Chris Anastasio (muffin) of Incite Team

2 exploits Active since Aug 2022
CVE-2022-1373 METASPLOIT HIGH ruby WORKING POC
Softing Secure Integration Server v1.22 Remote Code Execution
The “restore configuration” feature of Softing Secure Integration Server V1.22 is vulnerable to a directory traversal vulnerability when processing zip files. An attacker can craft a zip file to load an arbitrary dll and execute code. Using the "restore configuration" feature to upload a zip file containing a path traversal file may cause a file to be created and executed upon touching the disk.
CVSS 7.2
CVE-2022-2334 METASPLOIT HIGH ruby WORKING POC
Softing Secure Integration Server V1.22 - RCE
The application searches for a library dll that is not found. If an attacker can place a dll with this name, then the attacker can leverage it to execute arbitrary code on the targeted Softing Secure Integration Server V1.22.
CVSS 7.2