mayuresh82 records
3 published records for vendor mayuresh82.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-306 Missing Authentication for Critical Function1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
41Plan | CVE-2024-28892No exploit | An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3.mayuresh82 · gocast · CWE-78 | Critical9.8 | 6.4%Nov 21, 2024 |
41Plan | CVE-2024-29224No exploit | An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3.mayuresh82 · gocast · CWE-78 | Critical9.8 | 6.3%Nov 21, 2024 |
40Plan | CVE-2024-21855No exploit | A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3.mayuresh82 · gocast · CWE-306 | Critical9.8 | 2.0%Nov 21, 2024 |
- CVE-2024-2889241Plan
An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3.
CriticalCVSS 9.8No exploitEPSS 6%mayuresh82 · gocastNov 21, 2024
- CVE-2024-2922441Plan
An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3.
CriticalCVSS 9.8No exploitEPSS 6%mayuresh82 · gocastNov 21, 2024
- CVE-2024-2185540Plan
A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3.
CriticalCVSS 9.8No exploitEPSS 2%mayuresh82 · gocastNov 21, 2024