CVE-2024-41713

This repository contains a functional exploit for CVE-2024-41713, an authentication bypass vulnerability in Mitel MiCollab. The exploit leverages a path traversal technique to achieve arbitrary file read by crafting a malicious XML payload sent to a vulnerable endpoint.

This repository contains a functional exploit for CVE-2024-41713, an authentication bypass vulnerability in Mitel MiCollab leading to arbitrary file read. The exploit uses a crafted POST request to read /etc/passwd via path traversal in the ReconcileWizard endpoint.

The repository contains a Python script that scans for CVE-2024-41713, a directory traversal vulnerability in Apache HTTP Server. It sends a crafted request to detect the vulnerability but does not exploit it.

This repository contains a functional exploit for CVE-2024-41713, targeting Mitel MiCollab. The exploit leverages a path traversal vulnerability to read arbitrary files (e.g., /etc/passwd) via a crafted HTTP POST request with XML payload.

This repository contains a functional exploit for CVE-2024-41713, an arbitrary file read vulnerability in Mitel MiCollab's NuPoint Unified Messaging (NPM) component. The exploit leverages path traversal and authentication bypass to read sensitive files like /etc/passwd.

The repository contains functional exploit code for CVE-2024-41713, demonstrating a command execution vulnerability in OpenCode. The script sends a crafted request to execute the 'id' command and checks for the presence of 'uid=' and 'gid=' in the response to confirm exploitation.