CVE-2019-14537

YOURLS: CVE-2019-14537 PoC 有効なタイムスタンプを取得すると、APIにリクエストを送信できるようになります。 http://domain.com/yourls-api.php?signature=0e1&action=db-stats&timestamp=VALIDTIMESTAMP 使い方 root@kitploit: usage: main.py -h --vhost VHOST --threads THREADS --path PATH --port PORT ip CVE-2019-14537 PoC positional arguments: ip...

CVE-2019-14537

YOURLS (up to version 1.7.3) API exposes a type juggling vulnerability that can lead to authentication/login bypass. The issue is documented as CVE-2019-14537 with a fix in YOURLS 1.7.4 (patches and related PRs are available in the YOURLS repository). An advisory exists describing the impact and ...

Exploit for Type Confusion in Yourls

YOURLS: CVE-2019-14537 PoC !alt texthttps://raw.githubuser...