CVE-2025-24367-Cacti-PoC

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

monitorsfour

MonitorsFour — HackTheBox 平台： HackTheBox 操作系统： Windows 状态：已退役 — 完整演练已发布。 完整演练： l3dsec.com/walkthroughs/monitorsfour-htb 攻击链 root@kitploit: Nmap → nginx 80 + WinRM 5985 → ffuf → cacti.monitorsfour.htb Cacti → 未认证 API 端点 → 凭据 → CVE-2025-24367 Cacti RCE → www-data 权限 shell Docker → CVE-2025-9074...

CVE-2025-24367

このリポジトリには README がありません。...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit 我为 CVE-2025-24367 编写了这个小型脚本——针对 Cacti 1.2.28 版本，该脚本利用 Cacti 的漏洞获取 webshell。 脚本使用方法： root@kitploit: python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario" --password "password" 连接成功后，将在参数 danshell.php?0= 中生成一个 webshell，您可以在其中执行命令，主要是...

Exploit for Improper Neutralization of Line Delimiters in Cacti

CVE-2025-24367-WebShell Exploit CVE-2025-24367 - De Cacti, un...

Exploit for Improper Neutralization of Line Delimiters in Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository co...

Exploit for Improper Neutralization of Line Delimiters in Cacti

CVE-2025-243...

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2025-24367

creationtimestamp| type| source ---|---|--- 2025-01-27 17:20:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113901463554547835 2025-01-27 18:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdmlf7e2e 2025-01-27 18:55:22+00:00| seen|...