77 matches found
CVE-2024-28397-command-execution-poc
CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...
5.3CVSS7.2AI score0.04548EPSS
SaveExploits22
20