Exploit-DB lists JSP command execution in Parasoft CTP 10.7.5
The remote entry covers Parasoft Continuous Testing Platform 10.7.5 and states no patch or attack status.
Stories per day · 30 days
2 RSS
Relatedcommand-execution2parasoft2agentic-ai1deserialization1exploitability1gartner1jsp1pentesting1picus1tomcat1vulnerability-management1
3 stories, newest first · one card per story
Stories tagged #continuous-testing
Parasoft CTP 10.7.5-SNAPSHOT anonymous deserialization leads to command execution
Researchers say an anonymous database-restore deserialization in the em web app can run commands as uid=1000.
What Is Agentic Pentesting? What It Proves, and Where It Stops.
Picus says agentic pentesting proves exploit chains but misses speed and most of the estate.
2