👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-24780
Github: https://github.com/Acceis/exploit-CVE-2022-24780
Describe:
Combodo iTop is a web based IT Service Management tool. In versions prior to 2.7.6 and 3.0.0, users of the iTop user portal can send TWIG code to the server by forging specific http queries, and execute arbitrary code on the server using http server user privileges. This issue is fixed in versions 2.7.6 and 3.0.0. There are currently no known workarounds.

👾KEYWORD SERVICE 🏷#漏洞利用
Name: NKU-SOFTWARE-SAFETY
Github: https://github.com/TephrocactusHC/NKU-SOFTWARE-SAFETY

👾KEYWORD SERVICE 🏷#exploit
Name: FineReportExploit
Github: https://github.com/Drac0nids/FineReportExploit

👾KEYWORD SERVICE 🏷#exploit
Name: JWT-Attack-Exploits
Github: https://github.com/Linuxinet/JWT-Attack-Exploits

👾KEYWORD SERVICE 🏷#exploit
Name: BookDoor
Github: https://github.com/Nostalgation/BookDoor

👾KEYWORD SERVICE 🏷#exploit
Name: e2e-dotnet-e2e-demo-sqqf-exploit-train
Github: https://github.com/redhat-appstudio-qe/e2e-dotnet-e2e-demo-sqqf-exploit-train

👾KEYWORD SERVICE 🏷#漏洞利用
Name: OneZero
Github: https://github.com/Zero-Alphal/OneZero

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-39196
Github: https://github.com/DayiliWaseem/CVE-2022-39196-
Describe:
**

👾KEYWORD SERVICE 🏷#redteam
Name: purple
Github: https://github.com/wantafanta/purple

👾KEYWORD SERVICE 🏷#exploit
Name: distccd-exploit
Github: https://github.com/hawk-xc/distccd-exploit

👾KEYWORD SERVICE 🏷#exploit
Name: Web-Exploitation-Tools
Github: https://github.com/SolitudePy/Web-Exploitation-Tools

👾KEYWORD SERVICE 🏷#rce
Name: vuln-docker-hub
Github: https://github.com/pen4uin/vuln-docker-hub

👾KEYWORD SERVICE 🏷#rce
Name: docker-vuln-hub
Github: https://github.com/pen4uin/docker-vuln-hub

👾KEYWORD SERVICE 🏷#sql_injection
Name: SQLi_Helper
Github: https://github.com/Gomez0015/SQLi_Helper

👾KEYWORD SERVICE 🏷#exploit
Name: expdevBadChars
Github: https://github.com/mgeeky/expdevBadChars

👾KEYWORD SERVICE 🏷#exploit
Name: Exploit-Development-Tools
Github: https://github.com/mgeeky/Exploit-Development-Tools

👾KEYWORD SERVICE 🏷#sql_injection
Name: BI_SQL
Github: https://github.com/Article-kelp/BI_SQL

👾KEYWORD SERVICE 🏷#cnvd
Name: cnvd
Github: https://github.com/adminlove520/cnvd

👾KEYWORD SERVICE 🏷#红队
Name: 32_8307
Github: https://github.com/wwwuuid2com52/32_8307

👾KEYWORD SERVICE 🏷#exploit
Name: build-suite-test-application-rdmb-build-e2e-usme-fulfil-exploit
Github: https://github.com/redhat-appstudio-qe/build-suite-test-application-rdmb-build-e2e-usme-fulfil-exploit

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-23131
Github: https://github.com/Vulnmachines/Zabbix-CVE-2022-23131
Describe:
In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploit this issue to escalate privileges and gain admin access to Zabbix Frontend. To perform the attack, SAML authentication is required to be enabled and the actor has to know the username of Zabbix user (or use the guest account, which is disabled by default).