CVE-2024-1651 PoC — Torrentpier 2.4.1 - RCE

Source

https://github.com/hy011121/CVE-2024-1651-exploit-RCE

Associated Vulnerability

Title: Torrentpier 2.4.1 - RCE (CVE-2024-1651)
Description:Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.

Description

(Mirorring)

Readme

![GIF](https://media2.giphy.com/media/gkRApEeHSBlOU/giphy.gif?cid=ecf05e47fq2u1mlh9ws8h6ecidipdqek3mrqubguab6e9bh9&ep=v1_gifs_related&rid=giphy.gif)

Дырка в Torrentpier v2.4.1, приложение уязвимо к небезопасной десериализации, поэтому - позволяет выполнять произвольные команды на сервере.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →