Calibre cmd list 远程代码执行漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Calibre/Calibre%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-6782).md
• https://starlabs.sg/advisories/24/24-6782/
• https://s4e.io/tools/calibre-remote-code-execution-cve-2024-6782
• https://vulners.com/nuclei/NUCLEI:CVE-2024-6782
• https://mdr.skyeye.qianxin.com/forum/share/4635
• https://github.com/gh-ost00/Calibre-Vulnerability
• https://research.averlon.ai/vulnerability-intelligence/cve/CVE-2024-6782

Related Vulnerabilities

• PoCCVE-2024-6781: Calibre <= 7.14.0 Arbitrary File Read
• PoCCVE-2024-6782: Calibre <= 7.14.0 Remote Code Execution
• PoCCVE-2024-7008: Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)
• Calibre <= 7.15.0 XSS漏洞(CVE-2024-7008)
• Calibre /cdb/cmd/list 代码执行漏洞（CVE-2024-6782）
• Calibre /cdb/cmd/export 文件读取漏洞（CVE-2024-6781）
• Calibre CVE-2024-7008反射型跨站脚本漏洞
• Calibre cmd export 任意文件读取漏洞
• Calibre 低于 7.14.0 版本存在任意文件读取漏洞(CVE-2024-6781)
• Calibre /cdb/cmd/export 任意文件读取漏洞
• Calibre 远程代码执行(CVE-2024-6782)