GoCast

Products

ProductCVEsExploitedLatest
GoCast3–Nov 21, 2024

Exploited and recent CVEs

  • CVE-2024-28892 Critical 9.8 An OS command injection vulnerability exists in the name parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HT 6.5%
  • CVE-2024-29224 Critical 9.8 An OS command injection vulnerability exists in the NAT parameter of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthenticated HTT 6.3%
  • CVE-2024-21855 Critical 9.8 A lack of authentication vulnerability exists in the HTTP API functionality of GoCast 1.1.3. A specially crafted HTTP request can lead to arbitrary command execution. An attacker can make an unauthent 2.0%