CVE-2024-23346-rust-exploit

A Rust exploitation script for CVE-2024-23346. As shown below the POC uses the code injection vulnerability and runs remote shell commands like in a Terminal. poc.webm Steps to run the exploit: Run directly with Cargo cargo run -- --help cargo run -- --target http://10.10.11.38 --username "Admin"...

CVE-2024-23346

/bin/python3.11 exploit.py -t -u -p -l...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

CVE-2024-23346-exploit This is a exploit for the known Remote...

📄 Pymatgen 2024.1 Remote Code Execution

Pymatgen version 2024.1 suffers from a remote code execution vulnerability. Exploit Title : Pymatgen 2024.1 - Remote Code Execution RCE Google Dork : not applicable Date : 2024-11-13 Exploit Author : Mohammed Idrees Banyamer Vendor Homepage : https ://pymatgen.org Software Link : https ://pypi.or...

Pymatgen 2024.1 - Remote Code Execution (RCE)

Exploit Title : Pymatgen 2024.1 - Remote Code Execution RCE Google Dork : not applicable Date : 2024-11-13 Exploit Author : Mohammed Idrees Banyamer Vendor Homepage : https ://pymatgen.org Software Link : https ://pypi.org /project /pymatgen/ Version : 2024.1 Tested on : Kali Linux 2024.1 CVE :...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

A Rust exploitation script for CVE-2024-23346. As shown below t...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

CVE-2024-23346 This PoC is based on the report/findings of Wil...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

!imagehttps://github.com/user-attac...

Debian dsa-5763 : python-pymatgen-doc - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5763 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5763-1 [email protected] https://www.debian.org/security/ Moritz...

ai2-kit (>=0.2.0, <=0.25.3), ai2-wmd (0.0.1) +6 more potentially affected by CVE-2024-23346 via pymatgen (2023.12.18)

pymatgen PYPI version 2023.12.18 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - ai2-kit =0.2.0, =0.1.0, =7.9.3a0, =0.1.2, =0.2.2 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

aiida-abinit (0.5.0), crescendo (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2024-23346 via pymatgen (2023.9.10)

pymatgen PYPI version 2023.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - aiida-abinit 0.5.0 - crescendo =0.0.1, =0.69.1, =0.1.10, =0.1.11 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

lobsterpy (0.2.3) potentially affected by CVE-2024-23346 via pymatgen (2022.8.23)

pymatgen PYPI version 2022.8.23 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - lobsterpy 0.2.3 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

aiida-fleur (>=1.1.2, <=1.1.3), dpdata (0.1.2) +2 more potentially affected by CVE-2024-23346 via pymatgen (2023.6.28)

pymatgen PYPI version 2023.6.28 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - aiida-fleur =1.1.2, =2019.6.14, =0.0.7, =0.1.0 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

shakenbreak (22.11.7) potentially affected by CVE-2024-23346 via pymatgen (2022.10.22)

pymatgen PYPI version 2022.10.22 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - shakenbreak 22.11.7 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

fplore (>=0.4.0a1, <=0.6.1) potentially affected by CVE-2024-23346 via pymatgen (2022.5.26)

pymatgen PYPI version 2022.5.26 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - fplore =0.4.0a1, =0.6.1 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

pymatgen-analysis-defects (>=2022.7.19, <=2022.8.15) potentially affected by CVE-2024-23346 via pymatgen (2022.7.19)

pymatgen PYPI version 2022.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - pymatgen-analysis-defects =2022.7.19, =2022.8.15 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

ai2-kit (>=0.25.4, <=1.0.2), catflow (>=0.4.0, <=0.5.1) +6 more potentially affected by CVE-2024-23346 via pymatgen (2023.9.25)

pymatgen PYPI version 2023.9.25 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - ai2-kit =0.25.4, =0.4.0, =0.11.10, =0.39.7, =0.2.0, =0.3.2, =0.0.1, =0.0.2 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-Q...

aiida-common-workflows (0.1.0), octadist (3.0.0) potentially affected by CVE-2024-23346 via pymatgen (2021.3.3)

pymatgen PYPI version 2021.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - aiida-common-workflows 0.1.0 - octadist 3.0.0 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

abipy (0.5.0) potentially affected by CVE-2024-23346 via pymatgen (2018.6.11)

pymatgen PYPI version 2018.6.11 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - abipy 0.5.0 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...

simmate (0.12.0) potentially affected by CVE-2024-23346 via pymatgen (2022.9.8)

pymatgen PYPI version 2022.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - simmate 0.12.0 Source cves: CVE-2024-23346 Source advisory: OSV:GHSA-VGV8-5CPJ-QJ2F...