Lucene search
+L

51 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2008-5536

Malware in sbrugna...

7.5CVSS6.4AI score0.00967EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2005-4193

Malware in sbrugna...

7.5CVSS6.4AI score0.01251EPSS
SaveExploits2References7
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2005-1225

Malware in sbrugna...

7.5CVSS6.4AI score0.0658EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2006-5603

Malware in sbrugna...

5CVSS6.4AI score0.02929EPSS
SaveExploits2References6
BDU FSTEC
BDU FSTEC
•added 2024/04/03 12:00 a.m.•23 views

The vulnerability of the netref component in the RPyC Python library, allowing a hacker to execute arbitrary code

The vulnerability of the netref component in the RPyC Python library is related to improper security checks for standard elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.5CVSS7.9AI score0.00507EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2024/03/14 4:11 a.m.•12 views

SUSE CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS8.1AI score0.00507EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
•added 2024/03/12 8:08 p.m.•28 views

CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.5CVSS6.9AI score0.00507EPSS
SaveExploits0References4
OSV
OSV
•added 2024/03/12 4:15 p.m.•5 views

DEBIAN-CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS8.3AI score0.00507EPSS
SaveExploits0References1
PyPA
PyPA
•added 2024/03/12 4:15 p.m.•13 views

PYSEC-2024-44

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS7.7AI score0.00507EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
•added 2024/03/12 4:15 p.m.•35 views

CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS7.4AI score0.00507EPSS
SaveExploits0References5
Prion
Prion
•added 2024/03/12 4:15 p.m.•30 views

Remote code execution

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

7.5AI score0.00507EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/12 4:15 p.m.•23 views

UBUNTU-CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS6.1AI score0.00507EPSS
SaveExploits0References6
Debian CVE
Debian CVE
•added 2024/03/12 12:00 a.m.•101 views

CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS8.6AI score0.00507EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/12 12:00 a.m.•1 views

CVE-2024-27758: Missing Authentication for Critical Function

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS6.2AI score0.00507EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/03/12 12:00 a.m.•67 views

CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

7.5AI score0.00507EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/12 12:00 a.m.•28 views

CVE-2024-27758

In RPyC before 6.0.0, when a server exposes a method that calls the attribute named array for a client-provided netref e.g., np.arrayclientnetref, a remote attacker can craft a class that results in remote code execution...

8.4CVSS8AI score
SaveExploits0References4
Veracode
Veracode
•added 2024/03/07 7:10 a.m.•24 views

Arbitrary Code Execution

RPyC is vulnerable to arbitrary code execution. The vulnerability is due to a flaw in the handling of the array attribute specifically when the server-side exposes a method that calls the attribute array for a client provided netref e.g., np.arrayclientnetref. A remote attacker can exploit this b...

8.4CVSS7.8AI score0.00507EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/03/06 12:00 a.m.•13 views

PT-2024-2537 · Rpyc +1 · Rpyc +1

Name of the Vulnerable Software and Affected Versions: RPyC versions prior to 6.0.0 Description: The issue is related to the netref component of the RPyC Python library, which has an incorrect security check for standard elements. This can allow a remote attacker to execute arbitrary code by...

8.4CVSS8AI score0.00507EPSS
SaveExploits0References27
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•16 views

Netref 4.0 - Multiple Remote SQL Injection Vulnerabilities

No description provided by source. SuB-ZeRo Dz-hackers Netref 4.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------------------------- +Discovred by : SuB-ZeRo +Vendor URL : www.netref.net +downloader :...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•19 views

Netref 3.0 Index.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15862/info Netref is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromi...

7.1AI score
SaveExploits0
Rows per page
Query Builder