5 matches found
CVE-2026-47668
CVE-2026-47668 Unauthenticated RCE in DBGate = 7.1.8 REF1: https://github.com/dbgate/dbgate/security/advisories/GHSA-8v3q-9vmx-36vc REF2: https://github.com/Nxploited/CVE-2026-47668 rce.py Minimal implementation of RCE on /runners/start, Privileged If process can write to ./public/ folder, file...
DbGate CVE-2026-47668 Script Runner RCE Detect
Detects CVE-2026-47668 in DbGate = 7.1.8: POST /runners/start transpiles JSON scripts with raw functionName concatenation after dbgateApi., enabling Node.js code injection without run-shell-script permission. Anonymous auth often yields a JWT via POST /auth/login. !/usr/bin/env python3 -- coding:...
DbGate Script Runner RCE (CVE-2026-47668)
Exploits CVE-2026-47668 in DbGate ;// runs arbitrary Node.js as root. Anonymous POST /auth/login often yields a JWT. Delivers the configured framework payload reversetcp by default; set payload nopayload to capture verifycmd output via out.txt under /runners/data//. !/usr/bin/env python3 -- codin...
