EQST-PoC

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2024-25291	Ji Zzang EQST-PoC	Cri	0.64	9.8	0.02		Feb 29, 2024	Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.
CVE-2024-25292	Ji Zzang EQST-PoC	Cri	0.63	9.6	0.01		Feb 29, 2024	Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter.

CVE-2024-25291CriFeb 29, 2024
Ji Zzang
EQST-PoC
risk 0.64cvss 9.8epss 0.02
Deskfiler v1.2.3 allows attackers to execute arbitrary code via uploading a crafted plugin.
CVE-2024-25292CriFeb 29, 2024
Ji Zzang
EQST-PoC
risk 0.63cvss 9.6epss 0.01
Cross-site scripting (XSS) vulnerability in RenderTune v1.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Upload Title parameter.