CVE-2024-23346

root@kitploit: /bin/python3.11 exploit.py -t -u -p -l...

CVE-2024-23346-rust-exploit

CVE-2024-23346 के लिए एक रस्ट शोषण स्क्रिप्ट। जैसा कि नीचे दिखाया गया है, POC कोड इंजेक्शन कमजोरी का उपयोग करता है और टर्मिनल की तरह दूरस्थ शेल कमांड चलाता है। poc.webm शोषण चलाने के चरण: सीधे Cargo से चलाएँ cargo run -- --help cargo run -- --target http://10.10.11.38 --username "Admin" --passwor...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

CVE-2024-23346-exploit This is a exploit for the known Remote...

Pymatgen 2024.1 - Remote Code Execution (RCE)

Exploit Title : Pymatgen 2024.1 - Remote Code Execution RCE Google Dork : not applicable Date : 2024-11-13 Exploit Author : Mohammed Idrees Banyamer Vendor Homepage : https ://pymatgen.org Software Link : https ://pypi.org /project /pymatgen/ Version : 2024.1 Tested on : Kali Linux 2024.1 CVE :...

📄 Pymatgen 2024.1 Remote Code Execution

Pymatgen version 2024.1 suffers from a remote code execution vulnerability. Exploit Title : Pymatgen 2024.1 - Remote Code Execution RCE Google Dork : not applicable Date : 2024-11-13 Exploit Author : Mohammed Idrees Banyamer Vendor Homepage : https ://pymatgen.org Software Link : https ://pypi.or...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

A Rust exploitation script for CVE-2024-23346. As shown below t...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

CVE-2024-23346 This PoC is based on the report/findings of Wil...

Exploit for Command Injection in Materialsvirtuallab Pymatgen

!imagehttps://github.com/user-attac...

Debian dsa-5763 : python-pymatgen-doc - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5763 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5763-1 [email protected] https://www.debian.org/security/ Moritz...

CVE-2024-23346

CVE-2024-23346 affects pymatgen: the JonesFaithfulTransformation.from_transformation_str() method insecurely uses eval() on untrusted input, enabling arbitrary code execution during CIF parsing. This is tied to a vulnerability in the CIF parser path and is documented as a critical issue with a fi...

CVE-2024-23346

creationtimestamp| type| source ---|---|--- 2024-02-21 15:45:42+00:00| published-proof-of-concept| https://github.com/materialsproject/pymatgen/security/advisories/GHSA-vgv8-5cpj-qj2f 2024-02-21 18:31:23+00:00| seen| https://t.me/ctinow/189897 2024-02-21 18:36:14+00:00| seen|...