Lucene search
K

14 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-2069

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00133EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2025/05/23 4:9 a.m.5 views

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.8CVSS7.8AI score0.00133EPSS
Exploits1
Veracode
Veracode
added 2023/08/02 2:40 a.m.11 views

Code Injection

webmagic-extension is vulnerable to Code Injection. The vulnerability exists because the download function of PhantomJSDownloader.java does not properly check if the phantomJsCommand is a phantomjs executable, allowing an attacker to inject and execute malicious code...

9.8CVSS7.1AI score0.00133EPSS
Exploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2023/07/28 3:30 p.m.19 views

Code injection in webmagic-core

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.8CVSS7.7AI score0.00133EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2023/07/28 3:30 p.m.0 views

GHSA-GRVQ-VJQR-X8VM Code injection in webmagic-core

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.8CVSS5.9AI score0.00133EPSS
Exploits1References3
OSV
OSV
added 2023/07/28 3:15 p.m.18 views

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.8CVSS8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2023/07/28 3:15 p.m.2 views

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.8CVSS7.4AI score0.00133EPSS
Exploits1References2
NVD
NVD
added 2023/07/28 3:15 p.m.13 views

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.8CVSS9.7AI score0.00133EPSS
Exploits1References1
Prion
Prion
added 2023/07/28 3:15 p.m.14 views

Code injection

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

7.5CVSS9.7AI score0.00133EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/07/28 12:0 a.m.47 views

CVE-2023-39015

CVE-2023-39015 pertains to the WebMagic project, specifically webmagic-extension v0.9.0 and earlier. The root issue is a code injection vulnerability in the PhantomJSDownloader component (us.codecraft.webmagic.downloader.PhantomJSDownloader) that allows injection and execution of malicious code. ...

9.8CVSS9.7AI score0.00133EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/07/28 12:0 a.m.10 views

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

7.8AI score0.00133EPSS
Exploits1References1
CNNVD
CNNVD
added 2023/07/28 12:0 a.m.2 views

WebMagic 代码注入漏洞

WebMagic is an open source Java web crawler framework for easily crawling data from the Internet. A security vulnerability exists in WebMagic webmagic-extension v0.9.0 and earlier versions, which stems from a code injection vulnerability in the component...

9.8CVSS8.4AI score0.00133EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/07/28 12:0 a.m.1 views

PT-2023-26737 · Unknown · Webmagic-Extension

Name of the Vulnerable Software and Affected Versions: webmagic-extension versions 0.9.0 and below Description: A code injection issue was discovered in the component us.codecraft.webmagic.downloader.PhantomJSDownloader. This allows for potential code injection attacks. Recommendations: For...

9.8CVSS9.5AI score0.00133EPSS
Exploits1References6
Cvelist
Cvelist
added 2023/07/28 12:0 a.m.15 views

CVE-2023-39015

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader...

9.9AI score0.00133EPSS
Exploits1References1
Rows per page
Query Builder