Nuclei-Template-CVE-2024-1561

CVE-2024-1561 Nuclei 模板 此 Nuclei 模板旨在检测 Web 应用程序中的 Gradio CVE-2024-1561 漏洞。Gradio 是一个用于围绕机器学习模型创建可自定义 UI 组件的 Python 库。该漏洞可能允许攻击者从服务器读取文件。 运行模板 将此仓库克隆到本地机器，并使用 -t 标志运行： root@kitploit: git clone https://github.com/DiabloHTB/Nuclei-Template-CVE-2024-1561 cd Nuclei-Template-CVE-2024-1561 nuclei -targ...

CVE-2024-1561

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...

CVE-2024-1561

creationtimestamp| type| source ---|---|--- 2024-05-11 13:48:55+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7277 2024-05-14 03:25:11+00:00| published-proof-of-concept| Telegram/v-Ke2icr51-PqqUlXFecYLVSiGZOdun89f-7jmTrgElcRI7m 2025-04-22 02:52:22+00:00| published-proof-of-concept...

CVE-2024-1561 Arbitrary Local File Read via Component Method Invocation in gradio-app/gradio

An issue was discovered in gradio-app/gradio, where the /componentserver endpoint improperly allows the invocation of any method on a Component class with attacker-controlled arguments. Specifically, by exploiting the moveresourcetoblockcache method of the Block class, an attacker can copy any fi...