Lucene search
K

40 matches found

GithubExploit
GithubExploit
added 2023/12/27 12:6 a.m.409 views

Exploit for Improper Control of Dynamically-Managed Code Resources in Crushftp

CVE-2023-43177 CrushFTP &l...

9.8CVSS9.8AI score0.76055EPSS
Exploits7
GithubExploit
GithubExploit
added 2022/11/05 1:28 p.m.587 views

Exploit for Improper Control of Dynamically-Managed Code Resources in Vm2_Project Vm2

Exploit-For-CVE-2022-36067 This repo contains payload for the...

10CVSS9.6AI score0.84468EPSS
Exploits2
Prion
Prion
added 2022/09/16 5:15 p.m.12 views

Improper access control

Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20...

3.5CVSS5.7AI score0.00361EPSS
Exploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2022/09/14 12:0 a.m.30 views

CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...

7.2CVSS7.1AI score0.14522EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/09/14 12:0 a.m.23 views

GHSA-2JV3-V37P-65W3 CrafterCMS Crafter Studio Improperly Controls Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker SSTI...

7.2CVSS7.2AI score0.14522EPSS
Exploits1References3
OSV
OSV
added 2022/09/14 12:0 a.m.19 views

GHSA-J6X3-3JQQ-M922 CrafterCMS OS Command Injection vulnerability

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...

7.2CVSS7.2AI score0.1299EPSS
Exploits0References3
OSV
OSV
added 2022/09/13 7:15 p.m.11 views

CVE-2022-40635

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...

7.2CVSS7.2AI score
Exploits0References1
NVD
NVD
added 2022/09/13 7:15 p.m.11 views

CVE-2022-40635

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...

7.2CVSS0.1299EPSS
Exploits0References1
Prion
Prion
added 2022/09/13 7:15 p.m.9 views

Design/Logic Flaw

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy Sandbox Bypass...

5.8CVSS7.1AI score0.1299EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2022/05/17 12:0 a.m.17 views

GHSA-R6FX-55X3-F9X6 Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods...

8.8CVSS8.9AI score0.00462EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/17 12:0 a.m.21 views

Crafter CMS Crafter Studio vulnerable to Improper Control of Dynamically-Managed Code Resources

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker static methods...

9CVSS8.7AI score0.00462EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/02/09 11:7 p.m.13 views

GHSA-WQ3V-3GRQ-6F86 Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7...

7.2CVSS7AI score0.00434EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2022/02/09 11:7 p.m.25 views

Improper Control of Dynamically-Managed Code Resources in Crafter CMS Crafter Studio

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7...

9CVSS6.9AI score0.00434EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2021/12/20 9:15 p.m.8 views

CVE-2021-42809

Improper Access Control of Dynamically-Managed Code Resources DLL in Thales Sentinel Protection Installer could allow the execution of arbitrary code...

7.8CVSS0.0004EPSS
Exploits0References1
Prion
Prion
added 2021/12/20 9:15 p.m.13 views

Improper access control

Improper Access Control of Dynamically-Managed Code Resources DLL in Thales Sentinel Protection Installer could allow the execution of arbitrary code...

6.9CVSS7.7AI score0.0004EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2021/12/20 8:19 p.m.50 views

CVE-2021-42809

Technical details about CVE-2021-42809 are not publicly provided in the supplied documents; no affected products, exact impact, or fixes are specified beyond the general description. Monitor for updates from vendors.

7.8CVSS7.1AI score0.0004EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2020/10/06 3:15 p.m.16 views

Design/Logic Flaw

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior t...

9CVSS7AI score0.00655EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2020/10/06 2:15 p.m.7 views

CVE-2020-25802

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7...

7.2CVSS7AI score
Exploits0References1
Cvelist
Cvelist
added 2020/10/06 2:9 p.m.10 views

CVE-2020-25802 Authenticated attackers with developer privileges in Crafter Studio may execute OS commands via Groovy scripting.

Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7...

4.2CVSS7AI score0.00434EPSS
Exploits0References1
CERT
CERT
added 2017/04/04 12:0 a.m.511 views

Action Message Format (AMF3) Java implementations are vulnerable to insecure deserialization and XML external entities references

Overview Several Java implementations of AMF3 are vulnerable to insecure deserialization and XML external entities references. Description Several Java implementations of Action Message Format AMF3 are vulnerable to one or more of the following implementation errors:CWE-502: Deserialization of...

9.8CVSS9AI score0.48477EPSS
Exploits12References7
Rows per page
Query Builder