CVE-2024-24809

This repository contains a functional exploit for CVE-2024-24809, an authentication bypass and path traversal vulnerability in Traccar GPS tracking system. The exploit demonstrates user registration, login, device creation, and file upload with path traversal to achieve arbitrary file write.

This Metasploit module exploits CVE-2024-24809 and CVE-2024-31214 in Traccar v5.1-v5.12 by combining path traversal and unrestricted file upload to achieve remote code execution via cronjob manipulation.

This Metasploit module exploits CVE-2024-5910 (admin password reset) and CVE-2024-9464 (authenticated OS command injection) in Palo Alto Expedition to achieve remote code execution. It includes authentication handling, CSRF token retrieval, and command execution via cron job manipulation.