Lucene search
K

11 matches found

GithubExploit
GithubExploit
added 2025/07/28 9:26 a.m.382 views

Exploit for Insufficiently Protected Credentials in Rpc.Py_Project Rpc.Py

rpc.py RCE Exploit CVE-2022-35411 This is an updated and im...

9.8CVSS9.9AI score0.71334EPSS
Exploits7
RedhatCVE
RedhatCVE
added 2025/05/22 9:55 p.m.9 views

CVE-2022-35411

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle...

9.8CVSS7.5AI score0.71334EPSS
Exploits7References1
GithubExploit
GithubExploit
added 2024/04/14 4:8 a.m.319 views

Exploit for Insufficiently Protected Credentials in Rpc.Py_Project Rpc.Py

rpc.py 0.6.0 -...

9.8CVSS9.8AI score0.71334EPSS
Exploits7
Check Point Advisories
Check Point Advisories
added 2022/11/17 12:0 a.m.64 views

rpc.py Project Remote Code Execution (CVE-2022-35411)

A remote code execution vulnerability exists in rpc.py Project. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS5.7AI score0.71334EPSS
Exploits7
OSV
OSV
added 2022/07/09 12:0 a.m.35 views

GHSA-8RQ8-F485-7V8X rpc.py vulnerable to Deserialization of Untrusted Data

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle. Per the maintainer, rpc....

9.8CVSS9.6AI score0.71334EPSS
Exploits7References8
Github Security Blog
Github Security Blog
added 2022/07/09 12:0 a.m.63 views

rpc.py vulnerable to Deserialization of Untrusted Data

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle. Per the maintainer, rpc....

9.8CVSS9.4AI score0.71334EPSS
Exploits7References8Affected Software1
NVD
NVD
added 2022/07/08 7:15 p.m.11 views

CVE-2022-35411

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle...

9.8CVSS0.71334EPSS
Exploits7References4
Prion
Prion
added 2022/07/08 7:15 p.m.10 views

Remote code execution

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle...

7.5CVSS9.6AI score0.71334EPSS
Exploits7References4Affected Software1
Cvelist
Cvelist
added 2022/07/08 6:7 p.m.14 views

CVE-2022-35411

rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON not Pickle is the default data format, an unauthenticated client can cause the data to be processed with unpickle...

10AI score0.71334EPSS
Exploits7References4
CNNVD
CNNVD
added 2022/07/08 12:0 a.m.2 views

rpc.py 代码问题漏洞

rpc.py is a fast and powerful ASGI/WSGI-based RPC framework for individual developers in Aber, China. A security vulnerability exists in rpc.py version 0.6.0 and earlier. An attacker exploited the vulnerability to process data using unpickle...

9.8CVSS8.4AI score0.71334EPSS
Exploits7References8
GithubExploit
GithubExploit
added 2022/07/05 7:0 p.m.3 views

Exploit for Insufficiently Protected Credentials in Rpc.Py_Project Rpc.Py

rpcpy-exploit Unauthenticated Remote Code Execut...

9.8CVSS8.1AI score0.71334EPSS
Exploits7
Rows per page
Query Builder