exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

CVE-2024-6782

Gentoo Linux Security Advisory 202409-04

Posted Sep 23, 2024

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202409-4 - Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. Versions greater than or equal to 7.16.0 are affected.

tags | advisory, remote, vulnerability, code execution

systems | linux, gentoo

advisories | CVE-2023-46303, CVE-2024-6781, CVE-2024-6782, CVE-2024-7008, CVE-2024-7009

SHA-256 | 63f9a3d6a5bff26d14c87b2fba8c59318ca8dc99843106c3a92e3298aa4faa3b

Download | Favorite | View

Calibre 7.14.0 Remote Code Execution

Posted Sep 16, 2024

Authored by Uno13x | Site github.com

Proof of concept unauthenticated remote code execution exploit for Calibre versions 7.14.0 and below.

tags | exploit, remote, code execution, proof of concept

advisories | CVE-2024-6782

SHA-256 | 8c3200bd22a9201376c309b810720c70e5e01d5f4a8e6a5ec53a060dd8be9202

Download | Favorite | View

Calibre 7.15.0 Python Code Injection

Posted Aug 8, 2024

Authored by Michael Heinzl, Amos Ng | Site metasploit.com

This Metasploit module exploits a Python code injection vulnerability in the Content Server component of Calibre version 6.9.0 through 7.15.0. Once enabled (disabled by default), it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any authentication. The injected payload will get executed in the same context under which Calibre is being executed.

tags | exploit, tcp, python

advisories | CVE-2024-6782

SHA-256 | 2678fd269bdb79e8ada27f1f7870d0382cc42ef2fd75bd19a29cff06a2dd56c3

Download | Favorite | View