bulbsecurity kayıtları

bulbsecurity üreticisine ait 6 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 3
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

6 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
42Planlayın	CVE-2012-5878Kavram kanıtı	Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metachabulbsecurity · smartphone pentest framework · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%9,3	3 Oca 2020
35İzleyin	CVE-2012-5693İstismar yok	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharactersbulbsecurity · smartphone pentest framework · CWE-78 pre-auth RCE Komut enjeksiyonu	Yüksek8,8	—	%1,7	3 Oca 2020
27İzleyin	CVE-2012-5694İstismar yok	Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute arbulbsecurity · smartphone pentest framework · CWE-89 pre-auth RCE SQL enjeksiyonu	Orta6,8	—	%1,3	20 Eki 2014
27İzleyin	CVE-2012-5695İstismar yok	Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow rembulbsecurity · smartphone pentest framework · CWE-352 Kimlik doğrulamasız SQL enjeksiyonu CSRF	Orta6,8	—	%0,7	20 Eki 2014
20İzleyin	CVE-2012-5696İstismar yok	Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote bulbsecurity · smartphone pentest framework · CWE-264 Kimlik doğrulamasız	Orta5,0	—	%1,3	20 Eki 2014
18İzleyin	CVE-2012-5697İstismar yok	The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all filesbulbsecurity · smartphone pentest framework · CWE-264	Orta4,6	—	%0,4	20 Eki 2014

CVE-2012-5878
42Planlayın
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacha
KritikCVSS 9,8Kavram kanıtıEPSS %9
- pre-auth RCE
- Komut enjeksiyonu
bulbsecurity · smartphone pentest framework3 Oca 2020
CVE-2012-5693
35İzleyin
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters
YüksekCVSS 8,8İstismar yokEPSS %2
- pre-auth RCE
- Komut enjeksiyonu
bulbsecurity · smartphone pentest framework3 Oca 2020
CVE-2012-5694
27İzleyin
Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute ar
OrtaCVSS 6,8İstismar yokEPSS %1
- pre-auth RCE
- SQL enjeksiyonu
bulbsecurity · smartphone pentest framework20 Eki 2014
CVE-2012-5695
27İzleyin
Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow rem
OrtaCVSS 6,8İstismar yokEPSS %1
bulbsecurity · smartphone pentest framework20 Eki 2014
CVE-2012-5696
20İzleyin
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote
OrtaCVSS 5,0İstismar yokEPSS %1
- Kimlik doğrulamasız
bulbsecurity · smartphone pentest framework20 Eki 2014
CVE-2012-5697
18İzleyin
The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files
OrtaCVSS 4,6İstismar yokEPSS %0
bulbsecurity · smartphone pentest framework20 Eki 2014