Exploit for Command Injection in Materialsvirtuallab Pymatgen

July 26, 2025 invoker category_exploit

Exploit Details

Basic Information

Exploit Title	Exploit for Command Injection in Materialsvirtuallab Pymatgen
Exploit ID	319E9B68-183C-531D-828E-B385CC7B3305
Type	githubexploit
Published	2025-07-24T18:12:42
Modified	2025-07-26T13:00:35

CVSS Information

CVSS Score	9.3
Severity	CRITICAL
Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVE Information

CVE-2024-23346

Exploit Description

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution (RCE) vulnerability in the pymatgen (CVE-2024-23346) Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack…

View Full Exploit Details