Vulners
Lucene search
4 matches found
CVE-2024-25291
Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...
9.8CVSS7.5AI score0.01598EPSS
Exploits2References1
CVE-2024-25291
CVE-2024-25291 affects Deskfiler v1.2.3. Multiple sources confirm that a crafted plugin upload can lead to arbitrary code execution, leveraging an Electron WebView to trigger RCE. The Red Hat and NVD entries repeat the same payload: uploading a specially crafted plugin enables code execution. The...
9.8CVSS7.7AI score0.01598EPSS
Exploits2References1Affected Software1
CVE-2024-25291
Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...
7.7AI score0.01598EPSS
Exploits2References1
CVE-2024-25291
Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin...
7.8AI score0.01598EPSS
Exploits2References1
20