👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-21881
Github: https://github.com/theabysslabs/CVE-2022-21881
Describe:
Windows Kernel Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-21879.

👾KEYWORD SERVICE 🏷#sql_injection
Name: python-flask-sql-injection
Github: https://github.com/basiima/python-flask-sql-injection

👾KEYWORD SERVICE 🏷#rce
Name: pollute-me
Github: https://github.com/vdeturckheim/pollute-me

👾KEYWORD SERVICE 🏷#exploit
Name: KOTH
Github: https://github.com/0xC03LH0/KOTH

👾KEYWORD SERVICE 🏷#exploit
Name: SealighterTI
Github: https://github.com/pathtofile/SealighterTI

👾KEYWORD SERVICE 🏷#redteam
Name: MAL-CL
Github: https://github.com/3CORESec/MAL-CL

👾KEYWORD SERVICE 🏷#exploit
Name: Malware
Github: https://github.com/Am0rphous/Malware

👾KEYWORD SERVICE 🏷#exploit
Name: Hashlib
Github: https://github.com/MojaveMF/Hashlib

👾KEYWORD SERVICE 🏷#exploit
Name: Follina-Poc
Github: https://github.com/jed-parsec/Follina-Poc

👾KEYWORD SERVICE 🏷#exploit
Name: ChatHistoryExploit
Github: https://github.com/sasoiYT/ChatHistoryExploit

👾KEYWORD SERVICE 🏷#exploit
Name: wii
Github: https://github.com/ForwarderFactory/wii

👾KEYWORD SERVICE 🏷#redteam
Name: CRTO
Github: https://github.com/hackerzhat/CRTO

👾KEYWORD SERVICE 🏷#exploit
Name: git-pay
Github: https://github.com/psorus/git-pay

👾KEYWORD SERVICE 🏷#rce
Name: DashOverride
Github: https://github.com/sourceincite/DashOverride

👾KEYWORD SERVICE 🏷#sql_injection
Name: sql-injection-assignment
Github: https://github.com/kleells/sql-injection-assignment

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-29968
Github: https://github.com/jprx/CVE-2022-29968
Describe:
An issue was discovered in the Linux kernel through 5.17.5. io_rw_init_file in fs/io_uring.c lacks initialization of kiocb->private.

👾KEYWORD SERVICE 🏷#exploit
Name: audius-exploit
Github: https://github.com/nukanoto/audius-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: VL-PLM
Github: https://github.com/xiaofeng94/VL-PLM

** xray ** 🔧Tool update
Tools name：xray
Tools url：https://github.com/chaitin/xray/commit/a9ddda5e28119f72e391b8a0c8fb753d6c53c0d5
commitUpdate log：
Update jellyfin-cve-2021-29490.yml (#1632)

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-33980
Github: https://github.com/HKirito/CVE-2022-33980
Describe:
Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - "script" - execute expressions using the JVM script execution engine (javax.script) - "dns" - resolve dns records - "url" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.

👾KEYWORD SERVICE 🏷#rce
Name: Spring_Function
Github: https://github.com/HKirito/Spring_Function