Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-46506 PoC — NetAlertX 安全漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46506.yaml
Associated Vulnerability
Title:NetAlertX 安全漏洞 (CVE-2024-46506)
Description:NetAlertX是jokob-sk个人开发者的一个网络入侵者和存在检测器。 NetAlertX 23.01.14至24.10.12之前版本存在安全漏洞，该漏洞源于未经验证的命令注入，可能导致任意命令执行。
Description
NetAlertX 23.01.14 through 24.x before 24.10.12 allows unauthenticated command injection via settings update because function=savesettings lacks an authentication requirement, as exploited in the wild in May 2025. This is related to settings.php and util.php.
File Snapshot

 id: CVE-2024-46506

info:
  name: NetAlertX 23.01.14–24.x < 24.10.12 - Remote Code Execution
  autho

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.