27 matches found
FuguHub-8.4-Authenticated-RCE-CVE-2024-27697
FuguHub 8.4 인증된 RCE Fuguhub는 클라우드 미디어 서버 소프트웨어입니다. 테스트된 버전은 다음 링크의 데비안 버전입니다: https://fuguhub.com/articles/FuguHub-for-Debian Real Time Logic LLC의 FuguHub v.8.4에서 관리자 패널의 About 페이지에 조작된 스크립트를 통해 로컬 공격자가 임의 코드를 실행할 수 있는 문제가 발견되었습니다. FuguHub 다운로드 페이지를 보여주는 스크린샷 설치 단계: wget...
CVE-2023-24078
CVE-2023-24078. FuguHub / BarracudaDrive용 CVE-2023-24078 https://github.com/overgrowncarrot1/CVE-2023-24078./assets/78485709/5385a824-8000-4731-8d30-dc6ef27b0dd2...
FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790
CVE-2025-65790 - FuguHub 8.1 リフレクテッド SVG XSS FuguHub における SVG レンダリングを介したリフレクテッドクロスサイトスクリプティング XSS https://vulners.com/cve/CVE-2025-65790 このリポジトリは、FuguHub 8.1 におけるリフレクテッドクロスサイトスクリプティング XSS の脆弱性を文書化しています。この脆弱性では、内部ファイルマネージャー /fs/ インターフェースを介して SVG ファイルを表示すると、インライン JavaScript を含む SVG ファイルが実行されます。...
CVE-2023-24078
CVE-2023-24078 FuguHub / BarracudaDrive용 CVE-2023-24078 https://github.com/overgrowncarrot1/CVE-2023-24078./assets/78485709/5385a824-8000-4731-8d30-dc6ef27b0dd2...
CVE-2025-65790
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline...
CVE-2025-65790
A reflected cross-site scripting (XSS) vulnerability exists in FuguHub 8.1 due to the lack of sanitization or script filtering when serving SVG files through the /fs/ file manager interface. The software treats SVG files as active XML content, allowing the browser to execute inline [removed] elem...
CVE-2025-65790: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline...
CVE-2025-65790
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline element, the browser executes...
PT-2025-52679
Name of the Vulnerable Software and Affected Versions FuguHub version 8.1 Description A reflected cross-site scripting XSS issue exists when serving SVG files through the /fs/ file manager interface. The software does not sanitize or restrict script execution within SVG content. An attacker can...
CVE-2025-65790
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline element, the browser executes...
Real Time Logic FuguHub 安全漏洞
Real Time Logic FuguHub is a consumer product from Real Time Logic developed using the Barracuda Application Server SDK. A security vulnerability exists in Real Time Logic FuguHub version 8.1 that stems from the /fs/ file manager interface not cleaning up or restricting script execution when...
Exploit for CVE-2025-65790
CVE-2025-65790 - FuguHub 8.1 Reflected SVG XSS Reflecte...
Exploit for CVE-2024-27697
FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Serve...
Exploit for Code Injection in Realtimelogic Fuguhub
Description This script is a Proof of Concept PoC exploit I...
FuguHub 8.1 - Remote Code Execution Exploit
Exploit Title: FuguHub 8.1 - Remote Code Execution Date: 6/24/2023 Exploit Author: redfire359 Vendor Homepage: https://fuguhub.com/ Software Link: https://fuguhub.com/download.lsp Version: 8.1 Tested on: Ubuntu 22.04.1 CVE : CVE-2023-24078 import requests from bs4 import BeautifulSoup import...
FuguHub 8.1 - Remote Code Execution
Exploit Title: FuguHub 8.1 - Remote Code Execution Date: 6/24/2023 Exploit Author: redfire359 Vendor Homepage: https://fuguhub.com/ Software Link: https://fuguhub.com/download.lsp Version: 8.1 Tested on: Ubuntu 22.04.1 CVE : CVE-2023-24078 import requests from bs4 import BeautifulSoup import...
FuguHub 8.1 Remote Code Execution
Exploit Title: FuguHub 8.1 - Remote Code Execution Date: 6/24/2023 Exploit Author: redfire359 Vendor Homepage: https://fuguhub.com/ Software Link: https://fuguhub.com/download.lsp Version: 8.1 Tested on: Ubuntu 22.04.1 CVE : CVE-2023-24078 import requests from bs4 import BeautifulSoup import...
Exploit for Code Injection in Realtimelogic Fuguhub
CVE-2023-24078. CVE-2023-24078...