CVE-2024-53591 PoC — Seclore 安全漏洞

Source

https://github.com/aljoharasubaie/CVE-2024-53591

Associated Vulnerability

Title:Seclore 安全漏洞 (CVE-2024-53591)
Description:An issue in the login page of Seclore v3.27.5.0 allows attackers to bypass authentication via a brute force attack.

Readme

# CVE-2024-53591

#### Des: 
An issue in the login page of Seclore v3.27.5.0 allows attackers to enumerate valid domains (internal service) via a brute force attack.

#### POC: 
https://company/policyserver/redirectTprepositoryEntryAction.do?repoCode=10006, brute force repoCode parameter to find all hosted domains & internal services

## Discovered by Aljohara Abdulmohsen Alsubaie..

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →