Lucene search
+L

13 matches found

Veracode
Veracode
•added 2022/07/18 5:20 a.m.•31 views

Remote Code Execution (RCE)

octobot is vulnerable to remote code execution. Lack of sanitization of Tentacles upload allows an attacker to inject and execute malicious package via uploading feature...

9.8CVSS9.6AI score0.16592EPSS
SaveExploits4References6Affected Software1
Github Security Blog
Github Security Blog
•added 2022/07/17 12:00 a.m.•33 views

Octobot mishandles Tentacles upload

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS9.8AI score0.16592EPSS
SaveExploits4References10Affected Software1
OSV
OSV
•added 2022/07/17 12:00 a.m.•97 views

GHSA-FR75-X856-Q6J8 Octobot mishandles Tentacles upload

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS9.8AI score0.16592EPSS
SaveExploits4References11
attackerkb
attackerkb
•added 2022/07/16 5:15 p.m.•23 views

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS7.8AI score0.16592EPSS
SaveExploits4References7
OSV
OSV
•added 2022/07/16 5:15 p.m.•25 views

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS9.9AI score
SaveExploits0References6
NVD
NVD
•added 2022/07/16 5:15 p.m.•47 views

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS0.16592EPSS
SaveExploits4References6
Prion
Prion
•added 2022/07/16 5:15 p.m.•25 views

Remote code execution

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

7.5CVSS9.8AI score0.16592EPSS
SaveExploits4References6Affected Software1
PyPA
PyPA
•added 2022/07/16 5:15 p.m.•11 views

PYSEC-2022-235

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS8.3AI score0.16592EPSS
SaveExploits4References6Affected Software1
OSV
OSV
•added 2022/07/16 5:15 p.m.•66 views

PYSEC-2022-235

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS3.6AI score0.16592EPSS
SaveExploits4References6
CVE
CVE
•added 2022/07/16 4:52 p.m.•139 views

CVE-2021-36711

The provided corpus confirms CVE-2021-36711 affects the OctoBot WebInterface, with remote code execution possible due to mishandled Tentacles uploads in versions before 0.4.4. The Red Hat, OSV, PacketStorm, ExploitDB, and NVD entries agree on the same description: vulnerability in the WebInterfac...

9.8CVSS9.7AI score0.16592EPSS
SaveExploits4References6Affected Software1
Mend
Mend
•added 2022/07/16 4:52 p.m.•5 views

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

9.8CVSS0.16592EPSS
SaveExploits4References12
Cvelist
Cvelist
•added 2022/07/16 4:52 p.m.•57 views

CVE-2021-36711

WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled...

10AI score0.16592EPSS
SaveExploits4References6
Positive Technologies
Positive Technologies
•added 2022/07/16 12:00 a.m.•2 views

PT-2022-10536

Name of the Vulnerable Software and Affected Versions OctoBot versions prior to 0.4.4 Description The issue allows remote code execution due to mishandling of Tentacles upload in the WebInterface. Recommendations For versions prior to 0.4.4, update to version 0.4.4 or later to resolve the issue...

9.8CVSS0.16592EPSS
SaveExploits4References18
Rows per page
Query Builder