{"uuid": "688fd80d-a0cf-44f2-b323-00f3eb6dc25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45025", "type": "published-proof-of-concept", "source": "https://t.me/onelab1337/2633", "content": "#exploit\n1. CVE-2022-45025:\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\ud83d\udd17 See on Github \n\n2. Exploring Chrome\u2019s CVE-2020-6418\n\ud83d\udd17 See on Haboob\n\n3. CVE-2022-39066:\nSQL Injection Vulnerability in ZTE MF286R\n\ud83d\udd17 See on Github\n\n#Malware_analysis\n1. Drokbk Malware\n\ud83d\udd17 See on SecureWorks\n\n2. Typosquat/Ransomware Campaign in PyPI and NPM\n\ud83d\udd17 See on Pylum\n\n#tools\n#Offensive_security\n1. udhcpc process crash on BusyBox 1.24.2\n\ud83d\udd17 See on NccGroup\n\n2. Signing-key abuse and update exploitation framework\n\ud83d\udd17 See on Github\n\n3. A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods\n\ud83d\udd17 See on Github\n\n@zero0lab \ud83e\udd8a", "creation_timestamp": "2026-08-10T00:00:29.798818Z"}