Lucene search
K

18 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 10:43 a.m.4 views

CVE-2024-48827

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...

8.8CVSS8.1AI score0.11086EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:25 a.m.8 views

CVE-2024-50634

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...

8.8CVSS7.1AI score0.00207EPSS
Exploits1References1
Packet Storm
Packet Storm
added 2025/04/07 12:0 a.m.278 views

📄 Watcharr 1.43.0 Remote Code Execution

Watcharr versions 1.43.0 and below suffer from a remote code execution vulnerability. CVE-2024-48827 exploit by Suphawith Phusanbai Affected Watcharr version 1.43.0 and below. import argparse import requests import json import jwt from pyfiglet import Figlet f = Figletfont='slant',width=100...

8.8CVSS8.2AI score0.11086EPSS
Exploits2
Exploit DB
Exploit DB
added 2025/04/06 12:0 a.m.280 views

Watcharr 1.43.0 - Remote Code Execution (RCE)

Exploit Title : Watcharr 1.43.0 - Remote Code Execution RCE CVE-2024-48827 exploit by Suphawith Phusanbai Affected Watcharr version 1.43.0 and below. import argparse import requests import json import jwt from pyfiglet import Figlet f = Figletfont='slant',width=100 printf.renderText'CVE-2024-4882...

8.8CVSS7AI score0.11086EPSS
Exploits2
NVD
NVD
added 2024/11/08 5:15 p.m.15 views

CVE-2024-50634

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...

8.8CVSS0.00207EPSS
Exploits1References2
OSV
OSV
added 2024/11/08 5:15 p.m.8 views

CVE-2024-50634

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...

8.8CVSS7AI score0.00207EPSS
Exploits1References2
Cvelist
Cvelist
added 2024/11/08 12:0 a.m.15 views

CVE-2024-50634

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...

0.00207EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/11/08 12:0 a.m.2 views

Watcharr 安全漏洞

Watcharr is an open source, self-hosted watchlist for all content movies, TV shows, anime, games by sbondCo Open Source. A security vulnerability exists in Watcharr v1.43.0 and earlier versions, which stems from a weak JWT token being vulnerable. An attacker can exploit a crafted JWT token for...

8.8CVSS6.6AI score0.00207EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/11/08 12:0 a.m.5 views

PT-2024-34370 · Watcharr · Watcharr

Name of the Vulnerable Software and Affected Versions: Watcharr versions 1.43.0 and below Description: A vulnerability in a weak JWT token allows attackers to perform privilege escalation using a crafted JWT token. This issue is not limited to privilege escalation but also affects all functions...

8.8CVSS7.3AI score0.00207EPSS
Exploits1References9
Vulnrichment
Vulnrichment
added 2024/11/08 12:0 a.m.17 views

CVE-2024-50634

A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...

7.3AI score0.00207EPSS
Exploits1References2
CVE
CVE
added 2024/11/08 12:0 a.m.79 views

CVE-2024-50634

Watcharr (v1.43.0 and earlier) contains a vulnerability in a weak JWT token that enables privilege escalation and affects all functions requiring authentication. A crafted JWT token can compromise authentication and escalate privileges across the application. Affected component: JWT-based authent...

8.8CVSS7.1AI score0.00207EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/10/11 4:15 p.m.3 views

CVE-2024-48827

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...

8.8CVSS8.3AI score0.11086EPSS
Exploits2References3
NVD
NVD
added 2024/10/11 4:15 p.m.9 views

CVE-2024-48827

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...

8.8CVSS0.11086EPSS
Exploits2References3
CVE
CVE
added 2024/10/11 12:0 a.m.45 views

CVE-2024-48827

Summary: CVE-2024-48827 affects sbondCo Watcharr v1.43.0 and older. Multiple sources (NVD, Red Hat, OSV, CNNVD, CVE lists) describe a remote code execution and privilege escalation via the Change Password function. Public writeups/exploits (PacketStorm, Exploit-DB) show a reproducible RCE for Wat...

8.8CVSS8.2AI score0.11086EPSS
Exploits2References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/11 12:0 a.m.12 views

CVE-2024-48827

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...

8.1AI score0.11086EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2024/10/11 12:0 a.m.3 views

PT-2024-33245 · Sbondco · Sbondco Watcharr

Name of the Vulnerable Software and Affected Versions: sbondCo Watcharr version 1.43.0 Description: The issue allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function. Recommendations: For sbondCo Watcharr version 1.43.0, consider disabling the...

8.8CVSS9AI score0.11086EPSS
Exploits2References8
CNNVD
CNNVD
added 2024/10/11 12:0 a.m.2 views

Watcharr 安全漏洞

Watcharr is an open source, self-hosted watchlist for all content movies, TV shows, anime, games from sbondCo Open Source. A security vulnerability exists in Watcharr version v.1.43.0, which stems from a vulnerability that could allow a remote attacker to execute arbitrary code and elevate...

8.8CVSS7.8AI score0.11086EPSS
Exploits2References4
Cvelist
Cvelist
added 2024/10/11 12:0 a.m.12 views

CVE-2024-48827

An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...

0.11086EPSS
Exploits2References3
Rows per page
Query Builder