393 matches found
PT-2026-5978
Name of the Vulnerable Software and Affected Versions FUXA version 1.2.7 Description The software initializes with authentication disabled due to the 'secureEnabled' flag being commented out in the 'server/settings.default.js' file. This allows unauthenticated remote attackers to access sensitive...
CVE-2025-69970
FUXA v1.2.7 contains an insecure default configuration vulnerability in the server/settings.default.js file. Because the secureEnabled flag is commented out by default, the application initializes with authentication disabled . This allows unauthenticated remote attackers to access sensitive API ...
CVE-2025-69983
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
CVE-2023-31717
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
EUVD-2022-1398
Malicious code in bioql PyPI...
EUVD-2023-2610
Malicious code in bioql PyPI...
CVE-2023-33831
A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2023-31718
FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +14 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)
node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 and more Source cves: CVE-2024-57086 Source advisory:...
Exploit for Command Injection in Frangoteam Fuxa
exploitCVE-2023-33831 CVE-2023-33831 Installation ba...
VulnCheck KEV: CVE-2023-33831
A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...
FUXA SQL Injection vulnerability
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
FUXA SQL Injection vulnerability
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
GHSA-45C3-C4C3-8RQG FUXA vulnerable to Local File Inclusion
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
GHSA-V9Q5-9CRP-92F9 FUXA SQL Injection vulnerability
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
FUXA local file inclusion vulnerability
FUXA = 1.1.12 is vulnerable to Local File Inclusion via /api/download...