nomi-sec/PoC-in-GitHub
1
0 Fork 0
mirror of https://github.com/nomi-sec/PoC-in-GitHub.git synced 2026-11-07 08:30:25 -10:00
Code Issues Packages Projects Releases Wiki Activity
Files
master
PoC-in-GitHub/2024/CVE-2024-46987.json
T

332 lines
12 KiB
JSON
Raw Permalink Blame History

[
{
"id": 1146986767,
"name": "CVE-2024-46987",
"full_name": "Goultarde\/CVE-2024-46987",
"owner": {
"login": "Goultarde",
"id": 117078126,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/117078126?v=4",
"html_url": "https:\/\/github.com\/Goultarde",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Goultarde\/CVE-2024-46987",
"description": "This Python PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0). It allows authenticated users to read sensitive server files via the MediaController. Intended for authorized security auditing and educational research only. ",
"fork": false,
"created_at": "2026-02-01T02:06:33Z",
"updated_at": "2026-10-08T15:56:54Z",
"pushed_at": "2026-05-10T15:02:14Z",
"stargazers_count": 27,
"watchers_count": 27,
"has_discussions": false,
"forks_count": 6,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 6,
"watchers": 27,
"score": 0,
"subscribers_count": 0
},
{
"id": 1148935087,
"name": "CVE-2024-46987",
"full_name": "L1337Xi\/CVE-2024-46987",
"owner": {
"login": "L1337Xi",
"id": 104053455,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/104053455?v=4",
"html_url": "https:\/\/github.com\/L1337Xi",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/L1337Xi\/CVE-2024-46987",
"description": "Path Traversal vulnerability",
"fork": false,
"created_at": "2026-02-03T14:37:59Z",
"updated_at": "2026-02-03T15:26:16Z",
"pushed_at": "2026-02-03T14:54:47Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 1,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 1,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1149503700,
"name": "CVE-2024-46987",
"full_name": "Ik0nw\/CVE-2024-46987",
"owner": {
"login": "Ik0nw",
"id": 48197340,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/48197340?v=4",
"html_url": "https:\/\/github.com\/Ik0nw",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Ik0nw\/CVE-2024-46987",
"description": null,
"fork": false,
"created_at": "2026-02-04T07:27:39Z",
"updated_at": "2026-02-04T07:27:47Z",
"pushed_at": "2026-02-04T07:27:43Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150404791,
"name": "Exploit-for-CVE-2024-46987",
"full_name": "sparrowhawk1113\/Exploit-for-CVE-2024-46987",
"owner": {
"login": "sparrowhawk1113",
"id": 135139561,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/135139561?v=4",
"html_url": "https:\/\/github.com\/sparrowhawk1113",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/sparrowhawk1113\/Exploit-for-CVE-2024-46987",
"description": "Exploit for CVE-2024-46987",
"fork": false,
"created_at": "2026-02-05T08:36:37Z",
"updated_at": "2026-02-05T18:17:15Z",
"pushed_at": "2026-02-05T18:17:12Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150496331,
"name": "CVE-2024-46987",
"full_name": "Rival420\/CVE-2024-46987",
"owner": {
"login": "Rival420",
"id": 51548322,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/51548322?v=4",
"html_url": "https:\/\/github.com\/Rival420",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/Rival420\/CVE-2024-46987",
"description": "CVE-2024-46987 - Camaleon CMS LFI Exploit",
"fork": false,
"created_at": "2026-02-05T10:51:30Z",
"updated_at": "2026-02-05T11:53:47Z",
"pushed_at": "2026-02-05T11:53:44Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1150938806,
"name": "CVE-2024-46987",
"full_name": "advaitpathak21\/CVE-2024-46987",
"owner": {
"login": "advaitpathak21",
"id": 55303152,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/55303152?v=4",
"html_url": "https:\/\/github.com\/advaitpathak21",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/advaitpathak21\/CVE-2024-46987",
"description": "Exploit created using Python",
"fork": false,
"created_at": "2026-02-05T21:37:57Z",
"updated_at": "2026-03-05T11:59:01Z",
"pushed_at": "2026-02-06T04:09:37Z",
"stargazers_count": 1,
"watchers_count": 1,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 1,
"score": 0,
"subscribers_count": 0
},
{
"id": 1153052391,
"name": "CVE-2024-46987",
"full_name": "ramzerk\/CVE-2024-46987",
"owner": {
"login": "ramzerk",
"id": 54402804,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/54402804?v=4",
"html_url": "https:\/\/github.com\/ramzerk",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/ramzerk\/CVE-2024-46987",
"description": "This Rust PoC exploits CVE-2024-46987, a Path Traversal bug in Camaleon CMS 2.8.0 < 2.8.2 (work on 2.9.0).",
"fork": false,
"created_at": "2026-02-08T20:34:56Z",
"updated_at": "2026-02-09T14:48:54Z",
"pushed_at": "2026-02-09T14:48:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1164025873,
"name": "CVE-2024-46987",
"full_name": "BLUEBERRYP1LL\/CVE-2024-46987",
"owner": {
"login": "BLUEBERRYP1LL",
"id": 173446402,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/173446402?v=4",
"html_url": "https:\/\/github.com\/BLUEBERRYP1LL",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/BLUEBERRYP1LL\/CVE-2024-46987",
"description": "PoC exploit for CVE-2024-46987 — Camaleon CMS arbitrary path traversal (file read)",
"fork": false,
"created_at": "2026-02-22T14:26:24Z",
"updated_at": "2026-02-22T18:10:54Z",
"pushed_at": "2026-02-22T18:10:51Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1170859351,
"name": "msf-cve-2024-46987",
"full_name": "bootstrapbool\/msf-cve-2024-46987",
"owner": {
"login": "bootstrapbool",
"id": 178745494,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/178745494?v=4",
"html_url": "https:\/\/github.com\/bootstrapbool",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/bootstrapbool\/msf-cve-2024-46987",
"description": "Metasploit module to exploit CVE-2024-46987 - an authenticated path traversal vulnerability in Camaleon CMS versions 2.8.0 through 2.8.2 and 2.9.0",
"fork": false,
"created_at": "2026-03-02T15:50:52Z",
"updated_at": "2026-04-15T20:19:18Z",
"pushed_at": "2026-04-15T20:19:13Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
},
{
"id": 1258822910,
"name": "HackTheBox-Facts",
"full_name": "SuriyaBoon\/HackTheBox-Facts",
"owner": {
"login": "SuriyaBoon",
"id": 277692345,
"avatar_url": "https:\/\/avatars.githubusercontent.com\/u\/277692345?v=4",
"html_url": "https:\/\/github.com\/SuriyaBoon",
"user_view_type": "public"
},
"html_url": "https:\/\/github.com\/SuriyaBoon\/HackTheBox-Facts",
"description": "HTB Facts is a Easy Linux box featuring Camaleon CMS and MinIO. Gain admin access via open registration and a mass assignment vulnerability, then extract MinIO credentials from admin settings. Use CVE-2024-46987 path traversal to steal an SSH private key, crack its passphrase, and escalate to root by abusing sudo permissions on facter via GTFOBins.",
"fork": false,
"created_at": "2026-06-04T00:34:57Z",
"updated_at": "2026-10-04T18:54:52Z",
"pushed_at": "2026-10-04T18:54:48Z",
"stargazers_count": 0,
"watchers_count": 0,
"has_discussions": false,
"forks_count": 0,
"allow_forking": true,
"is_template": false,
"web_commit_signoff_required": false,
"has_pull_requests": true,
"pull_request_creation_policy": "all",
"topics": [],
"visibility": "public",
"forks": 0,
"watchers": 0,
"score": 0,
"subscribers_count": 0
}
]
Reference in new issue View Git Blame Copy Permalink