Lucene search
+L

128 matches found

Kitploit
Kitploit
•added 2026/10/20 11:58 p.m.•14 views

CVE-2024-28397-command-execution-poc

CVE-2024-28397-command-execution-poc This vulnerability arises from incomplete sandboxing in js2py, where crafted JavaScript can traverse Python’s internal object model and access dangerous classes like subprocess.Popen, leading to arbitrary command execution. JSON-Parsers & RCE Exploit PoC...

5.3CVSS7.5AI score0.04548EPSS
SaveExploits23References2
Rows per page
Query Builder