{"vulnerability": "cve-2022-4438", "sightings": [{"uuid": "683e4786-2502-4c48-b76f-8202498f5738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:00.000000Z"}, {"uuid": "2c2ab3c5-0cbc-4439-916b-2a3379bf98cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/rconfig_vendors_auth_file_upload_rce.rb", "content": "", "creation_timestamp": "2021-06-24T15:51:21.000000Z"}, {"uuid": "f15a3882-c9a5-4815-bb4c-be332c66a29d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13838", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-44384\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.\n\ud83d\udccf Published: 2022-11-17T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-29T14:53:39.852Z\n\ud83d\udd17 References:\n1. https://www.exploit-db.com/exploits/49783", "creation_timestamp": "2025-04-29T15:11:46.000000Z"}, {"uuid": "9796cb09-47b6-414b-ba97-07cabaddb083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44380", "type": "seen", "source": "https://t.me/cibsecurity/55293", "content": "\u203c CVE-2022-44380 \u203c\n\nSnipe-IT before 6.0.14 is vulnerable to Cross Site Scripting (XSS) for View Assigned Assets.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T07:39:46.000000Z"}, {"uuid": "34dc0749-4e8b-41a7-ae20-3809019c2a89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44381", "type": "seen", "source": "https://t.me/cibsecurity/55296", "content": "\u203c CVE-2022-44381 \u203c\n\nSnipe-IT through 6.0.14 allows attackers to check whether a user account exists because of response variations in a /password/reset request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-25T07:39:49.000000Z"}, {"uuid": "bc0135bc-13bb-48be-96a1-3c819b316724", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "seen", "source": "https://t.me/cibsecurity/53083", "content": "\u203c CVE-2022-44384 \u203c\n\nAn arbitrary file upload vulnerability in rconfig v3.9.6 allows attackers to execute arbitrary code via a crafted PHP file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-17T20:18:08.000000Z"}, {"uuid": "56d7d437-68d2-46bd-a957-5b5e1b1e32ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "seen", "source": "https://t.me/GithubRedTeam/104264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-44384\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d4ytox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-04 12:33:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2022-44384 - authenticated arbitrary file upload to RCE in rConfig <= 3.9.6. Working Python 3 rewrite of the public PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-04T13:01:48.000000Z"}, {"uuid": "b2536c76-f130-4b06-b23f-b8daf45850ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/104264", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2022-44384\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a d4ytox\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 1  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-10-04 12:33:51\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2022-44384 - authenticated arbitrary file upload to RCE in rConfig <= 3.9.6. Working Python 3 rewrite of the public PoC\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-10-04T13:01:48.000000Z"}, {"uuid": "8206740a-4dd5-4a54-ac6c-f6926734be8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "seen", "source": "Telegram/yzozl6mNNWf3JhfWwH-iMewF7l5wAO1ctmG8K_G90BapE2A", "content": "", "creation_timestamp": "2026-10-04T21:00:05.000000Z"}, {"uuid": "a2cb5ec1-23c8-4c22-9487-1bb978c77bc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4438", "type": "seen", "source": "Telegram/yzozl6mNNWf3JhfWwH-iMewF7l5wAO1ctmG8K_G90BapE2A", "content": "", "creation_timestamp": "2026-10-04T21:00:05.000000Z"}, {"uuid": "b858e211-7895-40e3-8cb2-ea41fbf7da5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-44384", "type": "published-proof-of-concept", "source": "Telegram/yzozl6mNNWf3JhfWwH-iMewF7l5wAO1ctmG8K_G90BapE2A", "content": "", "creation_timestamp": "2026-10-04T21:00:05.000000Z"}, {"uuid": "3335f0f0-349d-43c8-b63b-baf202834120", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4438", "type": "published-proof-of-concept", "source": "Telegram/yzozl6mNNWf3JhfWwH-iMewF7l5wAO1ctmG8K_G90BapE2A", "content": "", "creation_timestamp": "2026-10-04T21:00:05.000000Z"}]}