CVE-2024-36991-Tool

CVE-2024-36991-Herramienta Este POC binario automatiza la explotación de CVE-2024-36991 mediante el envío de solicitudes curl diseñadas a una instancia vulnerable de Splunk. Recupera archivos sensibles y los guarda localmente para su posterior análisis. El script es modular, permitiendo a los...

CVE-2024-36991

CVE-2024-36991 Splunk Enterprise Windows 版中 “/Modules/Messaging/” 端点的路径遍历漏洞 在 Splunk Enterprise 版本低于 9.2.2、9.1.5 和 9.0.10 时，攻击者可在 Windows 版 Splunk Enterprise 中对 /modules/messaging/ 端点执行路径遍历。 该漏洞的存在是因为 Python 的 os.path.join 函数在路径令牌中的盘符与已构建路径的盘符匹配时，会移除该盘符。 此漏洞应仅影响 Windows 版 Splunk Enterprise。 概念验证...

EUVD-2025-9608

Malicious code in bioql PyPI...

CVE-2024-36991

In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows...

PT-2024-4601 · Splunk · Splunk Enterprise

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.2.2 Splunk Enterprise versions prior to 9.1.5 Splunk Enterprise versions prior to 9.0.10 Description: The issue is related to a path traversal vulnerability in Splunk Enterprise on Windows, which could...