19 matches found
CVE-2023-43364-Searchor-RCE-Exploit
CVE-2023-43364 – Searchor RCE Exploit PoC Remote Code Execution RCE via unsafe eval usage in Searchor 2.4.2 Overview This project demonstrates exploitation of CVE-2023-43364 , a Remote Code Execution RCE vulnerability affecting the Python package Searchor 2.4.2. The issue is caused by unsafe usag...
CVE-2023-43364-Exploit-CVE
CVE-2023-43364-Exploit-CVE Este es un script de Python para explotar Searchor 2.4.0: la función eval fue implementada de forma insegura y puede ser explotada para RCE. Esta máquina depende de que busybox esté instalado, ya que escribí esto para la máquina Busqueda de HackTheBox. Simplemente...
Searchor-2.4.1-RCE-Exploit-PoC
Searchor-2.4.1-...
CVE-2023-43364
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
Exploit for Injection in Arjunsharda Searchor
CVE-2023-43364-Exploit-CVE This is a python script to exploit...
CVE-2023-43364
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
CVE-2023-43364
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
PYSEC-2023-262
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
Remote code execution
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
PYSEC-2023-262
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
Searchor Security Breach
Searchor is an all-in-one PyPi Python library by Arjun Sharda, an individual developer. It simplifies web crawling, fetching topic information, and generating search query URLs. A security vulnerability exists in Searchor prior to version 2.4.2, which is caused by a code execution vulnerability i...
CVE-2023-43364
CVE-2023-43364 affects Searchor prior to 2.4.2. main.py uses eval on CLI input, enabling potential remote code execution. Multiple sources (Red Hat, OSV, GHSA, and others) corroborate a pre-2.4.2 vulnerability in the Searchor CLI. Impact is described as code execution with high severity; exploit ...
CVE-2023-43364
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
CVE-2023-43364
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution...
Arbitrary Code Execution
searchor is vulnerable to Arbitrary Code Execution. The vulnerability is due to the search function in main.py which uses eval to dynamically construct the method call and execute it. An attacker can construct malicious input to the variables engine, query, copy, open which can leads to Code...
GHSA-66M2-493M-CRH2 Searchor CLI's Search vulnerable to Arbitrary Code using Eval
An issue in Arjun Sharda's Searchor before version v.2.4.2 allows an attacker to execute arbitrary code via a crafted script to the eval function in Searchor's src/searchor/main.py file, affecting the search feature in Searchor's CLI Command Line Interface. Impact Versions equal to, or below 2.4....
Searchor CLI's Search vulnerable to Arbitrary Code using Eval
An issue in Arjun Sharda's Searchor before version v.2.4.2 allows an attacker to execute arbitrary code via a crafted script to the eval function in Searchor's src/searchor/main.py file, affecting the search feature in Searchor's CLI Command Line Interface. Impact Versions equal to, or below 2.4....
PT-2023-28807 · Searchor · Searchor
Name of the Vulnerable Software and Affected Versions: Searchor versions prior to 2.4.2 Description: The issue allows an attacker to execute arbitrary code via a crafted script to the eval function in Searchor's main.py file, affecting the search feature in Searchor's Command Line Interface. This...