Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-2928 — Arbitrary file read exploit for CVE-2024-2928 in mlflow | Kitploit
Tools/GitHubGitHub/nuridincersaygili/cve-2024-2928
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubnuridincersaygili/cve-2024-2928

CVE-2024-2928

Arbitrary file read exploit for CVE-2024-2928 in mlflow

View Repository
31 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2024-2928

Arbitrary file read exploit for CVE-2024-2928 in mlflow (specifically in version 2.9.2, which was fixed in version 2.11.3)

The exploit code tested on Linux

Source: https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298

Usage python3 CVE-2024-2928.py -t 127.0.0.1 -p 5000

  • After run, give the full path of the file

    • If the file exists and the process has sufficient permissions to read it, than the contents will be displayed
    • Otherwise "File not found" message will appear

  • Press Ctrl + C to exit

Download Tool