Smartphone Pentest Framework
Approved changes feed: RSS · Atom
cpe:2.3:a:bulbsecurity:smartphone_pentest_framework:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Bulbsecurity (108e3bb5-1cc5-59b0-a8e3-867d194d4831) |
|---|---|
| Product | Smartphone Pentest Framework (a4ebf24e-0029-5669-aa03-9539f96e224b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
"pkg:github/vaginessa/smartphone-pentest-framework\u20142-" |
purl2cpe | 2026-06-01 10:11:06.259710 |
pkg:github/antimoon/smartphone-pentest-framework |
purl2cpe | 2026-06-01 10:11:06.259705 |
pkg:github/vaginessa/smartphone-pentest-framework |
purl2cpe | 2026-06-01 10:11:06.259707 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-5878 |
vulnerable | 2026-06-08 05:02:58.520479 |
Details available
Bulb Security Smartphone Pentest Framework (SPF) 0.1.2 through 0.1.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the hostingPath parameter to (1) SEAttack.pl or (2) CSAttack.pl in frameworkgui/ or the (3) appURLPath parameter to frameworkgui/attachMobileModem.pl.
Published: 2020-01-03T19:30:28.000Z
Updated: 2024-08-06T21:21:28.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5697 |
vulnerable | 2026-06-08 05:02:58.121413 |
Details available
The btinstall installation script in Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 uses weak permissions (777) for all files in the frameworkgui/ directory, which allows local users to obtain sensitive information or inject arbitrary Perl code via direct access to these files.
Published: 2014-10-20T16:00:00.000Z
Updated: 2024-08-06T21:14:16.432Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5696 |
vulnerable | 2026-06-08 05:02:58.121101 |
Details available
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 does not properly restrict access to frameworkgui/config, which allows remote attackers to obtain the plaintext database password via a direct request.
Published: 2014-10-20T16:00:00.000Z
Updated: 2024-08-06T21:14:16.405Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5693 |
vulnerable | 2026-06-08 05:02:58.116772 |
Details available
Bulb Security Smartphone Pentest Framework (SPF) before 0.1.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the ipAddressTB parameter to (1) remoteAttack.pl or (2) guessPassword.pl in frameworkgui/; the filename parameter to (3) CSAttack.pl or (4) SEAttack.pl in frameworkgui/; the phNo2Attack parameter to (5) CSAttack.pl or (6) SEAttack.pl in frameworkgui/; the (7) platformDD2 parameter to frameworkgui/SEAttack.pl; the (8) agentURLPath or (9) agentControlKey parameter to frameworkgui/attach2agents.pl; or the (10) controlKey parameter to frameworkgui/attachMobileModem.pl. NOTE: The hostingPath parameter to CSAttack.pl and SEAttack.pl vectors and the appURLPath parameter to attachMobileModem.pl vector are covered by CVE-2012-5878.
Published: 2020-01-03T19:30:24.000Z
Updated: 2024-08-06T21:14:16.546Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.