Exploitation Summary
EIP tracks 6 public exploits for CVE-2024-37742. PoCs published by Aar0nD0m1n1c, tungdn9988.
AI-analyzed exploit summary This repository contains a functional PoC exploit for CVE-2024-37742, which leverages incorrect access control in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows to share clipboard data between the SEB kiosk mode and the underlying system. The exploit uses Python scripts to monitor clipboard content and retrieve answers from a JSON file or Gemini API, bypassing exam controls.
Description
Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity. By exploiting this flaw, an attacker can bypass exam controls and gain an unfair advantage during exams.
Exploits (6)
This repository contains a functional PoC exploit for CVE-2024-37742, which leverages incorrect access control in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows to share clipboard data between the SEB kiosk mode and the underlying system. The exploit uses Python scripts to monitor clipboard content and retrieve answers from a JSON file or Gemini API, bypassing exam controls.
The repository contains only a README with a title in Vietnamese but no actual exploit code or technical details. It appears to be a placeholder or incomplete submission.
This repository contains a functional PoC for CVE-2024-37742, exploiting a clipboard access control vulnerability in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows. The exploit uses pyperclip to manipulate clipboard data and WMI to monitor battery status as a trigger for answer retrieval from a JSON file or Gemini API.
This repository contains a functional PoC for CVE-2024-37742, exploiting a clipboard access control vulnerability in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows. The exploit uses pyperclip to manipulate clipboard data and WMI to monitor battery status as a trigger for answer retrieval from a JSON file or Gemini API.
This repository contains a functional PoC for CVE-2024-37742, exploiting a clipboard access control vulnerability in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows. The exploit uses pyperclip to manipulate clipboard data and WMI to monitor battery status as a trigger for answer retrieval from a JSON file or Gemini API.
This repository contains a functional PoC for CVE-2024-37742, exploiting a clipboard access control vulnerability in Safe Exam Browser (SEB) ≤ 3.5.0 on Windows. The exploit uses pyperclip to manipulate clipboard data and WMI to monitor battery status as a trigger for answer retrieval from a JSON file or Gemini API.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N