Lucene search
K

4 matches found

Positive Technologies
Positive Technologies
added 2026/03/28 12:0 a.m.1 views

PT-2026-28725

Name of the Vulnerable Software and Affected Versions elecV2 versions prior to 3.8.4 Description A code injection issue exists in the JSON Parser component due to manipulation of the rawcode argument within the runJSFile function of the /webhook file. Remote exploitation is possible. The project...

6.5CVSS5.8AI score0.00056EPSS
Exploits0References7
EUVD
EUVD
added 2026/03/11 9:31 p.m.2 views

EUVD-2026-11403

A security vulnerability has been detected in elecV2P up to 3.8.3. Affected by this issue is the function runJSFile of the file source-code/elecV2P-master/webser/wbjs.js of the component jsfile Endpoint. Such manipulation leads to code injection. The attack may be launched remotely. The exploit h...

6.5CVSS5.5AI score0.00065EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/03/11 12:0 a.m.1 views

PT-2026-24842

A security vulnerability has been detected in elecV2P up to 3.8.3. Affected by this issue is the function runJSFile of the file source-code/elecV2P-master/webser/wbjs.js of the component jsfile Endpoint. Such manipulation leads to code injection. The attack may be launched remotely. The exploit h...

6.5CVSS5.5AI score0.00065EPSS
Exploits0References7
CNNVD
CNNVD
added 2026/03/11 12:0 a.m.3 views

elecV2P 代码注入漏洞

elecV2P is a network request modification and scheduled task tool developed by the elecV2 individual developer. Versions of elecV2P 3.8.3 and earlier have a code injection vulnerability. This vulnerability stems from incorrect operations on the runJSFile function in the jsfile Endpoint’s source...

6.5CVSS6.7AI score0.00065EPSS
Exploits0References5
Rows per page
Query Builder