👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20128
Github: https://github.com/irsl/CVE-2022-20128
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-40317
Github: https://github.com/izdiwho/CVE-2022-40317
Describe:
OpenKM 6.3.11 allows stored XSS related to the javascript: substring in an A element.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-22629
Github: https://github.com/parsdefense/CVE-2022-22629
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-30206
Github: https://github.com/Pwnrin/CVE-2022-30206
Describe:
Windows Print Spooler Elevation of Privilege Vulnerability. This CVE ID is unique from CVE-2022-22022, CVE-2022-22041, CVE-2022-30226.

Done
The server has been updated

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-37706
Github: https://github.com/MaherAzzouzi/CVE-2022-37706-LPE-exploit
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-32548
Github: https://github.com/alexmention/CVE-2022-32548-RCE-POC
Describe:
An issue was discovered on certain DrayTek Vigor routers before July 2022 such as the Vigor3910 before 4.3.1.1. /cgi-bin/wlogin.cgi has a buffer overflow via the username or password to the aa or ab field.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-31474
Github: https://github.com/Administrative2022/CVE-2022-31474-wordpress
Describe:
**

👾KEYWORD SERVICE 🏷#cnvd
Name: -17.0CNVD-2022-60632
Github: https://github.com/LittleBear4/-17.0CNVD-2022-60632

** mimikatz ** 🔧Tool update
Tools name：mimikatz
Tools url：https://github.com/gentilkiwi/mimikatz/releases/tag/2.2.0-20220919
Update log：

** fscan ** 🔧Tool update
Tools name：fscan
Tools url：https://github.com/shadow1ng/fscan/commit/38e48ba4205196e042db8f832a7789b76ee61c5e
commitUpdate log：
Merge pull request #225 from evilAdan0s/main

去除弱特征：过时UA头

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20347
Github: https://github.com/nidhi7598/packages_apps_Settings_AOSP_10_r33_CVE-2022-20347
Describe:
In onAttach of ConnectedDeviceDashboardFragment.java, there is a possible permission bypass due to a confused deputy. This could lead to remote escalation of privilege in Bluetooth settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-228450811

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-20841
Github: https://github.com/Expl0desploit/CVE-2022-20841
Describe:
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-38553
Github: https://github.com/4websecurity/CVE-2022-38553
Describe:
**

👾KEYWORD SERVICE 🏷#cnvd
Name: Zentao-Sql-Injection_CNVD-2022-42853
Github: https://github.com/FeatherStark/Zentao-Sql-Injection_CNVD-2022-42853

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-38577
Github: https://github.com/sornram9254/CVE-2022-38577-Processmaker
Describe:
ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-39197
Github: https://github.com/safe3s/CVE-2022-39197
Describe:
**

👾KEYWORD SERVICE 🏷#cnvd
Name: SundriesPlugin
Github: https://github.com/fxboy/SundriesPlugin

👾KEYWORD SERVICE 🏷#cnvd
Name: CVE-Master
Github: https://github.com/wjl110/CVE-Master

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-31499
Github: https://github.com/omarhashem123/CVE-2022-31499
Describe:
Nortek Linear eMerge E3-Series devices before 0.32-08f allow an unauthenticated attacker to inject OS commands via ReaderNo. NOTE: this issue exists because of an incomplete fix for CVE-2019-7256.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-31798
Github: https://github.com/omarhashem123/CVE-2022-31798
Describe:
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /card_scan.php?CardFormatNo= XSS with session fixation (via PHPSESSID) when they are chained together. This would allow an attacker to take over an admin account or a user account.