CVE-2024-24590 PoC — Allegro 代码问题漏洞

Source

https://github.com/DemonPandaz2763/CVE-2024-24590

Associated Vulnerability

Title:Allegro 代码问题漏洞 (CVE-2024-24590)
Description:Allegro是Allegro开源的一个主要针对视频游戏和多媒体编程的跨平台库。 Allegro AI ClearML 0.17.0版本及之后版本存在代码问题漏洞，该漏洞源于不可信数据反序列化。攻击者利用该漏洞可以执行任意代码。

Description

Another CVE-2024-24590 poc

Readme

NOTE: this cve was not found by me, i'm simply reuploading a poc. The original documentation can be found here: https://hiddenlayer.com/research/not-so-clear-how-mlops-solutions-can-muddy-the-waters-of-your-supply-chain/

Make sure to change the netcat payload in the script. You may need a clearml agent.

File Snapshot


 [4.0K]  /data/pocs/f75747cc6047b197ddd7a4fe6efec38e57d344c3
├── [ 424]  exploit.py
└── [ 306]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!