CVE-2024-40348

CVE-2024-40348 CVE-2024-40348 Bazaar v1.4.3 및 이전 버전에 대한 POC입니다. 대상에서 /etc/passwd를 읽으려고 시도합니다. 개요 이것은 CVE-2024-40348에 대한 대량 스캔 및 익스플로잇 도구입니다: Bazaar v1.4.3는 인증되지 않은 공격자가 디렉토리 트래버설을 실행할 수 있게 합니다. 이 취약점은 4rdr에 의해 발견되었습니다. 사용 방법 최소 요구 사항 Python 3.6 이상 단일 대상: python CVE-2024-40348.py -u...

Bazaar_poc

Bazaarpoc Уязвимость произвольного чтения файлов в Bazaar v1.4.3 CVE-2024-40348 python Bazaarpoc.py -h -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

CVE-2024-40348

An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal...

Exploit for Path Traversal in Bazarr

Bazaarpoc Bazaar v1.4.3 任意文件读取漏洞CVE-2024-40348 python Baza...

Exploit for Path Traversal in Bazarr

CVE-2024-40348 POC for CVE-2024-40348 Bazaar v1.4.3 and prior...

CVE-2024-40348

creationtimestamp| type| source ---|---|--- 2024-07-20 07:15:32+00:00| seen| https://t.me/cvedetector/1241 2024-07-21 00:57:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8035 2024-07-22 00:20:35+00:00| exploited| https://t.me/TheDarkWebInformer/1822 2024-07-22 05:34:08+00:00|...

CVE-2024-40348

An issue in the component /api/swaggerui/static of Bazaar v1.4.3 allows unauthenticated attackers to execute a directory traversal...

CVE-2024-40348

The Bazarr application (version 1.4.3 and earlier) is vulnerable to an arbitrary file read vulnerability due to a directory traversal flaw in the /api/swaggerui/static component. Unauthenticated attackers can exploit this issue to read sensitive files from the server, such as /etc/passwd. Remedia...