搜集 2022 年的漏洞

本项目用于搜集 2022 年的漏洞，注意: 本项目并不刻意搜集 POC 或 EXP，包含但不限于漏洞资讯、漏洞复现、漏洞分析、漏洞验证、漏洞利用

目前纯手工搜集，后期可能会加入机器人，漏洞按照更新时间逆序排序

命令执行

Gitlab Enterprise Edition (13.9.5) CVE-2021-22205

A Zero-Click RCE exploit for CVE-2021-0326 on the Peloton Bike

CVE-2022-24086 about Magento RCE

Apache APISIX 2.12.1、Apache APISIX 2.10.4 POC(CVE-2022-24112)

向日葵远程控制软件 RCE

Remote Code Execution in TP-Link Tapo c200 IP camera

Cisco Anyconnect VPN unauth RCE(CVE-2022-20699)

RCE via Email-Templates (Authenticated only) in SuiteCRM <= 8.0.1(CVE-2021-45897)

CVE-2021-22204 Rxiftool RCE

HongJingEHR多个漏洞(Axis Adminservice远程代码执行漏洞、HongJingEHR未授权反序列化漏洞)

NUUO NVRmini2 未授权RCE漏洞

Uniview 未授权RCE漏洞 (CVE-2021-45039)

SONICWALL SMA100 Apache httpd 未授权RCE (CVE-2021-20038)

TerraMaster TOS session 伪造、任意⽂件读取、远程命令执⾏等多个漏洞

H2 数据库控制台未授权 RCE (CVE-2021-42392)

Atlassian Jira Server and Data Center 授权RCE漏洞 (CVE-2021-43947)

CVE-2021-41773 Apache HTTP Server 2.4.49 RCE

权限提升

Linux CVE-2022-0847-DirtyPipe-Exploit

Windows CVE-2021-24084 Windows Local Privilege Escalation

Windows Exploit for CVE-2022-21999 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

Linux polkit的pkexec 本地权限升级漏洞 EXP NO GCC(CVE-2021-4034)

Linux PolKit (polkitd) 0.133 本地提权(CVE-2021-3560)

Windows Exploit for CVE-2022–22718 - Windows Print Spooler Elevation of Privilege Vulnerability (LPE)

Windows CVE-2021-1675 is a vulnerability in the Print Spooler Service of Microsoft Windows

Windows POC CVE-2022-21882

Windows win32k LPE bypass CVE-2022-21882

Linux polkit的pkexec 本地权限升级漏洞 EXP(CVE-2021-4034)

拒绝服务

A-potential-Denial-of-Service-issue-in-protobuf-java

代码执行

Hotel Druid v3.0.3 Code Injection vulnerability (CVE-2022-22909)

Remote Code Execution on Confluence Servers(CVE-2021-26084)

a-tag with the HTML injection vulnerability in CSV+ <=0.8.0(CVE-2022-21241)

POC for CVE-2022-21907: Windows HTTP协议栈远程代码执行漏洞

GoAhead 远程代码执⾏漏洞 (CVE-2021-42342)

SQL注入

Casdoor SQL Injection (CVE-2022-24124)

Prestashop >= 1.7.5.0 < 1.7.8.2 - SQL injection(CVE-2021-43789)

Moodle 3.11-3.11.4 SQL注入 POC(CVE-2022-0332)

PhpIPAM v1.4.4 授权 SQL 注入(CVE-2022-23046)

CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection POC

CVE-2022-21661-WordPress-Core-5.8.2-WP_Query-SQL-Injection

wordpress SQL注入漏洞 (CVE-2022–21661)

越权漏洞

ZABBIX-监控系统 Unsafe Session Storage(CVE-2022-23131)

ZABBIX-监控系统-Saml-bypass-poc(CVE-2022-23131)

CVE-2022-22828 Synametrics - SynaMan version 4.9 存在越权漏洞

Hospital's Patient Records Management System 1.0(CVE-2022-22296)

Gin-Vue-admin垂直越权漏洞与代码分析 (CVE-2022-21660)

信息泄露

WebLogic 信息泄露漏洞(CVE-2022-21252)

Import Export WordPress plugin(CVE-2022-0236)

容器逃逸

Sample Ubuntu LPEs and container escapes CVE-2022-0185 分析

Sample Ubuntu LPEs and container escapes coming soon(CVE-2022-0185)

外部实体

Andrid XML外部实体引用inskylot/jadx的不当限制(CVE-2022-0219)

XSS

Stored XSS Vulnerability on RosarioSIS 8.2.1(CVE-2021-45416)

SAS Logon 9.4 allows warning-message injection(CVE-2022-25257)

Reflected XSS in TastyIgniter v3.2.2 Restaurtant CMS(CVE-2022-23378)

Stored Cross Site Scripting Sourcecodester Online Car Rental System 1.0(CVE-2021-46005)

Reflected Cross-site scripting (XSS) vulnerability in RosarioSIS 8.2.1(CVE-2021-45416)

D-Link Router DSL-2730E - Stored Cross Site Scripting (XSS)(CVE-2021-46108)

Ivanti Service Manager 2021.1 infected with reflected XSS(CVE-2021-38560)

RosarioSIS 8.2.1 反射式跨站点脚本(CVE-2021-45416)

HPRMS - 'room_list' Stored XSS(CVE-2022-22852)

HPRMS - 'doctors' Stored XSS(CVE-2022-22851)

HPRMS - 'room_types' Stored XSS(CVE-2022-22850)

文件上传

Spring4Shell-POC (CVE-2022-22965)

WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5(CVE-2021-24145)

文件包含

Oracle WebLogic Server 12.1.3.0.0/12.2.1.3.0/12.2.1.4.0/14.1.1.0.0 本地文件包含(CVE-2022-21371)

SSRF

Microsoft Exchange ProxyLogon PoC (CVE-2021-26855)

SSTI

VMware CVE-2022-22954 Workspace ONE Access Freemarker Server-side Template Injection

其他

CVE-2021-45901 (ServiceNow - Username Enumeration)