Exploit for CVE-2024-55555

Laravel Crypto Killer Mass Scanner CVE-2024-55555 This scri...

CVE-2024-55555

creationtimestamp| type| source ---|---|--- 2025-01-07 16:43:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113788073120387147 2025-01-07 17:16:05+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65na7d5v2m 2025-01-07 17:48:50+00:00| seen|...

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...

CVE-2024-55555

In versions prior to 5.10.43 , Invoice Ninja is vulnerable to unauthenticated remote code execution (RCE) via a PHP deserialization flaw. The vulnerability exists in the route/{hash} route (defined in invoiceninja/routes/client.php), which allows unauthenticated access. An attacker who possesses ...

CVE-2024-55555

Invoice Ninja before 5.10.43 allows remote code execution from a pre-authenticated route when an attacker knows the APPKEY. This is exacerbated by .env files, available from the product's repository, that have default APPKEY values. The route/hash route defined in the invoiceninja/routes/client.p...