{"uuid": "16197b6d-d06c-4c48-a121-f314636e5e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31798", "type": "seen", "source": "https://t.me/hacking_Attack/64710", "content": "Exploit Collector\nNortek Linear eMerge E3-Series Account Takeover\n\nhttps://4.bp.blogspot.com/-lQ2zJgiLTsU/WWlu34sMcWI/AAAAAAAAII4/mS7xceEZnmUYAvFeoaUiLc9JINHoDjNsACLcBGAs/s1600/h102.png \nNortek Linear eMerge E3-Series version 0.32-07p suffers from a vulnerability where session fixation tied with cross site scripting can allow for account takeover.\n\nSHA-256 | 6a30c71e741d3009dbaf81b18d14a4260f6043c44ce1ca7ff3fc8841c01a990e\n\nDownload\n# Exploit Title: Nortek Linear eMerge E3-Series - Account Take Over\n# Exploit Author: Omar Hashim\n# Version: 0.32-07p\n# Vendor home page: https://www.nortekcontrol.com/access-control/\n# Vendor home page: https://linear-solutions.com/\n# Authentication Required: No\n# CVE: CVE-2022-31798\n\n# Description\n====================\nThere is local session fixation that chained with reflected cross-site\nscripting leads to account take over of admin or less privileged users\n\n# Proof Of Concept:\n====================\nhttp://\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:26.818897Z"}