👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-33174
Github: https://github.com/Henry4E36/CVE-2022-33174
Describe:
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interface (/cgi/get_param.cgi) with the tmpToken cookie set to an empty string followed by a semicolon. This bypasses an active session authorization check. This can be then used to fetch the values of protected sys.passwd and sys.su.name fields that contain the username and password in cleartext.

👾KEYWORD SERVICE 🏷#webshell
Name: carina
Github: https://github.com/c0delatte/carina

👾KEYWORD SERVICE 🏷#免杀
Name: 37_17519
Github: https://github.com/wwwuuid2com47/37_17519

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-PDF-EXPLOIT-CLEAN-gt
Github: https://github.com/codingcore2/SILENT-PDF-EXPLOIT-CLEAN-gt

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-EXCEL-XLS-EXPLOIT-CLEAN-gt
Github: https://github.com/codingcore2/SILENT-EXCEL-XLS-EXPLOIT-CLEAN-gt

👾KEYWORD SERVICE 🏷#exploit
Name: SILENT-DOC-EXPLOIT-CLEAN-gt
Github: https://github.com/codingcore2/SILENT-DOC-EXPLOIT-CLEAN-gt

👾KEYWORD SERVICE 🏷#exploit
Name: Vbulletin-Custmerid-Checker-0day-exploit
Github: https://github.com/s4udiT3rr0rist/Vbulletin-Custmerid-Checker-0day-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: XL-Hub
Github: https://github.com/chonksbro/XL-Hub

👾KEYWORD SERVICE 🏷#漏洞利用
Name: upload-exp
Github: https://github.com/youyou-pm10/upload-exp

👾KEYWORD SERVICE 🏷#内存马
Name: java-memshell-scanner
Github: https://github.com/c0ny1/java-memshell-scanner

👾KEYWORD SERVICE 🏷#exploit
Name: SeeyonExploit
Github: https://github.com/Drac0nids/SeeyonExploit

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-24780
Github: https://github.com/Acceis/exploit-CVE-2022-24780
Describe:
Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, users of the iTop user portal can send TWIG code to the server by forging specific http queries, and execute arbitrary code on the server using http server user privileges. This issue is fixed in versions 2.7.6 and 3.0.0. There are currently no known workarounds.

👾KEYWORD SERVICE 🏷#漏洞利用
Name: NKU-SOFTWARE-SAFETY
Github: https://github.com/TephrocactusHC/NKU-SOFTWARE-SAFETY

👾KEYWORD SERVICE 🏷#exploit
Name: FineReportExploit
Github: https://github.com/Drac0nids/FineReportExploit

👾KEYWORD SERVICE 🏷#exploit
Name: JWT-Attack-Exploits
Github: https://github.com/Linuxinet/JWT-Attack-Exploits

👾KEYWORD SERVICE 🏷#exploit
Name: BookDoor
Github: https://github.com/Nostalgation/BookDoor

👾KEYWORD SERVICE 🏷#exploit
Name: e2e-dotnet-e2e-demo-sqqf-exploit-train
Github: https://github.com/redhat-appstudio-qe/e2e-dotnet-e2e-demo-sqqf-exploit-train

👾KEYWORD SERVICE 🏷#漏洞利用
Name: OneZero
Github: https://github.com/Zero-Alphal/OneZero

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-39196
Github: https://github.com/DayiliWaseem/CVE-2022-39196-
Describe:
**

👾KEYWORD SERVICE 🏷#redteam
Name: purple
Github: https://github.com/wantafanta/purple

👾KEYWORD SERVICE 🏷#exploit
Name: distccd-exploit
Github: https://github.com/hawk-xc/distccd-exploit