CVE-2024-26504 Information

Description

An issue in Wifire Hotspot v.4.5.3 allows a local attacker to execute arbitrary code via a crafted payload to the dst parameter.

Reference

https://cwe.mitre.org/data/definitions/601.html https://portswigger.net/kb/issues/00500100_open-redirection-reflected https://wifire.me/en/hotspot https://tomiodarim.io/posts/cve-2024-26504/