CVE-2025-57819-FreePBX-RCE2Root

CVE-2025-57819 — FreePBX SQLi → RCE → Root PoC couvrant toute la chaîne d'exploitation pour CVE-2025-57819. Une injection SQL non authentifiée basée sur les erreurs dans le module endpoint de FreePBX débouche sur un shell root via l'injection d'une tâche cron et l'escalade de privilèges incron...

CVE-2026-5027

CVE-2026-5027 - Langflow 경로 탐색을 통한 원격 코드 실행 설명 Langflow 1.8.4 이하 버전은 POST /api/v2/files 엔드포인트의 filename 매개변수를 검증하지 않습니다. 공격자는 경로 탐색 시퀀스../를 사용하여 파일 시스템의 임의 위치에 파일을 쓸 수 있습니다. Langflow의 기본 자동 로그인 구성과 결합하면 인증 없이도 악용이 가능하며, cron 작업 주입을 통해 root 권한으로 원격 코드 실행으로 이어질 수 있습니다. 영향을 받는 버전 취약한 버전: Langflow =...

EUVD-2026-58548

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-72840

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-72840

OpenWrt LuCI exposes an overly permissive ACL in the luci-mod-system-mounts component that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can use ubus file.write to append arbitrary cron ent...

PT-2026-71903

OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration. Authenticated users with only the mount-configuration ACL group can append arbitrary cron entries via ubus file.write,...

CVE-2026-71269 Node-RED Library API Path Traversal Leading to Arbitrary File Read/Write

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

EUVD-2026-53354

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

CVE-2026-54636 Dokku: OS Command Injection via app.json managed Cron

Dokku is a docker-powered PaaS. Prior to 0.38.7, the cron plugin utilizes commands in the app.json file to manage system cron running as the Dokku user. An app.json cron command utilizing special shell characters - including, but not limited to, or ; - can break out of the Docker container and...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Sangoma Freepbx

CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one e...

CVE-2017-14094

A vulnerability in Trend Micro Smart Protection Server Standalone versions 3.2 and below could allow an attacker to perform remote command execution via a cron job injection on a vulnerable system...