Vulnerability in Litespeedtech Litespeed Cache
CVSS Skor
9.8
EPSS İhtimal
%68.3
Risk Skoru
6.7
Yayın
2 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
Hands-on reproduction of CVE-2024-28000 in LiteSpeed Cache using an isolated WordPress lab. Includes reconnaissance, vulnerable hash recovery, Administrator privilege escalation proof, cleanup, and remediation-focused documentation.
Hands-on exploit lab for CVE-2024-28000 — unauthenticated privilege escalation in LiteSpeed Cache (WordPress plugin, <=6.3.0.1). Spins up a vulnerable environment with Docker and includes a Go-based brute-forcer that cracks the weak mt_rand hash to create an administrator account.
LiteSpeed Cache Privilege Escalation PoC - CVE-2024-28000
PoC for the CVE-2024 Litespeed Cache Privilege Escalation
CVE-2024-28000 Exploit for litespeed-cache =<6.3 allows Privilege Escalation with creation of administrator account
CVE-2024-28000 LiteSpeed Cache Privilege Escalation Scan&Exp
Litespeed Cache WordPress Plugin 6.3.0.1 - Privilege Escalation
Nuclei: WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin
İlgili Benzer Açıklar
Vulnerability in LiteSpeed Technologies cPanel Plugin
Vulnerability in Litespeedtech Litespeed Cpanel Plugin
LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content
Vulnerability in Litespeedtech LiteSpeed Web Server
LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes
LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-28000"