CVE-2024-22274 PoC — VMware vCenter Server 安全漏洞

Source

https://github.com/ninhpn1337/CVE-2024-22274

Associated Vulnerability

Title:VMware vCenter Server 安全漏洞 (CVE-2024-22274)
Description:The vCenter Server contains an authenticated remote code execution vulnerability. A malicious actor with administrative privileges on the vCenter appliance shell may exploit this issue to run arbitrary commands on the underlying operating system.

Readme

# CVE-2024-22274

 - Run and input host ip, port, username and password. Exploit will create user NinhPwn with password "NinhPwn123#" then spawn ssh with root shell.

 - Fix python3 install packages: pip install pwinput, pip install paramiko, pip install time,pip install base64 


![image](https://github.com/ninhpn1337/CVE-2024-22274/assets/26117234/4e91c19c-7946-4d6a-87bd-f57c21e4dcdf)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →