CVE-2024-25291

DeskFiler RCE إثبات مفهوم لثغرة CVE-2024-25291. deskfiler - 1.2.3 يسمح بـ Electron Webview في التطبيق، مع ما ينتج عنه من تنفيذ تعليمات برمجية عن بُعد. في هذا المستودع يوجد تطبيق مثال قابل للاستغلال وإثبات مفهوم POC لاستغلاله. كإثبات مفهوم، يوجد ملف Python يقوم بأتمتة العملية. 1. نظرة عامة على...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Exploit for Code Injection in Deskfiler

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerabi...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Code injection

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

CVE-2024-25291 affects Deskfiler v1.2.3. Multiple sources confirm that a crafted plugin upload can lead to arbitrary code execution, leveraging an Electron WebView to trigger RCE. The Red Hat and NVD entries repeat the same payload: uploading a specially crafted plugin enables code execution. The...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Deskfiler Security Vulnerability

Deskfiler is a desktop file manager. A security vulnerability exists in Deskfiler v1.2.3 that originated from allowing an attacker to execute arbitrary code by uploading a specially crafted plug-in...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...