ProxyNotShell Proof Of Concept Now Public

Censys reports on ProxyNotShell — a ProxyShell-like chain of Exchange vulnerabilities (CVE-2022-41040 and CVE-2022-41082) that enable remote code execution on Exchange Server 2013/2016/2019. A Chinese nation-state actor has been observed exploiting these flaws in the wild; a public proof-of-concept was released, increasing the risk of wider abuse against Internet-exposed Exchange servers. Microsoft released patches (Nov 3, 2022) and Censys provides detection dashboards and search queries to identify affected hosts.