{"vulnerability": "CVE-2022-2608", "sightings": [{"uuid": "b3fe0300-ca7b-49ee-9990-2fccebe865d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26083", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/114004197236580362", "content": "", "creation_timestamp": "2025-02-14T20:46:40.283963Z"}, {"uuid": "5006cb85-7892-4f21-afe5-881b1554082b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26083", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li64qiusec26", "content": "", "creation_timestamp": "2025-02-14T21:15:36.272884Z"}, {"uuid": "03924de7-19d6-496c-9e27-c76c90d86821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26083", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4497", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-26083\n\ud83d\udd25 CVSS Score: 7.7 (CVSS_V3)\n\ud83d\udd39 Description: Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.\n\ud83d\udccf Published: 2025-02-14T21:31:05Z\n\ud83d\udccf Modified: 2025-02-14T21:31:05Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2022-26083\n2. https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html", "creation_timestamp": "2025-02-14T22:10:51.000000Z"}, {"uuid": "cb6bf6dc-bd61-449f-aefc-3a321d3a1cd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26080", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5504", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-26080\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N)\n\ud83d\udd39 Description: Use of Insufficiently Random Values vulnerability in ABB Pulsar Plus System Controller NE843_S, ABB Infinity DC Power Plant.This issue affects Pulsar Plus System Controller NE843_S : comcode 150042936; Infinity DC Power Plant: H5692448 G104 G842 G224L G630-4 G451C(2) G461(2) \u2013 comcode 150047415.\n\n\n\ud83d\udccf Published: 2023-03-16T12:53:29.530Z\n\ud83d\udccf Modified: 2025-02-26T15:04:35.413Z\n\ud83d\udd17 References:\n1. https://search.abb.com/library/Download.aspx?DocumentID=9AKK108467A6732&LanguageCode=en&DocumentPartId=&Action=Launch&_ga=2.256117643.1223066510.1678942947-1879524908.1677751217", "creation_timestamp": "2025-02-26T15:26:05.000000Z"}, {"uuid": "40d2e13e-931c-4591-a4cd-9e0330cf0047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26083", "type": "seen", "source": "https://t.me/cvedetector/18139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-26083 - Intel IPP Cryptography Weak Initialization Vector Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2022-26083 \nPublished : Feb. 14, 2025, 9:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-15T00:08:37.000000Z"}, {"uuid": "4b5312dd-cc54-48dd-b469-34e8b14b2d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26082", "type": "seen", "source": "https://t.me/true_secator/2985", "content": "\u041d\u0435 \u0441\u0430\u043c\u0430\u044f \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u0430\u044f \u0432 \u043d\u0430\u0448\u0438\u0445 \u043a\u0440\u0443\u0433\u0430\u0445 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Open Automation Software \u043f\u043e\u043f\u0430\u043b\u0430 \u0432 \u043f\u043e\u043b\u0435 \u0437\u0440\u0435\u043d\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 Cisco Talos, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 ICS \u0438\u043b\u0438 IoT, \u043d\u043e \u043a\u0430\u043a \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u0442\u0435\u043b\u0438 \u0435\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u043c\u0438 \u043c\u0438\u0440\u043e\u0432\u044b\u043c\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 \u0432 \u0441\u0444\u0435\u0440\u0435 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438, \u043e\u0431\u043e\u0440\u043e\u043d\u044b, \u0430\u044d\u0440\u043e\u043a\u043e\u0441\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043e\u0442\u0440\u0430\u0441\u043b\u0438, \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438, \u0432\u043e\u0434\u043d\u043e\u043c \u0445\u043e\u0437\u044f\u0439\u0441\u0442\u0432\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u043e\u0431\u0438\u043b\u0435\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u0438. \u0421\u0430\u043c\u0430 \u0436\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430 OAS \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438, \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0438 \u0432\u0438\u0437\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u041f\u041b\u041a \u043e\u0442 \u0440\u0430\u0437\u043d\u044b\u0445 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u043e\u0432.\n\n\u041e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0414\u0436\u0430\u0440\u0435\u0434 \u0420\u0438\u0442\u0442\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 OAS \u0432\u043e\u0441\u0435\u043c\u044c \u0431\u0430\u0433\u043e\u0432 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, DoS-\u0430\u0442\u0430\u043a, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0446\u0435\u043b\u0435\u0439.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u0431\u044b\u043b \u043f\u0440\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u043c\u0430\u0440\u0442\u0435 \u0438 \u0430\u043f\u0440\u0435\u043b\u0435 \u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0440\u0435\u0439\u0442\u0438\u043d\u0433 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0445 \u043e\u0446\u0435\u043d\u043a\u0438 CVSS:\n \u2043 CVE-2022-26082 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u0438 \u0444\u0430\u0439\u043b\u0430, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432;\n \u2043 CVE-2022-26833 - \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u043a\u0430\u043a \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043f\u0443\u0441\u0442\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u043c.\n\n\u041f\u044f\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u044c\u044e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0435\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u043f\u0440\u0438\u0447\u0435\u043c \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a \u043f\u043e\u0442\u0435\u0440\u0435 \u0441\u0432\u044f\u0437\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0433\u0440\u0443\u043f\u043f.\n\n\u0422\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b OAS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0432 Talos \u0441\u043a\u0440\u044b\u043b\u0438 \u043e\u0442 \u043d\u0430\u0448\u0435\u0433\u043e \u0431\u0440\u0430\u0442\u0430, \u043d\u043e \u0442\u0435 \u043a\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e \u043d\u0430\u0439\u0434\u0443\u0442 \u0441\u043f\u043e\u0441\u043e\u0431 \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.", "creation_timestamp": "2022-05-26T18:20:03.000000Z"}, {"uuid": "08bf8101-4379-4464-af38-5e89e9bf5d82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26087", "type": "seen", "source": "https://t.me/cibsecurity/59640", "content": "\u203c CVE-2022-26087 \u203c\n\nThis candidate was in a CNA pool that was not assigned to any issues during 2022.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-08T02:23:11.000000Z"}, {"uuid": "e841a11a-cfe9-47da-a426-9f64c137c644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26086", "type": "seen", "source": "https://t.me/cibsecurity/52907", "content": "\u203c CVE-2022-26086 \u203c\n\nUncontrolled search path element in the PresentMon software maintained by Intel(R) before version 1.7.1 may allow an authenticated user to potentially enable escalation of privilege via local access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:49:11.000000Z"}, {"uuid": "a0d36032-2db9-41ad-a2b3-5bd7065cbd42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26088", "type": "seen", "source": "https://t.me/cibsecurity/52906", "content": "\u203c CVE-2022-26088 \u203c\n\nAn issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML (such as an SSRF payload) into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the \"number of recipients\" field. NOTE: the vendor's position is that \"no real impact is demonstrated.\"\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-13T05:49:10.000000Z"}, {"uuid": "9ccefc7c-6ffe-458d-8329-302ac508ac3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26085", "type": "seen", "source": "https://t.me/cibsecurity/42518", "content": "\u203c CVE-2022-26085 \u203c\n\nAn OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-05-12T20:42:04.000000Z"}, {"uuid": "ccf25e20-db91-4b75-aa5a-4332953f23c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26081", "type": "seen", "source": "https://t.me/cibsecurity/39165", "content": "\u203c CVE-2022-26081 \u203c\n\nThe installer of WPS Office Version 10.8.0.5745 insecurely load shcore.dll, allowing an attacker to execute arbitrary code with the privilege of the user invoking the installer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-17T21:26:45.000000Z"}, {"uuid": "31f50764-359b-4a16-b839-4fcb98d52d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26088", "type": "seen", "source": "https://t.me/hacking_Attack/76667", "content": "Exploit Collector\nBMC Remedy ITSM-Suite 9.1.10 / 20.02 HTML Injection\n\nhttps://4.bp.blogspot.com/-zX4owX_f6gA/WWlvEjBsFTI/AAAAAAAAILA/L-jpFLkKi_AyIykovxrESAdO3HPxIIp7QCLcBGAs/s1600/h132.png \nBMC Remedy ITSM-Suite version 9.1.10 (20.02 in new versioning scheme) suffers from an html injection vulnerability.\n\nSHA-256 | ed89f3f49d37ea4299f6f6221ace6ef8292ada73199f9aac17bae7cf6165fad3\n\nDownload\nSEC Consult Vulnerability Lab Security Advisory < 20221110-0 >\n=======================================================================\ntitle: HTML Injection\nproduct: BMC Remedy ITSM-Suite\nvulnerable version: 9.1.10 (= 20.02 in new versioning scheme)\nfixed version: 22.1\nCVE number: CVE-2022-26088\nimpact: Low\nhomepage: https://www.bmc.com/it-solutions/remedy-itsm.html\nfound: 2021-08-11\nby: Daniel Hirschberger (Office Bochum)\nSEC Consult Vulnerability Lab\n\nAn integrated part of SEC Consult, an Atos company\nEurope | Asia | North America\n\nhttps://www.sec-consult.com\n\n=======================================================================\n\nVendor description:\n-------------------\n\"Remedy IT Service Management Suite (Remedy ITSM Suite) and BMC Helix\nITSM service provide out of-the-box IT Information Library (ITIL)\nservice support functionality. Remedy ITSM Suite and BMC Helix ITSM\nservice streamline and automate the processes around IT service desk,\nasset management, and change management operations. It also enables\nyou to link your business services to your IT infrastructure to help\nyou manage the impact of technology changes on business and business\nchanges on technology \u2014 in real time and into the future. In addition,\nyou can understand and optimize the user experience, balance current\nand future infrastructure investments, and view potential impact on\nthe business by using a real-time service model.\"\n\nSource: https://docs.bmc.com/docs/itsm91/home-608490971.html\nBusiness recommendation:\n------------------------\nThe vendor provides an updated version which should be installed immediately.\n\nThe vendor states that:\n> We have done hardening in version 22.1.\n> However, we do not agree with assigning the CVE to this vulnerability.\n> As mentioned previously this is an informative vulnerability, and no real\nimpact is demonstrated.\nNevertheless, this can be used to trigger actions on internal services via CSRF or\nexfiltrate information.\nVulnerability overview/description:\n-----------------------------------\n1) HTML Injection (CVE-2022-26088)\nAn authenticated attacker who can forward incidents per email is able to inject\na limited set of HTML tags. This is accomplished by inserting arbitrary content\ninto the \"To:\" field of the email. There is a filtering mechanism that prevents\nthe injection of many HTML tags, for example \n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:18.752027Z"}, {"uuid": "b6005387-b38e-4cb1-82ec-2a38579e6075", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-26088", "type": "seen", "source": "https://t.me/hacking_Attack/76667", "content": "Exploit Collector\nBMC Remedy ITSM-Suite 9.1.10 / 20.02 HTML Injection\n\nhttps://4.bp.blogspot.com/-zX4owX_f6gA/WWlvEjBsFTI/AAAAAAAAILA/L-jpFLkKi_AyIykovxrESAdO3HPxIIp7QCLcBGAs/s1600/h132.png \nBMC Remedy ITSM-Suite version 9.1.10 (20.02 in new versioning scheme) suffers from an html injection vulnerability.\n\nSHA-256 | ed89f3f49d37ea4299f6f6221ace6ef8292ada73199f9aac17bae7cf6165fad3\n\nDownload\nSEC Consult Vulnerability Lab Security Advisory < 20221110-0 >\n=======================================================================\ntitle: HTML Injection\nproduct: BMC Remedy ITSM-Suite\nvulnerable version: 9.1.10 (= 20.02 in new versioning scheme)\nfixed version: 22.1\nCVE number: CVE-2022-26088\nimpact: Low\nhomepage: https://www.bmc.com/it-solutions/remedy-itsm.html\nfound: 2021-08-11\nby: Daniel Hirschberger (Office Bochum)\nSEC Consult Vulnerability Lab\n\nAn integrated part of SEC Consult, an Atos company\nEurope | Asia | North America\n\nhttps://www.sec-consult.com\n\n=======================================================================\n\nVendor description:\n-------------------\n\"Remedy IT Service Management Suite (Remedy ITSM Suite) and BMC Helix\nITSM service provide out of-the-box IT Information Library (ITIL)\nservice support functionality. Remedy ITSM Suite and BMC Helix ITSM\nservice streamline and automate the processes around IT service desk,\nasset management, and change management operations. It also enables\nyou to link your business services to your IT infrastructure to help\nyou manage the impact of technology changes on business and business\nchanges on technology \u2014 in real time and into the future. In addition,\nyou can understand and optimize the user experience, balance current\nand future infrastructure investments, and view potential impact on\nthe business by using a real-time service model.\"\n\nSource: https://docs.bmc.com/docs/itsm91/home-608490971.html\nBusiness recommendation:\n------------------------\nThe vendor provides an updated version which should be installed immediately.\n\nThe vendor states that:\n> We have done hardening in version 22.1.\n> However, we do not agree with assigning the CVE to this vulnerability.\n> As mentioned previously this is an informative vulnerability, and no real\nimpact is demonstrated.\nNevertheless, this can be used to trigger actions on internal services via CSRF or\nexfiltrate information.\nVulnerability overview/description:\n-----------------------------------\n1) HTML Injection (CVE-2022-26088)\nAn authenticated attacker who can forward incidents per email is able to inject\na limited set of HTML tags. This is accomplished by inserting arbitrary content\ninto the \"To:\" field of the email. There is a filtering mechanism that prevents\nthe injection of many HTML tags, for example \n\u2796 Sent by @TheFeedReaderBot \u2796\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:33.889600Z"}]}