CVE-2024-23692-EXP

CVE-2024-23692-EXP bash CVE-2024-23692.sh Nuclei nuclei -list target.txt -t CVE-2024-23692.yaml -o CVE-2024-23692-result.txt...

hfs2

Introduction You can use HFS HTTP File Server to send and receive files. It's different from classic file sharing because it uses web technology. It also differs from classic web servers because it's very easy to use and runs "right out-of-the box". The virtual file system will allow you to easil...

CVE-2024-23692

CVE-2024-23692 사용법: go run hfs.go -h go run hfs.go -u http://127.0.0.1 go run hfs.go -u http://127.0.0.1 -dns //기본적으로 ceye.io 사용설정 필요 go run hfs.go -u http://127.0.0.1 -dns -d abc.cn //dnslog 지정 go run hfs.go -u http://127.0.0.1 -cmd //명령줄 진입 팁: DNSLOG 감지는 기본적으로 ceye.io를 사용합니다. 사용하려면 config 디렉토리의...

HFS2.3_poc

HFS2.3poc HFS2.3 인증되지 않은 원격 코드 실행 CVE-2024-23692 python HFS2.3poc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage: HFS2.3poc.py -h -u URL -f FILE HFS2.3...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

Rejetto HTTP File Server HFS における未認証の SSTI。 元の発見者による PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ 検証済みバージョン: 2.4.0 RC7, 2.3m 使用例: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured, defaulting to...

Rejetto HTTP File Server 2.3m - Remote Code Execution (RCE)

Exploit Title: Rejetto HTTP File Server 2.3m - Remote Code Execution RCE Fofa Dork: "HttpFileServer" && server=="HFS 2.3m" Date: 2024-09-22 Exploit Author: VeryLazyTech GitHub: https://github.com/verylazytech/CVE-2024-23692 Vendor Homepage: http://rejetto.com/hfs/ Software Link:...

Exploit for Code Injection in Rejetto Http_File_Server

This is a PoC exploit for CVE-2024-23692, a remote code executio...

Exploit for Code Injection in Rejetto Http_File_Server

HFS2.3poc HFS2.3未经身份验证的远程代码执行CVE-2024-23692 python HFS2.3...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692-poc CVE-2024-23692 is a template injection vu...

Exploit for Code Injection in Rejetto Http_File_Server

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - C...

Rejetto HTTP File Server 2.x <= 2.3m RCE (CVE-2024-23692)

The version of Rejetto HTTP File Server installed on the remote host is 2.x up to 2.3m. It is, therefore, affected by a vulnerability: - Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote,...

Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware

The Computer Emergency Response Team of Ukraine CERT-UA has alerted of a spear-phishing campaign that targeted a scientific research institution in the country with malware known as HATVIBE and CHERRYSPY. The agency attributed the attack to a threat actor it tracks under the name UAC-0063, which...

Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

Microsoft has revealed two security flaws in Rockwell Automation PanelView Plus that could be weaponized by remote, unauthenticated attackers to execute arbitrary code and trigger a denial-of-service DoS condition. "The remote code execution vulnerability in PanelView Plus involves two custom...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692-EXP bash bash CVE-2024-...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692 Usage: go run hfs.go -h !1https://git...

Exploit for Code Injection in Rejetto Http_File_Server

TG Join Us: https://t.me/WanLiChangChengWanLiChang Join us f...

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692 BURP POC GET /?n=%0A&cmd=ipconfig+/all&sea...

CVE-2024-23692

creationtimestamp| type| source ---|---|--- 2024-06-10 12:19:13+00:00| published-proof-of-concept| https://t.me/HackingInsights/2058 2024-06-11 12:26:44+00:00| published-proof-of-concept| https://t.me/paiddpam/2899 2024-06-11 17:39:00+00:00| seen|...

CVE-2024-23692

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment...

CVE-2024-23692

CVE-2024-23692 affects Rejetto HTTP File Server (HFS) versions up to 2.3m. The vulnerability is a server‑side template injection in the search parameter that is reflected into HFS templates, allowing an unauthenticated attacker to execute arbitrary commands (remote code execution). Exploitation c...