** mimikatz ** 🔧Tool update
Tools name：mimikatz
Tools url：https://github.com/gentilkiwi/mimikatz/commit/c78b1cf37c517ae9d0e872447bb103da9fa6034a
commitUpdate log：
Revert to Visual Studio 2013 (due to an error in Microsoft headers, can't build in Win32)

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-32938
Github: https://github.com/iCMDgithub/CVE-2022-32938
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-36231
Github: https://github.com/affix/CVE-2022-36231
Describe:
**

** xray ** 🔧Tool update
Tools name：xray
Tools url：https://github.com/chaitin/xray/commit/a9ddda5e28119f72e391b8a0c8fb753d6c53c0d5
commitUpdate log：
Update jellyfin-cve-2021-29490.yml (#1632)

👾KEYWORD SERVICE 🏷#cnvd
Name: cnvd_general_assets
Github: https://github.com/zhizhuoshuma/cnvd_general_assets

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-43959
Github: https://github.com/secware-ru/CVE-2022-43959
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-40687
Github: https://github.com/williamkhepri/CVE-2022-40687-metasploit-scanner
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-1609
Github: https://github.com/Wmlps/CVE-2022-1609
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-21907
Github: https://github.com/Malwareman007/CVE-2022-21907
Describe:
HTTP Protocol Stack Remote Code Execution Vulnerability.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-0739
Github: https://github.com/destr4ct/CVE-2022-0739
Describe:
The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthenticated users), leading to an unauthenticated SQL Injection

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-30910
Github: https://github.com/arozx/CVE-2022-30910
Describe:
H3C Magic R100 R100V100R005 was discovered to contain a stack overflow vulnerability via the GO parameter at /goform/aspForm.

** xray ** 🔧Tool update
Tools name：xray
Tools url：https://github.com/chaitin/xray/commit/4f47fb13a2454590309eaf2279ba2c9a3b1150fe
commitUpdate log：
Fix Python3 Flask bug: ImportError: cannot import name 'escape' from 'jinja2' (/usr/local/lib/python3.9/dist-packages/jinja2/__init__.py) (#1680)

Signed-off-by: DroidKali <DroidKali@users.noreply.github.com>

Signed-off-by: DroidKali <DroidKali@users.noreply.github.com>
Co-authored-by: DroidKali <DroidKali@users.noreply.github.com>

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-42094
Github: https://github.com/bypazs/CVE-2022-42094
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-42096
Github: https://github.com/bypazs/CVE-2022-42096
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-42097
Github: https://github.com/bypazs/CVE-2022-42097
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-42098
Github: https://github.com/bypazs/CVE-2022-42098
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-22909
Github: https://github.com/0z09e/CVE-2022-22909
Describe:
HotelDruid v3.0.3 was discovered to contain a remote code execution (RCE) vulnerability which is exploited via an attacker inserting a crafted payload into the name field under the Create New Room module.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-40146
Github: https://github.com/cckuailong/CVE-2022-40146_Exploit_Jar
Describe:
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-40470
Github: https://github.com/RashidKhanPathan/CVE-2022-40470
Describe:
**

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-3518
Github: https://github.com/lohith19/CVE-2022-3518
Describe:
A vulnerability classified as problematic has been found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the component User Creation Handler. The manipulation of the argument First Name/Middle Name/Last Name leads to cross site scripting. It is possible to launch the attack remotely. VDB-211014 is the identifier assigned to this vulnerability.

👾CVE SERVICE 🏷#CVE
Mumber: CVE-2022-3602
Github: https://github.com/colmmacc/CVE-2022-3602
Describe:
**