Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority. id: CVE-2024-7399 info: name: Samsung MagicINFO 9 Server 21.1050.0 - Remote Code Execution author:...

Exploit for Path Traversal in Samsung Magicinfo_9_Server

It is an offensive tool for web exploitation. This PoC exploit t...

📄 Samsung MagicINFO 9 Server Remote Code Execution

This Metasploit module exploits a remote code execution vulnerability in Samsung MagicINFO 9 Server versions less than or equal to 21.1050.0. Remote code execution can be obtained by exploiting the path traversal vulnerability CVE-2024-7399 in the SWUpdateFileUploader servlet, which can be querie...

CVE-2024-7399

creationtimestamp| type| source ---|---|--- 2025-05-05 19:18:26+00:00| seen| https://swecyb.com/users/nopatience/statuses/114456834364363723 2025-05-05 19:20:06+00:00| seen| https://swecyb.com/users/nopatience/statuses/114456841110381798 2025-05-05 20:55:28+00:00| seen|...

Samsung MagicINFO 9 Server Remote Code Execution (CVE-2024-7399)

Remote Code Execution in Samsung MagicINFO 9 Server use exploit/windows/http/magicinfo/traversal msf undefinedtraversal show actions ...actions... msf undefinedtraversal set ACTION msf undefinedtraversal show options ...show and set options... msf undefinedtraversal run class MetasploitModule...