Bitrix24DoS

Bitrix24 DoS 漏洞利用工具 此仓库包含一个用于利用 Bitrix24 中拒绝服务（DoS）漏洞的 Python 脚本。请注意，此脚本仅用于教育目的，用于未经授权的活动是非法且不道德的。 CVE-2023-1718 CVE 标识符 ：CVE-2023-1718 漏洞类型 ：拒绝服务（DoS） 目标系统 ：Bitrix24 使用方法 请按照以下说明使用此脚本： 1. 将仓库克隆到本地计算机。 2. 使用以下命令安装所需的依赖项： root@kitploit: pip install aiohttp 3. 通过提供必要的命令行参数运行脚本： root@kitploit: pytho...

CVE-2023-1718

Improper file stream access in /desktopapp/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmpurl"...

CVE-2023-1718

Improper file stream access in /desktopapp/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmpurl"...

CVE-2023-1718 Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

Improper file stream access in /desktopapp/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-service via a crafted "tmpurl"...

CVE-2023-1718

Bitrix24 22.0.300 is affected by an improper file stream access in /desktop_app/file.ajax.php?action=uploadfile, enabling unauthenticated remote attackers to cause a denial-of-service via a crafted tmp_url. The issue appears to be a loop with an inaccessible exit condition in the desktop app file...