← Database

CVE-2024-41570

CRITICAL CVSS: 9.8 Published: 2024-08-12 Modified: 2026-06-17

Description

An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.

Affected Platforms

Havocframework Havoc

Weakness Type

CWE-918, CWE-918

References