Lucene search
+L

175 matches found

Kitploit
Kitploit
•added 2026/11/13 10:20 p.m.•20 views

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

5.3CVSS7.6AI score0.04815EPSS
SaveExploits24References2
Rows per page
Query Builder