Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2022-36537

Description

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.

POC

Reference

- https://www.bleepingcomputer.com/news/security/cisa-warns-of-hackers-exploiting-zk-java-framework-rce-flaw/

Github

- https://github.com/ARPSyndicate/cvemon

- https://github.com/ARPSyndicate/kenzer-templates

- https://github.com/Malwareman007/CVE-2022-36537

- https://github.com/Mr-xn/Penetration_Testing_POC

- https://github.com/Ostorlab/KEV

- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors

- https://github.com/agnihackers/CVE-2022-36537-EXPLOIT

- https://github.com/ethan-repo-lab4b6/CVE-2022-36537

- https://github.com/k0mi-tg/CVE-POC

- https://github.com/k8gege/Ladon

- https://github.com/lions2012/Penetration_Testing_POC

- https://github.com/manas3c/CVE-POC

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/numencyber/Vulnerability_PoC

- https://github.com/rggu2zr/rggu2zr

- https://github.com/sponkmonk/Ladon_english_update

- https://github.com/whoforget/CVE-POC

- https://github.com/youwizard/CVE-POC

- https://github.com/zhanpengliu-tencent/medium-cve