": \"PicsArtGold_21.8.6 x CyPwn\",\n      \"version\": \"21.8.6\",\n      \"versionDate\": \"2023-03-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PicsArtGold_21.8.6.ipa\",\n      \"localizedDescription\": \"Picsart Gold Subscription\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PicsArtGold_21.8.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 85238743,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PelletDodge\",\n      \"bundleIdentifier\": \"cypwn.PelletDodge.b0.8.5\",\n      \"developerName\": \"PelletDodge x CyPwn\",\n      \"version\": \"b0.8.5\",\n      \"versionDate\": \"2023-02-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PelletDodge.ipa\",\n      \"localizedDescription\": \"This version is obsolete.\\nPlease use the TestFlight version:\\nhttps://testflight.apple.com/join/NmEZZ8xp\\nPellet Dodge is a simple, yet challenging game where you must dash through over 40 levels to save your friend, who\u2019s being used as power for something more sinister. Developed by MysticalDevelopers, one of our fellow jailbreaker\u2019s (Evil Monkey) very own son, Lag!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PelletDodge.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 301570457,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-2.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/PelletDodge/PelletDodge-3.png\"\n      ]\n    },\n    {\n      \"name\": \"FacebookNoAds_401.0\",\n      \"bundleIdentifier\": \"cypwn.FacebookNoAds_401.0.401.0\",\n      \"developerName\": \"FacebookNoAds_401.0 x CyPwn\",\n      \"version\": \"401.0\",\n      \"versionDate\": \"2023-02-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FacebookNoAds_401.0.ipa\",\n      \"localizedDescription\": \"Free & Open Source Tweak for Facebook https:// github.com/haoict/facebook-no-ads/releases. Features:- Remove Ads - Download Video (long press to download) - Download Story - Download Profile Picture - Disable Story Seen - Hide Composer on News Feed - Hide Stories on News Feed\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FacebookNoAds_401.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 132760207,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"DarkCloud_6.16.1\",\n      \"bundleIdentifier\": \"cypwn.DarkCloud_6.16.1.6.16.1\",\n      \"developerName\": \"DarkCloud_6.16.1 x CyPwn\",\n      \"version\": \"6.16.1\",\n      \"versionDate\": \"2023-02-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DarkCloud_6.16.1.ipa\",\n      \"localizedDescription\": \"SoundCloud w/ DarkCloud by CodeyMoore\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DarkCloud_6.16.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 56025415,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"WDBFontOverwrite\",\n      \"bundleIdentifier\": \"cypwn.WDBFontOverwrite.1.10.7-1\",\n      \"developerName\": \"WDBFontOverwrite x CyPwn\",\n      \"version\": \"1.10.7-1\",\n      \"versionDate\": \"2023-02-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WDBFontOverwrite.ipa\",\n      \"localizedDescription\": \"Proof-of-concept app to overwrite fonts on iOS 16.1.2 and below using CVE-2022-46689.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WDBFontOverwrite.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5347737,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/WDBFontOverwrite/WDBFontOverwrite-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/WDBFontOverwrite/WDBFontOverwrite-1.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/WDBFontOverwrite/WDBFontOverwrite-2.png\"\n      ]\n    },\n    {\n      \"name\": \"KillMyOTA-1.1\",\n      \"bundleIdentifier\": \"cypwn.KillMyOTA-1.1.1.1\",\n      \"developerName\": \"KillMyOTA-1.1 x CyPwn\",\n      \"version\": \"1.1\",\n      \"versionDate\": \"2023-01-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/KillMyOTA-1.1.ipa\",\n      \"localizedDescription\": \"OTA Killer for iOS 15.0 - 16.1.2.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/KillMyOTA-1.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 339435,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/KillMyOTA-1.1/KillMyOTA-1.1-0.png\"\n      ]\n    },\n    {\n      \"name\": \"FilzaEscaped16\",\n      \"bundleIdentifier\": \"cypwn.FilzaEscaped16.3.7\",\n      \"developerName\": \"FilzaEscaped16 x CyPwn\",\n      \"version\": \"3.7\",\n      \"versionDate\": \"2023-01-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FilzaEscaped16.ipa\",\n      \"localizedDescription\": \"FilzaEscaped16\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FilzaEscaped16.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 14648606,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SantanderEscaped-0.3\",\n      \"bundleIdentifier\": \"cypwn.SantanderEscaped-0.3.1.0\",\n      \"developerName\": \"SantanderEscaped-0.3 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2023-01-29\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SantanderEscaped-0.3.ipa\",\n      \"localizedDescription\": \"A new, enhanced File Manager for iOS devices with the tccd exploit for full file access.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SantanderEscaped-0.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 4791992,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"BeReal_0.31.0\",\n      \"bundleIdentifier\": \"cypwn.BeReal_0.31.0.0.31.0\",\n      \"developerName\": \"BeReal_0.31.0 x CyPwn\",\n      \"version\": \"0.31.0\",\n      \"versionDate\": \"2023-01-23\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/BeReal_0.31.0.ipa\",\n      \"localizedDescription\": \"BeRealUnBlur\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/BeReal_0.31.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 21904752,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Ally_2.0.23\",\n      \"bundleIdentifier\": \"cypwn.Ally_2.0.23.2.0.23\",\n      \"developerName\": \"Ally_2.0.23 x CyPwn\",\n      \"version\": \"2.0.23\",\n      \"versionDate\": \"2023-01-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Ally_2.0.23.ipa\",\n      \"localizedDescription\": \"Amiibo diary. Amiibo maker.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Ally_2.0.23.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9510584,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Keka_1.0.1\",\n      \"bundleIdentifier\": \"cypwn.Keka_1.0.1.1.0.1\",\n      \"developerName\": \"Keka_1.0.1 x CyPwn\",\n      \"version\": \"1.0.1\",\n      \"versionDate\": \"2023-01-11\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Keka_1.0.1.ipa\",\n      \"localizedDescription\": \"The file archiver\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Keka_1.0.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 13505658,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"McClockface.1.5.1\",\n      \"bundleIdentifier\": \"cypwn.McClockface.1.5.1.1.5.1\",\n      \"developerName\": \"McClockface.1.5.1 x CyPwn\",\n      \"version\": \"1.5.1\",\n      \"versionDate\": \"2023-01-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/McClockface.1.5.1.ipa\",\n      \"localizedDescription\": \"Add beautiful timepiece widgets to your home screen with McClockface.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/McClockface.1.5.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5012193,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/McClockface.1.5.1/McClockface.1.5.1-0.png\",\n        \"https://ipa.cypwn.xyz/serve/screenshots/McClockface.1.5.1/McClockface.1.5.1-1.png\"\n      ]\n    },\n    {\n      \"name\": \"Naiad\",\n      \"bundleIdentifier\": \"cypwn.Naiad.1.0\",\n      \"developerName\": \"Naiad x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-12-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Naiad.ipa\",\n      \"localizedDescription\": \"Offline, high-resolution AI image generation\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Naiad.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17249075,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SharkMessenger_388.0\",\n      \"bundleIdentifier\": \"cypwn.SharkMessenger_388.0.388.0\",\n      \"developerName\": \"SharkMessenger_388.0 x CyPwn\",\n      \"version\": \"388.0\",\n      \"versionDate\": \"2022-11-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SharkMessenger_388.0.ipa\",\n      \"localizedDescription\": \"Shark 2.2.1 + Facebook Messenger 388.0\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SharkMessenger_388.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 61865984,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Sonic_3.5\",\n      \"bundleIdentifier\": \"cypwn.Sonic_3.5.3.5\",\n      \"developerName\": \"Sonic_3.5 x CyPwn\",\n      \"version\": \"3.5\",\n      \"versionDate\": \"2022-11-30\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Sonic_3.5.ipa\",\n      \"localizedDescription\": \"Sonic Tone Generator cracked. Eject water from your speakers and more!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Sonic_3.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 20950548,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Summon_1.8_Satella\",\n      \"bundleIdentifier\": \"cypwn.Summon_1.8_Satella.1.8\",\n      \"developerName\": \"Summon_1.8_Satella x CyPwn\",\n      \"version\": \"1.8\",\n      \"versionDate\": \"2022-11-27\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Summon_1.8_Satella.ipa\",\n      \"localizedDescription\": \"Open Links in Apps! An ultra-efficient Safari Extension that helps you opens sites in app. Choose between over 200+ apps to open from Safari. Use Satella to purchase unlimited with \u201cClick and Cancel\u201d method.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Summon_1.8_Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 607805,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Vinegar_2.4.2\",\n      \"bundleIdentifier\": \"cypwn.Vinegar_2.4.2.2.4.2\",\n      \"developerName\": \"Vinegar_2.4.2 x CyPwn\",\n      \"version\": \"2.4.2\",\n      \"versionDate\": \"2022-11-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Vinegar_2.4.2.ipa\",\n      \"localizedDescription\": \"Vinegar is a Safari extension that replaces the YouTube player with a minimal HTML video tag. It removes ads, restores picture-in-picture, and keeps videos playing in the background.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Vinegar_2.4.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 215521,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"HeadsUp_5.1.41_Satella\",\n      \"bundleIdentifier\": \"cypwn.HeadsUp_5.1.41_Satella.5.1.41\",\n      \"developerName\": \"HeadsUp_5.1.41_Satella x CyPwn\",\n      \"version\": \"5.1.41\",\n      \"versionDate\": \"2022-11-20\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HeadsUp_5.1.41_Satella.ipa\",\n      \"localizedDescription\": \"Satella injected for free in-app purchases. Tip: Disable receipts in satella settings then buy card packs. App may crash after clicking to buy stuff but they will appear on app restart. Turn off the Satella Enable switch before playing games to avoid further crashing.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HeadsUp_5.1.41_Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 187191787,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Pandolife1.1a_2211.1\",\n      \"bundleIdentifier\": \"cypwn.Pandolife1.1a_2211.1.2211.1\",\n      \"developerName\": \"Pandolife1.1a_2211.1 x CyPwn\",\n      \"version\": \"2211.1\",\n      \"versionDate\": \"2022-11-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Pandolife1.1a_2211.1.ipa\",\n      \"localizedDescription\": \"Pandora v2211.1 with Pandolife v1.1a by Julio Verne.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Pandolife1.1a_2211.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 84148224,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"StarVPN_3.6.0\",\n      \"bundleIdentifier\": \"cypwn.StarVPN_3.6.0.3.6.0\",\n      \"developerName\": \"StarVPN_3.6.0 x CyPwn\",\n      \"version\": \"3.6.0\",\n      \"versionDate\": \"2022-11-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/StarVPN_3.6.0.ipa\",\n      \"localizedDescription\": \"Premium unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/StarVPN_3.6.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6501171,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"RadarbotVIP_8.7.1\",\n      \"bundleIdentifier\": \"cypwn.RadarbotVIP_8.7.1.8.7.1\",\n      \"developerName\": \"RadarbotVIP_8.7.1 x CyPwn\",\n      \"version\": \"8.7.1\",\n      \"versionDate\": \"2022-11-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/RadarbotVIP_8.7.1.ipa\",\n      \"localizedDescription\": \"VIP unlocked. Cracked by @Sopranox\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/RadarbotVIP_8.7.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 71355596,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"VidList_0.5.1\",\n      \"bundleIdentifier\": \"cypwn.VidList_0.5.1.0.5.1\",\n      \"developerName\": \"VidList_0.5.1 x CyPwn\",\n      \"version\": \"0.5.1\",\n      \"versionDate\": \"2022-11-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VidList_0.5.1.ipa\",\n      \"localizedDescription\": \"NSFW\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_0.5.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 5326766,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"cl1m4x\",\n      \"bundleIdentifier\": \"cypwn.cl1m4x.1.3\",\n      \"developerName\": \"cl1m4x x CyPwn\",\n      \"version\": \"1.3\",\n      \"versionDate\": \"2022-11-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/cl1m4x.ipa\",\n      \"localizedDescription\": \"v1.3 by Kanji - Eat some c0rn. Blow your h0rn. Watch some \u2026\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/cl1m4x.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17343447,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ChromaHue_2.1.0\",\n      \"bundleIdentifier\": \"cypwn.ChromaHue_2.1.0.2.1.0\",\n      \"developerName\": \"ChromaHue_2.1.0 x CyPwn\",\n      \"version\": \"2.1.0\",\n      \"versionDate\": \"2022-11-07\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ChromaHue_2.1.0.ipa\",\n      \"localizedDescription\": \"Create clean wallpapers w/ gradients and edge outlines.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ChromaHue_2.1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2936012,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Ulysses_27.3k\",\n      \"bundleIdentifier\": \"cypwn.Ulysses_27.3k.27.3\",\n      \"developerName\": \"Ulysses_27.3k x CyPwn\",\n      \"version\": \"27.3\",\n      \"versionDate\": \"2022-11-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Ulysses_27.3k.ipa\",\n      \"localizedDescription\": \"Ulysses writing app with the subscription cracked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Ulysses_27.3k.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 21359493,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"PostBox-Pocket\",\n      \"bundleIdentifier\": \"cypwn.PostBox-Pocket.0.8.1\",\n      \"developerName\": \"PostBox-Pocket x CyPwn\",\n      \"version\": \"0.8.1\",\n      \"versionDate\": \"2022-11-02\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PostBox-Pocket.ipa\",\n      \"localizedDescription\": \"v0.8.1-7. AppStore release! Search cydia repos and download deb files. Extract themes for jailed device theming. Not used for installing debs.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-Pocket.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 6113198,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SuperMario64_60FPS_1.2.1\",\n      \"bundleIdentifier\": \"cypwn.SuperMario64_60FPS_1.2.1.1.2.1\",\n      \"developerName\": \"SuperMario64_60FPS_1.2.1 x CyPwn\",\n      \"version\": \"1.2.1\",\n      \"versionDate\": \"2022-10-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SuperMario64_60FPS_1.2.1.ipa\",\n      \"localizedDescription\": \"Latest release v1.2.1 of Super Mario 64 port for iOS. 60FPS!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_60FPS_1.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9227468,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SuperMario64_30FPS_1.2.1\",\n      \"bundleIdentifier\": \"cypwn.SuperMario64_30FPS_1.2.1.1.2.1\",\n      \"developerName\": \"SuperMario64_30FPS_1.2.1 x CyPwn\",\n      \"version\": \"1.2.1\",\n      \"versionDate\": \"2022-10-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SuperMario64_30FPS_1.2.1.ipa\",\n      \"localizedDescription\": \"Latest release v1.2.1 of Super Mario 64 port for iOS. 30FPS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_30FPS_1.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8420065,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SuperMario64\",\n      \"bundleIdentifier\": \"cypwn.SuperMario64.1.0.0\",\n      \"developerName\": \"SuperMario64 x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2022-10-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SuperMario64.ipa\",\n      \"localizedDescription\": \"Original release v1.0.0 of Super Mario 64 port for iOS. 60FPS!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 31237079,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"FRLegends++\",\n      \"bundleIdentifier\": \"cypwn.FRLegends++.0.3.2\",\n      \"developerName\": \"FRLegends++ x CyPwn\",\n      \"version\": \"0.3.2\",\n      \"versionDate\": \"2022-10-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FRLegends++.ipa\",\n      \"localizedDescription\": \"FR Legends v0.3.2 - Unlimited money, coins, & livery layers. Requires free iOSgods login.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FRLegends++.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 100369694,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"WallpapersCentralPro_1.5.2\",\n      \"bundleIdentifier\": \"cypwn.WallpapersCentralPro_1.5.2.1.5.2\",\n      \"developerName\": \"WallpapersCentralPro_1.5.2 x CyPwn\",\n      \"version\": \"1.5.2\",\n      \"versionDate\": \"2022-09-28\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/WallpapersCentralPro_1.5.2.ipa\",\n      \"localizedDescription\": \"Thousands of wallpapers at your fingertips. Pro features unlocked by clicking Buy on lifetime subscription, then Cancel.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/WallpapersCentralPro_1.5.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 28206694,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"LiveWallpapersForMe_2.42.2\",\n      \"bundleIdentifier\": \"cypwn.LiveWallpapersForMe_2.42.2.2.42.2\",\n      \"developerName\": \"LiveWallpapersForMe_2.42.2 x CyPwn\",\n      \"version\": \"2.42.2\",\n      \"versionDate\": \"2022-09-27\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/LiveWallpapersForMe_2.42.2.ipa\",\n      \"localizedDescription\": \"Premium unlocked. Cracked by @Sopranox\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveWallpapersForMe_2.42.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 127884328,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"YouCamPerfect_5.76.1\",\n      \"bundleIdentifier\": \"cypwn.YouCamPerfect_5.76.1.5.76.1\",\n      \"developerName\": \"YouCamPerfect_5.76.1 x CyPwn\",\n      \"version\": \"5.76.1\",\n      \"versionDate\": \"2022-09-26\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/YouCamPerfect_5.76.1.ipa\",\n      \"localizedDescription\": \"Premium unlocked. Cracked by @Sopranox\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/YouCamPerfect_5.76.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 131009085,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Star_Map_2.6_Satella\",\n      \"bundleIdentifier\": \"cypwn.Star_Map_2.6_Satella.2.6\",\n      \"developerName\": \"Star_Map_2.6_Satella x CyPwn\",\n      \"version\": \"2.6\",\n      \"versionDate\": \"2022-09-19\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Star_Map_2.6_Satella.ipa\",\n      \"localizedDescription\": \"StarMap with Satella Jailed injection. Unlock all pro features for free. Click buy then cancel when it asks for apple id confirmation.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Star_Map_2.6_Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 32830914,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"RefacePro_3.12.0\",\n      \"bundleIdentifier\": \"cypwn.RefacePro_3.12.0.3.12.0\",\n      \"developerName\": \"RefacePro_3.12.0 x CyPwn\",\n      \"version\": \"3.12.0\",\n      \"versionDate\": \"2022-09-18\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/RefacePro_3.12.0.ipa\",\n      \"localizedDescription\": \"Reface: Face Swap Videos. Pro unlocked.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/RefacePro_3.12.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 55375298,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"AppCake+\",\n      \"bundleIdentifier\": \"cypwn.AppCake+.7.2.2\",\n      \"developerName\": \"AppCake+ x CyPwn\",\n      \"version\": \"7.2.2\",\n      \"versionDate\": \"2022-09-16\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AppCake+.ipa\",\n      \"localizedDescription\": \"AppCake7+ IPA store - Dark Mode - Bypasses verify screen - No Ads\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AppCake+.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 17186160,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"NewOS\",\n      \"bundleIdentifier\": \"cypwn.NewOS.1.0\",\n      \"developerName\": \"NewOS x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-09-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/NewOS.ipa\",\n      \"localizedDescription\": \"Bring the iOS 11 experience in an app!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/NewOS.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 16410214,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"AddRepo\",\n      \"bundleIdentifier\": \"cypwn.AddRepo.1.0.2\",\n      \"developerName\": \"AddRepo x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2022-09-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/AddRepo.ipa\",\n      \"localizedDescription\": \"App that can easily add repos to any package manager.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/AddRepo.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2369781,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Root\",\n      \"bundleIdentifier\": \"cypwn.Root.1.0.0\",\n      \"developerName\": \"Root x CyPwn\",\n      \"version\": \"1.0.0\",\n      \"versionDate\": \"2022-09-14\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Root.ipa\",\n      \"localizedDescription\": \"The best Filza Escaped alternative for iOS 14.0 - 14.3. Other software versions will work with limited access\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Root.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 2883584,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"SleepCycle_Premium\",\n      \"bundleIdentifier\": \"cypwn.SleepCycle_Premium.6.22.34\",\n      \"developerName\": \"SleepCycle_Premium x CyPwn\",\n      \"version\": \"6.22.34\",\n      \"versionDate\": \"2022-09-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/SleepCycle_Premium.ipa\",\n      \"localizedDescription\": \"Sleep Cycle Premium unlocked by Dz\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/SleepCycle_Premium.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 83393249,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Alarmy_6.68.0+Satella\",\n      \"bundleIdentifier\": \"cypwn.Alarmy_6.68.0+Satella.6.68.0\",\n      \"developerName\": \"Alarmy_6.68.0+Satella x CyPwn\",\n      \"version\": \"6.68.0\",\n      \"versionDate\": \"2022-09-05\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Alarmy_6.68.0+Satella.ipa\",\n      \"localizedDescription\": \"Includes Satella Jailed to unlock all in-app purchases. Click the floating purple star icon to open Satella settings. Enable tweak and turn on Receipts. Click buy on any IAP, then hit cancel upon confirmation.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Alarmy_6.68.0+Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 122159104,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Adobe_Express_11.3.0+Satella\",\n      \"bundleIdentifier\": \"cypwn.Adobe_Express_11.3.0+Satella.11.3.0\",\n      \"developerName\": \"Adobe_Express_11.3.0+Satella x CyPwn\",\n      \"version\": \"11.3.0\",\n      \"versionDate\": \"2022-08-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Adobe_Express_11.3.0+Satella.ipa\",\n      \"localizedDescription\": \"Includes Satella Jailed to unlock all in-app purchases. Click the floating purple star icon to open Satella settings. Enable tweak and turn on Receipts. Click buy on any IAP, then hit cancel upon confirmation.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Adobe_Express_11.3.0+Satella.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 75570872,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Adobe_Express_11.3.0+Satella/Adobe_Express_11.3.0+Satella.ipa366.png\"\n      ]\n    },\n    {\n      \"name\": \"Pixelmator2.7.3\",\n      \"bundleIdentifier\": \"cypwn.Pixelmator2.7.3.2.7.3\",\n      \"developerName\": \"Pixelmator2.7.3 x CyPwn\",\n      \"version\": \"2.7.3\",\n      \"versionDate\": \"2022-08-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Pixelmator2.7.3.ipa\",\n      \"localizedDescription\": \"Powerful, full-featured image editor for iOS.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Pixelmator2.7.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 122746306,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"FineReader_PDF_Pro_15.4.2\",\n      \"bundleIdentifier\": \"cypwn.FineReader_PDF_Pro_15.4.2.15.4.2\",\n      \"developerName\": \"FineReader_PDF_Pro_15.4.2 x CyPwn\",\n      \"version\": \"15.4.2\",\n      \"versionDate\": \"2022-08-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/FineReader_PDF_Pro_15.4.2.ipa\",\n      \"localizedDescription\": \"FineReader PDF Pro cracked by @Demoxing\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/FineReader_PDF_Pro_15.4.2.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 64340623,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"VideoShow_5.7.5\",\n      \"bundleIdentifier\": \"cypwn.VideoShow_5.7.5.5.7.5\",\n      \"developerName\": \"VideoShow_5.7.5 x CyPwn\",\n      \"version\": \"5.7.5\",\n      \"versionDate\": \"2022-08-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VideoShow_5.7.5.ipa\",\n      \"localizedDescription\": \"VideoShow Pro cracked by @Demoxing\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VideoShow_5.7.5.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 96049561,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"iTablaPro_11.6.1\",\n      \"bundleIdentifier\": \"cypwn.iTablaPro_11.6.1.11.6.1\",\n      \"developerName\": \"iTablaPro_11.6.1 x CyPwn\",\n      \"version\": \"11.6.1\",\n      \"versionDate\": \"2022-08-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/iTablaPro_11.6.1.ipa\",\n      \"localizedDescription\": \"iTablaPro cracked by @Demoxing\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/iTablaPro_11.6.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 42760929,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"HdoPlay-1-0-2-JKCrack\",\n      \"bundleIdentifier\": \"cypwn.HdoPlay-1-0-2-JKCrack.1.0.2\",\n      \"developerName\": \"HdoPlay-1-0-2-JKCrack x CyPwn\",\n      \"version\": \"1.0.2\",\n      \"versionDate\": \"2022-08-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/HdoPlay-1-0-2-JKCrack.ipa\",\n      \"localizedDescription\": \"Hdo Play - Movie Planner. Premium Cracked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/HdoPlay-1-0-2-JKCrack.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 8556380,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Santander\",\n      \"bundleIdentifier\": \"cypwn.Santander.1.0\",\n      \"developerName\": \"Santander x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-08-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Santander.ipa\",\n      \"localizedDescription\": \"Modern File Manager for iOS 14, 15, & 16. Still in beta. Expect bugs and permission issues on newer iOS versions\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Santander.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1426063,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Candy_Crush\",\n      \"bundleIdentifier\": \"cypwn.Candy_Crush.1.226.0\",\n      \"developerName\": \"Candy_Crush x CyPwn\",\n      \"version\": \"1.226.0\",\n      \"versionDate\": \"2022-08-08\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Candy_Crush.ipa\",\n      \"localizedDescription\": \"Candy Crush modded\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Candy_Crush.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 80069263,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Wallcraft_Pro_2.8\",\n      \"bundleIdentifier\": \"cypwn.Wallcraft_Pro_2.8.2.8\",\n      \"developerName\": \"Wallcraft_Pro_2.8 x CyPwn\",\n      \"version\": \"2.8\",\n      \"versionDate\": \"2022-08-06\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Wallcraft_Pro_2.8.ipa\",\n      \"localizedDescription\": \"Wallcraft Pro unlocked - Wallpapers for days\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Wallcraft_Pro_2.8.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 15707668,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Jaility\",\n      \"bundleIdentifier\": \"cypwn.Jaility.1.2\",\n      \"developerName\": \"Jaility x CyPwn\",\n      \"version\": \"1.2\",\n      \"versionDate\": \"2022-08-04\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Jaility.ipa\",\n      \"localizedDescription\": \"Respring your jailed iOS 15 device just like it was jailbroken. An example use case for this is when sideloaded apps wont appear on homescreen, simply respring with jaility to fix.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Jaility.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 1205862,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/serve/screenshots/Jaility/Jaility.ipa317.png\"\n      ]\n    },\n    {\n      \"name\": \"PostBox-0.8-beta\",\n      \"bundleIdentifier\": \"cypwn.PostBox-0.8-beta.0.8\",\n      \"developerName\": \"PostBox-0.8-beta x CyPwn\",\n      \"version\": \"0.8\",\n      \"versionDate\": \"2022-07-31\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/PostBox-0.8-beta.ipa\",\n      \"localizedDescription\": \"An app for browsing tweak repos. Download and save debs on jailed devices to use for injecting and sideloading. This DOES NOT install tweaks on jailed devices, but you no longer need a jailbroken device to find and save deb files\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-0.8-beta.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 7245660,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"kok3shidoll_v2.2.1\",\n      \"bundleIdentifier\": \"cypwn.kok3shidoll_v2.2.1.2.2.1\",\n      \"developerName\": \"kok3shidoll_v2.2.1 x CyPwn\",\n      \"version\": \"2.2.1\",\n      \"versionDate\": \"2022-05-17\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/kok3shidoll_v2.2.1.ipa\",\n      \"localizedDescription\": \"iOS 9.3.x semi-untethered jailbreak\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/kok3shidoll_v2.2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9101639,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Sync.ME_VIP_11.17.3\",\n      \"bundleIdentifier\": \"cypwn.Sync.ME_VIP_11.17.3.11.17.3\",\n      \"developerName\": \"Sync.ME_VIP_11.17.3 x CyPwn\",\n      \"version\": \"11.17.3\",\n      \"versionDate\": \"2022-05-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Sync.ME_VIP_11.17.3.ipa\",\n      \"localizedDescription\": \"\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Sync.ME_VIP_11.17.3.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 27724349,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"VivaVideo_VIP_9.3.6\",\n      \"bundleIdentifier\": \"cypwn.VivaVideo_VIP_9.3.6.9.3.6\",\n      \"developerName\": \"VivaVideo_VIP_9.3.6 x CyPwn\",\n      \"version\": \"9.3.6\",\n      \"versionDate\": \"2022-05-15\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/VivaVideo_VIP_9.3.6.ipa\",\n      \"localizedDescription\": \"VivaVideo w/ VIP unlocked\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/VivaVideo_VIP_9.3.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 87535124,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ClarityWallpaperPro7.2.6\",\n      \"bundleIdentifier\": \"cypwn.ClarityWallpaperPro7.2.6.7.2.6\",\n      \"developerName\": \"ClarityWallpaperPro7.2.6 x CyPwn\",\n      \"version\": \"7.2.6\",\n      \"versionDate\": \"2022-05-12\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ClarityWallpaperPro7.2.6.ipa\",\n      \"localizedDescription\": \"Endless Wallpapers. Pro IAP membership unlocked.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ClarityWallpaperPro7.2.6.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 43987763,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"DualgramPro_1.22\",\n      \"bundleIdentifier\": \"cypwn.DualgramPro_1.22.1.22\",\n      \"developerName\": \"DualgramPro_1.22 x CyPwn\",\n      \"version\": \"1.22\",\n      \"versionDate\": \"2022-05-03\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/DualgramPro_1.22.ipa\",\n      \"localizedDescription\": \"Record front and back cameras. Pro unlocked!\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/DualgramPro_1.22.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 3617587,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"remoteMousePro_4.211\",\n      \"bundleIdentifier\": \"cypwn.remoteMousePro_4.211.4.211\",\n      \"developerName\": \"remoteMousePro_4.211 x CyPwn\",\n      \"version\": \"4.211\",\n      \"versionDate\": \"2022-05-01\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/remoteMousePro_4.211.ipa\",\n      \"localizedDescription\": \"Pro features unlocked. Control your Mac, Windows, and Linux from your iOS device.\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/remoteMousePro_4.211.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 105644032,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Dystopia_0.01\",\n      \"bundleIdentifier\": \"cypwn.Dystopia_0.01.0.01\",\n      \"developerName\": \"Dystopia_0.01 x CyPwn\",\n      \"version\": \"0.01\",\n      \"versionDate\": \"2022-04-25\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Dystopia_0.01.ipa\",\n      \"localizedDescription\": \"Alternative to Apollo for Reddit\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia_0.01.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 9971957,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Retro_0.2~88\",\n      \"bundleIdentifier\": \"cypwn.Retro_0.2~88.0.2\",\n      \"developerName\": \"Retro_0.2~88 x CyPwn\",\n      \"version\": \"0.2\",\n      \"versionDate\": \"2022-04-21\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Retro_0.2~88.ipa\",\n      \"localizedDescription\": \"Retro iPod ClickWheel Player with Spotify integration\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Retro_0.2~88.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 109439877,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ScreenshotX1.0\",\n      \"bundleIdentifier\": \"cypwn.ScreenshotX1.0.1.0\",\n      \"developerName\": \"ScreenshotX1.0 x CyPwn\",\n      \"version\": \"1.0\",\n      \"versionDate\": \"2022-04-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ScreenshotX1.0.ipa\",\n      \"localizedDescription\": \"ScreenshotX by junesiphone\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenshotX1.0.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 36406558,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"ScreenSaver++1.3.1\",\n      \"bundleIdentifier\": \"cypwn.ScreenSaver++1.3.1.1.3.1\",\n      \"developerName\": \"ScreenSaver++1.3.1 x CyPwn\",\n      \"version\": \"1.3.1\",\n      \"versionDate\": \"2022-04-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/ScreenSaver++1.3.1.ipa\",\n      \"localizedDescription\": \"SleepSaver modified\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenSaver++1.3.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 122809221,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"OldOS_1.0.18\",\n      \"bundleIdentifier\": \"cypwn.oldOS.oldOS\",\n      \"developerName\": \"OldOS_1.0.18 x CyPwn\",\n      \"version\": \"1.0.18\",\n      \"versionDate\": \"2022-04-10\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/OldOS_1.0.18.ipa\",\n      \"localizedDescription\": \"iOS 4 4 ur 4ne\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS_1.0.18.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 83865108,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    },\n    {\n      \"name\": \"Provenance2.1\",\n      \"bundleIdentifier\": \"org.provenance-emu.provenance\",\n      \"developerName\": \"Provenance2.1 x CyPwn\",\n      \"version\": \"2.1.0\",\n      \"versionDate\": \"2022-04-09\",\n      \"downloadURL\": \"https://ipa.cypwn.xyz/ipas/Provenance2.1.ipa\",\n      \"localizedDescription\": \"Video game emulator\",\n      \"iconURL\": \"https://ipa.cypwn.xyz/serve/icons/Provenance2.1.png\",\n      \"tintColor\": \"FFC300\",\n      \"size\": 36123443,\n      \"screenshotURLs\": [\n        \"https://ipa.cypwn.xyz/assets/images/ipalibrary.png\"\n      ]\n    }\n  ],\n  \"news\": [\n    {\n      \"title\": \"Stremio-2.0.6 now available!\",\n      \"identifier\": \"cypwn.Stremio-2.0.6.2.0.6\",\n      \"caption\": \"Stremio-2.0.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-2.0.6.png\",\n      \"date\": \"2026-07-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PowerWarriors_18.0 now available!\",\n      \"identifier\": \"cypwn.PowerWarriors_18.0.18\",\n      \"caption\": \"PowerWarriors_18.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PowerWarriors_18.0.png\",\n      \"date\": \"2026-07-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Stremio-2.0.0 now available!\",\n      \"identifier\": \"cypwn.Stremio-2.0.0.2.0.0\",\n      \"caption\": \"Stremio-2.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-2.0.0.png\",\n      \"date\": \"2026-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CloverPit-1.4.8 now available!\",\n      \"identifier\": \"cypwn.CloverPit-1.4.8.1.4.8\",\n      \"caption\": \"CloverPit-1.4.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CloverPit-1.4.8.png\",\n      \"date\": \"2026-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Stremio-1.3.6 now available!\",\n      \"identifier\": \"cypwn.Stremio-1.3.6.1.3.6\",\n      \"caption\": \"Stremio-1.3.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio-1.3.6.png\",\n      \"date\": \"2026-02-24\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Vesc_Tool_6.06.2 now available!\",\n      \"identifier\": \"cypwn.Vesc_Tool_6.06.2.6.06.2\",\n      \"caption\": \"Vesc_Tool_6.06.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Vesc_Tool_6.06.2.png\",\n      \"date\": \"2026-02-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Terraria_4.5.0 now available!\",\n      \"identifier\": \"cypwn.Terraria_4.5.0.4.5.0\",\n      \"caption\": \"Terraria_4.5.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Terraria_4.5.0.png\",\n      \"date\": \"2026-01-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Violyn_1_4_4-2 now available!\",\n      \"identifier\": \"cypwn.Violyn_1_4_4-2.1.4.4\",\n      \"caption\": \"Violyn_1_4_4-2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Violyn_1_4_4-2.png\",\n      \"date\": \"2026-01-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iTorrent now available!\",\n      \"identifier\": \"cypwn.iTorrent.2.1.1\",\n      \"caption\": \"iTorrent added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iTorrent.png\",\n      \"date\": \"2025-12-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"True_Skate_1.5.102 now available!\",\n      \"identifier\": \"cypwn.True_Skate_1.5.102.1.5.102\",\n      \"caption\": \"True_Skate_1.5.102 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/True_Skate_1.5.102.png\",\n      \"date\": \"2025-12-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed-v1.8.3-ios now available!\",\n      \"identifier\": \"cypwn.Gopeed-v1.8.3-ios.1.8.3\",\n      \"caption\": \"Gopeed-v1.8.3-ios added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed-v1.8.3-ios.png\",\n      \"date\": \"2025-12-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"OldOS now available!\",\n      \"identifier\": \"cypwn.OldOS.2.0.7\",\n      \"caption\": \"OldOS added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS.png\",\n      \"date\": \"2025-12-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"InjectionIPA_v5.0 now available!\",\n      \"identifier\": \"cypwn.InjectionIPA_v5.0.5.0\",\n      \"caption\": \"InjectionIPA_v5.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/InjectionIPA_v5.0.png\",\n      \"date\": \"2025-12-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DLiPA_v1.1 now available!\",\n      \"identifier\": \"cypwn.DLiPA_v1.1.1.1\",\n      \"caption\": \"DLiPA_v1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DLiPA_v1.1.png\",\n      \"date\": \"2025-12-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Fortnite+Release-7.40-CL-5011364 now available!\",\n      \"identifier\": \"cypwn.Fortnite+Release-7.40-CL-5011364.7.40.2\",\n      \"caption\": \"Fortnite+Release-7.40-CL-5011364 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Fortnite+Release-7.40-CL-5011364.png\",\n      \"date\": \"2025-11-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spotube-iOS now available!\",\n      \"identifier\": \"cypwn.Spotube-iOS.5.1.0\",\n      \"caption\": \"Spotube-iOS added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spotube-iOS.png\",\n      \"date\": \"2025-11-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PotatoIM now available!\",\n      \"identifier\": \"cypwn.PotatoIM.2.47.207251\",\n      \"caption\": \"PotatoIM added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PotatoIM.png\",\n      \"date\": \"2025-10-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Asspp_2.3 now available!\",\n      \"identifier\": \"cypwn.Asspp_2.3.2.3\",\n      \"caption\": \"Asspp_2.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Asspp_2.3.png\",\n      \"date\": \"2025-09-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GoCoEdit_23.0 now available!\",\n      \"identifier\": \"cypwn.GoCoEdit_23.0.23.0\",\n      \"caption\": \"GoCoEdit_23.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GoCoEdit_23.0.png\",\n      \"date\": \"2025-09-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Deltarune_v727 now available!\",\n      \"identifier\": \"cypwn.Deltarune_v727.0\",\n      \"caption\": \"Deltarune_v727 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Deltarune_v727.png\",\n      \"date\": \"2025-08-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"BazaartPremium_10.8.0 now available!\",\n      \"identifier\": \"cypwn.BazaartPremium_10.8.0.10.8.0\",\n      \"caption\": \"BazaartPremium_10.8.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/BazaartPremium_10.8.0.png\",\n      \"date\": \"2025-08-29\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VPN_FAST now available!\",\n      \"identifier\": \"cypwn.VPN_FAST.1.8.6\",\n      \"caption\": \"VPN_FAST added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_FAST.png\",\n      \"date\": \"2025-08-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Tasks_Create_Live_Activities now available!\",\n      \"identifier\": \"cypwn.Tasks_Create_Live_Activities.1.01\",\n      \"caption\": \"Tasks_Create_Live_Activities added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Tasks_Create_Live_Activities.png\",\n      \"date\": \"2025-08-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ChatGPTw15 now available!\",\n      \"identifier\": \"cypwn.ChatGPTw15.1.0\",\n      \"caption\": \"ChatGPTw15 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ChatGPTw15.png\",\n      \"date\": \"2025-08-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VPN_Proxy_Master now available!\",\n      \"identifier\": \"cypwn.VPN_Proxy_Master.2.2.8\",\n      \"caption\": \"VPN_Proxy_Master added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Proxy_Master.png\",\n      \"date\": \"2025-08-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VPN_Freedom now available!\",\n      \"identifier\": \"cypwn.VPN_Freedom.1.2.2\",\n      \"caption\": \"VPN_Freedom added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VPN_Freedom.png\",\n      \"date\": \"2025-08-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"bitchat_1.2.1 now available!\",\n      \"identifier\": \"cypwn.bitchat_1.2.1.1.2.1\",\n      \"caption\": \"bitchat_1.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.2.1.png\",\n      \"date\": \"2025-08-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"The_Free_VPN now available!\",\n      \"identifier\": \"cypwn.The_Free_VPN.1.10.1\",\n      \"caption\": \"The_Free_VPN added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/The_Free_VPN.png\",\n      \"date\": \"2025-08-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Shark_Arsenal_4.0.14 now available!\",\n      \"identifier\": \"cypwn.Shark_Arsenal_4.0.14.4.0.14\",\n      \"caption\": \"Shark_Arsenal_4.0.14 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Shark_Arsenal_4.0.14.png\",\n      \"date\": \"2025-07-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FileBrowser_Pro_25.7 now available!\",\n      \"identifier\": \"cypwn.FileBrowser_Pro_25.7.25.7\",\n      \"caption\": \"FileBrowser_Pro_25.7 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.7.png\",\n      \"date\": \"2025-07-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Amethyst_1.0 now available!\",\n      \"identifier\": \"cypwn.Amethyst_1.0.1.0\",\n      \"caption\": \"Amethyst_1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Amethyst_1.0.png\",\n      \"date\": \"2025-07-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Bitchat now available!\",\n      \"identifier\": \"cypwn.Bitchat.1.0.0\",\n      \"caption\": \"Bitchat added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/bitchat_1.0.0_1752444072.png\",\n      \"date\": \"2025-07-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Little Nightmares now available!\",\n      \"identifier\": \"cypwn.Little Nightmares.1.0.2\",\n      \"caption\": \"Little Nightmares added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LittleNightmares_1.0.2.png\",\n      \"date\": \"2025-07-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SQLiteFlow_5.8.6 now available!\",\n      \"identifier\": \"cypwn.SQLiteFlow_5.8.6.5.8.6\",\n      \"caption\": \"SQLiteFlow_5.8.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SQLiteFlow_5.8.6.png\",\n      \"date\": \"2025-06-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FileBrowser_Pro_25.6 now available!\",\n      \"identifier\": \"cypwn.FileBrowser_Pro_25.6.25.6\",\n      \"caption\": \"FileBrowser_Pro_25.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.6.png\",\n      \"date\": \"2025-06-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FileBrowser_Pro_25.5 now available!\",\n      \"identifier\": \"cypwn.FileBrowser_Pro_25.5.25.5\",\n      \"caption\": \"FileBrowser_Pro_25.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FileBrowser_Pro_25.5.png\",\n      \"date\": \"2025-06-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Scrcpy_Remote_2.4 now available!\",\n      \"identifier\": \"cypwn.Scrcpy_Remote_2.4.2.4\",\n      \"caption\": \"Scrcpy_Remote_2.4 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Scrcpy_Remote_2.4.png\",\n      \"date\": \"2025-05-22\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"True_Skate_1.5.95 now available!\",\n      \"identifier\": \"cypwn.True_Skate_1.5.95.1.5.95\",\n      \"caption\": \"True_Skate_1.5.95 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/True_Skate_1.5.95.png\",\n      \"date\": \"2025-05-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FTPManager_8.5.4 now available!\",\n      \"identifier\": \"cypwn.FTPManager_8.5.4.8.5.4\",\n      \"caption\": \"FTPManager_8.5.4 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FTPManager_8.5.4.png\",\n      \"date\": \"2025-05-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Stremio_1.0.1-17 now available!\",\n      \"identifier\": \"cypwn.Stremio_1.0.1-17.1.0.1\",\n      \"caption\": \"Stremio_1.0.1-17 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Stremio_1.0.1-17.png\",\n      \"date\": \"2025-05-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Theta_1.5 now available!\",\n      \"identifier\": \"cypwn.Theta_1.5.380.0.0\",\n      \"caption\": \"Theta_1.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Theta_1.5.png\",\n      \"date\": \"2025-05-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"UniversalPaperclips now available!\",\n      \"identifier\": \"cypwn.UniversalPaperclips.2.1.0\",\n      \"caption\": \"UniversalPaperclips added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/UniversalPaperclips.png\",\n      \"date\": \"2025-05-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Pokecut_4.4.2 now available!\",\n      \"identifier\": \"cypwn.Pokecut_4.4.2.4.4.2\",\n      \"caption\": \"Pokecut_4.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Pokecut_4.4.2.png\",\n      \"date\": \"2025-05-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ProCam_14.7.3 now available!\",\n      \"identifier\": \"cypwn.ProCam_14.7.3.14.7.3\",\n      \"caption\": \"ProCam_14.7.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCam_14.7.3.png\",\n      \"date\": \"2025-05-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"maid2_0_7 now available!\",\n      \"identifier\": \"cypwn.maid2_0_7.2.0.7\",\n      \"caption\": \"maid2_0_7 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/maid2_0_7.png\",\n      \"date\": \"2025-05-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Ignited_1.8.5 now available!\",\n      \"identifier\": \"cypwn.Ignited_1.8.5.1.8.5\",\n      \"caption\": \"Ignited_1.8.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Ignited_1.8.5.png\",\n      \"date\": \"2025-05-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.9.5-9.0.36 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.9.5-9.0.36.9.0.36\",\n      \"caption\": \"EeveeSpotify-5.9.5-9.0.36 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.9.5-9.0.36.png\",\n      \"date\": \"2025-04-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Balatro_1.0.1o now available!\",\n      \"identifier\": \"cypwn.Balatro_1.0.1o.1.0.1o\",\n      \"caption\": \"Balatro_1.0.1o added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Balatro_1.0.1o.png\",\n      \"date\": \"2025-04-24\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CrazyCattle3D_1.0.0 now available!\",\n      \"identifier\": \"cypwn.CrazyCattle3D_1.0.0.1.0.0\",\n      \"caption\": \"CrazyCattle3D_1.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CrazyCattle3D_1.0.0.png\",\n      \"date\": \"2025-04-22\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed_1.7.0 now available!\",\n      \"identifier\": \"cypwn.Gopeed_1.7.0.1.7.0\",\n      \"caption\": \"Gopeed_1.7.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.7.0.png\",\n      \"date\": \"2025-04-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GoCoEdit_22.3 now available!\",\n      \"identifier\": \"cypwn.GoCoEdit_22.3.22.3\",\n      \"caption\": \"GoCoEdit_22.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GoCoEdit_22.3.png\",\n      \"date\": \"2025-04-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FL_Studio_Mobile_4.7.7_SatellaJailed now available!\",\n      \"identifier\": \"cypwn.FL_Studio_Mobile_4.7.7_SatellaJailed.4.7.7\",\n      \"caption\": \"FL_Studio_Mobile_4.7.7_SatellaJailed added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FL_Studio_Mobile_4.7.7_SatellaJailed.png\",\n      \"date\": \"2025-04-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Photomath_8.42.0 now available!\",\n      \"identifier\": \"cypwn.Photomath_8.42.0.8.42.0\",\n      \"caption\": \"Photomath_8.42.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Photomath_8.42.0.png\",\n      \"date\": \"2025-04-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iTransmission now available!\",\n      \"identifier\": \"cypwn.iTransmission.1.0\",\n      \"caption\": \"iTransmission added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iTransmission.png\",\n      \"date\": \"2025-03-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LumaFusion_3.0.10_iOS_15.0 now available!\",\n      \"identifier\": \"cypwn.LumaFusion_3.0.10_iOS_15.0.3.0.10\",\n      \"caption\": \"LumaFusion_3.0.10_iOS_15.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LumaFusion_3.0.10_iOS_15.0.png\",\n      \"date\": \"2025-03-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CyPwnStore_7.1 now available!\",\n      \"identifier\": \"cypwn.CyPwnStore_7.1.7.1\",\n      \"caption\": \"CyPwnStore_7.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CyPwnStore_7.1.png\",\n      \"date\": \"2025-03-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.8.8-9.0.26 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.8.8-9.0.26.9.0.26\",\n      \"caption\": \"EeveeSpotify-5.8.8-9.0.26 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.8.8-9.0.26.png\",\n      \"date\": \"2025-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Remoter_Pro_6.2.1 now available!\",\n      \"identifier\": \"cypwn.Remoter_Pro_6.2.1.6.2.1\",\n      \"caption\": \"Remoter_Pro_6.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Remoter_Pro_6.2.1.png\",\n      \"date\": \"2025-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Screens_4.12.11 now available!\",\n      \"identifier\": \"cypwn.Screens_4.12.11.4.12.11\",\n      \"caption\": \"Screens_4.12.11 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Screens_4.12.11.png\",\n      \"date\": \"2025-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Jump_9.8.0 now available!\",\n      \"identifier\": \"cypwn.Jump_9.8.0.9.8.0\",\n      \"caption\": \"Jump_9.8.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Jump_9.8.0.png\",\n      \"date\": \"2025-03-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Age_of_History_II_Europe_1.0713 now available!\",\n      \"identifier\": \"cypwn.Age_of_History_II_Europe_1.0713.1.0713\",\n      \"caption\": \"Age_of_History_II_Europe_1.0713 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Age_of_History_II_Europe_1.0713.png\",\n      \"date\": \"2025-03-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed_1.6.10 now available!\",\n      \"identifier\": \"cypwn.Gopeed_1.6.10.1.6.10\",\n      \"caption\": \"Gopeed_1.6.10 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.6.10.png\",\n      \"date\": \"2025-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Theta_1_4 now available!\",\n      \"identifier\": \"cypwn.Theta_1_4.370.0.0\",\n      \"caption\": \"Theta_1_4 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Theta_1_4.png\",\n      \"date\": \"2025-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"fGet_1.5.19_NoAds now available!\",\n      \"identifier\": \"cypwn.fGet_1.5.19_NoAds.1.5.19\",\n      \"caption\": \"fGet_1.5.19_NoAds added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/fGet_1.5.19_NoAds.png\",\n      \"date\": \"2025-02-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"atvTools_1.5.0 now available!\",\n      \"identifier\": \"cypwn.atvTools_1.5.0.1.5.0\",\n      \"caption\": \"atvTools_1.5.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/atvTools_1.5.0.png\",\n      \"date\": \"2025-02-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Notepad-_1.0 now available!\",\n      \"identifier\": \"cypwn.Notepad-_1.0.1.0\",\n      \"caption\": \"Notepad-_1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Notepad-_1.0.png\",\n      \"date\": \"2025-02-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HollowKnight now available!\",\n      \"identifier\": \"cypwn.HollowKnight.1.5.78.11833\",\n      \"caption\": \"HollowKnight added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HollowKnight.png\",\n      \"date\": \"2025-02-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.8.6-9.0.14 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.8.6-9.0.14.9.0.14\",\n      \"caption\": \"EeveeSpotify-5.8.6-9.0.14 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.8.6-9.0.14.png\",\n      \"date\": \"2025-02-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Textastic_9.9.3 now available!\",\n      \"identifier\": \"cypwn.Textastic_9.9.3.9.9.3\",\n      \"caption\": \"Textastic_9.9.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Textastic_9.9.3.png\",\n      \"date\": \"2025-01-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"TS.Notes_0.1 now available!\",\n      \"identifier\": \"cypwn.TS.Notes_0.1.0.1\",\n      \"caption\": \"TS.Notes_0.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/TS.Notes_0.1.png\",\n      \"date\": \"2025-01-24\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picsew_3.11.4_Pro now available!\",\n      \"identifier\": \"cypwn.Picsew_3.11.4_Pro.3.11.4\",\n      \"caption\": \"Picsew_3.11.4_Pro added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsew_3.11.4_Pro.png\",\n      \"date\": \"2025-01-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iota6.0-13.1.0 now available!\",\n      \"identifier\": \"cypwn.iota6.0-13.1.0.13.1.0\",\n      \"caption\": \"iota6.0-13.1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iota6.0-13.1.0.png\",\n      \"date\": \"2024-12-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Violyn_1.4.2 now available!\",\n      \"identifier\": \"cypwn.Violyn_1.4.2.1.4.2\",\n      \"caption\": \"Violyn_1.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Violyn_1.4.2.png\",\n      \"date\": \"2024-11-22\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-5.8-8.9.90 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-5.8-8.9.90.8.9.90\",\n      \"caption\": \"EeveeSpotify-5.8-8.9.90 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-5.8-8.9.90.png\",\n      \"date\": \"2024-11-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"TransparentIcons_1.7.2 now available!\",\n      \"identifier\": \"cypwn.TransparentIcons_1.7.2.1.7.2\",\n      \"caption\": \"TransparentIcons_1.7.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/TransparentIcons_1.7.2.png\",\n      \"date\": \"2024-10-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CarrotPremium_6.1.3 now available!\",\n      \"identifier\": \"cypwn.CarrotPremium_6.1.3.6.1.3\",\n      \"caption\": \"CarrotPremium_6.1.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CarrotPremium_6.1.3.png\",\n      \"date\": \"2024-10-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GeniePro_7.1.2 now available!\",\n      \"identifier\": \"cypwn.GeniePro_7.1.2.7.1.2\",\n      \"caption\": \"GeniePro_7.1.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GeniePro_7.1.2.png\",\n      \"date\": \"2024-10-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b10_351.0.1 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b10_351.0.1.351.0.1\",\n      \"caption\": \"Regram_1.0-b10_351.0.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b10_351.0.1.png\",\n      \"date\": \"2024-10-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DuolingoMax_7.37.1 now available!\",\n      \"identifier\": \"cypwn.DuolingoMax_7.37.1.7.37.1\",\n      \"caption\": \"DuolingoMax_7.37.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DuolingoMax_7.37.1.png\",\n      \"date\": \"2024-09-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b10_347.2.5 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b10_347.2.5.347.2.5\",\n      \"caption\": \"Regram_1.0-b10_347.2.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b10_347.2.5.png\",\n      \"date\": \"2024-09-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EeveeSpotify-4.9-8.9.68 now available!\",\n      \"identifier\": \"cypwn.EeveeSpotify-4.9-8.9.68.8.9.68\",\n      \"caption\": \"EeveeSpotify-4.9-8.9.68 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EeveeSpotify-4.9-8.9.68.png\",\n      \"date\": \"2024-08-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Alook_Browser_20.1 now available!\",\n      \"identifier\": \"cypwn.Alook_Browser_20.1.20.1\",\n      \"caption\": \"Alook_Browser_20.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Alook_Browser_20.1.png\",\n      \"date\": \"2024-08-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WallcraftPro_3.19 now available!\",\n      \"identifier\": \"cypwn.WallcraftPro_3.19.3.19\",\n      \"caption\": \"WallcraftPro_3.19 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WallcraftPro_3.19.png\",\n      \"date\": \"2024-08-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Phantom_VPN_3.9.6_PhantomReset now available!\",\n      \"identifier\": \"cypwn.Phantom_VPN_3.9.6_PhantomReset.3.9.6\",\n      \"caption\": \"Phantom_VPN_3.9.6_PhantomReset added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Phantom_VPN_3.9.6_PhantomReset.png\",\n      \"date\": \"2024-08-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VlogNow_1.82.1_Cracked now available!\",\n      \"identifier\": \"cypwn.VlogNow_1.82.1_Cracked.1.82.1\",\n      \"caption\": \"VlogNow_1.82.1_Cracked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VlogNow_1.82.1_Cracked.png\",\n      \"date\": \"2024-08-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picsart_25.5.1_Cracked now available!\",\n      \"identifier\": \"cypwn.Picsart_25.5.1_Cracked.25.5.1\",\n      \"caption\": \"Picsart_25.5.1_Cracked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsart_25.5.1_Cracked.png\",\n      \"date\": \"2024-08-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CapCut_12.0_Cracked now available!\",\n      \"identifier\": \"cypwn.CapCut_12.0_Cracked.12.0\",\n      \"caption\": \"CapCut_12.0_Cracked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CapCut_12.0_Cracked.png\",\n      \"date\": \"2024-08-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b8_343.0.0 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b8_343.0.0.343.0.0\",\n      \"caption\": \"Regram_1.0-b8_343.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b8_343.0.0.png\",\n      \"date\": \"2024-08-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picsart_25.4.2_Premium now available!\",\n      \"identifier\": \"cypwn.Picsart_25.4.2_Premium.25.4.2\",\n      \"caption\": \"Picsart_25.4.2_Premium added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picsart_25.4.2_Premium.png\",\n      \"date\": \"2024-08-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HelloWeatherVIP_3.13.6 now available!\",\n      \"identifier\": \"cypwn.HelloWeatherVIP_3.13.6.3.13.15\",\n      \"caption\": \"HelloWeatherVIP_3.13.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HelloWeatherVIP_3.13.6.png\",\n      \"date\": \"2024-07-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VidList_1.2 now available!\",\n      \"identifier\": \"cypwn.VidList_1.2.1.2\",\n      \"caption\": \"VidList_1.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_1.2.png\",\n      \"date\": \"2024-07-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AIChatSmithPremium-7.0.0 now available!\",\n      \"identifier\": \"cypwn.AIChatSmithPremium-7.0.0.7.0.0\",\n      \"caption\": \"AIChatSmithPremium-7.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AIChatSmithPremium-7.0.0.png\",\n      \"date\": \"2024-07-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ESign_5.0_noLogs_V1.1 now available!\",\n      \"identifier\": \"cypwn.ESign_5.0_noLogs_V1.1.5.0.0\",\n      \"caption\": \"ESign_5.0_noLogs_V1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ESign_5.0_noLogs_V1.1.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Haaretz_Heb_Unlocked now available!\",\n      \"identifier\": \"cypwn.Haaretz_Heb_Unlocked.5.2.176\",\n      \"caption\": \"Haaretz_Heb_Unlocked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Heb_Unlocked.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Haaretz_Eng_Unlocked now available!\",\n      \"identifier\": \"cypwn.Haaretz_Eng_Unlocked.5.60\",\n      \"caption\": \"Haaretz_Eng_Unlocked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Haaretz_Eng_Unlocked.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"TheMarker_Heb_Unlocked now available!\",\n      \"identifier\": \"cypwn.TheMarker_Heb_Unlocked.4.2.52\",\n      \"caption\": \"TheMarker_Heb_Unlocked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/TheMarker_Heb_Unlocked.png\",\n      \"date\": \"2024-07-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spark_3.9.12 now available!\",\n      \"identifier\": \"cypwn.Spark_3.9.12.3.9.12\",\n      \"caption\": \"Spark_3.9.12 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.12.png\",\n      \"date\": \"2024-07-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Climax now available!\",\n      \"identifier\": \"cypwn.Climax.2.1\",\n      \"caption\": \"Climax added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Climax.png\",\n      \"date\": \"2024-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"callrecorder now available!\",\n      \"identifier\": \"cypwn.callrecorder.2.93\",\n      \"caption\": \"callrecorder added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/callrecorder.png\",\n      \"date\": \"2024-07-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spark_3.9.11 now available!\",\n      \"identifier\": \"cypwn.Spark_3.9.11.3.9.11\",\n      \"caption\": \"Spark_3.9.11 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.11.png\",\n      \"date\": \"2024-07-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"IGRocketRegram_1.0-b7_338.0.0 now available!\",\n      \"identifier\": \"cypwn.IGRocketRegram_1.0-b7_338.0.0.338.0.0\",\n      \"caption\": \"IGRocketRegram_1.0-b7_338.0.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/IGRocketRegram_1.0-b7_338.0.0.png\",\n      \"date\": \"2024-07-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"trailforks_hacked now available!\",\n      \"identifier\": \"cypwn.trailforks_hacked.2024.2.6\",\n      \"caption\": \"trailforks_hacked added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/trailforks_hacked.png\",\n      \"date\": \"2024-07-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b7_335.1.8 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b7_335.1.8.335.1.8\",\n      \"caption\": \"Regram_1.0-b7_335.1.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b7_335.1.8.png\",\n      \"date\": \"2024-06-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CAPerfHUDSwift now available!\",\n      \"identifier\": \"cypwn.CAPerfHUDSwift.1.0.2\",\n      \"caption\": \"CAPerfHUDSwift added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CAPerfHUDSwift.png\",\n      \"date\": \"2024-06-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PicsArt_25.1.2 now available!\",\n      \"identifier\": \"cypwn.PicsArt_25.1.2.25.1.2\",\n      \"caption\": \"PicsArt_25.1.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PicsArt_25.1.2.png\",\n      \"date\": \"2024-06-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Regram_1.0-b7_335.0.8 now available!\",\n      \"identifier\": \"cypwn.Regram_1.0-b7_335.0.8.335.0.8\",\n      \"caption\": \"Regram_1.0-b7_335.0.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Regram_1.0-b7_335.0.8.png\",\n      \"date\": \"2024-06-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Speedtest_VPN_Premium_5.4.0 now available!\",\n      \"identifier\": \"cypwn.Speedtest_VPN_Premium_5.4.0.5.4.0\",\n      \"caption\": \"Speedtest_VPN_Premium_5.4.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Speedtest_VPN_Premium_5.4.0.png\",\n      \"date\": \"2024-06-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Egern-1.19.1 now available!\",\n      \"identifier\": \"cypwn.Egern-1.19.1.1.19.1\",\n      \"caption\": \"Egern-1.19.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Egern-1.19.1.png\",\n      \"date\": \"2024-05-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Mimo_6.48.0_Premium now available!\",\n      \"identifier\": \"cypwn.Mimo_6.48.0_Premium.6.48.0\",\n      \"caption\": \"Mimo_6.48.0_Premium added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Mimo_6.48.0_Premium.png\",\n      \"date\": \"2024-05-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Discord_228.1_Pyoncord now available!\",\n      \"identifier\": \"cypwn.Discord_228.1_Pyoncord.228.1\",\n      \"caption\": \"Discord_228.1_Pyoncord added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Discord_228.1_Pyoncord_DiscordNoTrack.png\",\n      \"date\": \"2024-05-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spark_3.9.2 now available!\",\n      \"identifier\": \"cypwn.Spark_3.9.2.3.9.2\",\n      \"caption\": \"Spark_3.9.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spark_3.9.2.png\",\n      \"date\": \"2024-05-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Nicegram_1.6.2 now available!\",\n      \"identifier\": \"cypwn.Nicegram_1.6.2.1.6.2\",\n      \"caption\": \"Nicegram_1.6.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Nicegram_1.6.2.png\",\n      \"date\": \"2024-05-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Gopeed_1.5.6 now available!\",\n      \"identifier\": \"cypwn.Gopeed_1.5.6.1.5.6\",\n      \"caption\": \"Gopeed_1.5.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Gopeed_1.5.6.png\",\n      \"date\": \"2024-04-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LiveContainer_2.0 now available!\",\n      \"identifier\": \"cypwn.LiveContainer_2.0.2.0\",\n      \"caption\": \"LiveContainer_2.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveContainer_2.0.png\",\n      \"date\": \"2024-04-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"BundleReader now available!\",\n      \"identifier\": \"cypwn.BundleReader.1.0\",\n      \"caption\": \"BundleReader added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/BundleReader.png\",\n      \"date\": \"2024-04-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"APNS_Demo now available!\",\n      \"identifier\": \"cypwn.APNS_Demo.1.00\",\n      \"caption\": \"APNS_Demo added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/APNS_Demo.png\",\n      \"date\": \"2024-04-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PhotoMathPlus_8.35.0 now available!\",\n      \"identifier\": \"cypwn.PhotoMathPlus_8.35.0.8.35.0\",\n      \"caption\": \"PhotoMathPlus_8.35.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PhotoMathPlus_8.35.0.png\",\n      \"date\": \"2024-04-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Bunny_Pyoncord_224.0 now available!\",\n      \"identifier\": \"cypwn.Bunny_Pyoncord_224.0.224.0\",\n      \"caption\": \"Bunny_Pyoncord_224.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Bunny_Pyoncord_224.0.png\",\n      \"date\": \"2024-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"MimoPro_6.43 now available!\",\n      \"identifier\": \"cypwn.MimoPro_6.43.6.43.0\",\n      \"caption\": \"MimoPro_6.43 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/MimoPro_6.43.png\",\n      \"date\": \"2024-04-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LiveContainer_1.0 now available!\",\n      \"identifier\": \"cypwn.LiveContainer_1.0.1.0\",\n      \"caption\": \"LiveContainer_1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveContainer_1.0.png\",\n      \"date\": \"2024-03-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Flightradar24_9.17.0 now available!\",\n      \"identifier\": \"cypwn.Flightradar24_9.17.0.9.17.0\",\n      \"caption\": \"Flightradar24_9.17.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Flightradar24_9.17.0.png\",\n      \"date\": \"2024-02-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Spotify++8.6.94_CyPwn now available!\",\n      \"identifier\": \"cypwn.Spotify++8.6.94_CyPwn.8.6.94\",\n      \"caption\": \"Spotify++8.6.94_CyPwn added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Spotify++8.6.94_CyPwn.png\",\n      \"date\": \"2024-01-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"GameSeagull now available!\",\n      \"identifier\": \"cypwn.GameSeagull.2.0.12\",\n      \"caption\": \"GameSeagull added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/GameSeagull.png\",\n      \"date\": \"2024-01-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ToonSquid_1.10.1_ipa.store now available!\",\n      \"identifier\": \"cypwn.ToonSquid_1.10.1_ipa.store.1.10.1\",\n      \"caption\": \"ToonSquid_1.10.1_ipa.store added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ToonSquid_1.10.1_ipa.store.png\",\n      \"date\": \"2024-01-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WazePlus_4.100.0 now available!\",\n      \"identifier\": \"cypwn.WazePlus_4.100.0.4.100.0\",\n      \"caption\": \"WazePlus_4.100.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WazePlus_4.100.0.png\",\n      \"date\": \"2023-12-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"NFC_Tools_2.27 now available!\",\n      \"identifier\": \"cypwn.NFC_Tools_2.27.2.27\",\n      \"caption\": \"NFC_Tools_2.27 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/NFC_Tools_2.27.png\",\n      \"date\": \"2023-12-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"EzFN-10.0 now available!\",\n      \"identifier\": \"cypwn.EzFN-10.0.10.00.0\",\n      \"caption\": \"EzFN-10.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/EzFN-10.0.png\",\n      \"date\": \"2023-11-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CryptoMiner now available!\",\n      \"identifier\": \"cypwn.CryptoMiner.0.5\",\n      \"caption\": \"CryptoMiner added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/com.mysterytag.cryptominer.png\",\n      \"date\": \"2023-10-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Amen_Break_Generator now available!\",\n      \"identifier\": \"cypwn.Amen_Break_Generator.2.0.6\",\n      \"caption\": \"Amen_Break_Generator added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Amen_Break_Generator-2.0.6.png\",\n      \"date\": \"2023-10-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"playSub_2023.1.1 now available!\",\n      \"identifier\": \"cypwn.playSub_2023.1.1.2023.1.1\",\n      \"caption\": \"playSub_2023.1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/playSub_2023.1.1.png\",\n      \"date\": \"2023-09-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Picasso_v2_Beta_5 now available!\",\n      \"identifier\": \"cypwn.Picasso_v2_Beta_5.2.0\",\n      \"caption\": \"Picasso_v2_Beta_5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Picasso_v2_Beta_5.png\",\n      \"date\": \"2023-08-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PropCashapp now available!\",\n      \"identifier\": \"cypwn.PropCashapp.1.0\",\n      \"caption\": \"PropCashapp added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PropCashapp.png\",\n      \"date\": \"2023-08-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ProCamera now available!\",\n      \"identifier\": \"cypwn.ProCamera.16.3\",\n      \"caption\": \"ProCamera added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ProCamera.png\",\n      \"date\": \"2023-07-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Suffuse3 now available!\",\n      \"identifier\": \"cypwn.Suffuse3.7.5.8\",\n      \"caption\": \"Suffuse3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Suffuse3.png\",\n      \"date\": \"2023-07-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Apollo_1.15.11+Artemis1.3 now available!\",\n      \"identifier\": \"cypwn.Apollo_1.15.11+Artemis1.3.1.15.11\",\n      \"caption\": \"Apollo_1.15.11+Artemis1.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Apollo_1.15.11+Artemis1.3.png\",\n      \"date\": \"2023-07-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Dystopia now available!\",\n      \"identifier\": \"cypwn.Dystopia.1.0.0\",\n      \"caption\": \"Dystopia added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia.png\",\n      \"date\": \"2023-06-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"CyPwn_Store now available!\",\n      \"identifier\": \"cypwn.CyPwn_Store.7.0\",\n      \"caption\": \"CyPwn_Store added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/CyPwn_Store.png\",\n      \"date\": \"2023-06-13\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"YTMusicUltimate_v1.4.1_YTM6.03.1 now available!\",\n      \"identifier\": \"cypwn.YTMusicUltimate_v1.4.1_YTM6.03.1.6.03.1\",\n      \"caption\": \"YTMusicUltimate_v1.4.1_YTM6.03.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/YTMusicUltimate_v1.4.1_YTM6.03.1.png\",\n      \"date\": \"2023-05-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"RaceControlF1 now available!\",\n      \"identifier\": \"cypwn.RaceControlF1.1.0\",\n      \"caption\": \"RaceControlF1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/RaceControlF1.png\",\n      \"date\": \"2023-04-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AppDB_1.1.5 now available!\",\n      \"identifier\": \"cypwn.AppDB_1.1.5.1.1.5\",\n      \"caption\": \"AppDB_1.1.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AppDB_1.1.5.png\",\n      \"date\": \"2023-04-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PeriodicTablePRO_1.124 now available!\",\n      \"identifier\": \"cypwn.PeriodicTablePRO_1.124.1.124\",\n      \"caption\": \"PeriodicTablePRO_1.124 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PeriodicTablePRO_1.124.png\",\n      \"date\": \"2023-03-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Whitelist now available!\",\n      \"identifier\": \"cypwn.Whitelist.1.1.0\",\n      \"caption\": \"Whitelist added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Whitelist.png\",\n      \"date\": \"2023-03-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DramaFlix_1.1.0 now available!\",\n      \"identifier\": \"cypwn.DramaFlix_1.1.0.1.1.0\",\n      \"caption\": \"DramaFlix_1.1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DramaFlix_1.1.0.png\",\n      \"date\": \"2023-03-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Cowabunga10 now available!\",\n      \"identifier\": \"cypwn.Cowabunga10.10.0.0\",\n      \"caption\": \"Cowabunga10 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Cowabunga10.png\",\n      \"date\": \"2023-03-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Dead_Cells_plus_v3.2.2 now available!\",\n      \"identifier\": \"cypwn.Dead_Cells_plus_v3.2.2.3.2.2\",\n      \"caption\": \"Dead_Cells_plus_v3.2.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Dead_Cells_plus_v3.2.2.png\",\n      \"date\": \"2023-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PicsArtGold_21.8.6 now available!\",\n      \"identifier\": \"cypwn.PicsArtGold_21.8.6.21.8.6\",\n      \"caption\": \"PicsArtGold_21.8.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PicsArtGold_21.8.6.png\",\n      \"date\": \"2023-03-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PelletDodge now available!\",\n      \"identifier\": \"cypwn.PelletDodge.b0.8.5\",\n      \"caption\": \"PelletDodge added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PelletDodge.png\",\n      \"date\": \"2023-02-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FacebookNoAds_401.0 now available!\",\n      \"identifier\": \"cypwn.FacebookNoAds_401.0.401.0\",\n      \"caption\": \"FacebookNoAds_401.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FacebookNoAds_401.0.png\",\n      \"date\": \"2023-02-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DarkCloud_6.16.1 now available!\",\n      \"identifier\": \"cypwn.DarkCloud_6.16.1.6.16.1\",\n      \"caption\": \"DarkCloud_6.16.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DarkCloud_6.16.1.png\",\n      \"date\": \"2023-02-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WDBFontOverwrite now available!\",\n      \"identifier\": \"cypwn.WDBFontOverwrite.1.10.7-1\",\n      \"caption\": \"WDBFontOverwrite added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WDBFontOverwrite.png\",\n      \"date\": \"2023-02-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"KillMyOTA-1.1 now available!\",\n      \"identifier\": \"cypwn.KillMyOTA-1.1.1.1\",\n      \"caption\": \"KillMyOTA-1.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/KillMyOTA-1.1.png\",\n      \"date\": \"2023-01-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FilzaEscaped16 now available!\",\n      \"identifier\": \"cypwn.FilzaEscaped16.3.7\",\n      \"caption\": \"FilzaEscaped16 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FilzaEscaped16.png\",\n      \"date\": \"2023-01-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SantanderEscaped-0.3 now available!\",\n      \"identifier\": \"cypwn.SantanderEscaped-0.3.1.0\",\n      \"caption\": \"SantanderEscaped-0.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SantanderEscaped-0.3.png\",\n      \"date\": \"2023-01-29\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"BeReal_0.31.0 now available!\",\n      \"identifier\": \"cypwn.BeReal_0.31.0.0.31.0\",\n      \"caption\": \"BeReal_0.31.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/BeReal_0.31.0.png\",\n      \"date\": \"2023-01-23\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Ally_2.0.23 now available!\",\n      \"identifier\": \"cypwn.Ally_2.0.23.2.0.23\",\n      \"caption\": \"Ally_2.0.23 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Ally_2.0.23.png\",\n      \"date\": \"2023-01-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Keka_1.0.1 now available!\",\n      \"identifier\": \"cypwn.Keka_1.0.1.1.0.1\",\n      \"caption\": \"Keka_1.0.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Keka_1.0.1.png\",\n      \"date\": \"2023-01-11\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"McClockface.1.5.1 now available!\",\n      \"identifier\": \"cypwn.McClockface.1.5.1.1.5.1\",\n      \"caption\": \"McClockface.1.5.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/McClockface.1.5.1.png\",\n      \"date\": \"2023-01-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Naiad now available!\",\n      \"identifier\": \"cypwn.Naiad.1.0\",\n      \"caption\": \"Naiad added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Naiad.png\",\n      \"date\": \"2022-12-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SharkMessenger_388.0 now available!\",\n      \"identifier\": \"cypwn.SharkMessenger_388.0.388.0\",\n      \"caption\": \"SharkMessenger_388.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SharkMessenger_388.0.png\",\n      \"date\": \"2022-11-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Sonic_3.5 now available!\",\n      \"identifier\": \"cypwn.Sonic_3.5.3.5\",\n      \"caption\": \"Sonic_3.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Sonic_3.5.png\",\n      \"date\": \"2022-11-30\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Summon_1.8_Satella now available!\",\n      \"identifier\": \"cypwn.Summon_1.8_Satella.1.8\",\n      \"caption\": \"Summon_1.8_Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Summon_1.8_Satella.png\",\n      \"date\": \"2022-11-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Vinegar_2.4.2 now available!\",\n      \"identifier\": \"cypwn.Vinegar_2.4.2.2.4.2\",\n      \"caption\": \"Vinegar_2.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Vinegar_2.4.2.png\",\n      \"date\": \"2022-11-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HeadsUp_5.1.41_Satella now available!\",\n      \"identifier\": \"cypwn.HeadsUp_5.1.41_Satella.5.1.41\",\n      \"caption\": \"HeadsUp_5.1.41_Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HeadsUp_5.1.41_Satella.png\",\n      \"date\": \"2022-11-20\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Pandolife1.1a_2211.1 now available!\",\n      \"identifier\": \"cypwn.Pandolife1.1a_2211.1.2211.1\",\n      \"caption\": \"Pandolife1.1a_2211.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Pandolife1.1a_2211.1.png\",\n      \"date\": \"2022-11-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"StarVPN_3.6.0 now available!\",\n      \"identifier\": \"cypwn.StarVPN_3.6.0.3.6.0\",\n      \"caption\": \"StarVPN_3.6.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/StarVPN_3.6.0.png\",\n      \"date\": \"2022-11-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"RadarbotVIP_8.7.1 now available!\",\n      \"identifier\": \"cypwn.RadarbotVIP_8.7.1.8.7.1\",\n      \"caption\": \"RadarbotVIP_8.7.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/RadarbotVIP_8.7.1.png\",\n      \"date\": \"2022-11-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VidList_0.5.1 now available!\",\n      \"identifier\": \"cypwn.VidList_0.5.1.0.5.1\",\n      \"caption\": \"VidList_0.5.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VidList_0.5.1.png\",\n      \"date\": \"2022-11-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"cl1m4x now available!\",\n      \"identifier\": \"cypwn.cl1m4x.1.3\",\n      \"caption\": \"cl1m4x added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/cl1m4x.png\",\n      \"date\": \"2022-11-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ChromaHue_2.1.0 now available!\",\n      \"identifier\": \"cypwn.ChromaHue_2.1.0.2.1.0\",\n      \"caption\": \"ChromaHue_2.1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ChromaHue_2.1.0.png\",\n      \"date\": \"2022-11-07\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Ulysses_27.3k now available!\",\n      \"identifier\": \"cypwn.Ulysses_27.3k.27.3\",\n      \"caption\": \"Ulysses_27.3k added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Ulysses_27.3k.png\",\n      \"date\": \"2022-11-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PostBox-Pocket now available!\",\n      \"identifier\": \"cypwn.PostBox-Pocket.0.8.1\",\n      \"caption\": \"PostBox-Pocket added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-Pocket.png\",\n      \"date\": \"2022-11-02\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SuperMario64_60FPS_1.2.1 now available!\",\n      \"identifier\": \"cypwn.SuperMario64_60FPS_1.2.1.1.2.1\",\n      \"caption\": \"SuperMario64_60FPS_1.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_60FPS_1.2.1.png\",\n      \"date\": \"2022-10-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SuperMario64_30FPS_1.2.1 now available!\",\n      \"identifier\": \"cypwn.SuperMario64_30FPS_1.2.1.1.2.1\",\n      \"caption\": \"SuperMario64_30FPS_1.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64_30FPS_1.2.1.png\",\n      \"date\": \"2022-10-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SuperMario64 now available!\",\n      \"identifier\": \"cypwn.SuperMario64.1.0.0\",\n      \"caption\": \"SuperMario64 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SuperMario64.png\",\n      \"date\": \"2022-10-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FRLegends++ now available!\",\n      \"identifier\": \"cypwn.FRLegends++.0.3.2\",\n      \"caption\": \"FRLegends++ added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FRLegends++.png\",\n      \"date\": \"2022-10-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"WallpapersCentralPro_1.5.2 now available!\",\n      \"identifier\": \"cypwn.WallpapersCentralPro_1.5.2.1.5.2\",\n      \"caption\": \"WallpapersCentralPro_1.5.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/WallpapersCentralPro_1.5.2.png\",\n      \"date\": \"2022-09-28\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"LiveWallpapersForMe_2.42.2 now available!\",\n      \"identifier\": \"cypwn.LiveWallpapersForMe_2.42.2.2.42.2\",\n      \"caption\": \"LiveWallpapersForMe_2.42.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/LiveWallpapersForMe_2.42.2.png\",\n      \"date\": \"2022-09-27\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"YouCamPerfect_5.76.1 now available!\",\n      \"identifier\": \"cypwn.YouCamPerfect_5.76.1.5.76.1\",\n      \"caption\": \"YouCamPerfect_5.76.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/YouCamPerfect_5.76.1.png\",\n      \"date\": \"2022-09-26\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Star_Map_2.6_Satella now available!\",\n      \"identifier\": \"cypwn.Star_Map_2.6_Satella.2.6\",\n      \"caption\": \"Star_Map_2.6_Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Star_Map_2.6_Satella.png\",\n      \"date\": \"2022-09-19\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"RefacePro_3.12.0 now available!\",\n      \"identifier\": \"cypwn.RefacePro_3.12.0.3.12.0\",\n      \"caption\": \"RefacePro_3.12.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/RefacePro_3.12.0.png\",\n      \"date\": \"2022-09-18\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AppCake+ now available!\",\n      \"identifier\": \"cypwn.AppCake+.7.2.2\",\n      \"caption\": \"AppCake+ added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AppCake+.png\",\n      \"date\": \"2022-09-16\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"NewOS now available!\",\n      \"identifier\": \"cypwn.NewOS.1.0\",\n      \"caption\": \"NewOS added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/NewOS.png\",\n      \"date\": \"2022-09-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"AddRepo now available!\",\n      \"identifier\": \"cypwn.AddRepo.1.0.2\",\n      \"caption\": \"AddRepo added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/AddRepo.png\",\n      \"date\": \"2022-09-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Root now available!\",\n      \"identifier\": \"cypwn.Root.1.0.0\",\n      \"caption\": \"Root added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Root.png\",\n      \"date\": \"2022-09-14\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"SleepCycle_Premium now available!\",\n      \"identifier\": \"cypwn.SleepCycle_Premium.6.22.34\",\n      \"caption\": \"SleepCycle_Premium added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/SleepCycle_Premium.png\",\n      \"date\": \"2022-09-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Alarmy_6.68.0+Satella now available!\",\n      \"identifier\": \"cypwn.Alarmy_6.68.0+Satella.6.68.0\",\n      \"caption\": \"Alarmy_6.68.0+Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Alarmy_6.68.0+Satella.png\",\n      \"date\": \"2022-09-05\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Adobe_Express_11.3.0+Satella now available!\",\n      \"identifier\": \"cypwn.Adobe_Express_11.3.0+Satella.11.3.0\",\n      \"caption\": \"Adobe_Express_11.3.0+Satella added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Adobe_Express_11.3.0+Satella.png\",\n      \"date\": \"2022-08-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Pixelmator2.7.3 now available!\",\n      \"identifier\": \"cypwn.Pixelmator2.7.3.2.7.3\",\n      \"caption\": \"Pixelmator2.7.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Pixelmator2.7.3.png\",\n      \"date\": \"2022-08-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"FineReader_PDF_Pro_15.4.2 now available!\",\n      \"identifier\": \"cypwn.FineReader_PDF_Pro_15.4.2.15.4.2\",\n      \"caption\": \"FineReader_PDF_Pro_15.4.2 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/FineReader_PDF_Pro_15.4.2.png\",\n      \"date\": \"2022-08-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VideoShow_5.7.5 now available!\",\n      \"identifier\": \"cypwn.VideoShow_5.7.5.5.7.5\",\n      \"caption\": \"VideoShow_5.7.5 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VideoShow_5.7.5.png\",\n      \"date\": \"2022-08-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"iTablaPro_11.6.1 now available!\",\n      \"identifier\": \"cypwn.iTablaPro_11.6.1.11.6.1\",\n      \"caption\": \"iTablaPro_11.6.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/iTablaPro_11.6.1.png\",\n      \"date\": \"2022-08-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"HdoPlay-1-0-2-JKCrack now available!\",\n      \"identifier\": \"cypwn.HdoPlay-1-0-2-JKCrack.1.0.2\",\n      \"caption\": \"HdoPlay-1-0-2-JKCrack added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/HdoPlay-1-0-2-JKCrack.png\",\n      \"date\": \"2022-08-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Santander now available!\",\n      \"identifier\": \"cypwn.Santander.1.0\",\n      \"caption\": \"Santander added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Santander.png\",\n      \"date\": \"2022-08-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Candy_Crush now available!\",\n      \"identifier\": \"cypwn.Candy_Crush.1.226.0\",\n      \"caption\": \"Candy_Crush added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Candy_Crush.png\",\n      \"date\": \"2022-08-08\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Wallcraft_Pro_2.8 now available!\",\n      \"identifier\": \"cypwn.Wallcraft_Pro_2.8.2.8\",\n      \"caption\": \"Wallcraft_Pro_2.8 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Wallcraft_Pro_2.8.png\",\n      \"date\": \"2022-08-06\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Jaility now available!\",\n      \"identifier\": \"cypwn.Jaility.1.2\",\n      \"caption\": \"Jaility added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Jaility.png\",\n      \"date\": \"2022-08-04\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"PostBox-0.8-beta now available!\",\n      \"identifier\": \"cypwn.PostBox-0.8-beta.0.8\",\n      \"caption\": \"PostBox-0.8-beta added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/PostBox-0.8-beta.png\",\n      \"date\": \"2022-07-31\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"kok3shidoll_v2.2.1 now available!\",\n      \"identifier\": \"cypwn.kok3shidoll_v2.2.1.2.2.1\",\n      \"caption\": \"kok3shidoll_v2.2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/kok3shidoll_v2.2.1.png\",\n      \"date\": \"2022-05-17\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Sync.ME_VIP_11.17.3 now available!\",\n      \"identifier\": \"cypwn.Sync.ME_VIP_11.17.3.11.17.3\",\n      \"caption\": \"Sync.ME_VIP_11.17.3 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Sync.ME_VIP_11.17.3.png\",\n      \"date\": \"2022-05-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"VivaVideo_VIP_9.3.6 now available!\",\n      \"identifier\": \"cypwn.VivaVideo_VIP_9.3.6.9.3.6\",\n      \"caption\": \"VivaVideo_VIP_9.3.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/VivaVideo_VIP_9.3.6.png\",\n      \"date\": \"2022-05-15\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ClarityWallpaperPro7.2.6 now available!\",\n      \"identifier\": \"cypwn.ClarityWallpaperPro7.2.6.7.2.6\",\n      \"caption\": \"ClarityWallpaperPro7.2.6 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ClarityWallpaperPro7.2.6.png\",\n      \"date\": \"2022-05-12\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"DualgramPro_1.22 now available!\",\n      \"identifier\": \"cypwn.DualgramPro_1.22.1.22\",\n      \"caption\": \"DualgramPro_1.22 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/DualgramPro_1.22.png\",\n      \"date\": \"2022-05-03\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"remoteMousePro_4.211 now available!\",\n      \"identifier\": \"cypwn.remoteMousePro_4.211.4.211\",\n      \"caption\": \"remoteMousePro_4.211 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/remoteMousePro_4.211.png\",\n      \"date\": \"2022-05-01\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Dystopia_0.01 now available!\",\n      \"identifier\": \"cypwn.Dystopia_0.01.0.01\",\n      \"caption\": \"Dystopia_0.01 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Dystopia_0.01.png\",\n      \"date\": \"2022-04-25\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Retro_0.2~88 now available!\",\n      \"identifier\": \"cypwn.Retro_0.2~88.0.2\",\n      \"caption\": \"Retro_0.2~88 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Retro_0.2~88.png\",\n      \"date\": \"2022-04-21\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ScreenshotX1.0 now available!\",\n      \"identifier\": \"cypwn.ScreenshotX1.0.1.0\",\n      \"caption\": \"ScreenshotX1.0 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenshotX1.0.png\",\n      \"date\": \"2022-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"ScreenSaver++1.3.1 now available!\",\n      \"identifier\": \"cypwn.ScreenSaver++1.3.1.1.3.1\",\n      \"caption\": \"ScreenSaver++1.3.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/ScreenSaver++1.3.1.png\",\n      \"date\": \"2022-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"OldOS_1.0.18 now available!\",\n      \"identifier\": \"cypwn.OldOS_1.0.18.1.0.18\",\n      \"caption\": \"OldOS_1.0.18 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/OldOS_1.0.18.png\",\n      \"date\": \"2022-04-10\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    },\n    {\n      \"title\": \"Provenance2.1 now available!\",\n      \"identifier\": \"cypwn.Provenance2.1.2.1.0\",\n      \"caption\": \"Provenance2.1 added to the CyPwn Library\",\n      \"tintColor\": \"FFC300\",\n      \"imageURL\": \"https://ipa.cypwn.xyz/serve/icons/Provenance2.1.png\",\n      \"date\": \"2022-04-09\",\n      \"url\": \"https://ipa.cypwn.xyz\",\n      \"notify\": true\n    }\n  ]\n}", "creation_timestamp": "2026-09-07T00:00:43.864576Z"}, {"uuid": "cce64627-9e4d-4d61-99f8-eeb59bed0f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46505", "type": "seen", "source": "Telegram/XELY7yMiVU7lDAG5jTnGWxzdDQm-g3hGd-rJzK0iCImTLgM", "content": "", "creation_timestamp": "2026-09-07T01:00:12.538825Z"}, {"uuid": "792dbe26-b58b-4fb6-816b-5c23f3226cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46770", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/mirageos/qubes_mirage_firewall_dos.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Krzysztof Burghardt \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module allows remote attackers to cause a denial of service (DoS)\\n          in Mirage firewall for QubesOS 0.8.0-0.8.3 via a specifically crafted UDP request.\", \"disclosure_date\": \"2022-12-04\", \"fullname\": \"auxiliary/dos/mirageos/qubes_mirage_firewall_dos\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Mirage firewall for QubesOS 0.8.0-0.8.3 Denial of Service (DoS) Exploit\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/mirageos/qubes_mirage_firewall_dos.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/mirageos/qubes_mirage_firewall_dos\", \"references\": [\"CVE-2022-46770\", \"URL-https://mirage.io/blog/MSA03\", \"URL-https://github.com/mirage/qubes-mirage-firewall/issues/166\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:02.325281Z"}, {"uuid": "f492e763-401b-4f34-ab13-eeb3995ff5f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64\", \"author\": [\"Stefan Schiller\", \"Steven Seeley\", \"Owen Gong\", \"Erik Wynter\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits an unauthenticated command injection\\n          vulnerability in Cacti through 1.2.22 (CVE-2022-46169) in\\n          order to achieve unauthenticated remote code execution as the\\n          www-data user.\\n\\n          The module first attempts to obtain the Cacti version to see\\n          if the target is affected. If LOCAL_DATA_ID and/or HOST_ID\\n          are not set, the module will try to bruteforce the missing\\n          value(s). If a valid combination is found, the module will\\n          use these to attempt exploitation. If LOCAL_DATA_ID and/or\\n          HOST_ID are both set, the module will immediately attempt\\n          exploitation.\\n\\n          During exploitation, the module sends a GET request to\\n          /remote_agent.php with the action parameter set to polldata\\n          and the X-Forwarded-For header set to the provided value for\\n          X_FORWARDED_FOR_IP (by default 127.0.0.1). In addition, the\\n          poller_id parameter is set to the payload and the host_id\\n          and local_data_id parameters are set to the bruteforced or\\n          provided values. If X_FORWARDED_FOR_IP is set to an address\\n          that is resolvable to a hostname in the poller table, and the\\n          local_data_id and host_id values are vulnerable, the payload\\n          set for poller_id will be executed by the target.\\n\\n          This module has been successfully tested against Cacti\\n          version 1.2.22 running on Ubuntu 21.10 (vulhub docker image)\", \"disclosure_date\": \"2022-12-05\", \"fullname\": \"exploit/linux/http/cacti_unauthenticated_cmd_injection\", \"is_install_path\": true, \"mod_time\": \"2026-02-09 15:17:23 +0000\", \"name\": \"Cacti 1.2.22 unauthenticated command injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/linux/http/cacti_unauthenticated_cmd_injection.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/cacti_unauthenticated_cmd_injection\", \"references\": [\"CVE-2022-46169\", \"GHSA-6p93-p743-35gf\", \"URL-https://github.com/vulhub/vulhub/tree/master/cacti/CVE-2022-46169\", \"URL-https://www.sonarsource.com/blog/cacti-unauthenticated-remote-code-execution\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Automatic (Unix In-Memory)\", \"Automatic (Linux Dropper)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:25.252907Z"}, {"uuid": "c54e99c4-a352-4f60-90d2-d64a5bda0a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46689", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/mac_dirty_cow.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x64\", \"author\": [\"Ian Beer\", \"Zhuowei Zhang\", \"timwr\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"An app may be able to execute arbitrary code with kernel privileges\", \"disclosure_date\": \"2022-12-17\", \"fullname\": \"exploit/osx/local/mac_dirty_cow\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"macOS Dirty Cow Arbitrary File Write Local Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"config-changes\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/osx/local/mac_dirty_cow.rb\", \"platform\": \"OSX\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"osx/local/mac_dirty_cow\", \"references\": [\"CVE-2022-46689\", \"URL-https://github.com/apple-oss-distributions/xnu/blob/xnu-8792.61.2/tests/vm/vm_unaligned_copy_switch_race.c\", \"URL-https://github.com/zhuowei/MacDirtyCowDemo\"], \"rport\": null, \"session_types\": [\"shell\", \"meterpreter\"], \"targets\": [\"Mac OS X x64 (Native Payload)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:31.356919Z"}, {"uuid": "cf4ef7b6-bbdd-4d24-9e8f-f09947b8a30e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46552", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6742", "content": "exploit\n1. CVE-2022-46552:\nD-Link DIR-846 - RCE\nhttps://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html\n\n2. RCE Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack\nhttps://www.legitsecurity.com/blog/remote-code-execution-vulnerability-in-azure-pipelines-can-lead-to-software-supply-chain-attack\n\n3. Citrix 22.2.1/23.1.1 - LPE\nhttps://packetstormsecurity.com/files/171716/Citrix-22.2.1.103-23.1.1.11-Local-Privilege-Escalation.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.17", "creation_timestamp": "2026-09-10T01:00:03.959455Z"}, {"uuid": "ba5a0a55-89ca-473c-9578-53c1ab7010ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/cissp/6478", "content": "If you use Cacti for web-based monitoring, be sure to patch ASAP!\nA critical vulnerability [CVE-2022-46169] is being actively exploited in the wild and a majority of internet-exposed servers have not been patched yet.\nRead: https://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.24", "creation_timestamp": "2026-09-10T04:00:04.602062Z"}, {"uuid": "522be360-bb8b-4725-bbdc-85b3d3642d5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46169", "type": "exploited", "source": "https://t.me/cissp/6478", "content": "If you use Cacti for web-based monitoring, be sure to patch ASAP!\nA critical vulnerability [CVE-2022-46169] is being actively exploited in the wild and a majority of internet-exposed servers have not been patched yet.\nRead: https://thehackernews.com/2023/01/cacti-servers-under-attack-as-majority.html\n\n\n\u2069-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.10.24", "creation_timestamp": "2026-09-11T00:00:52.767469Z"}, {"uuid": "bb05a154-5738-4d4f-a1b1-1037a3eed342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-46552", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6742", "content": "exploit\n1. CVE-2022-46552:\nD-Link DIR-846 - RCE\nhttps://packetstormsecurity.com/files/171710/D-Link-DIR-846-Remote-Command-Execution.html\n\n2. RCE Vulnerability in Azure Pipelines Can Lead To Software Supply Chain Attack\nhttps://www.legitsecurity.com/blog/remote-code-execution-vulnerability-in-azure-pipelines-can-lead-to-software-supply-chain-attack\n\n3. Citrix 22.2.1/23.1.1 - LPE\nhttps://packetstormsecurity.com/files/171716/Citrix-22.2.1.103-23.1.1.11-Local-Privilege-Escalation.html\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.01.17", "creation_timestamp": "2026-09-11T00:00:56.308982Z"}]}