Small-ears / CVE-2023-0297

poc

pyload(CVE-2023-0297)poc

A code injection vulnerability in pyLoad versions prior to 0.5.0b3.dev31 leads to pre-auth RCE by abusing js2py's functionality.

use

Usage of CVE-2023-0297_poc.exe:

-f string
    fileName:IP.txt

-u string
    example:http://127.0.0.1:8080