what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from yoryio

CVE-2024-20767 Adobe Coldfusion Arbitrary File Read

Posted Aug 31, 2024

Authored by jheysel-r7, yoryio, ma4ter, Christiaan Beek | Site metasploit.com

This Metasploit module exploits an Improper Access Vulnerability in Adobe Coldfusion versions prior to version 2023 Update 6 and 2021 Update 12. The vulnerability allows unauthenticated attackers to request authentication token in the form of a UUID from the /CFIDE/adminapi/_servermanager/servermanager.cfc endpoint. Using that UUID attackers can hit the /pms endpoint in order to exploit the Arbitrary File Read Vulnerability.

tags | exploit, arbitrary

advisories | CVE-2024-20767

SHA-256 | e89b9c55f15b5bbc361d35004fa9ae593f647615c4b1b4703a7b67d828ea9ff3

Download | Favorite | View

Jenkins 2.441 / LTS 2.426.3 CVE-2024-23897 Scanner

Posted Jan 29, 2024

Authored by yoryio | Site github.com

Jenkins versions 2.441 and LTS 2.426.3 arbitrary file read scanner.

tags | exploit, arbitrary

advisories | CVE-2024-23897

SHA-256 | 0a161df23c6bac97a5923092b79fd307c231d11a8c0ec701df49569cfd362dfc

Download | Favorite | View