{"vulnerability": "CVE-2022-37955", "sightings": [{"uuid": "2bcaf4e4-7803-4143-8dde-fc2c5c503638", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/TopCyberTechNews/310", "content": "Top Security News for 29/04/2023\n\nWhy Your Detection-First Security Approach Isn't Working\nhttps://thehackernews.com/2023/04/why-your-detection-first-security.html \n\nCVE-2022-37955: Vulnerability in Microsoft Windows Group Policy Updates Leads to Improper Link Resolution Before File Access (Privilege Escalation CWE-59)\nhttps://www.reddit.com/r/netsec/comments/131mes1/cve202237955_vulnerability_in_microsoft_windows/ \n\nAttacks On PaperCut Servers Tied To Ransomware Groups\nhttps://packetstormsecurity.com/news/view/34561/Attacks-On-PaperCut-Servers-Tied-To-Ransomware-Groups.html \n\nChinese Alloy Taurus Updates PingPull Malware\nhttps://www.reddit.com/r/netsec/comments/131qxn8/chinese_alloy_taurus_updates_pingpull_malware/ \n\nWhat\u2019s now being traded in the C2C markets. CISA would like comments on its software self-attestation form. And in Russia\u2019s hybrid war, are there cyber war crimes, or real hacktivists?\nhttps://thecyberwire.com/podcasts/daily-podcast/1812/notes \n\nState of DNS Rebinding in 2023\nhttps://www.reddit.com/r/netsec/comments/132ewi3/state_of_dns_rebinding_in_2023/ \n\nThe UN's new cybercrime treaty raises human rights concerns. How China's new counter-espionage law could impact cyber business.\nhttps://thecyberwire.com/newsletters/policy-briefing/5/82 \n\nCISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments\nhttps://thehackernews.com/2023/04/cisa-warns-of-critical-flaws-in.html \n\nLockBit and Cl0p ransomware gangs actively exploiting Papercut vulnerabilities\nhttps://www.malwarebytes.com/blog/news/2023/04/lockbit-and-cl0p-are-actively-exploiting-papercut-vulnerabilities \n\nBreach roundup. Hackers steal more than hearts.\nhttps://thecyberwire.com/podcasts/privacy-briefing/517/notes \n\n    \nFollow Top Cyber News at https://t.me/TopCyberTechNews\nFeel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2023-04-29T07:00:05.000000Z"}, {"uuid": "c171ec95-da60-4a01-9fae-b272ce6c406a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "Telegram/e4b8xasECNPaTnr4JYTMaXGSrfygZGtChMYE0rnSQ6-ZfqI", "content": "", "creation_timestamp": "2023-02-19T21:50:11.000000Z"}, {"uuid": "c372429c-7ae0-423a-ba20-daccc5e18c19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "Telegram/OWl6iEtSW_1w8mnvb1kVToU_wZ1-mGDUaQutMvvBsw1QX6o", "content": "", "creation_timestamp": "2023-02-16T18:57:50.000000Z"}, {"uuid": "81b22a8d-d059-49cc-968d-73ca7c24149a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/cibsecurity/49693", "content": "\u203c CVE-2022-37955 \u203c\n\nWindows Group Policy Elevation of Privilege Vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-09-13T22:25:54.000000Z"}, {"uuid": "8cc747b7-d9cd-4641-9955-bc857fc80756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3134", "content": "EoP via Arbitrary File Write/Overwite in Group Policy Client \u201cgpsvc\u201d \u2013 CVE-2022-37955 https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955/", "creation_timestamp": "2026-08-03T01:13:43.134952Z"}, {"uuid": "24df6ab1-4e93-4cc0-b24f-a702be2eb8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/8205", "content": "#exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-> https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955", "creation_timestamp": "2023-04-29T12:53:42.000000Z"}, {"uuid": "688f6c4d-6891-48d9-85bf-ed55031e8042", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/3134", "content": "EoP via Arbitrary File Write/Overwite in Group Policy Client \u201cgpsvc\u201d \u2013 CVE-2022-37955 https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955/", "creation_timestamp": "2026-08-02T19:10:29.449056Z"}, {"uuid": "4553f5ad-26a7-48fd-a60a-81ceb9a3ceb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/reverseame/3134", "content": "EoP via Arbitrary File Write/Overwite in Group Policy Client \u201cgpsvc\u201d \u2013 CVE-2022-37955 https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955/", "creation_timestamp": "2026-07-29T12:02:33.877451Z"}, {"uuid": "48c1506d-d6d1-4c1a-a6ca-baeb9786f1f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/reverseame/3134", "content": "EoP via Arbitrary File Write/Overwite in Group Policy Client \u201cgpsvc\u201d \u2013 CVE-2022-37955 https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955/", "creation_timestamp": "2026-07-30T00:02:31.814564Z"}, {"uuid": "dec2d46b-63aa-46e3-9e7b-04acb9c4256e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-> https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-01T17:00:20.800640Z"}, {"uuid": "35136b7e-cc77-4305-a28a-950fcf007f0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-01T17:00:22.219232Z"}, {"uuid": "9d9df2f0-a1c5-4f65-92e5-382429a66222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-02T01:04:03.099419Z"}, {"uuid": "db040432-4dc3-4ad3-9891-be0a5e1d3fc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "seen", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-> https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-02T01:04:00.755270Z"}, {"uuid": "11e3fe7c-7050-46a6-831e-f1038ae4aecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-> https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-10T01:00:04.639292Z"}, {"uuid": "a242fef5-8d67-4cdd-8b49-008d15355840", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-10T03:00:04.992517Z"}, {"uuid": "993affb0-09d7-4cb7-bd45-261add6c9aa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6615", "content": "exploit\n1. CVE-2022-45701:\nArris Router Firmware 9.1.103 - RCE\nhttps://packetstormsecurity.com/files/171001\n\n2. CVE-2022-37955:\nEoP via Arbitrary File Write/Overwite in Group Policy Client \"gpsvc\"\nhttps://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n3. CVE-2022-44666:\nMS Windows Contacts (VCF/Contact/LDAP) syslink control href attribute escape vulnerability\nhttps://github.com/j00sean/CVE-2022-44666\n\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defence Today,\nSecure Tomorrow\n@CisoasaService\n1401.11.28", "creation_timestamp": "2026-09-11T00:00:54.574342Z"}, {"uuid": "743b61ef-0822-4977-83f4-fdfa1ce61b6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-37955", "type": "published-proof-of-concept", "source": "https://t.me/cissp/6809", "content": "exploit\n1. CVE-2023-21707:\nMicrosoft Exchange Powershell Remoting Deserialization leading to RCE\nhttps://starlabs.sg/blog/2023/04-microsoft-exchange-powershell-remoting-deserialization-leading-to-rce-cve-2023-21707\n\n2. CVE-2022-37955: \nVulnerability in MS Windows Group Policy Updates Leads to Improper Link Resolution Before File Access\nhttps://herolab.usd.de/security-advisories/usd-2022-0034\n]-> https://decoder.cloud/2023/02/16/eop-via-arbitrary-file-write-overwite-in-group-policy-client-gpsvc-cve-2022-37955\n\n\n-Cyber Security awareness-\n\nUp2date 4 Defense Today,\nSecure Tomorrow\n@CisoasaService\n1402.02.09", "creation_timestamp": "2026-09-11T00:00:57.017368Z"}]}