CVE-2022-36537
HIGH KEV RANSOMWARE NUCLEIZK Framework <9.6.1 - Info Disclosure
Title source: llmExploitation Summary
CVE-2022-36537 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added February 27, 2023, with confirmed use in ransomware campaigns. EIP tracks 3 public exploits from researchers including Malwareman007, agnihackers, ethan-repo-lab4b6. A Nuclei detection template is also available.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2022-36537, targeting ZK framework authentication bypass and ConnectWise r1Soft Server Backup Manager RCE. The exploit includes authentication bypass techniques, file reading capabilities, and a JDBC backdoor deployment mechanism.
Description
ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader.
Exploits (3)
This repository contains a functional exploit for CVE-2022-36537, targeting ZK framework authentication bypass and ConnectWise r1Soft Server Backup Manager RCE. The exploit includes authentication bypass techniques, file reading capabilities, and a JDBC backdoor deployment mechanism.
This repository contains a functional exploit for CVE-2022-36537, targeting ZK framework authentication bypass and ConnectWise r1Soft Server Backup Manager RCE. The exploit includes methods for authentication bypass, file reading, and deploying a JDBC backdoor for remote code execution.
This repository contains a functional exploit for CVE-2022-36537, targeting the ZK framework authentication bypass and ConnectWise r1Soft Server Backup Manager for remote code execution. The exploit includes methods for authentication bypass, file reading, and deploying a malicious JDBC driver for RCE.
Nuclei Templates (1)
http.title:"Server backup manager" || http.title:"server backup manager"
title="server backup manager"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N