4 matches found
Remote-Code-Execution-CVE-2024-28397-pyload-ng-js2py-
Remote Code Execution – CVE-2024-28397 pyload-ng / js2py This repository contains a Proof-of-Concept PoC exploit for CVE-2024-28397 , a Remote Code Execution vulnerability affecting pyload-ng due to insecure usage of js2py. Disclaimer: This PoC is for educational and research purposes only. Do no...
5.3CVSS7.1AI score0.04548EPSS
SaveExploits22
pyload-ng vulnerable to RCE with js2py sandbox escape
SummaryAny pyload-ng running under python3.11 or below are vulnerable under RCE. Attacker can send a request containing any shell command and the victim server will execute it immediately. Detailsjs2py has a vulnerability of sandbox escape assigned as CVE-2024-28397, which is used by the...
9.8CVSS6.8AI score0.16538EPSS
SaveExploits22References7Affected Software1
20