skraft9/CVE-2024-12356

PoC

Unauthenticated RCE detector + RCA for BeyondTrust Remote Support / PRA (CVE-2024-12356 + CVE-2025-1094)

view exploit source poc_in_githubauthor skraft9published 2026-09-04catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-1094US	—	90.0% (100th)	Exploit	2025-02-13
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input…
CVE-2024-12356US	critical9.8OT critical	87.3% (100th)	KEV	2024-12-17
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.