20 matches found
CVE-2024-48827
An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...
CVE-2024-50634
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...
📄 Watcharr 1.43.0 Remote Code Execution
Watcharr versions 1.43.0 and below suffer from a remote code execution vulnerability. CVE-2024-48827 exploit by Suphawith Phusanbai Affected Watcharr version 1.43.0 and below. import argparse import requests import json import jwt from pyfiglet import Figlet f = Figletfont='slant',width=100...
Watcharr 1.43.0 - Remote Code Execution (RCE)
Exploit Title : Watcharr 1.43.0 - Remote Code Execution RCE CVE-2024-48827 exploit by Suphawith Phusanbai Affected Watcharr version 1.43.0 and below. import argparse import requests import json import jwt from pyfiglet import Figlet f = Figletfont='slant',width=100 printf.renderText'CVE-2024-4882...
CVE-2024-50634
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...
CVE-2024-50634
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...
PT-2024-34370 · Watcharr · Watcharr
Name of the Vulnerable Software and Affected Versions: Watcharr versions 1.43.0 and below Description: A vulnerability in a weak JWT token allows attackers to perform privilege escalation using a crafted JWT token. This issue is not limited to privilege escalation but also affects all functions...
CVE-2024-50634
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...
CVE-2024-50634
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...
CVE-2024-50634: Cleartext Transmission of Sensitive Information
A vulnerability in a weak JWT token in Watcharr v1.43.0 and below allows attackers to perform privilege escalation using a crafted JWT token. This vulnerability is not limited to privilege escalation but also affects all functions that require authentication...
Watcharr security vulnerabilities
Watcharr is an open source, self-hosted watchlist for all content movies, TV shows, anime, games by sbondCo Open Source. A security vulnerability exists in Watcharr v1.43.0 and earlier versions, which stems from a weak JWT token being vulnerable. An attacker can exploit a crafted JWT token for...
CVE-2024-50634
Watcharr (v1.43.0 and earlier) contains a vulnerability in a weak JWT token that enables privilege escalation and affects all functions requiring authentication. A crafted JWT token can compromise authentication and escalate privileges across the application. Affected component: JWT-based authent...
CVE-2024-48827
An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...
PT-2024-33245 · Sbondco · Sbondco Watcharr
Name of the Vulnerable Software and Affected Versions: sbondCo Watcharr version 1.43.0 Description: The issue allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function. Recommendations: For sbondCo Watcharr version 1.43.0, consider disabling the...
CVE-2024-48827
An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...
CVE-2024-48827
SbondCo Watcharr version v.1.43.0 is vulnerable to remote code execution (RCE) and privilege escalation . The flaw exists within the Change Password function, which could allow an attacker to execute arbitrary code on the system. While no specific technical root cause or patched version is provid...
CVE-2024-48827
An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...
Watcharr security vulnerabilities
Watcharr is an open source, self-hosted watchlist for all content movies, TV shows, anime, games from sbondCo Open Source. A security vulnerability exists in Watcharr version v.1.43.0, which stems from a vulnerability that could allow a remote attacker to execute arbitrary code and elevate...
CVE-2024-48827: Insufficient Session Expiration
An issue in sbondCo Watcharr v.1.43.0 allows a remote attacker to execute arbitrary code and escalate privileges via the Change Password function...