Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in the `JonesFaithfulTransformation.from_transformation_str()` method within the `pymatgen` library prior to version 2024.2.20. This method insecurely utilizes `eval()` for processing input, enabling execution of arbitrary code when parsing untrusted input. Version 2024.2.20 fixes this issue.
PoC: CVE-2024-23346-exploit
This is a exploit for the known Remote Code Execution (RCE) vulnerability in the `pymatgen` (CVE-2024-23346) Python library by uploading a malicious `CIF` file to the hosted `CIF Analyzer` website on the target
PoC: CVE-2024-23346-rust-exploit
A Rust exploit for CVE-2024-23346 that functions as a "terminal" (tested on chemistry.htb)
PoC: CVE-2024-23346
PoC of the vulnerability CVE-2024-23346
PoC: CVE-2024-23346
This is an exploit for CVE-2024-23346 that acts as a "terminal" (tested on chemistry.htb)
PoC: CVE-2024-23346
This repository contains a Crystallographic Information File (CIF) intended for use on the "Chemistry" machine on Hack The Box (HTB).
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free