{"vulnerability": "cve-2024-6782", "sightings": [{"uuid": "b548fdd0-40c7-4719-806f-93aeb3e7fa30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:46.000000Z"}, {"uuid": "7c99bff6-ca7e-4ea8-974e-6615aa16e739", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:11:05.000000Z"}, {"uuid": "f2ebd177-4ef8-42b0-9161-9db6b08a0957", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:13:04.000000Z"}, {"uuid": "bd840af7-f4e2-4dd1-a8d0-fa4ab24665d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/calibre_exec.rb", "content": "", "creation_timestamp": "2024-08-07T22:11:51.000000Z"}, {"uuid": "7b375bc1-2dec-43f4-9d3c-51c6f35f4c7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mdj6ccpxij2i", "content": "", "creation_timestamp": "2026-01-28T21:03:01.229509Z"}, {"uuid": "b6c53cee-bb27-4d86-bbbb-c3b6f43fe1f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/8184", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aCalibre \u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff08CVE-2024-6782\uff09Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution.\nURL\uff1ahttps://github.com/zangjiahe/CVE-2024-6782\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-08-06T15:34:46.000000Z"}, {"uuid": "76fc9ae5-c7fd-480f-b26e-2889794e6238", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://t.me/cvedetector/2527", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-6782 - Calibre Remote Code Execution Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2024-6782 \nPublished : Aug. 6, 2024, 4:16 a.m. | 42\u00a0minutes ago \nDescription : Improper access control in Calibre 6.9.0 ~ 7.14.0 allow unauthenticated attackers to achieve remote code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-06T07:28:44.000000Z"}, {"uuid": "b3946003-f62c-41bc-aacc-674debe2b5b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://t.me/HackerArsenal/128", "content": "CVE-2024-6782 \n*\nCaliber 6.9.0 ~ 7.14.0  remote code execution\n*\nexploit", "creation_timestamp": "2024-08-07T17:42:22.000000Z"}, {"uuid": "522f9969-8e5e-4a25-bb7c-1e35ad6cc316", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://t.me/proxy_bar/2214", "content": "CVE-2024-6782 \n*\nCaliber 6.9.0 ~ 7.14.0  remote code execution\n*\nexploit", "creation_timestamp": "2024-08-07T07:34:24.000000Z"}, {"uuid": "c09cbaf4-4cdb-4d7b-843a-a9282989af3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://t.me/cyberwarehouse/663", "content": "Remote Code Execution (RCE) Exploits | CVE-2024-6782 | Ocsaly Academy\nhttps://www.reddit.com/r/netsec/comments/1htvi04/remote_code_execution_rce_exploits_cve20246782/", "creation_timestamp": "2026-07-26T02:00:16.220802Z"}, {"uuid": "d646e14a-89f7-432a-a590-0e8919480de8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/663", "content": "Remote Code Execution (RCE) Exploits | CVE-2024-6782 | Ocsaly Academy\nhttps://www.reddit.com/r/netsec/comments/1htvi04/remote_code_execution_rce_exploits_cve20246782/", "creation_timestamp": "2026-07-27T00:00:27.102706Z"}, {"uuid": "2876c1ab-2731-4666-8e60-5e945a80475a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-6782", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/calibre_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Amos Ng\", \"Michael Heinzl\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled (disabled by default), it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any authentication. The injected payload will get executed in the same context under which Calibre is being executed.\", \"disclosure_date\": \"2024-07-31\", \"fullname\": \"exploit/multi/misc/calibre_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:09 +0000\", \"name\": \"Calibre Python Code Injection (CVE-2024-6782)\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/misc/calibre_exec.rb\", \"platform\": \"Linux,Unix,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/misc/calibre_exec\", \"references\": [\"URL-https://starlabs.sg/advisories/24/24-6782\", \"CVE-2024-6782\"], \"rport\": 8080, \"session_types\": false, \"targets\": [\"Windows_Fetch\", \"Linux Command\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:25.512050Z"}]}