CVE-2023-34634

Related Files

Greenshot 1.3.274 Deserialization / Command Execution

Posted Aug 17, 2023

Authored by bwatters-r7, p4r4bellum | Site metasploit.com

There exists a .NET deserialization vulnerability in Greenshot versions 1.3.274 and below. The deserialization allows the execution of commands when a user opens a Greenshot file. The commands execute under the same permissions as the Greenshot service. Typically, it is the logged in user.

tags | exploit

advisories | CVE-2023-34634

SHA-256 | 417583375a798246fd4576d2e33b79c589cc0fa3d06430926abf50d5142f368a

Download | Favorite | View

GreenShot 1.2.10 Arbitrary Code Execution

Posted Jul 31, 2023

Authored by p4r4bellum

GreenShot version 1.2.10 suffers from an insecure deserialization arbitrary code execution vulnerability.

tags | exploit, arbitrary, code execution

advisories | CVE-2023-34634

SHA-256 | b26edbfe421934dee223c0345040828fff445263bcf0bca848f9ee4110b474ef

Download | Favorite | View