Out-of-bounds write in The GNU C Library Glibc
CVSS Skor
7.3
EPSS İhtimal
%88.3
Risk Skoru
6.4
Yayın
2 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
CVE-2024-2961 (CNEXT) PHP file-read to RCE exploit adapted to an XXE/CTF channel
CVE-2022-31626, CVE-2024-2961, CVE-2019-6977, PHP security research
PHP RCE CVE-2024-2961 Nucleus Hackathon Demo
Full-chain exploit combining PHP filter chain injection with CVE-2024-2961 (CNEXT) for unauthenticated Remote Code Execution on vulnerable osTicket installations.
This script demonstrates a proof-of-concept (PoC) for exploiting a file read vulnerability in the iconv library, as detailed in Ambionics Security's blog https://www.ambionics.io/blog/iconv-cve-2024-2961-p1.
CVE-2024-2961 Cnext RCE Exploit with Buddyforms 2.7.7
Exploit for CVE-2023-26326 in the WordPress BuddyForms plugin, leveraging CVE-2024-2961 for remote code execution. This exploit bypasses PHP 8+ deserialization limitations by chaining vulnerabilities with php://filter.
Uses CVE-2024-2961 to perform an arbitrary file read
İlgili Benzer Açıklar
nscd: Stack-based buffer overflow in netgroup cache
nscd: netgroup cache may terminate daemon on memory allocation failure
nscd: Null pointer crashes after notfound response
scanf %mc off-by-one heap buffer overflow
iconv crash due to assertion failure with untrusted input
Potential buffer under-read in ungetwc
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-2961"