CVE-2023-24044

배지 라이선스 MIT 설치 1. Python3 및 pip 설치 설명서 이 내용을 이해하지 못한다면 이 도구를 사용하면 안 됩니다 pip를 통한 설치 root@kitploit: pip install CVE-2023-24044 아래 명령어로 확인 CVE-2023-24044 -h 설정 2. 취약점 탐지 시 즉시 알림을 받기 위해 Telegram API와 연동하였습니다. Telegram 알림 root@kitploit: CVE-2023-24044 --chatid Telegram을 열고 @CappricioSecuritiesToolsbot...

CVE-2023-24044

A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature."...

CVE-2023-24044

A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature."...

CVE-2023-24044

A Host Header Injection issue on the Login page of Plesk Obsidian through 18.0.49 allows attackers to redirect users to malicious websites via a Host request header. NOTE: the vendor's position is "the ability to use arbitrary domain names to access the panel is an intended feature."...

CVE-2023-24044

CVE-2023-24044 affects Plesk Obsidian up to version 18.0.49. The login page is vulnerable to Host header injection, enabling open redirects to attacker‑controlled sites. Root cause appears to be reliance on the Host header to grant access or redirect, with vendor noting that arbitrary domain name...