CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough

CVE-2024-24945-NGINX-RIFT---TryHackMe-Lab-Walkthrough This lab demonstrates the exploitation of CVE-2024-24945, a heap corruption vulnerability affecting NGINX. The objective was to understand how memory corruption can lead to Remote Code Execution RCE and gain practical experience in exploitatio...

CVE-2024-24945

CVE-2024-24945 describes a stored XSS in Travel Journal Using PHP and MySQL with Source Code v1.0. The vulnerability affects the “Share Your Moments” input (endpoint /travel-journal/write-journal.php), where crafted payloads can be stored and executed in a victim’s browser, allowing arbitrary web...