CVE-2023-43364
CRITICAL 9.8EPSS 2.9%
main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 2.86% chance of exploitation in the next 30 days, 87th percentile
- Published
- 2023-12-12
- Updated
- 2024-10-09
Proof-of-concept exploits (7)
- nexis-nexis/Searchor-2.4.0-POC-Exploit-5★ · 2023-05-04
- nikn0laty/Exploit-for-Searchor-2.4.0-Arbitrary-CMD-Injection18★ · 2023-05-27
- 0hmsec/Searchor-2.4.0-Arbitrary-CMD-Injection-Python1★ · 2025-02-01
- libertycityhacker/CVE-2023-43364-Exploit-CVE0★ · 2024-04-26
- Herick-Costa/CVE-2023-43364-Searchor-RCE-Exploit1★ · 2026-06-30
- fuzzyb34r/Searchor-2.4.1-RCE-Exploit-PoC0★ · 2026-05-13
- IamSaishi/CVE-2023-43364_Exploit0★ · 2026-09-29