Bulbsecurity Smartphone Pentest Framework — known CVE vulnerabilities

Every CVE whose affected-product data names Bulbsecurity Smartphone Pentest Framework, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2012-5878 — CVSS 9.8 (critical): Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell…
• CVE-2012-5693 — CVSS 8.8 (high): Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell…
• CVE-2012-5694 — CVSS 6.8 (medium): Multiple SQL injection vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allow remote attackers to execute…
• CVE-2012-5695 — CVSS 6.8 (medium): Multiple cross-site request forgery (CSRF) vulnerabilities in Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allow…
• CVE-2012-5696 — CVSS 5.0 (medium): Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote…
• CVE-2012-5697 — CVSS 4.6 (medium): The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all…