locutus kayıtları
locutus üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
- CWE-95 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-13619İstismar yok | php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.locutus · locutus php · CWE-78 | Kritik9,8 | — | %2,9 | 1 Tem 2020 |
40Planlayın | CVE-2020-7719İstismar yok | Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.locutus · locutus · CWE-1321 | Kritik9,8 | — | %2,7 | 1 Eyl 2020 |
39İzleyin | CVE-2026-32304İstismar yok | Locutus: RCE via unsanitized input in create_function()locutus · locutus · CWE-94 | Kritik9,8 | — | %0,8 | 13 Mar 2026 |
37İzleyin | CVE-2026-25521İstismar yok | Locutus is vulnerable to Prototype Pollutionlocutus · locutus · CWE-1321 | Kritik9,4 | — | %0,4 | 4 Şub 2026 |
32İzleyin | CVE-2026-29091İstismar yok | Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injectionlocutus · locutus · CWE-95 | Yüksek8,1 | — | %1,0 | 6 Mar 2026 |
31İzleyin | CVE-2021-23392İstismar yok | Regular Expression Denial of Service (ReDoS)locutus · locutus | Yüksek7,5 | — | %1,9 | 8 Haz 2021 |
27İzleyin | CVE-2026-33993İstismar yok | Locutus has Prototype Pollution via __proto__ Key Injection in unserialize()locutus · locutus · CWE-1321 | Orta6,9 | — | %0,7 | 27 Mar 2026 |
25İzleyin | CVE-2026-33994İstismar yok | Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521locutus · locutus · CWE-1321 | Orta6,3 | — | %0,7 | 27 Mar 2026 |
- CVE-2020-1361940Planlayın
php/exec/escapeshellarg in Locutus PHP through 2.0.11 allows an attacker to achieve code execution.
KritikCVSS 9,8İstismar yokEPSS %2locutus · locutus php1 Tem 2020
- CVE-2020-771940Planlayın
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
KritikCVSS 9,8İstismar yokEPSS %2locutus · locutus1 Eyl 2020
- CVE-2026-3230439İzleyin
Locutus: RCE via unsanitized input in create_function()
KritikCVSS 9,8İstismar yokEPSS %0locutus · locutus13 Mar 2026
- CVE-2026-2552137İzleyin
Locutus is vulnerable to Prototype Pollution
KritikCVSS 9,4İstismar yokEPSS %0locutus · locutus4 Şub 2026
- CVE-2026-2909132İzleyin
Locutus: Remote Code Execution (RCE) in locutus call_user_func_array due to Code Injection
YüksekCVSS 8,1İstismar yokEPSS %1locutus · locutus6 Mar 2026
- CVE-2021-2339231İzleyin
Regular Expression Denial of Service (ReDoS)
YüksekCVSS 7,5İstismar yokEPSS %1locutus · locutus8 Haz 2021
- CVE-2026-3399327İzleyin
Locutus has Prototype Pollution via __proto__ Key Injection in unserialize()
OrtaCVSS 6,9İstismar yokEPSS %0locutus · locutus27 Mar 2026
- CVE-2026-3399425İzleyin
Locutus Prototype Pollution due to incomplete fix for CVE-2026-25521
OrtaCVSS 6,3İstismar yokEPSS %0locutus · locutus27 Mar 2026