EDB-43665

functional

Transmission - RPC DNS Rebinding

view exploit source exploit_dbverifiedtype remoteauthor Google Security Researchpublished 2018-01-11catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-5702UShigh8.8OT highExploit
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan