2022-10-29 有新的CVE仓库送达!

CVE-2022相关仓库的总数量 ：1299

描述：PoC for a vulnerability that I found in Apple Shortcuts. Fixed in iOS 16.1 and macOS 13 Ventura.

链接：https://github.com/iCMDgithub/CVE-2022-32938

描述：Text4Shell PoC Exploit

链接：https://github.com/west-wind/CVE-2022-42889

描述：CVE-2022-42889 aka Text4Shell research & PoC

链接：https://github.com/cxzero/CVE-2022-42889-text4shell

描述：None

链接：https://github.com/badboy-sft/CVE-2022-26134

描述：Utilities for exploiting vulnerability CVE-2022-40684 (FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface).

链接：https://github.com/und3sc0n0c1d0/CVE-2022-40684

描述：Stored Cross-site Scripting (XSS) in leave comment functionality in Amasty Blog Pro for Magento 2

链接：https://github.com/afine-com/CVE-2022-35500

描述：Stored Cross-site Scripting (XSS) in blog-post creation functionality in Amasty Blog Pro for Magento 2

链接：https://github.com/afine-com/CVE-2022-35501

描述：CVE-2022-23277 POC to write a webshell to aspnet_client

链接：https://github.com/7BitsTeam/CVE-2022-23277

描述：Vulnerability Scanner for CVE-2022-42889 (Text4Shell)

链接：https://github.com/smileostrich/Text4Shell-Scanner

描述：You can find a python script to exploit the vulnerability on Bitbucket related CVE-2022-36804.

链接：https://github.com/khal4n1/CVE-2022-36804

描述：A loader for zimbra 2022 rce (cve-2022-27925)

链接：https://github.com/Inplex-sys/CVE-2022-27925

描述：CVE-2022-42889 aka Text4Shell research & PoC

链接：https://github.com/cxzero/CVE-2022-42889-text4shell

描述：None

链接：https://github.com/EkamSinghWalia/-Detection-and-Mitigation-for-CVE-2022-1679

描述：None

链接：https://github.com/Vulnmachines/text4shell-CVE-2022-42889

描述：None

链接：https://github.com/EkamSinghWalia/Detection-and-Mitigation-for-CVE-2022-2639

描述：cve-2021-43798 Grafana 8.3.0 - Directory Traversal and Arbitrary File Read

链接：https://github.com/0bfxgh0st/cve-2021-43798

描述：This script was created to automate addressing the vulnerability described in CVE-2021-26414 (https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c), adds two regkeys under HKEY_LOCAL_MACHINESOFTWAREMicrosoftOleAppCompa

链接：https://github.com/Nels2/dcom_10036_Solver

描述：PoC for a vulnerability that I found in Apple Shortcuts. Fixed in iOS 16.1 and macOS 13 Ventura.

链接：https://github.com/iCMDgithub/CVE-2022-32938

描述：Exploit Fortigate - CVE-2022-40684

链接：https://github.com/gustavorobertux/gotigate

描述：exploit for CVE-2022-2588

链接：https://github.com/Markakd/CVE-2022-2588

描述：None

链接：https://github.com/hughink/CVE-2022-40684

往期回顾

2022-10-23 有新的CVE仓库送达!

2022-10-19 有新的CVE仓库送达！

2022-10-18 有新的CVE仓库送达！

2022-10-13 有新的CVE仓库送达！

2022-10-12 有新的CVE仓库送达！

原文始发于微信公众号（夜组安全）：2022-10-29 有新的CVE仓库送达!