Vulnerability_PoC

---

一些有趣漏洞的 PoC/Exploit

作者：Numen Cyber Labs 漏洞研究团队

---

1. TCP/IP RCE 漏洞（CVE-2022–34718）PoC 还原与分析
   https://medium.com/@numencyberlabs/analysis-and-summary-of-tcp-ip-protocol-remote-code-execution-vulnerability-cve-2022-34718-8fcc28538acf

2. CVE-2022–36537 漏洞技术分析与 Exploit
   https://medium.com/@numencyberlabs/cve-2022-36537-vulnerability-technical-analysis-with-exp-667401766746

3. CVE-2021-38003：从泄露 TheHole 到 Chrome 渲染器 RCE
   https://medium.com/numen-cyber-labs/from-leaking-thehole-to-chrome-renderer-rce-183dcb6f3078

4. CVE-2022–42889：Text4Shell 漏洞技术分析
   https://medium.com/@numencyberlabs/text4shell-or-act4shell-vulnerability-analysis-a860d141e3e5

5. 零日漏洞：Chromium v8 js 引擎 issue 1303458 — x64 指令优化中的 Use After Free 漏洞分析
   https://medium.com/bugbountywriteup/zero-day-vulnerability-chromium-v8-js-engine-issue-1303458-use-after-free-in-x64-instruction-e874419436a6

6. CVE-2022-3723： 基于 Google 公开的 PoC https://medium.com/@numencyberlabs/use-native-pointer-of-function-to-bypass-the-latest-chrome-v8-sandbox-exp-of-issue1378239-251d9c5b0d14

7. CVE-2023-41047: OctoPrint 远程代码执行漏洞 https://medium.com/@numencyberlabs/octoprint-remote-code-execution-vulnerability-7e36372d6c2b

8. CVE-2024-24919: Check Point Security Gateways 任意文件读取漏洞 https://medium.com/@numencyberlabs/cve-2024-24919-check-point-security-gateways-arbitrary-file-read-vulnerability-f33b296be408

9. CVE-2026–5283: 通过 ANGLE（Chrome WebGL）中的 Partial Clear 泄露未初始化 GPU 内存 https://medium.com/@numencyberlabs/cve-2026-5283-uninitialized-gpu-memory-disclosure-via-partial-clear-in-angle-chrome-webgl-3740ca481149

---

Web3 相关漏洞分析

由 Numen Web3 安全产品发现

作者：Numen Cyber Labs Web3 安全团队

---

1. Aptos Move VM 首个严重漏洞分析
   https://medium.com/numen-cyber-labs/analysis-of-the-first-critical-0-day-vulnerability-of-aptos-move-vm-8c1fd6c2b98e

2. Move 引用安全验证模块中一个高危漏洞的故事
   https://medium.com/numen-cyber-labs/the-story-of-a-high-vulnerability-in-move-reference-safety-verify-module-2340f3d8c642