{"vulnerability": "CVE-2024-45256", "sightings": [{"uuid": "dc2f6e85-b904-496a-a030-591501c8fc45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "e0c37d26-b33b-4f6c-a008-610ef982cbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:03.000000Z"}, {"uuid": "5283de16-0710-43e1-8487-3b034a838d84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmshj2q7my2t", "content": "", "creation_timestamp": "2025-04-14T21:02:19.236611Z"}, {"uuid": "92c17b71-2957-4e8c-b950-b062eb3de82a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:03.000000Z"}, {"uuid": "c9530d7a-7f47-48f3-bb7a-9a45997c1982", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/byob_unauth_rce.rb", "content": "", "creation_timestamp": "2024-10-15T15:35:55.000000Z"}, {"uuid": "a394c43c-41ba-4118-a5ce-d78f6fdfeed1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "https://t.me/cvedetector/4103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-45256 - BYOB File Write Arbitrary iOS\", \n  \"Content\": \"CVE ID : CVE-2024-45256 \nPublished : Aug. 26, 2024, 7:15 a.m. | 16\u00a0minutes ago \nDescription : An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overwrite SQLite databases and bypass authentication via an unauthenticated HTTP request with a crafted parameter. This occurs in file_add in api/files/routes.py. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-26T09:31:40.000000Z"}, {"uuid": "8ea2b868-7e2b-4fb0-b56f-b9cf429f154d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-45256", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/byob_unauth_rce.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"chebuya\", \"Valentin Lobstein\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits two vulnerabilities in the BYOB (Build Your Own Botnet) web GUI:\\n          1. CVE-2024-45256: Unauthenticated arbitrary file write that allows modification of the SQLite database, adding a new admin user.\\n          2. CVE-2024-45257: Authenticated command injection in the payload generation page.\\n\\n          These vulnerabilities remain unpatched.\", \"disclosure_date\": \"2024-08-15\", \"fullname\": \"exploit/unix/webapp/byob_unauth_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"BYOB Unauthenticated RCE via Arbitrary File Write and Command Injection (CVE-2024-45256, CVE-2024-45257)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/unix/webapp/byob_unauth_rce.rb\", \"platform\": \"Linux,Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/byob_unauth_rce\", \"references\": [\"CVE-2024-45256\", \"CVE-2024-45257\", \"URL-https://blog.chebuya.com/posts/unauthenticated-remote-command-execution-on-byob/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Unix/Linux Command Shell\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:40.727394Z"}]}