Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-0901

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.02588EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/03/19 9:30 a.m.18 views

Path traversal in flaskcode Devan-Kerman ARRP

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

8.8CVSS7.8AI score0.02588EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2024/03/19 9:30 a.m.10 views

GHSA-CG24-JJR5-RXMF Path traversal in flaskcode Devan-Kerman ARRP

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

8.8CVSS8.9AI score0.02588EPSS
Exploits0References4
OSV
OSV
added 2024/03/19 7:15 a.m.12 views

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

8.8CVSS8.1AI score
Exploits0References2
Cvelist
Cvelist
added 2024/03/19 12:0 a.m.16 views

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

8.8CVSS9.1AI score0.02588EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/19 12:0 a.m.0 views

ARRP Security Vulnerabilities

ARRP is an advanced runtime resource package from the individual developer Devan Kerman. A security vulnerability exists in ARRP v.0.8.1 and earlier versions, which stems from a directory traversal vulnerability that allows remote attackers to execute arbitrary code via dumpDirect in the...

8.8CVSS7.8AI score0.02588EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/03/19 12:0 a.m.14 views

CVE-2024-24042

Directory Traversal vulnerability in Devan-Kerman ARRP v.0.8.1 and before allows a remote attacker to execute arbitrary code via the dumpDirect in RuntimeResourcePackImpl component...

8.8CVSS7.8AI score0.02588EPSS
Exploits0References2
Rows per page
Query Builder