Lucene search
+L

34 matches found

Kitploit
Kitploit
added 2026/09/06 5:50 a.m.3 views

CVE-2022-36537

CVE-2022-36537 Резюме R1Soft Server Backup Manager использует ZK framework в качестве основного фреймворка. Его безопасность требует, чтобы все участники проектов Web3 уделяли больше внимания уязвимостям безопасности различных инфраструктур Web3 и своевременно устанавливали исправления, чтобы...

7.5CVSS7.9AI score0.95335EPSS
SaveExploits5References1
Nuclei
Nuclei
added 2026/09/06 2:04 a.m.270 views

ZK Framework - Information Disclosure

ZK Framework 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 is susceptible to information disclosure. An attacker can access sensitive information via a crafted POST request to the component AuUploader and thereby possibly obtain additional sensitive information, modify data, and/or execute...

7.5CVSS7.3AI score0.95335EPSS
SaveExploits5References5
Kitploit
Kitploit
added 2026/09/05 6:01 p.m.3 views

CVE-2022-36537-EXPLOIT

CVE-2022-36537 요약 R1Soft Server Backup Manager는 주요 프레임워크로 ZK 프레임워크를 사용합니다. 보안상 모든 Web3 프로젝트 당사자는 다양한 Web3 인프라의 보안 취약점에 더 많은 주의를 기울이고 잠재적인 보안 위험과 디지털 자산 손실을 방지하기 위해 적시에 패치를 적용해야 합니다. 우리는 제때에 보안 위험을 발굴하고 web3의 다양한 보안 위험을 추적하며, web3 세계의 온체인과 오프체인이 안전하고 건전하도록 선도적인 보안 솔루션을 제공할 것입니다. 서문 ZK는 엔터프라이즈 웹...

7.5CVSS7.8AI score0.95335EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/01 12:20 p.m.5 views

CVE-2022-36537

CVE-2022-36537 Résumé R1Soft Server Backup Manager utilise le framework ZK comme framework principal. Sa sécurité exige que tous les acteurs de projets Web3 accordent une attention particulière aux vulnérabilités de sécurité des diverses infrastructures Web3 et les corrigent rapidement afin...

7.5CVSS7.9AI score0.95335EPSS
SaveExploits5References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2013-5796

Malware in sbrugna...

4.3CVSS6.4AI score0.01162EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2025/09/28 1:11 a.m.378 views

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

7.5CVSS7.1AI score0.95335EPSS
SaveExploits5
RedhatCVE
RedhatCVE
added 2025/05/22 11:17 p.m.14 views

CVE-2022-36537

ZK Framework v9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

7.5CVSS6.5AI score0.95335EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:15 a.m.13 views

CVE-2013-5966

Cross-site scripting XSS vulnerability in ZK Framework before 5.0.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

4.3CVSS6AI score0.01162EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/06 12:00 a.m.89 views

Potix ZK Framework AuUploader Remote File Disclosure (CVE-2022-36537)

The version of Potix ZK Framework detected on the remote host is prior to 8.6.4.2, 9.0.1.3, 9.5.1.4, 9.6.0.2, or 9.6.2. If is, therefore, affected by a remote file disclosure vulnerability: - ZK Framework allows attackers to access sensitive information via a crafted POST request sent to the...

7.5CVSS8.1AI score0.95335EPSS
SaveExploits5References2
Tenable Nessus
Tenable Nessus
added 2023/03/08 12:00 a.m.33 views

ZK Framework < 8.6.4.2 / 9.0.x < 9.0.1.3 / 9.5.x < 9.5.1.4 / 9.6.0.x < 9.6.0.2 / 9.6.x < 9.6.2 Authentication Bypass

ZK is a popular Java Web framework for building enterprise Web applications. By forging a POST request to the AuUpload ZK serverlets, an unauthenticated attacker can retrieve the content of a file located in the web context. No source data...

7.5CVSS8.4AI score0.95335EPSS
SaveExploits5References3
Rapid7 Blog
Rapid7 Blog
added 2023/03/01 5:46 p.m.63 views

Active Exploitation of ZK Framework CVE-2022-36537

Emergent threats evolve quickly, and as we learn more about this vulnerability, this blog post will evolve, too. Rapid7 is aware of active exploitation of CVE-2022-36537 in vulnerable versions of ConnectWise R1Soft Server Backup Manager software. The root cause of the vulnerability is an...

0.2AI score0.95335EPSS
SaveExploits5
The Hacker News
The Hacker News
added 2023/02/28 6:42 a.m.5 views

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...

7.5CVSS7.1AI score0.95335EPSS
SaveExploits5
The Hacker News
The Hacker News
added 2023/02/28 6:42 a.m.132 views

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a high-severity flaw affecting the ZK Framework to its Known Exploited Vulnerabilities KEV catalog based on evidence of active exploitation. Tracked as CVE-2022-36537 CVSS score: 7.5, the issue impacts ZK Framework versions...

7.5CVSS1.3AI score0.95335EPSS
SaveExploits5
CISA KEV Catalog
CISA KEV Catalog
added 2023/02/27 12:00 a.m.124 views

ZK Framework AuUploader Unspecified Vulnerability

ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to...

7.5CVSS3.3AI score0.95335EPSS
SaveIn wildExploits5
VulnCheck KEV
VulnCheck KEV
added 2023/02/14 12:00 a.m.4 views

VulnCheck KEV: CVE-2022-36537

ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to...

7.5CVSS7.3AI score0.95335EPSS
SaveExploits5References1
GithubExploit
GithubExploit
added 2022/12/09 2:15 p.m.388 views

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

7.5CVSS8.2AI score0.95335EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2022/12/09 11:29 a.m.365 views

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

7.5CVSS8.2AI score0.95335EPSS
SaveExploits5
GithubExploit
GithubExploit
added 2022/12/09 11:29 a.m.497 views

Exploit for CVE-2022-36537

CVE-2022-36537 Summary R1Soft Server Backup Manager uses t...

7.5CVSS8.2AI score0.95335EPSS
SaveExploits5
The Hacker News
The Hacker News
added 2022/11/01 11:28 a.m.66 views

Critical RCE Vulnerability Reported in ConnectWise Server Backup Solution

IT service management software platform ConnectWise has released Software patches for a critical security vulnerability in Recover and R1Soft Server Backup Manager SBM. The issue, characterized as a "neutralization of Special Elements in Output Used by a Downstream Component," could be abused to...

7.5CVSS1.3AI score0.95335EPSS
SaveExploits5
Github Security Blog
Github Security Blog
added 2022/08/27 12:00 a.m.45 views

ZK Framework vulnerable to malicious POST

ZK Framework version 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...

7.5CVSS7.1AI score0.95335EPSS
SaveExploits5References6Affected Software1
Rows per page
Query Builder