Lucene search
+L

77 matches found

Kitploit
Kitploit
•added 2026/09/28 2:22 p.m.•5 views

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

5.3CVSS7.2AI score0.04548EPSS
SaveExploits22
Rows per page
Query Builder