77Philly/CVE-2024-7456scripts

PoC

view exploit source poc_in_githubauthor 77Phillypublished 2024-11-02catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-7456US	critical9.8	1.41% (73rd)	Exploit	2024-11-01
A SQL injection vulnerability exists in the `/api/v1/external-users` route of lunary-ai/lunary version v1.4.2. The `order by` clause of the SQL query uses `sql.unsafe` without prio…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.