CVE-2022-4896 PoC — Control de Ciber 资源管理错误漏洞

Source

https://github.com/sapellaniz/CVE-2022-4896

Associated Vulnerability

Title: Control de Ciber 资源管理错误漏洞 (CVE-2022-4896)
Description:Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows with the messages "PNTMEDIDAS", "PEDIR", "HAYDISCOA" or "SPOOLER". A complete denial of service can be achieved by sending multiple requests simultaneously on a core.

Description

CVE-2022-4896 PoCs & exploits

Readme

# CVE-2022-4896
PoC & exploits for CVE-2022-4896

"Control de Ciber" is a Cybercafe management software. Multiple Denial-of-Service (DoS) vulnerabilities in versions prior to 1.650. An unauthenticated remote attacker can send a carefully crafted request that lead to a service crash.


### Spooler (DoS)
[Spooler exploit](https://github.com/sapellaniz/CVE-2022-4896/blob/main/dos_spooler.py)
![Spooler exploit](https://github.com/sapellaniz/CVE-2022-4896/raw/main/PoC/spooler.gif)

### PNTMedidas (DoS)
[PNTMedidas exploit](https://github.com/sapellaniz/CVE-2022-4896/blob/main/dos_pntmedidas.py)
![PNTMedidas exploit](https://github.com/sapellaniz/CVE-2022-4896/raw/main/PoC/pntmedidas.gif)

### Pedir (DoS)
[Pedir exploit](https://github.com/sapellaniz/CVE-2022-4896/blob/main/dos_pedir.py)
![Pedir exploit](https://github.com/sapellaniz/CVE-2022-4896/raw/main/PoC/pedir.gif)

### HayDiscoA (DoS)
[HayDiscoA exploit](https://github.com/sapellaniz/CVE-2022-4896/blob/main/dos_haydiscoa.py)
![HayDiscoA exploit](https://github.com/sapellaniz/CVE-2022-4896/raw/main/PoC/haydiscoa.gif)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →