CVE-2023-32707

A collection of proof-of-concept exploit scripts written by the team at Redway Security for various CVEs.

Redway CVE Proof-of-Concept Exploits A collection of proof-of-concept exploit scripts written by the team at Redway Security for various CVEs CVE-2022-2992: Remote Command Execution via Github import CVE-2023-32707: Splunk 'edit_user' Capability Privilege Escalation DISCLAIMER This Git repository contains code, scripts, and documentation related to security exploit

An improved POC exploit based on the reported CVE on exploitdb

CVE-2023-32707 An improved POC exploit based on the reported CVE on exploitdb Exploit Title: Splunk 905 - Admin Account Takeover CVE: CVE-2023-32707 Overview This script allows for exploiting a vulnerability in Splunk 905, leading to admin account takeover The exploit leverages a low-privilege user with the edit_user capability to escalate privileges Prerequisites Python

This script appears to be a Python exploit for a vulnerability in Splunk version 905, 8211, and 8114, identified by the CVE-2023-32707 The vulnerability allows a low-privileged user with the edit_user capability to escalate their privileges to that of the admin user by providing specially crafted web requests Here's a brief overview of the script: Import Required M