CVE-2024-30850

Related Files

CHAOS 5.0.8 Cross Site Scripting / Remote Command Execution

Posted May 21, 2024

Authored by h00die, chebuya | Site metasploit.com

CHAOS version 5.0.8 is a free and open-source Remote Administration Tool that allows generated binaries to control remote operating systems. The web application contains a remote command execution vulnerability which can be triggered by an authenticated user when generating a new executable. The web application also contains a cross site scripting vulnerability within the view of a returned command being executed on an agent.

tags | exploit, remote, web, xss

advisories | CVE-2024-30850, CVE-2024-31839

SHA-256 | f57ebc1eae72783c36ac9e3df7805d9879e3d1ced0b8232ea872b32518252dce

Download | Favorite | View

CHAOS RAT 5.0.1 Remote Command Execution

Posted Apr 10, 2024

Authored by chebuya

CHAOS RAT web panel version 5.0.1 is vulnerable to command injection, which can be triggered from a cross site scripting attack, allowing an attacker to takeover the RAT server.

tags | exploit, web, xss

advisories | CVE-2024-30850, CVE-2024-31839

SHA-256 | 343ca35b11570c993ed8818aa37a56638c474563d756a7ac0c8f9334b16b6ca5

Download | Favorite | View