🚨CVE-2024-23692: Unauthenticated RCE Flaw in Rejetto HTTP File Server

👉It allows remote attackers to execute arbitrary code on affected servers without authentication, potentially leading to data breaches, ransomware attacks, and complete system compromise.

💥PoC: https://github.com/rapid7/metasploit-framework/pull/19240

💥Dorks:
Hunter: /product.name="HTTP File Server" and web.body="Rejetto"
FOFA: product="HFS"
SHODAN: product:"HttpFileServer httpd"

#Rejetto #HFS #bugbounty #bugbountytips #cybersecurity #pentesting