Description
Calibre是一个开源的虚拟书库软件，Calibre 6.9.0 至 7.14.0 中存在不当的访问控制，使得未经身份验证的攻击者能够实现远程代码执行。
Calibre 远程代码执行(CVE-2024-6782)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Calibre/Calibre%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E(CVE-2024-6782).md
https://www.tenable.com/cve/CVE-2024-6782
https://avd.aliyun.com/detail?id=AVD-2024-6782
https://www.ddpoc.com/DVB-2024-7831.html
https://sploitus.com/exploit?id=8935DD9D-D078-5BED-8E5A-FE2BDD255212
https://vulnerability.circl.lu/vuln/CVE-2024-6782
https://cve.imfht.com/poc_detail/355170e59b40853f884b1b590bca89003488eda8
https://starlabs.sg/advisories/24/24-6782/
https://nvd.nist.gov/vuln/detail/CVE-2024-6782
https://www.cve.org/CVERecord?id=CVE-2024-6782