{"vulnerability": "CVE-2022-0739", "sightings": [{"uuid": "bb1af735-b33e-4fd9-b7a0-83dc4a9f4a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "7c107e07-b0c1-49e5-a3b4-6a0a8a17ed26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:42.000000Z"}, {"uuid": "4c8f4372-2fef-4ed1-a514-c19014e99a9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb", "content": "", "creation_timestamp": "2022-12-05T21:30:44.000000Z"}, {"uuid": "debe475c-cd26-44d5-a783-426f27b3e40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3513", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aPython Exploit for CVE-2022-0739\nURL\uff1ahttps://github.com/BKreisel/CVE-2022-0739\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-12-03T01:42:39.000000Z"}, {"uuid": "605d15e3-ab3f-44e2-b180-b45d70a486ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/user_it_channel/123", "content": "\u0421\u043f\u0438\u0441\u043e\u043a \u0441\u0442\u0430\u0442\u0435\u0439, \u0433\u0434\u0435 \u043f\u0440\u043e\u0441\u0442\u044b\u043c \u044f\u0437\u044b\u043a\u043e\u043c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0440\u0430\u0437\u043d\u044b\u0435 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0442\u0435\u043c\u044b \u043e\u0442 \u043a\u0430\u043d\u0430\u043b\u0430 @netrunnerz. \n\n\n\nModel OSI (\u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e) https://szybnev.medium.com/osi-network-model-in-simple-terms-ed91858a8991\n\n\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HTTP https://telegra.ph/HTTP-PROTOCOL-09-22\n\nHTTPS SSL \u0441\u0435\u0440\u0442\u0438\u043a\u0430\u0442 https://telegra.ph/HTTPS-SSL-Certificate-09-22\n\n\u041e\u0441\u043d\u043e\u0432\u044b Linux 1 (\u0441\u0430\u043c\u044b\u0435 \u0433\u043b\u0430\u0432\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b) https://telegra.ph/Osnovy-Linux-CHto-takoe-terminal-Osnovnye-komandy-09-25\n\n\u041e\u0441\u043d\u043e\u0432\u044b Linux 2 (\u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b) https://telegra.ph/Osnovy-Linux-part-2-10-02\n\n\u041e\u0441\u043d\u043e\u0432\u044b Linux 3 (\u043f\u0440\u043e\u0434\u0432\u0438\u043d\u0443\u0442\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b) https://telegra.ph/Populyarnye-komandy-chast-3-10-09\n\n\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b TLS  https://telegra.ph/CHto-takoe-TLS-protokol-prostymi-slovami-09-26\n\nDNS-\u0441\u0435\u0440\u0432\u0435\u0440 (simple explanation) https://telegra.ph/CHto-takoe-DNS-server-prostymi-slovami-09-28\n\n\u0420\u0435\u0441\u0443\u0440\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 DNS https://telegra.ph/CHto-takoe-resursnye-zapisi-DNS-prostymi-slovami-09-29-2\n\n\u0421\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b https://telegra.ph/Standartnye-porty-protokoly-09-29\n\nUPD \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b (simple explanation) https://telegra.ph/UDP-protokol-prostymi-slovami-10-01\n\n\u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u044b TCP/IP https://telegra.ph/Protokol-TCPIP-prostymi-slovami-10-03-2\n\n\u0420\u0430\u0437\u0431\u043e\u0440 Writeup HackTheBox OpenSource[EASY] https://szybnev.medium.com/writeup-hackthebox-opensource-easy-df9c16d9e31a\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c LFI - Local File Inclusion 1  https://telegra.ph/Web-security-flaw--LFI-10-10\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c LFI - Local File Inclusion  2 https://telegra.ph/Web-security-flaws--LFI-10-10\n\nSpawning a TTY Shell https://telegra.ph/Spawn-tty-shell-10-26\n\n\u041f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 LD_PRELOAD https://telegra.ph/Povyshenie-privilegij-cherez-LD-PRELOAD--HTB-Easy--Photobomb-10-30\n\n\nMetaTwo | CVE-2022-0739 + CVE-2021-29447  https://telegra.ph/MetaTwo--CVE-2022-0739--CVE-2021-29447--HTB-Easy-12-07\n\n\u041d\u0435 \u0437\u0430\u0431\u0443\u0434\u044c\u0442\u0435 \u043f\u043e\u0434\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u043d\u0430 @netrunnerz.", "creation_timestamp": "2022-12-16T20:30:40.000000Z"}, {"uuid": "d3491129-5a58-4657-ba51-41342c21f25f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/netrunnerz/363", "content": "#\u0426\u0438\u043a\u043b\u0421\u0442\u0430\u0442\u0435\u0439_HTB\n\n[ MetaTwo | CVE-2022-0739 + CVE-2021-29447 | HTB Easy]\n\n\u0414\u043e\u0431\u0440\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u0443\u0442\u043e\u043a, \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0440\u0430\u0437\u0431\u0435\u0440\u0435\u043c \u043c\u0430\u0448\u0438\u043d\u0443 MetaTwo \u043d\u0430 Hack The Box \u0441\u043e \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e Easy. \u041f\u043e \u0445\u043e\u0434\u0443 \u0441\u0442\u0430\u0442\u044c\u0438 \u0432\u044b \u0438\u0437\u0443\u0447\u0438\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2022-0739 (POC) + CVE-2021-29447 (POC)", "creation_timestamp": "2022-12-09T13:59:41.000000Z"}, {"uuid": "9e800327-2c07-4de9-b664-72b62b5c4bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/WARLOCK_DARK_ARMY_OFFICIALS/574", "content": "\u200b\u200bCVE-2022-0739\n\nProof-of-Concept exploit (SQLI BookingPress before 1.0.11)\n\nhttps://github.com/Chris01s/CVE-2022-0739\n\n#cve #exploit", "creation_timestamp": "2022-11-28T19:10:42.000000Z"}, {"uuid": "0c026b1d-67f4-4235-af50-1d0c55e57050", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/intelexch/30253", "content": "https://github.com/destr4ct/CVE-2022-0739", "creation_timestamp": "2022-10-31T19:49:38.000000Z"}, {"uuid": "bd900a9e-6f64-4808-ade4-a073933b02d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/cybdetective/1496", "content": "List of articles that explain in simple terms the basics of information security from the @netrunnerz channel. \n\n\n\nModel OSI (simple guide) https://szybnev.medium.com/osi-network-model-in-simple-terms-ed91858a8991\n\nHTTP PROTOCOL (basic) https://telegra.ph/HTTP-PROTOCOL-09-22\n\nHTTPS SSL Sertificate (basic) https://telegra.ph/HTTPS-SSL-Certificate-09-22\n\nLinux basic 1 (most important terminal commands) https://telegra.ph/Osnovy-Linux-CHto-takoe-terminal-Osnovnye-komandy-09-25\n\nLinux basic 2 (advanced terminal commands) https://telegra.ph/Osnovy-Linux-part-2-10-02\n\nLinux basic 3 (advanced terminal commands)https://telegra.ph/Populyarnye-komandy-chast-3-10-09\n\nTLS Protocol (simple explanation) https://telegra.ph/CHto-takoe-TLS-protokol-prostymi-slovami-09-26\n\nDNS server (simple explanation) https://telegra.ph/CHto-takoe-DNS-server-prostymi-slovami-09-28\n\nDNS resource records (simple explanation) https://telegra.ph/CHto-takoe-resursnye-zapisi-DNS-prostymi-slovami-09-29-2\n\nStandard network protocols (quick guide) https://telegra.ph/Standartnye-porty-protokoly-09-29\n\nUPD Protocol (simple explanation) https://telegra.ph/UDP-protokol-prostymi-slovami-10-01\n\nTCP/IP Protocol https://telegra.ph/Protokol-TCPIP-prostymi-slovami-10-03-2\n\nWriteup HackTheBox OpenSource[EASY] https://szybnev.medium.com/writeup-hackthebox-opensource-easy-df9c16d9e31a\n\nLFI - Local File Inclusion vulnerability 1  https://telegra.ph/Web-security-flaw--LFI-10-10\n\nLFI - Local File Inclusion vulnerability 2 https://telegra.ph/Web-security-flaws--LFI-10-10\n\nSpawning a TTY Shell https://telegra.ph/Spawn-tty-shell-10-26\n\nPrivilege escalation with LD_PRELOAD https://telegra.ph/Povyshenie-privilegij-cherez-LD-PRELOAD--HTB-Easy--Photobomb-10-30\n\nNew:\n\nMetaTwo | CVE-2022-0739 + CVE-2021-29447  https://telegra.ph/MetaTwo--CVE-2022-0739--CVE-2021-29447--HTB-Easy-12-07\n\n\nDon't forget to follow @netrunnerz.", "creation_timestamp": "2022-12-16T21:16:25.000000Z"}, {"uuid": "3e2c7821-a2ff-4291-8bdf-bd775754bb3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2523", "content": "#CVE-2022\nA Zeek CVE-2022-24491 detector.\n\nhttps://github.com/corelight/CVE-2022-24491\n\n\nwriteup and PoC for (CVE-2022-41082/CVE-2022-41040) aka ProxyNotShell\nhttps://github.com/Adynervi/CVE-2022-41082-RCE-PoC\n\nPython Exploit for CVE-2022-0739\n\nhttps://github.com/BKreisel/CVE-2022-0739\n\n@BlueRedTeam", "creation_timestamp": "2022-12-14T08:46:29.000000Z"}, {"uuid": "625fbf04-0ca8-4136-93dd-cc61d3c7ff68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/BlueRedTeam/2528", "content": "#CVE-2022\nwriteup and PoC for (CVE-2022-41082/CVE-2022-41040) aka ProxyNotShell\nhttps://github.com/Adynervi/CVE-2022-41082-RCE-PoC\n\n\nPython Exploit for CVE-2022-0739\nhttps://github.com/BKreisel/CVE-2022-0739\n\n\nAll details about CVE-2022-43097\n\nhttps://github.com/nibin-m/CVE-2022-43097\n\nCVE-2022-24112_POC\nhttps://github.com/Acczdy/CVE-2022-24112_POC\n\n@BlueRedTeam", "creation_timestamp": "2022-12-18T11:13:39.000000Z"}, {"uuid": "ed90a829-0934-4d8c-87b4-f1849baba3ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/7094", "content": "#exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739", "creation_timestamp": "2022-11-03T11:05:13.000000Z"}, {"uuid": "b7b0eca6-e1a0-4532-a3ff-fad886a18bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8536", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Bash-exploit-for-CVE-2022-0739*\nGithub: https://github.com/luxel-h/Bash-exploit-for-CVE-2022-0739", "creation_timestamp": "2026-07-31T14:00:04.589543Z"}, {"uuid": "76e265e3-c5d5-4739-9ad9-83f6fecf2622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8534", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-0739*\nGithub: https://github.com/luxel-h/CVE-2022-0739", "creation_timestamp": "2026-07-31T15:00:04.005215Z"}, {"uuid": "0f2dfda9-4987-42f0-b058-d7e95533fe64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/4205", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0739\nGithub: https://github.com/destr4ct/CVE-2022-0739\nDescribe: \nThe BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection", "creation_timestamp": "2026-08-01T00:00:10.201562Z"}, {"uuid": "995e3df7-409f-458f-9609-fcf96947f17d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8534", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-0739*\nGithub: https://github.com/luxel-h/CVE-2022-0739", "creation_timestamp": "2026-08-01T00:00:29.617196Z"}, {"uuid": "b0727e35-df2c-488d-8d4b-ece265b7e542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/8536", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Bash-exploit-for-CVE-2022-0739*\nGithub: https://github.com/luxel-h/Bash-exploit-for-CVE-2022-0739", "creation_timestamp": "2026-08-01T00:00:30.128123Z"}, {"uuid": "f0bbf25f-2317-427a-a849-12a6fe64386c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/zhatez/105", "content": "List of articles that explain in simple terms the basics of information security from the @netrunnerz channel. \n\n\n\nModel OSI (simple guide) https://szybnev.medium.com/osi-network-model-in-simple-terms-ed91858a8991\n\nHTTP PROTOCOL (basic) https://telegra.ph/HTTP-PROTOCOL-09-22\n\nHTTPS SSL Sertificate (basic) https://telegra.ph/HTTPS-SSL-Certificate-09-22\n\nLinux basic 1 (most important terminal commands) https://telegra.ph/Osnovy-Linux-CHto-takoe-terminal-Osnovnye-komandy-09-25\n\nLinux basic 2 (advanced terminal commands) https://telegra.ph/Osnovy-Linux-part-2-10-02\n\nLinux basic 3 (advanced terminal commands)https://telegra.ph/Populyarnye-komandy-chast-3-10-09\n\nTLS Protocol (simple explanation) https://telegra.ph/CHto-takoe-TLS-protokol-prostymi-slovami-09-26\n\nDNS server (simple explanation) https://telegra.ph/CHto-takoe-DNS-server-prostymi-slovami-09-28\n\nDNS resource records (simple explanation) https://telegra.ph/CHto-takoe-resursnye-zapisi-DNS-prostymi-slovami-09-29-2\n\nStandard network protocols (quick guide) https://telegra.ph/Standartnye-porty-protokoly-09-29\n\nUPD Protocol (simple explanation) https://telegra.ph/UDP-protokol-prostymi-slovami-10-01\n\nTCP/IP Protocol https://telegra.ph/Protokol-TCPIP-prostymi-slovami-10-03-2\n\nWriteup HackTheBox OpenSource[EASY] https://szybnev.medium.com/writeup-hackthebox-opensource-easy-df9c16d9e31a\n\nLFI - Local File Inclusion vulnerability 1  https://telegra.ph/Web-security-flaw--LFI-10-10\n\nLFI - Local File Inclusion vulnerability 2 https://telegra.ph/Web-security-flaws--LFI-10-10\n\nSpawning a TTY Shell https://telegra.ph/Spawn-tty-shell-10-26\n\nPrivilege escalation with LD_PRELOAD https://telegra.ph/Povyshenie-privilegij-cherez-LD-PRELOAD--HTB-Easy--Photobomb-10-30\n\nNew:\n\nMetaTwo | CVE-2022-0739 + CVE-2021-29447  https://telegra.ph/MetaTwo--CVE-2022-0739--CVE-2021-29447--HTB-Easy-12-07\n\n\nDon't forget to follow @netrunnerz.", "creation_timestamp": "2026-07-17T11:00:09.512001Z"}, {"uuid": "c92ddafc-e3b6-48b2-9f52-9f40e7f2a9f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/zhatez/105", "content": "List of articles that explain in simple terms the basics of information security from the @netrunnerz channel. \n\n\n\nModel OSI (simple guide) https://szybnev.medium.com/osi-network-model-in-simple-terms-ed91858a8991\n\nHTTP PROTOCOL (basic) https://telegra.ph/HTTP-PROTOCOL-09-22\n\nHTTPS SSL Sertificate (basic) https://telegra.ph/HTTPS-SSL-Certificate-09-22\n\nLinux basic 1 (most important terminal commands) https://telegra.ph/Osnovy-Linux-CHto-takoe-terminal-Osnovnye-komandy-09-25\n\nLinux basic 2 (advanced terminal commands) https://telegra.ph/Osnovy-Linux-part-2-10-02\n\nLinux basic 3 (advanced terminal commands)https://telegra.ph/Populyarnye-komandy-chast-3-10-09\n\nTLS Protocol (simple explanation) https://telegra.ph/CHto-takoe-TLS-protokol-prostymi-slovami-09-26\n\nDNS server (simple explanation) https://telegra.ph/CHto-takoe-DNS-server-prostymi-slovami-09-28\n\nDNS resource records (simple explanation) https://telegra.ph/CHto-takoe-resursnye-zapisi-DNS-prostymi-slovami-09-29-2\n\nStandard network protocols (quick guide) https://telegra.ph/Standartnye-porty-protokoly-09-29\n\nUPD Protocol (simple explanation) https://telegra.ph/UDP-protokol-prostymi-slovami-10-01\n\nTCP/IP Protocol https://telegra.ph/Protokol-TCPIP-prostymi-slovami-10-03-2\n\nWriteup HackTheBox OpenSource[EASY] https://szybnev.medium.com/writeup-hackthebox-opensource-easy-df9c16d9e31a\n\nLFI - Local File Inclusion vulnerability 1  https://telegra.ph/Web-security-flaw--LFI-10-10\n\nLFI - Local File Inclusion vulnerability 2 https://telegra.ph/Web-security-flaws--LFI-10-10\n\nSpawning a TTY Shell https://telegra.ph/Spawn-tty-shell-10-26\n\nPrivilege escalation with LD_PRELOAD https://telegra.ph/Povyshenie-privilegij-cherez-LD-PRELOAD--HTB-Easy--Photobomb-10-30\n\nNew:\n\nMetaTwo | CVE-2022-0739 + CVE-2021-29447  https://telegra.ph/MetaTwo--CVE-2022-0739--CVE-2021-29447--HTB-Easy-12-07\n\n\nDon't forget to follow @netrunnerz.", "creation_timestamp": "2026-07-18T00:00:27.146083Z"}, {"uuid": "a89da751-8955-45c0-a5b0-a4cf6438a925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CVEhub/8536", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Bash-exploit-for-CVE-2022-0739*\nGithub: https://github.com/luxel-h/Bash-exploit-for-CVE-2022-0739", "creation_timestamp": "2026-07-29T12:00:48.515079Z"}, {"uuid": "67df7a04-f655-479d-a1fa-f568874415d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CVEhub/8534", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-0739*\nGithub: https://github.com/luxel-h/CVE-2022-0739", "creation_timestamp": "2026-07-29T12:00:48.627703Z"}, {"uuid": "efd64b09-fdc3-4557-a94f-1f786595f672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CVEhub/4205", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0739\nGithub: https://github.com/destr4ct/CVE-2022-0739\nDescribe: \nThe BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection", "creation_timestamp": "2026-07-29T12:00:57.069023Z"}, {"uuid": "b26b1f84-8e23-4767-b98e-8a0a02b9d981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CVEhub/8536", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *Bash-exploit-for-CVE-2022-0739*\nGithub: https://github.com/luxel-h/Bash-exploit-for-CVE-2022-0739", "creation_timestamp": "2026-07-30T00:01:19.344648Z"}, {"uuid": "46ce50b4-f2fb-4bed-83c0-81647cc8ec51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CVEhub/8534", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-0739*\nGithub: https://github.com/luxel-h/CVE-2022-0739", "creation_timestamp": "2026-07-30T00:01:19.572364Z"}, {"uuid": "af397d29-c396-4611-b420-ea4c4a5a93af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/CVEhub/4205", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-0739\nGithub: https://github.com/destr4ct/CVE-2022-0739\nDescribe: \nThe BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection", "creation_timestamp": "2026-07-30T00:01:35.235730Z"}, {"uuid": "4918c27f-2f34-4c88-b8a5-4fc36701364a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-01T17:00:25.296222Z"}, {"uuid": "d8db84ae-4f9c-4508-8cb1-a334adbe38d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-02T01:04:07.271587Z"}, {"uuid": "1c35dadc-b55f-47b9-9e4c-dd583e49e5ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "Telegram/OfhVuefsoKRdr0Dsr__JpyZdyxpoDA5ij7MfO8O_RItQOyo", "content": "", "creation_timestamp": "2026-09-05T01:00:04.784504Z"}, {"uuid": "9df846be-e338-49bc-b643-1b1759fd62b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ", "content": "", "creation_timestamp": "2026-09-05T01:00:04.810056Z"}, {"uuid": "547d409e-f9d4-4386-9431-9cbd3b57e725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "Telegram/OfhVuefsoKRdr0Dsr__JpyZdyxpoDA5ij7MfO8O_RItQOyo", "content": "", "creation_timestamp": "2026-09-06T00:01:04.119349Z"}, {"uuid": "fae70dd6-18c9-4d4b-b1c8-5fd51569b725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "Telegram/qPB9INxRUn7hqm5tMwZnjzgWjUliqqBv5hnORCgMkrQSFLQ", "content": "", "creation_timestamp": "2026-09-06T00:01:04.162599Z"}, {"uuid": "131621b7-5960-40ad-bf43-c8021977ad2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"cydave\", \"destr4ct\", \"jheysel-r7\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied data\\n          in the `total_service` parameter of the `bookingpress_front_get_category_services` AJAX action\\n          (available to unauthenticated users), prior to using it in a dynamically constructed SQL query.\\n          As a result, unauthenticated attackers can conduct an SQL injection attack to dump sensitive\\n          data from the backend database such as usernames and password hashes.\\n\\n          This module uses this vulnerability to dump the list of WordPress users and their associated\\n          email addresses and password hashes for cracking offline.\", \"disclosure_date\": \"2022-02-28\", \"fullname\": \"auxiliary/gather/wp_bookingpress_category_services_sqli\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:52:36 +0000\", \"name\": \"Wordpress BookingPress bookingpress_front_get_category_services SQLi\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/wp_bookingpress_category_services_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/wp_bookingpress_category_services_sqli\", \"references\": [\"URL-https://github.com/destr4ct/CVE-2022-0739\", \"WPVDB-388cd42d-b61a-42a4-8604-99b812db2357\", \"CVE-2022-0739\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:23.265787Z"}, {"uuid": "3d347834-6cfb-4cc6-9f87-1ac2f6c0dbc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-10T06:00:06.083902Z"}, {"uuid": "3296cf5b-d496-4e54-94fa-984e2c621c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0739", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6311", "content": "exploit\n1. CVE-2022-38398, CVE-2022-40146:\nVulnerabilities in Apache Batik Default Security Controls - SSRF/RCE Through Remote Class Loading\nhttps://www.zerodayinitiative.com/blog/2022/10/28/vulnerabilities-in-apache-batik-default-security-controls-ssrf-and-rce-through-remote-class-loading\n\n2. CVE-2022-0739:\nSQLI BookingPress <1.0.11 - Unauth SQL Injection\nhttps://github.com/Chris01s/CVE-2022-0739\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.08.13", "creation_timestamp": "2026-09-11T00:00:50.898753Z"}]}