Sploitus

CVE-2024-28397

22 known exploits for CVE-2024-28397

An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers to execute arbitrary code via a crafted API call.

Affected products
Suse, Js2Py
Fix
Available
CVSS 3.1
5.3 MEDIUM
EPSS
4.5% (91th percentile)
Weakness
CWE-94
NVD status
Deferred
Published
2024-06-20
CVE-2024-28397 at NVD
Authoritative description, scoring and affected products

22 known exploits for CVE-2024-28397

Proof-of-concept code and exploit modules indexed by Sploitus

Exploit for CVE-2024-28397
2026-05-12 y0naldezGITHUB
Js2Py 0.74 - RCE
2026-04-30 alisunbulEXPLOITDBPython
Exploit for CVE-2024-28397
2026-02-03 xeloxaGITHUB
Exploit for CVE-2024-28397
2026-01-11 3z-p0wnGITHUB
📄 js2py 0.74 Automated Sandbox Escape / Code Execution
2025-12-18 indoushkaPACKETSTORMPHP
Exploit for CVE-2024-28397
2025-12-06 L1337XiGITHUB
Exploit for CVE-2024-28397
2025-09-17 nelissandroGITHUB
Exploit for CVE-2024-28397
2025-09-17 vitaciminIPIGITHUB
Exploit for CVE-2024-28397
2025-09-15 0xDTCGITHUB
Exploit for CVE-2024-28397
2025-09-09 naclaporGITHUB
Exploit for CVE-2024-28397
2025-09-06 ExtremeUdayGITHUB
Exploit for CVE-2024-28397
2025-08-28 Naved124GITHUB
Exploit for CVE-2024-28397
2025-08-27 LeilamagGITHUB
Exploit for CVE-2024-28397
2025-08-18 0timedayGITHUB
Exploit for CVE-2024-28397
2025-08-18 harutomo-jpGITHUB
Exploit for CVE-2024-28397
2025-08-17 waleed-hassan569GITHUB
Pyload Remote Code Execution Exploit
2024-11-18 metasploitZDTRuby
Pyload Remote Code Execution
2024-11-18 Spencer McIntyre, jheysel-r7, metasploit.comPACKETSTORMRuby
Pyload RCE (CVE-2024-39205) with js2py sandbox escape (CVE-2024-28397)
2024-11-15 Marven11, Spencer McIntyre, jheysel-r7METASPLOITRuby
Exploit for CVE-2024-39205
2024-10-26 Marven11GITHUB
Exploit for CVE-2024-28397
2024-06-21 CYBER-WARRIOR-SECGITHUB
Exploit for CVE-2024-28397
2024-06-19 Marven11GITHUB