Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-45241 — Path Traversal in CentralSquare's CryWolf | Kitploit
Tools/GitHubGitHub/d4lyw/cve-2024-45241
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubd4lyw/cve-2024-45241

CVE-2024-45241

Path Traversal in CentralSquare's CryWolf

View Repository
1 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-45241

Path Traversal in CentralSquare's CryWolf

A path traversal vulnerability in the CryWolf (False Alarm Management) application allows unauthenticated attackers to read files outside of the working web directory leading to the disclosure of sensitive information.

By sending a traversal payload to the endpoint GeneralDocs.aspx in the rpt parameter, it is then possible to access the full contents of the file by visiting gdoc1.ashx.

Repro:

  • Step 1: Visit GeneralDocs.aspx?rpt=../web.config in a browser with an intercepting proxy configured.
  • Step 2: From the intercepting proxy, locate the GET request to gdoc1.ashx, this will contain the contents of web.config.

References:

  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-45241
  • https://daly.wtf/cve-2024-45241-path-traversal-in-centralsquare-crywolf/
Download Tool