Loading vulnerability…
An unauthenticated path traversal vulnerability exists in HSC Mailinspector versions 5.2.17-3 through 5.2.18, specifically in the /public/loader.php file. The 'path' parameter is not properly sanitized, allowing attackers to supply crafted input to traverse directories and read arbitrary files outside the intended webroot.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
2 valid exploits after Mallory filtered fakes, detection scripts, and README-only repos (2 hidden).
This repository provides an operational exploit tool for CVE-2024-34470, an unauthenticated path traversal vulnerability in HSC Mailinspector. The main script, cvehunter.py, is a Python 3 asynchronous tool that can scan single or multiple targets (provided via command line or file) for the vulnerability. It attempts to exploit the vulnerability by sending a GET request to the endpoint '/mailinspector/public/loader.php' with a 'path' parameter set to traverse directories and access '/etc/passwd'. If the response contains evidence of a successful file read (e.g., the string 'root:'), the tool reports the target as vulnerable and can save the results to a file. The tool supports proxying, multithreading, and verbose output. The repository includes a requirements.txt for dependencies and a README.md with usage instructions. The exploit is operational, providing a working payload and automated detection/exploitation workflow, but is not weaponized for post-exploitation or further payload delivery.
This repository provides two Python scripts to exploit CVE-2024-34470, a path traversal vulnerability in HSC Mailinspector up to version 5.2.18. The vulnerability allows unauthenticated attackers to read arbitrary files from the server by manipulating the 'path' parameter in requests to /mailinspector/public/loader.php. - 'CVE-2024-34470.py' is a single-target exploit script that takes a base URL and a file path as arguments, constructs a malicious request, and prints the contents of the specified file if the target is vulnerable. - 'Massive_CVE-2024-34470.py' is a mass-scanning tool that takes a list of URLs and checks each for the vulnerability by attempting to read /etc/passwd, outputting vulnerable URLs to a file. The repository also includes a README.md with usage instructions and a requirements.txt listing Python dependencies. The main attack vector is network-based, targeting the HTTP endpoint '/mailinspector/public/loader.php?path='. No hardcoded IPs or domains are present; the scripts are designed to be used against arbitrary targets specified by the user. The exploit is operational, providing a working file read capability but not weaponized for further post-exploitation.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
1 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.