Exploit for CVE-2024-6782

githubexploit · 2024-09-15

Description

Unauthenticated remote code execution via Calibre’s content server in Calibre <= 7.14.

All known vulnerabilities by product

Alt Linux Calibre

CVSS 9.8 for CVE-2024-6782

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

99%confidence this exploit runs

Based on 2 file(s) in the source

EPSS Score

84.1%higher than 99.7% of all CVEs

Updated 2026-08-10

CVE Information

Exploit Details

Modified:2024-10-21 13:18

Last Seen:2025-08-31 22:17

Reporter:Uno13x

Written in:Python

Last commit:2024-09-16

Tags

CVE-2024-6782exploitremote code executioncalibre 7.14.0

Other exploits for CVE-2024-6782

2026-09-13 KitPloitKITPLOIT

2026-09-12 KitPloitKITPLOIT

CVE-2024-6782-PoC

2026-09-11 KitPloitKITPLOIT

2026-09-09 KitPloitKITPLOIT

Calibre 7.15.0 Code Injection

2025-03-04 indoushkaPACKETSTORMPHP

Exploit for CVE-2024-6782

2024-09-15 R4idB0YGITHUB

Exploit for CVE-2024-6782

2024-08-09 jdpslGITHUB

Calibre 7.15.0 Python Code Injection Exploit

2024-08-08 metasploitZDTRuby

Exploit Code

README9 lines

## https://sploitus.com/exploit?id=67ACEA36-D3E4-59A7-9266-6F554E95ED31
# CVE-2024-6782-PoC

Usage: python3 callibre.py --target http://target:8080/

Unauthenticated remote code execution via Calibre’s content server in Calibre &lt;= 7.14.0.


![R4idB0y](img.jpg)