Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
File-Read-CVE-2024-9264 — File Read Proof of Concept for CVE-2024-9264 | Kitploit
Tools/GitHubGitHub/z3k0sec/file-read-cve-2024-9264
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingLearning & Education
GitHubz3k0sec/file-read-cve-2024-9264

File-Read-CVE-2024-9264

File Read Proof of Concept for CVE-2024-9264

View Repository
7311 year agoNot yet reviewed
Website

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

File-Read-CVE-2024-9264

Proof Of Concept for File Read in Grafana (CVE-2024-9264)

Prerequisites

  • authenticated Grafana user with Viewer permissions or higher
  • DuckDB binary must be installed and accessible through Grafana's PATH

Impacted version

Grafana >= v11.0.0 (all v11.x.y are impacted)

Usage

root@kitploit:~
python3 poc.py [--url <target>] [--user <username>] [--password <password>] [--file <path>]

Example

root@kitploit:~
python3 poc.py --url http://127.0.0.1:3000 --user eviluser --password eviluser --file /etc/passwd

Disclaimer

This script is intended for educational purposes and for use in controlled environments where you have permission to test the security of the system. Misuse of this tool could lead to legal consequences.

More

https://zekosec.com/blog/file-read-grafana-cve-2024-9264/ https://grafana.com/blog/2024/10/17/grafana-security-release-critical-severity-fix-for-cve-2024-9264/

Download Tool