Lucene search
+L

117 matches found

Kitploit
Kitploit
•added 2026/10/19 2:23 p.m.•13 views

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

5.3CVSS7.5AI score0.04548EPSS
SaveExploits23References2
Rows per page
Query Builder