CVE-2023-0297 PoC — Code Injection in pyload/pyload

Source

https://github.com/Small-ears/CVE-2023-0297

Associated Vulnerability

Title: Code Injection in pyload/pyload (CVE-2023-0297)
Description:Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.

Description

poc

Readme

# pyload(CVE-2023-0297)poc
A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality.
## use
Usage of CVE-2023-0297_poc.exe:
  
    -f string
        fileName:IP.txt
  
    -u string
        example:http://127.0.0.1:8080

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!