CVE-2024-23692-RCE-in-Rejetto-HFS

Unauthenticated RCE Flaw in Rejetto HTTP File Server CVE-2024-23692 - exploit code CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticated remote code execution RCE. This flaw enables attackers to execute arbitrary code on the server, posi...

CVE-2024-23692

CVE-2024-23692 - Rejetto HFS Remote Code Execution RCE A tactical documentation and exploit guide for CVE-2024-23692 , an unauthenticated critical Remote Code Execution RCE vulnerability affecting Rejetto HTTP File Server HFS versions prior to 2.3m. This guide leverages an In-Memory Reverse Shell...

CVE-2016-2334

Exploiting CVE-2016-2334 7zip HFS+ vulnerability hfsGenerator.py Script used to generate HFS+ file heap.js WinDbg js script. After loading script, setup allocation hook in the following way: bp ntdll!RtlAllocateHeap "pt "dx Debugger.State.Scripts.heap.Contents.handleRtlHeapAlloc;g"" Next you can...

Rejetto-HTTP-File-Server-HFS-2.3.x---Remote-Command-Execution

Rejetto HTTP File Server HFS 2.3.x - Remote Command Execution CVE-2014-6287 Rewrite of Pergyz 49584.py to return an x64 PowerShell Reverse Shell Usage $ python3 hfs-2-3-exploit.py Supply variables when prompted, auto starts Netcat for you...

Rejetto HTTP File Server - Template injection

This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. id: CVE-2024-23692 info: name: Rejetto HTTP File Server - Template injection author: johnk3r severity: critical description: | This...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 A write up on the Steel Mountain box from TryHackMe.com and exploit for CVE-2014-6287 Credits I take no credit for the original discovery and exploitation of this vulnerability. Thank you to the following people! Discovery: Daniele Linguaglossa Metasploit Module...

CVE-2024-23692

POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 Overview POC - Unauthenticated RCE Flaw in Rejetto HTTP File Server - CVE-2024-23692 CVE-2024-23692 - YouTube CVE-2024-23692 is a critical vulnerability in Rejetto HTTP File Server HFS version 2.3m, allowing unauthenticat...

netbsd_hfs

NetBSD hfs local overflow Bug details: root@kitploit: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the siz...

HFS2.3_poc

HFS2.3poc HFS2.3 Unauthenticated Remote Code Execution CVE-2024-23692 python HFS2.3poc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | / .'. | | '--' '--' --' '--' '--' --' usage:...

EUVD-2026-85880

HFS2 version 2.4.0 and earlier contains an unauthenticated arbitrary file access vulnerability that allows unauthenticated attackers to read, write, append, and delete files anywhere the HFS service account has filesystem access outside the shared folder. Attackers can exploit the macro...

CVE-2024-23692

Rejetto HTTP File Server HFS Unauthorized RCE Vulnerability Reproduction CVE-2024-23692 Introduction Rejetto HTTP File Server HFS is a lightweight HTTP file server widely used for file sharing and file transfer. CVE-2024-23692 is a template injection vulnerability that allows a remote,...

Rejetto-HFS-2.x-RCE-CVE-2024-23692

An unauth SSTI in the Rejetto HTTP File Server HFS. Original finder PoC: https://mohemiv.com/all/rejetto-http-file-server-2-3m-unauthenticated-rce/ Tested against versions: 2.4.0 RC7, 2.3m Example usage: root@kitploit: msf6 use exploit/windows/http/rejettohfsrcecve202423692 No payload configured,...

CVE-2014-6287

CVE-2014-6287 - Rejetto HTTP File Server RCE Exploit A Rust implementation of the CVE-2014-6287 exploit targeting Rejetto HTTP File Server HFS versions 2.3x before 2.3c. Vulnerability Overview CVE-2014-6287 is a critical remote code execution vulnerability in Rejetto HTTP File Server HFS. Technic...

HFS_EXPLOIT_PROJECT

HFSEXPLOITPROJECT Metasploit RCE on HFS 2.3 - CVE-2014-62 🔖 Title of the Project root@kitploit: Remote Code Execution via HTTP File Server HFS 2.3 ⚙ Tools Used • Kali Linux • Nmap • Metasploit • Target: HFS 2.3 on Windows 7 🔐 Vulnerability Details • Name: CVE-2014-6287 • Type: Remote Code Executi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-002120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002120 advisory. A vulnerability in the filesystem image parser for Hierarchical File System Plus HFS+ of ClamAV could allow an unauthenticated, remote attacker to cause a denial of...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: clamav (UTSA-2023-001071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001071 advisory. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamAV versions 1.0.0...

Node.js-CVE-2024-39943

Node.js HFS Command Execution Vulnerability CVE-2024-39943 White Hat School 3rd – Jeongmin Noh @JenmrR Summary In a Node.js-based HFS server environment, there is a vulnerability where the content of an uploaded file is executed via childprocess.execSync. An attacker can directly execute OS...

CVE-2024-23692-exp

CVE-2024-23692-exp CVE-2024-23692 exp HFS 2.4 RC7...

CVE-2024-23692-RCE

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POC CVE-2024-23692-RCE-EXP CVE-2024-23692 Rejetto HTTP HFS Server RCE FOFA "HttpFileServer" Notes Affected range: HFS 2.3 and below Usage How To Use ulimit -n 999999; zmap -p PORT -B500M | go...

CVE-2024-23692

Rejetto HFS HTTP File Server CVE-2024-23692 Vulnerability Overview Rejetto HFS HTTP File Server is a simple web file server that facilitates file sharing over a network or the internet. Despite its ease of use and simplicity, a critical vulnerability CVE-2024-23692 has been discovered, making the...