poc-cve-2024-23334

poc-cve-2024-23334 This repository contains a proof of concept about the exploitation of the aiohttp library for the reported vulnerability CVE-2024-23334. This was created for two reasons: 1. Educational purposes: for those who are starting in application security, it is helpful to see the steps...

CVE-2024-23334-PoC

路径遍历 PoC CVE-2024-23334 此脚本是针对漏洞 CVE-2024-23334 的概念验证 PoC，该漏洞与路径遍历 相关。脚本尝试通过操作 HTTP 请求中的路径来访问允许根目录之外的文件。 要求 要执行此脚本，你需要安装以下依赖： Python 3.x curl （必须在你的系统上安装） requests 和 colorama（用于处理请求和彩色输出） 变量 file 将是我们想要指向的文件 你可以用以下命令安装依赖： root@kitploit: pip install -r requirements.txt...

ROOT-OS-DEBIAN-13-CVE-2026-23334 CVE-2026-23334 in linux - Patched by Root

Root has patched CVE-2026-23334 in the linux package for Root:Debian:13. Multiple fixed versions available...

LFI-aiohttp-CVE-2024-23334-PoC

LFI-aiohttp-CVE-2024-23334-PoC Uno script Bash per automatizzare attacchi di Local File Inclusion LFI su server aiohttp vulnerabili, mirando specificamente a CVE-2024-23334. Questo exploit consente l'accesso non autorizzato a file arbitrari su sistemi che eseguono versioni affette di aiohttp con...

CVE-2024-23334-PoC

CVE-2024-23334-PoC Una prova di concetto della vulnerabilità di path traversal nella libreria python AioHTTP = sudo apt install python3-venv Configurazione del laboratorio root@kitploit: git clone https://github.com/z3rObyte/CVE-2024-23334-PoC cd CVE-2024-23334-PoC python3 -m venv .env chmod +x...

aiohttp-exploit-CVE-2024-23334-certstream

Raccogli domini dacertstream.calidog.io. Controlla la presenza diPython aiohttp negli header della risposta. Tenta di sfruttare CVE-2024-23334 Tentativi riusciti inviati a discord tramite webhook...

ROOT-OS-UBUNTU-2204-CVE-2026-23334 CVE-2026-23334 in linux - Patched by Root

Root has patched CVE-2026-23334 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

ROOT-OS-UBUNTU-2404-CVE-2026-23334 CVE-2026-23334 in linux - Patched by Root

Root has patched CVE-2026-23334 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-23334 CVE-2024-23334 in aiohttp - Patched by Root

Root has patched CVE-2024-23334 in the aiohttp package for Root:PyPI. Multiple fixed versions available...

K000160740: Linux kernel vulnerability CVE-2026-23334

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: can: usb: f81604: handle short interrupt urb messages properly If an interrupt urb is received that is not the correct length, properly detect it and don't attempt to treat the data as valid...

CVE-2026-23334

creationtimestamp| type| source ---|---|--- 2026-03-29 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0376/ 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...

CVE-2026-23334

The CVE-2026-23334 issue affects the Linux kernel in the can: usb: f81604 path, where interrupt URBs of incorrect length could be misinterpreted as valid data. The vulnerability is addressed by upstream kernel fixes, and Mageia advisories reference kernel version 6.6.130 as the fixing baseline, w...

📄 aiohttp 3.9.1 Directory Traversal

Proof of concept exploit for a directory traversal vulnerability in aiohttp version 3.9.1. Exploit Title: Python aiohttp directory traversal PoC CVE-2024-23334 Google Dork: N/A Date: 2025-10-06 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.aiohttp.org / https://www.python.or...

aiohttp 3.9.1 - directory traversal PoC

Exploit Title: Python aiohttp directory traversal PoC CVE-2024-23334 Google Dork: N/A Date: 2025-10-06 Exploit Author: Beatriz Fresno Naumova Vendor Homepage: https://www.aiohttp.org / https://www.python.org Software Link: https://github.com/aio-libs/aiohttp vulnerable tag: 3.9.1 Version: aiohttp...

CVE-2022-23334

The Robot application in Ip-label Newtest before v8.5R0 was discovered to use weak signature checks on executed binaries, allowing attackers to have write access and escalate privileges via replacing NEWTESTREMOTEMANAGER.EXE...

Linux Distros Unpatched Vulnerability : CVE-2020-23334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A WRITE memory access in the AP4NullTerminatedStringAtom::AP4NullTerminatedStringAtom component of Bento4 version 06c39d9 can lead to a segmentation fault...

Linux Distros Unpatched Vulnerability : CVE-2024-23334

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. When using aiohttp as a web server and configuring static routes, it is necessar...

antgrid-server (>=0.0.2, <=0.0.3), nemo-aligner (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2025-23334 via nvidia-pytriton (0.7.0)

nvidia-pytriton PYPI version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on nvidia-pytriton and may be impacted: - antgrid-server =0.0.2, =0.1.0, =0.1.0rc1, =0.1.0, =0.6.0 Source cves: CVE-2025-23334 Source advisory:...

Fedora: Security Advisory (FEDORA-2024-9e55564ca7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Maximo Application Suite - IoT Component uses aiohttp-3.8.6-cp37-cp37m-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2024-23829, CVE-2023-49082, CVE-2024-23334 and CVE-2023-49081

Summary IBM Maximo Application Suite - IoT Component uses aiohttp-3.8.6-cp37-cp37m-manylinux217x8664.manylinux2014x8664.whl which is vulnerable to CVE-2024-23829, CVE-2023-49082, CVE-2024-23334 and CVE-2023-49081. This bulletin contains information regarding the vulnerability and its fixture...