CVE-2025-24367-Cacti-PoC

CVE-2025-24367 - Cacti Authenticated Graph Template RCE Usage & Safety Important — Read this first: This repository and exploit.py are provided for educational and research purposes only. Do not use this code against systems, networks, or services for which you do not have explicit, written...

CVE-2025-24367

This repository does not have a README...

CVE-2025-24367-Cacti-Exploit

CVE-2025-24367-WebShell Exploit I have created this small script for CVE-2025-24367 - From Cacti, a script made to obtain a webshell thanks to the vulnerability in cacti version 1.2.28. Script usage: python CVE-2025-24367-Exploit.py --url "http://webEjemplo.htb/cacti/" --user "usuario" --password...

monitorsfour

MonitorsFour — HackTheBox プラットフォーム: HackTheBox OS: Windows ステータス: リタイア済み — 完全なウォークスルー公開中。 完全なウォークスルー: l3dsec.com/walkthroughs/monitorsfour-htb 攻撃チェーン root@kitploit: Nmap → nginx 80 + WinRM 5985 → ffuf → cacti.monitorsfour.htb Cacti → 認証不要のAPIエンドポイント → 認証情報 → CVE-2025-24367 Cacti RCE → www-data...

Exploit for Improper Neutralization of Line Delimiters in Cacti

CVE-2025-24367-WebShell Exploit CVE-2025-24367 - De Cacti, un...

Exploit for Improper Neutralization of Line Delimiters in Cacti

Cacti CVE-2025-24367 Authenticated RCE PoC This repository co...

Exploit for Improper Neutralization of Line Delimiters in Cacti

CVE-2025-243...

CVE-2025-24367

Cacti is an open source performance and fault management framework. An authenticated Cacti user can abuse graph creation and graph template functionality to create arbitrary PHP scripts in the web root of the application, leading to remote code execution on the server. This vulnerability is fixed...

CVE-2025-24367

creationtimestamp| type| source ---|---|--- 2025-01-27 17:20:06+00:00| seen| https://infosec.exchange/users/cve/statuses/113901463554547835 2025-01-27 18:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqkdmlf7e2e 2025-01-27 18:55:22+00:00| seen|...