Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-55890 PoC — D-Tale allows Remote Code Execution through the Custom Filter Input

Source
https://github.com/samh4cks/CVE-2024-55890
Associated Vulnerability
Title:D-Tale allows Remote Code Execution through the Custom Filter Input (CVE-2024-55890)
Description:D-Tale is a visualizer for pandas data structures. Prior to version 3.16.1, users hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. Users should upgrade to version 3.16.1 where the `update-settings` endpoint blocks the ability for users to update the `enable_custom_filters` flag. The only workaround for versions earlier than 3.16.1 is to only host D-Tale to trusted users.
File Snapshot

 [4.0K]  /data/pocs/64fdca1bcae4afd93ec085230c46696b58c5ee9c
└── [1.8K]  CVE-2024-55890-dtale_exploit.py

0 directories, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →