319 matches found
CVE-2025-69983
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...
FUXA 安全漏洞
FUXA is a web-based process visualization software developed by frangoteam. Version 1.2.7 of FUXA contains a security vulnerability. This vulnerability stems from unsafe default configurations in the server/settings.default.js file, which disable authentication. As a result, unauthenticated remot...
CVE-2025-69970
CVE-2025-69970 affects FUXA v1.2.7, where an insecure default configuration exists in server/settings.default.js: the secureEnabled flag is commented out, causing authentication to be disabled on startup. This enables unauthenticated remote access to sensitive API endpoints, with capabilities to ...
CVE-2025-69981
FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the /api/upload API endpoint. The endpoint lacks authentication mechanisms, allowing unauthenticated remote attackers to upload arbitrary files. This can be exploited to overwrite critical system files such as the SQLite user...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
CVE-2023-31717
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
EUVD-2023-2610
Malicious code in bioql PyPI...
EUVD-2022-1398
Malicious code in bioql PyPI...
CVE-2023-33831
A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2023-31718
FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +13 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)
node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 Source cves: CVE-2024-57086 Source advisory: OSV:GHSA-GVWQ-6FMX-28XM...
Exploit for Command Injection in Frangoteam Fuxa
exploitCVE-2023-33831 CVE-2023-33831 Installation ba...
VulnCheck KEV: CVE-2023-33831
A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...
FUXA SQL Injection vulnerability
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
FUXA SQL Injection vulnerability
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
GHSA-45C3-C4C3-8RQG FUXA vulnerable to Local File Inclusion
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
GHSA-V9Q5-9CRP-92F9 FUXA SQL Injection vulnerability
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...