CVE-2023-43364

CRITICAL

searchor < 2.4.2 - Remote Code Execution via CLI Input

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 5 public exploits for CVE-2023-43364. PoCs published by jonathan-corbin, Herick-Costa, Kl3lCrypt.

AI-analyzed exploit summary This repository contains a functional exploit for CVE-2023-43364, an unauthenticated code execution vulnerability in Searchor <= 2.4.0. The exploit leverages an eval() injection in the query parameter to achieve remote command execution via a crafted payload.

Description

main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

Exploits (5)

github WORKING POC
by jonathan-corbin · pythonpoc
https://github.com/jonathan-corbin/htb-cve-pocs/tree/main/CVE-2023-43364_searchor-eval-rce

This repository contains a functional exploit for CVE-2023-43364, an unauthenticated code execution vulnerability in Searchor <= 2.4.0. The exploit leverages an eval() injection in the query parameter to achieve remote command execution via a crafted payload.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Searchor <= 2.4.0
No auth needed
Prerequisites: Target running Searchor with a web wrapper exposing the /search endpoint · Network access to the target
mistral-large-3 · analyzed Jul 01, 2026 Full analysis →
nomisec WORKING POC
by Herick-Costa · poc
https://github.com/Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit

The repository contains a functional exploit for CVE-2023-43364, demonstrating RCE in Searchor < 2.4.2 via unsafe `eval()` usage. The PoC includes multiple payloads for command execution and reverse shells.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Searchor < 2.4.2
No auth needed
Prerequisites: Target running Searchor < 2.4.2 · Network access to the target
mistral-large-3 · analyzed Jun 30, 2026 Full analysis →
github WORKING POC
by Kl3lCrypt · pythonpoc
https://github.com/Kl3lCrypt/cve-exploits/tree/main/CVE-2023-43364

The repository contains a functional exploit for CVE-2023-43364, which targets a critical RCE vulnerability in Searchor CLI (≤2.4.1) due to unsafe use of `eval()`. The exploit crafts a malicious payload to achieve remote code execution via a reverse shell.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Searchor CLI (≤2.4.1)
No auth needed
Prerequisites: Network access to the target service · Python environment to run the exploit · Listener (e.g., netcat) for reverse shell
mistral-large-3 · analyzed Feb 27, 2026 Full analysis →
nomisec WORKING POC
by libertycityhacker · poc
https://github.com/libertycityhacker/CVE-2023-43364-Exploit-CVE

This repository contains a functional Python exploit for CVE-2023-43364, targeting an insecure eval() implementation in Searchor 2.4.0. The exploit crafts a malicious payload to achieve RCE via a reverse shell using busybox.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Searchor 2.4.0
No auth needed
Prerequisites: Busybox installed on target · Network connectivity to attacker's listener
mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

Scores

CVSS v3 9.8
EPSS 0.0256
EPSS Percentile 83.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-74 CWE-94
Status published
Products (2)
arjunsharda/searchor < 2.4.2
pypi/searchor 0 - 2.4.2PyPI
Published Dec 12, 2023
Tracked Since Feb 18, 2026