wgetnz

2 exploits Active since Mar 2024

CVE-2024-3094 NOMISEC CRITICAL SCANNER

xz <5.6.0 - Code Injection

Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. This results in a modified liblzma library that can be used by any software linked against this library, intercepting and modifying the data interaction with this library.

5 stars

CVSS 10.0

View Code

CVE-2024-23692 NOMISEC CRITICAL WORKING POC

Rejetto HTTP File Server - Template injection

Rejetto HTTP File Server, up to and including version 2.3m, is vulnerable to a template injection vulnerability. This vulnerability allows a remote, unauthenticated attacker to execute arbitrary commands on the affected system by sending a specially crafted HTTP request. As of the CVE assignment date, Rejetto HFS 2.3m is no longer supported.

CVSS 9.8

View Code