CVE-2024-25291

DeskFiler RCE CVE-2024-25291 漏洞的概念验证。 deskfiler - 1.2.3 允许在应用程序中使用 Electron webview，从而导致远程代码执行。 此仓库包含一个存在漏洞的示例应用程序及其概念验证（POC）利用代码。 作为 PoC，提供了一个自动执行该过程的 Python 文件。 1. 漏洞概述： 漏洞主题：通过 RCE 进行开放重定向 漏洞版本：deskfiler-1.2.3 问题表现：Electron Webview 攻击类型：远程代码执行 攻击向量：要利用漏洞，必须有人打开插件。 保留的 CVE 编号：CVE-2024-25291 2...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Exploit for Code Injection in Deskfiler

DeskFiler RCE A Proof-Of-Concept for CVE-2024-25291 vulnerabi...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Code injection

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

Deskfiler v1.2.3 is vulnerable to Remote Code Execution (RCE) due to an Electron Webview flaw. The vulnerability allows an attacker to achieve RCE by forcing the application to access an external link through a Webview, which can then connect to an attacker-controlled server. A practical attack v...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

Deskfiler Security Vulnerability

Deskfiler is a desktop file manager. A security vulnerability exists in Deskfiler v1.2.3 that originated from allowing an attacker to execute arbitrary code by uploading a specially crafted plug-in...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...

CVE-2024-25291: Improper Control of Generation of Code

Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...