CVE-2012-5878

9.8 criticalEPSS 9.3%

Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 9.3% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2020-01-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

bulbsecurity:smartphone_pentest_framework

References

https://www.htbridge.com/advisory/HTB23123
https://www.htbridge.com/advisory/HTB23127
https://www.htbridge.com/advisory/HTB23123
https://www.htbridge.com/advisory/HTB23127

Check your stack JSON