CVE-2024-23897

CVE-2024-23897 — PoC con supporto HTTPS + CSRF-crumb cve-2024-23897-crumb.py — lettura arbitraria di file non autenticata su Jenkins = 2.441 / LTS = 2.426.2 corretta in 2.442 / LTS 2.426.3. Cosa aggiunge rispetto ai PoC pubblici I PoC più diffusi — exploit-db 51993, xaitax/CVE-2024-23897 e il...

PT-2020-7566 · D Link · D-Link Dir-100

Name of the Vulnerable Software and Affected Versions: D-Link DIR-100 version 4.03B07 Description: The issue concerns a CSRF vulnerability in the cli.cgi endpoint. Recommendations: For D-Link DIR-100 version 4.03B07, consider restricting access to the cli.cgi endpoint as a temporary workaround...