CVE-2024-37032

This repository contains a functional exploit for CVE-2024-37032, demonstrating a path traversal vulnerability in Ollama via a rogue registry server. The PoC includes a server that serves malicious manifests and a client script to trigger the vulnerability.

This repository contains a functional exploit for CVE-2024-37032 and CVE-2024-45436, targeting Ollama. The exploit leverages a path traversal vulnerability to upload a malicious shared object file, which is then executed to achieve remote code execution (RCE).

This repository contains a Python-based scanner that checks for vulnerable versions of Ollama by querying the /api/version endpoint and comparing the version against the patched version (0.1.34). It uses multithreading to scan an entire subnet for vulnerable instances.

This Metasploit module exploits CVE-2024-37032, a path traversal vulnerability in Ollama before 0.1.34, by setting up a rogue OCI registry to serve malicious models that write arbitrary files (including a shared library and ld.so.preload) and achieve remote code execution.