{"vulnerability": "cve-2022-3620", "sightings": [{"uuid": "1ef8181b-f41c-4be7-bb9f-15347beb223c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36200", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/3056", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01\n\n\u66f4\u65b0\u4e86\uff1aCVE-2022\n\u63cf\u8ff0\uff1aCVE-2022-36200 PoC\nURL\uff1ahttps://github.com/afaq1337/CVE-2022-36200\n\n\u6807\u7b7e\uff1a#CVE-2022", "creation_timestamp": "2022-08-29T11:28:52.000000Z"}, {"uuid": "1b6c00fe-cb24-47fd-a6c1-510d283b0f8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-3620", "type": "seen", "source": "https://t.me/cibsecurity/51909", "content": "\u203c CVE-2022-3620 \u203c\n\nA vulnerability was found in Exim and classified as problematic. This issue affects the function dmarc_dns_lookup of the file dmarc.c of the component DMARC Handler. The manipulation leads to use after free. The attack may be initiated remotely. The name of the patch is 12fb3842f81bcbd4a4519d5728f2d7e0e3ca1445. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211919.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-21T00:21:55.000000Z"}, {"uuid": "a04e89a4-ec4f-4422-85b7-6098fbd676a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36200", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6700", "content": "#exploit\n1. CVE-2022-21849:\nA vulnerability related to IKE Extension\nhttps://blog.78researchlab.com/53e53729-d728-4635-a58d-08ad8a1f68e4\n\n2. CVE-2022-36200:\nFiberHome VDSL2 Modem HG150-Ub_V3.0 (PTCL) - Admin Credentials are submitted in the URL\nhttps://github.com/afaq1337/CVE-2022-36200", "creation_timestamp": "2022-08-30T11:27:01.000000Z"}, {"uuid": "c95faac2-4e51-4e10-b75b-2ce21d34afee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36200", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1934", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36200\nGithub: https://github.com/afaq1337/CVE-2022-36200\nDescribe: \n**", "creation_timestamp": "2026-08-01T05:00:05.855835Z"}, {"uuid": "aa62578f-0ca0-400a-a91e-5ab5b82dbe82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36200", "type": "seen", "source": "https://t.me/CVEhub/1934", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-36200\nGithub: https://github.com/afaq1337/CVE-2022-36200\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:01:01.944851Z"}, {"uuid": "becabb88-37c5-46e6-81ab-d83fe0b12853", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36203", "type": "seen", "source": "https://t.me/hacking_Attack/67590", "content": "Exploit Collector\nDoctor's Appointment System 1.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nDoctor's Appointment System version 1.0 suffers from a cross site scripting vulnerability in register.php. Original discovery of cross site scripting in this version is attributed to Soham Bakore in February of 2021.\n\nSHA-256 | a044d93c49b403d6f81a3f003fc06d37bc230c31adb301f2bd75449461272144\n\nDownload\n# Exploit Title: Doctor's Appointment System v1.0 - Cross-Site Scripting (XSS)\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36203\n\nPOC:\n\nPOST /register.php HTTP/1.1\nHost: localhost\n\nusername=a\">&password=123\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.394744Z"}, {"uuid": "bfa0cb9b-f7b2-4052-8bec-141ef11adafd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36201", "type": "seen", "source": "https://t.me/hacking_Attack/67591", "content": "Exploit Collector\nDoctor's Appointment System 1.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nDoctor's Appointment System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Soham Bakore and Nakul Ratti in February of 2021.\n\nSHA-256 | bba8e606cf86fb9a7af0f1c090bad1896d40e1260de7bcb58ab348d6a559cec4\n\nDownload\n# Exploit Title: SQLi - Doctor's Appointment System v1.0\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36201\nPOC:\n\nhttp://localhost/edoc/patient/booking.php?id=1%20AND%20(SELECT%203436%20FROM%20(SELECT(SLEEP(10)))dZls)\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:25.436864Z"}, {"uuid": "4a4d57d6-e125-447a-b1bd-5809004be7c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36201", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/67591", "content": "Exploit Collector\nDoctor's Appointment System 1.0 SQL Injection\n\nhttps://3.bp.blogspot.com/-UEPmQpzFyCs/WWlvQSuTgiI/AAAAAAAAINA/LFaHvgtClFA67K--PZO5ZJSS69Dsl8UBACLcBGAs/s1600/h31.png \nDoctor's Appointment System version 1.0 suffers from a remote SQL injection vulnerability. Original discovery of SQL injection in this version is attributed to Soham Bakore and Nakul Ratti in February of 2021.\n\nSHA-256 | bba8e606cf86fb9a7af0f1c090bad1896d40e1260de7bcb58ab348d6a559cec4\n\nDownload\n# Exploit Title: SQLi - Doctor's Appointment System v1.0\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36201\nPOC:\n\nhttp://localhost/edoc/patient/booking.php?id=1%20AND%20(SELECT%203436%20FROM%20(SELECT(SLEEP(10)))dZls)\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T11:00:04.514054Z"}, {"uuid": "7a9c1678-16b5-4036-bedc-54489f566179", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36203", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/67590", "content": "Exploit Collector\nDoctor's Appointment System 1.0 Cross Site Scripting\n\nhttps://1.bp.blogspot.com/-jW_VWiRlkJ4/WWlvh6QcNII/AAAAAAAAIQg/x12g-flM0hAb9z-fRCiW9Z3UAYaaFuf7ACLcBGAs/s1600/h9.png \nDoctor's Appointment System version 1.0 suffers from a cross site scripting vulnerability in register.php. Original discovery of cross site scripting in this version is attributed to Soham Bakore in February of 2021.\n\nSHA-256 | a044d93c49b403d6f81a3f003fc06d37bc230c31adb301f2bd75449461272144\n\nDownload\n# Exploit Title: Doctor's Appointment System v1.0 - Cross-Site Scripting (XSS)\n# Google Dork: N/A\n# Date: 7/13/2022\n# Exploit Author: Abdullah Zaid - @_aznull\n# Vendor Homepage:\nhttps://www.sourcecodester.com/hashenudara/simple-doctors-appointment-project.html\n# Software Link:\nhttps://www.sourcecodester.com/sites/default/files/download/hshnudr/edoc-doctor-appointment-system-main_1.zip\n# Version: 1.0\n# Tested on: Linux\n# CVE : CVE-2022-36203\n\nPOC:\n\nPOST /register.php HTTP/1.1\nHost: localhost\n\nusername=a\">&password=123\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T11:00:04.552508Z"}]}