| عنوان | CosmodiumCS OnlyRAT Latest version available OS Command Injection |
|---|
| الوصف | OnlyRAT, a C2 developed by CosmodiumCS, is vulnerable to OS command injection due to unsafe usage of Python’s os.system() function throughout its codebase. Configuration values are inserted directly into shell commands without sanitization or escaping. This design flaw allows attackers to execute arbitrary system commands by supplying a crafted configuration file.
|
|---|
| المصدر | ⚠️ https://docs.google.com/document/d/1oq9YO831FbEDBI2BqNiW-7YA_kMzHJmMgy82F8f-L9g/edit?usp=sharing |
|---|
| المستخدم | unhingedazrael (UID 89347) |
|---|
| ارسال | 04/09/2025 08:31 PM (1 سنة منذ) |
|---|
| الاعتدال | 21/09/2025 10:09 AM (17 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 325123 [CosmodiumCS OnlyRAT حتى 3.2 Configuration File main.py connect/remote_upload/remote_download configuration["PASSWORD"] تجاوز الصلاحيات] |
|---|
| النقاط | 19 |
|---|