CVE-2024-10924

CVE-2024-10924...

-CVE-2024-10924

此存储库没有 README。...

wordpress-cve-2024-10924-exploit

WordPress CVE-2024-10924 漏洞利用 📌 概述 本仓库包含针对 CVE-2024-10924 的概念验证 PoC 漏洞利用程序，该漏洞存在于 Really Simple SSL WordPress 插件中，允许绕过双因素认证 2FA。攻击者可利用此漏洞以任意有效用户 ID 登录。 🚨 警告：此漏洞利用仅用于教育和研究目的。未经授权对非你拥有的系统进行使用是违法的。 🚀 漏洞利用使用说明 前提条件： 已安装 Python 3.x 目标 WordPress 网站使用了存在漏洞的“Really Simple SSL”版本 安装： Clone 仓库： | $ git clo...

wordpress-really-simple-security-authn-bypass-vulnerable-application

wordpress-really-simple-security-authn-bypass-vulnerable-application Esta es una aplicación vulnerable para probar el exploit de la omisión de autenticación de Really Simple Security 9.1.2 CVE-2024-10924. ¡ADVERTENCIA! Esta aplicación contiene vulnerabilidades de seguridad graves. ¡Úsala bajo tu...

wordpress-really-simple-security-authn-bypass-exploit

wordpress-really-simple-security-authn-bypass-exploit 这是一个 Python3 程序，用于利用 Really Simple Security 9.1.2 的身份验证绕过漏洞（CVE-2024-10924）。 免责声明 该工具供安全工程师和应用安全（AppSec）人员用于安全评估。请负责任地使用此工具。我对任何人使用此应用程序的方式不承担任何责任。对于因使用此工具而造成的任何损害或犯下的任何罪行，我概不负责。 漏洞信息 CVE-ID ：CVE-2024-10924 链接...

Really Simple Security 9.1.1.1 - Authentication Bypass

!/usr/bin/env python3 Exploit Title: Really Simple Security 9.1.1.1 - Authentication Bypass Date: 2024-11-19 Exploit Author: Antonio Francesco Sardella Vendor Homepage: https://really-simple-ssl.com/ Software Link: https://really-simple-ssl.com/ Version: Really Simple Security Free, Pro, and Pro...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

CVE-2024-10924 CVE-2024-10924 - Authentication Bypass in Reall...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

🚀 WordPress Really Simple Security Plugin Vulnerability CVE-2...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

CVE-2024-10924 Exploit - WordPress Really Simple SSL Plugin 2F...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

WordPress CVE-2024-10924 Exploit 📌 Overview This repository...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

It is an exploit module targeting a vulnerability in a specific...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

PoC Authentication Bypass MFA Really Simple Security WordPress...

Exploit for Use of Hard-coded Credentials in Mariazevedo88 Travels-Java-Api

PoC Authentication Bypass MFA Really Simple Security WordPress...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

wordpress-really-simple-security-authn-bypass-exploit This is...

Exploit for Missing Authentication for Critical Function in Really-Simple-Plugins Really_Simple_Security

wordpress-really-simple-security-authn-bypass-vulnerable-appli...

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

A critical authentication bypass vulnerability has been disclosed in the Really Simple Security formerly Really Simple SSL plugin for WordPress that, if successfully exploited, could grant an attacker to remotely gain full administrative access to a susceptible site. The vulnerability, tracked as...

CVE-2024-10924

creationtimestamp| type| source ---|---|--- 2024-11-15 03:21:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113484817218664208 2024-11-15 06:03:04+00:00| seen| https://t.me/cvedetector/11036 2024-11-15 18:00:06+00:00| seen| https://t.me/truesecator/6438 2024-11-17 21:32:48+00:00|...

CVE-2024-10924

CVE-2024-10924 affects Really Simple Security (Free, Pro, Pro Multisite) WordPress plugin versions 9.0.0–9.1.1.1. Fault lies in improper validation of login_nonce within the two-factor REST API actions (check_login_and_get_user), enabling unauthenticated attackers to log in as any existing user (...

4,000,000 WordPress Sites Using Really Simple Security Free and Pro Versions Affected by Critical Authentication Bypass Vulnerability

Introductory Note: This is one of the more serious vulnerabilities that we have reported on in our 12 year history as a security provider for WordPress. This vulnerability affects Really Simple Security, formerly known as Really Simple SSL , installed on over 4 million websites, and allows an...

WordPress Really Simple Security Pro multisite Plugin 9.0.0-9.1.1.1 is vulnerable to Broken Authentication

Software Really Simple Security Pro multisite Type Plugin Vulnerable versions 9.0.0-9.1.1.1 Fixed in 9.1.2 OWASP Top 10 A1: Broken Access Control Classification Broken Authentication CVE CVE-2024-10924 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 976349dfad8d Credits...