corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08793-d899-712e-aa9b-a2e48fe762e5

Hacking Kerio Control via CVE-2024-52875: from CRLF Injection to 1-click RCE

karmainsecurity.com · published 16 December 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at karmainsecurity.com Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
27
Words captured
2,863

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://en.wikipedia.org/wiki/Kerio_Technologies
en.wikipedia.org
https://www.linkedin.com/company/gfi-software/
linkedin.com
https://search.censys.io/search?resource=hosts&q=services.software.product%3D%60Kerio+Control%60
search.censys.io
https://cwe.mitre.org/data/definitions/113.html
cwe.mitre.org
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-52875
cve.mitre.org
GFI Kerio Control Read at the source ↗
karmainsecurity.com
https://cwe.mitre.org/data/definitions/601.html
cwe.mitre.org
https://cwe.mitre.org/data/definitions/79.html
cwe.mitre.org
https://www.first.org/cvss/v3.1/specification-document
first.org
https://en.wikipedia.org/wiki/Arbitrary_code_execution
en.wikipedia.org
https://www.exploit-db.com/exploits/38450
exploit-db.com
https://www.first.org/cvss/calculator/3.1
first.org
https://owasp.org/www-community/vulnerabilities/CRLF_Injection
owasp.org
https://www.gremwell.com/firefox-xss-302
gremwell.com
https://portswigger.net/burp
portswigger.net
https://en.wikipedia.org/wiki/Deflate
en.wikipedia.org
https://owasp.org/www-community/HttpOnly
owasp.org
https://owasp.org/www-community/attacks/csrf
owasp.org
https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest
developer.mozilla.org
https://karmainsecurity.com/pocs/CVE-2024-52875.php
karmainsecurity.com
https://thehackernews.com/2025/01/critical-rce-flaw-in-gfi-keriocontrol.html
thehackernews.com
https://www.securityweek.com/gfi-keriocontrol-firewall-vulnerability-exploited-in-the-wild/
securityweek.com
https://cybersecuritynews.com/kerio-control-firewall-vulnerability/
cybersecuritynews.com
https://www.bleepingcomputer.com/news/security/hackers-exploit-keriocontrol-firewall-flaw-to-steal-admin-csrf-tokens/
bleepingcomputer.com
https://www.securitylab.ru/news/555294.php
securitylab.ru
https://latesthackingnews.com/2025/01/01/7-years-old-rce-vulnerability-addressed-in-kerio-control/
latesthackingnews.com
https://www.redhotcyber.com/post/vulnerabilita-critica-in-keriocontrol-con-un-solo-click-gli-hacker-possono-ottenere-accesso-completo/
redhotcyber.com