CVE-2022-28368Vulnerability
Reported by 2 independent sources · first reported by SOCRadar · last reported
Last reported 12 days ago
What the reports say
2 reports, newest first · the exact sentence from each-
CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records“Exploiting CVE-2022-28368, a remote code execution vulnerability impacting Dompdf.”
-
Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline“SSRF as a Reader: dompdf (CVE-2022-28368)”
Indicators reported together
named in the same reports- 85.120.216[.]8in 1 report
- yzs[.]fiin 1 report
- 91.92.241[.]187in 1 report
- 91.92.241[.]184in 1 report
- 185.242.3[.]14in 1 report
- pix-proxy-sable.vercel[.]appin 1 report
Copy these 6 indicators · defanged
Also named with it: CVE-2021-4034, CVE-2026-0257, CVE-2023-7028, CVE-2024-1086, CVE-2020-1938, CVE-2026-60137, CVE-2026-63030, CVE-2021-36260, CVE-2022-40684
Thanks — we review every report.