HackTheBox-Facts

HTB Facts — Полное прохождение Сложность: Средняя ОС: Linux Теги: Web, MinIO, Camaleon CMS, Path Traversal, SSTI, Повышение привилегий Содержание 1. Разведка 2. Веб-разведка — порт 80 3. Обнаружение MinIO — порт 54321 4. Camaleon CMS — доступ к админке 5. Повышение привилегий до роли администрато...

CVE-2024-46987

CVE-2024-46987 — Camaleon CMS Path Traversal Arbitrario Solo per valutazioni di sicurezza autorizzate, test di penetrazione e ricerca educativa. Panoramica...

CVE-2024-46987

Questo repository non contiene un README...

msf-cve-2024-46987

MSF-CVE-2024-46987 Modulo Metasploit per sfruttare CVE-2024-46987 - una vulnerabilità di path traversal autenticata in Camaleon CMS versioni = 2.8.0 e 2.9.0 Basato su questa POC di Goultarde...

Metasploit Wrap-Up 04/25/2026

Check Method Visibility Metasploit has supported check methods for many years now. It’s not always desirable to jump straight into exploiting a vulnerability but instead to determine if the target is vulnerable. Metasploit tries to be very conservative with classifying a target as “vulnerable”...

Exploit for Path Traversal in Tuzitio Camaleon_Cms

CVE-2024-46987 - Camaleon CMS Local File Inclusion Authentica...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...

CVE-2024-46987 Arbitrary path traversal in Camaleon CMS

Camaleon CMS is a dynamic and advanced content management system based on Ruby on Rails. A path traversal vulnerability accessible via MediaController's downloadprivatefile method allows authenticated users to download any file on the web server Camaleon CMS is running on depending on the file...