CVE-2024-30851

Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downloadfile.php component...

CVE-2024-30851

The codesiddhant Jasmin Ransomware v.1.0.1 web panel is vulnerable to an unauthenticated directory traversal (CWE-22) within the download_file.php component. The root cause is a lack of sanitization when passing the file GET parameter to the readfile() function, combined with a failure to execute...

CVE-2024-30851

Directory Traversal vulnerability in codesiddhant Jasmin Ransomware v.1.0.1 allows an attacker to obtain sensitive information via the downloadfile.php component...

CVE-2024-30851

creationtimestamp| type| source ---|---|--- 2024-04-08 15:48:19+00:00| published-proof-of-concept| https://t.me/truesecator/5611 2024-04-09 19:49:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10302 2024-05-27 09:53:04+00:00| seen|...

Jasmin Ransomware 1.1 Arbitrary File Read

Exploit Title: Jasmin Ransomware arbitrary file read Date: 2024-04-04 Exploit Author: @chebuya Software Link: https://github.com/codesiddhant/Jasmin-Ransomware Version: v1.1 Tested on: Ubuntu 20.04 LTS CVE: CVE-2024-30851 Description: Jasmin Ransomware panel contains multiple SQL injections and...

Exploit for CVE-2024-30851

Jasmin ransomware web panel path traversal PoC EducationalPur...

Jasmin Ransomware Web Server Unauthenticated Directory Traversal

The Jasmin Ransomware web server contains an unauthenticated directory traversal vulnerability within the download functionality. As of April 15, 2024 this was still unpatched, so all versions are vulnerable. The last patch was in 2021, so it will likely not ever be patched. Module Options msf us...

Jasmin Ransomware Web Server Unauthenticated SQL Injection

The Jasmin Ransomware web server contains an unauthenticated SQL injection vulnerability within the login functionality. As of April 15, 2024 this was still unpatched, so all versions are vulnerable. The last patch was in 2021, so it will likely not ever be patched. Retrieving the victim's data m...