{"vulnerability": "CVE-2022-37987", "sightings": [{"uuid": "b96ca70c-6f68-430a-a2c3-0fa683c3065b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37987", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7619", "content": "#exploit\n1. CVE-2022-37987:\nA New Vector for Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation\nhttps://www.zerodayinitiative.com/blog/2023/1/23/activation-context-cache-poisoning-exploiting-csrss-for-privilege-escalation\n\n2. A NETGEAR WAN Command Injection\nhttps://research.nccgroup.com/2022/12/22/puckungfu-a-netgear-wan-command-injection\n\n3. Bypassing the Embedded Web Server's credential brute force prevention mechanism (PoC for CVE-2023-22960)\nhttps://github.com/t3l3machus/CVE-2023-22960\n// >60 Lexmark printer models", "creation_timestamp": "2023-01-25T11:03:01.000000Z"}, {"uuid": "6bc91d09-7230-4d5f-8420-8b3822c34651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37987", "type": "published-proof-of-concept", "source": "Telegram/WRihU9RVQ76Mwzb3k9ebrptTCuR-6XuT4FJT5yU7VgBW5WI", "content": "", "creation_timestamp": "2023-01-27T07:20:44.000000Z"}, {"uuid": "8da5ab52-248c-485c-a2e7-3c75caa99bee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37987", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2421", "content": "#exploit\n1. CVE-2022-37987:\nA New Vector for Activation Context Cache Poisoning: Exploiting CSRSS for Privilege Escalation\nhttps://www.zerodayinitiative.com/blog/2023/1/23/activation-context-cache-poisoning-exploiting-csrss-for-privilege-escalation\n\n2. A NETGEAR WAN Command Injection\nhttps://research.nccgroup.com/2022/12/22/puckungfu-a-netgear-wan-command-injection\n\n3. Bypassing the Embedded Web Server's credential brute force prevention mechanism (PoC for CVE-2023-22960)\nhttps://github.com/t3l3machus/CVE-2023-22960\n// >60 Lexmark printer models", "creation_timestamp": "2023-01-25T07:46:03.000000Z"}]}