CVE-2022-40126 PoC — Clash 安全漏洞

Source

https://github.com/LovelyWei/CVE-2022-40126

Associated Vulnerability

Title:Clash 安全漏洞 (CVE-2022-40126)
Description:Clash是Dreamacro个人开发者的一个 Go 语言开发的多平台代理客户端。 Clash for Windows v0.19.9版本存在安全漏洞，该漏洞源于服务模式配置文件目录中的错误配置，攻击者利用该漏洞可以在激活服务模式时提升权限并执行任意命令。

Description

Don't be evil.

File Snapshot


 [4.0K]  /data/pocs/c0a1554ee846e788aea5c80b9bfa63655a278978
└── [ 804]  exploit.cpp

0 directories, 1 file

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!