CVE-2022-22845 PoC — Homer WebApp 信任管理问题漏洞

Source

https://github.com/OmriBaso/CVE-2022-22845-Exploit

Associated Vulnerability

Title:Homer WebApp 信任管理问题漏洞 (CVE-2022-22845)
Description:QXIP SIPCAPTURE homer-app before 1.4.28 for HOMER 7.x has the same 167f0db2-f83e-4baa-9736-d56064a5b415 JWT secret key across different customers' installations.

Description

Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

Readme

# CVE-2022-22845-Exploit
Exploit for CVE-2022-22845 - Unauthenticated Admin Takeover On QXIP SIPCAPTURE Homer-App up to 1.4.27

##### Discovery: Omri Baso & Fabien Aunay
##### Exploit Author: Omri Baso

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!