Lucene search
+L

105 matches found

Kitploit
Kitploit
added 2026/08/25 10:35 a.m.1 views

CrafterCMS-CVE-2025-6384

CrafterCMS Autenticado RCE - Bypass de Sandbox de Groovy CVE-2025-6384 Una Prueba de Concepto para una vulnerabilidad de Ejecución Remota de Código autenticada en CrafterCMS. Resumen de la Vulnerabilidad Un usuario autenticado con privilegios de desarrollador puede eludir el sandbox de scripts...

9.1CVSS6.2AI score0.00852EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:22 a.m.1 views

CVE-2022-40635

CVE-2022-40635: CrafterCMS における Groovy サンドボックスバイパス Crafter CMS の Crafter Studio における動的管理コードリソースの不適切な制御の脆弱性により、認証された開発者が Groovy サンドボックスバイパスを介して OS コマンドを実行できる可能性があります。 ベンダーの開示: この脆弱性に関するベンダーの開示と修正は、こちら をご覧ください。 要件: この脆弱性を悪用するには以下が必要です: 有効なユーザー資格情報 概念実証: 詳細と悪用プロセスは、この PDF で確認できます。...

7.2CVSS5.8AI score0.0132EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/03 9:19 p.m.11 views

CVE-2026-1770

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/02 6:31 p.m.8 views

GHSA-GJ28-GW7W-3PXC Crafter CMS has Improper Control of Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/02/02 6:31 p.m.15 views

Crafter CMS has Improper Control of Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/02/02 5:16 p.m.13 views

CVE-2026-1770

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS0.00425EPSS
SaveExploits0References1
CVE
CVE
added 2026/02/02 4:16 p.m.32 views

CVE-2026-1770

CVE-2026-1770 affects Crafter CMS, specifically Crafter Studio. The vulnerability arises from Improper Control of Dynamically-Managed Code Resources via the Groovy Sandbox, enabling authenticated developers to insert malicious Groovy code to bypass sandbox restrictions and achieve Remote Code Exe...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/02/02 4:16 p.m.10 views

CVE-2026-1770 Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/02 4:16 p.m.34 views

CVE-2026-1770 Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS0.00425EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 4:16 p.m.8 views

CVE-2026-1770

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/02/02 4:16 p.m.13 views

EUVD-2026-5112

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass sandbox restrictions and obtain RCE Remote Code...

7.3CVSS5.7AI score0.00425EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/02 12:00 a.m.24 views

PT-2026-5681

Name of the Vulnerable Software and Affected Versions Crafter CMS versions affected versions not specified Description An issue exists in Crafter Studio of Crafter CMS that allows authenticated developers to execute operating system commands. This is due to a bypass of the Groovy Sandbox...

7.3CVSS6.1AI score0.00425EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2022-5114

Malicious code in bioql PyPI...

9CVSS8.6AI score0.00895EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.8 views

EUVD-2023-29907

Malicious code in bioql PyPI...

7.2CVSS7.1AI score0.00436EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/06/19 9:31 p.m.7 views

Improper Control of Dynamically-Managed Code Resources

Overview Affected versions of this package are vulnerable to Improper Control of Dynamically-Managed Code Resources via the Groovy Sandbox process. An attacker can execute arbitrary operating system commands by injecting malicious Groovy elements that bypass sandbox restrictions. Remediation...

9.1CVSS7.8AI score0.00852EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2025/06/19 9:31 p.m.23 views

Crafter Studio Groovy Sandbox Bypass

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE Remote Code...

9.1CVSS7AI score0.00852EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/06/19 9:31 p.m.12 views

GHSA-5644-3VGQ-2PH5 Crafter Studio Groovy Sandbox Bypass

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE Remote Code...

7.3CVSS7.6AI score0.00852EPSS
SaveExploits1References4
OSV
OSV
added 2025/06/19 9:15 p.m.7 views

CVE-2025-6384

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE Remote Code...

9.1CVSS7.3AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/06/19 8:57 p.m.6 views

CVE-2025-6384 Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE Remote Code...

7.3CVSS7AI score0.00852EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/06/19 8:57 p.m.22 views

CVE-2025-6384 Improper Control of Dynamically-Managed Code Resources in Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of CrafterCMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass. By inserting malicious Groovy elements, an attacker may bypass Sandbox restrictions and obtain RCE Remote Code...

7.3CVSS0.00852EPSS
SaveExploits1References1
Rows per page
Query Builder