Lucene search
K

4 matches found

NVD
NVD
added 2026/03/28 7:16 p.m.2 views

CVE-2026-5011

A vulnerability was detected in elecV2 elecV2P up to 3.8.3. This vulnerability affects the function runJSFile of the file /webhook of the component JSON Parser. Performing a manipulation of the argument rawcode results in code injection. Remote exploitation of the attack is possible. The exploit ...

6.5CVSS0.00232EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/28 6:30 p.m.1 views

CVE-2026-5011 elecV2 elecV2P JSON webhook runJSFile code injection

A vulnerability was detected in elecV2 elecV2P up to 3.8.3. This vulnerability affects the function runJSFile of the file /webhook of the component JSON Parser. Performing a manipulation of the argument rawcode results in code injection. Remote exploitation of the attack is possible. The exploit ...

6.5CVSS5.6AI score0.00232EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/03/28 12:0 a.m.1 views

PT-2026-28725

Name of the Vulnerable Software and Affected Versions elecV2 versions prior to 3.8.4 Description A code injection issue exists in the JSON Parser component due to manipulation of the rawcode argument within the runJSFile function of the /webhook file. Remote exploitation is possible. The project...

6.5CVSS5.8AI score0.00232EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/03/28 12:0 a.m.3 views

elecV2P 代码注入漏洞

elecV2P is a network request modification and scheduled task tool developed by the elecV2 individual developer. Versions of elecV2P 3.8.3 and earlier have a code injection vulnerability. This vulnerability stems from improper handling of the parameter rawcode in the runJSFile function of the...

6.5CVSS6.7AI score0.00232EPSS
Exploits0References6
Rows per page
Query Builder