漏洞描述
Stable Diffusion web UI 存在远程代码执行漏洞，攻击者可未授权访问后台并安装extention导致远程代码执行。
Stable Diffusion web UI Install from URL 远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- POC fork-installer: Fork CMS - Installer
- POC roundcube-installer-exposure: Roundcube Webmail Installer - Exposure
- POC metabase-installer-exposure: Metabase Installer - Exposure
- wordpress-install: WordPress Exposed Installation
- POC CVE-2017-17736: Kentico - Installer Privilege Escalation
- POC CVE-2024-11044: Stable Diffusion Webui 1.10.0 - Open Redirect
- POC CVE-2024-11972: Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
- POC CVE-2024-9707: Hunk Companion <= 1.8.4 - Arbitrary Plugin Installation
- POC CVE-2018-0171: Cisco Smart Install - Configuration Download
- POC azure-vm-endpoint-protection-missing: Azure VM Endpoint Protection Not Installed
- POC avideo-install: AVideo Installer - Detect
- POC circarlife-installer: CirCarLife - Installer
- POC unsigned-kernel-mode-drivers-allowed: Installation of Unsigned Kernel-Mode Drivers Allowed