CVE-2024-57609

Kanaries에서의 오픈 리다이렉트 취약점 공급업체 홈페이지: https://kanaries.net/ PoC 동영상: https://drive.google.com/file/d/1kqfbmx1W6UgSs56gOLOsUFiGcvKrIyW9/view?usp=sharing 단계별 익스플로잇 가이드 1. 웹사이트 방문 Kanaries 웹사이트로 이동합니다. 2. 로그인/회원가입 시작 홈페이지에서 "로그인 / 회원가입" 버튼을 클릭합니다. 이렇게 하면 다음으로 리다이렉트됩니다:...

EUVD-2024-53644

Malicious code in bioql PyPI...

CVE-2024-57609

An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirectpath parameter of the login redirection function...

CVE-2024-57609

An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirectpath parameter of the login redirection function...

CVE-2024-57609

An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirectpath parameter of the login redirection function...

CVE-2024-57609

An issue in Kanaries Inc Pygwalker before v.0.4.9.9 allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirectpath parameter of the login redirection function...

PT-2025-5878 · Kanaries · Pygwalker

Name of the Vulnerable Software and Affected Versions: Kanaries Inc Pygwalker versions prior to 0.4.9.9 Description: The issue allows a remote attacker to obtain sensitive information and execute arbitrary code via the redirect path parameter of the login redirection function. Recommendations: Fo...

CVE-2024-57609

CVE-2024-57609 affects Kanaries Inc Pygwalker before 0.4.9.9. The issue resides in the login redirection function, via the redirect_path parameter, enabling a remote attacker to obtain sensitive information and execute arbitrary code. CVSSv3.1 base score 8.6 (high) with network access, no user in...