Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-3302

Malicious code in bioql PyPI...

9.8CVSS6.3AI score0.00783EPSS
Exploits0References7
Cvelist
Cvelist
added 2024/11/06 8:51 p.m.23 views

CVE-2024-51736 Command execution hijack on Windows with Process class in symfony/process

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijackin...

0.00783EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/06 8:51 p.m.9 views

CVE-2024-51736 Command execution hijack on Windows with Process class in symfony/process

Symphony process is a module for the Symphony PHP framework which executes commands in sub-processes. On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijackin...

7.1AI score0.00783EPSS
Exploits0References1
OSV
OSV
added 2024/11/06 3:22 p.m.8 views

GHSA-QQ5C-677P-737Q Symfony vulnerable to command execution hijack on Windows with Process class

Description On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijacking. Resolution The Process class now uses the absolute path to cmd.exe. The patch for this...

8.6CVSS3.5AI score0.00783EPSS
Exploits0References7
Github Security Blog
Github Security Blog
added 2024/11/06 3:22 p.m.45 views

Symfony vulnerable to command execution hijack on Windows with Process class

Description On Windows, when an executable file named cmd.exe is located in the current working directory it will be called by the Process class when preparing command arguments, leading to possible hijacking. Resolution The Process class now uses the absolute path to cmd.exe. The patch for this...

9.8CVSS3.5AI score0.00783EPSS
Exploits0References7Affected Software2
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.21 views

CVE-2024-51736: Command execution hijack on Windows with Process class

More info at https://symfony.com/cve-2024-51736...

9.8CVSS6.8AI score0.00783EPSS
Exploits0Affected Software1
Friends Of PHP
Friends Of PHP
added 1970/01/01 12:0 a.m.15 views

CVE-2024-51736: Command execution hijack on Windows with Process class

More info at https://symfony.com/cve-2024-51736...

9.8CVSS6.6AI score0.00783EPSS
Exploits0Affected Software1
Rows per page
Query Builder