25 matches found
FuguHub-8.4-Authenticated-RCE-CVE-2024-27697
FuguHub 8.4 認証済みRCE FuguHub はクラウドメディアサーバーソフトウェアです。テストしたバージョンは、このリンクの Debian 版です: https://fuguhub.com/articles/FuguHub-for-Debian Real Time Logic LLC の FuguHub v.8.4 には、ローカルの攻撃者が細工したスクリプトを Administrator パネルの About ページに送ることで任意のコードを実行できる問題があります。 FuguHub のダウンロードページを示すスクリーンショット インストール手順: root@kitploit...
FuguHub-8.1-Reflected-SVG-XSS-CVE-2025-65790
CVE-2025-65790 - FuguHub 8.1 リフレクテッド SVG XSS FuguHub における SVG レンダリングを介したリフレクテッドクロスサイトスクリプティング XSS https://vulners.com/cve/CVE-2025-65790 このリポジトリは、FuguHub 8.1 におけるリフレクテッドクロスサイトスクリプティング XSS の脆弱性を文書化しています。この脆弱性では、内部ファイルマネージャー /fs/ インターフェースを介して SVG ファイルを表示すると、インライン JavaScript を含む SVG ファイルが実行されます。...
CVE-2023-24078
CVE-2023-24078. FuguHub / BarracudaDrive 向け CVE-2023-24078 https://github.com/overgrowncarrot1/CVE-2023-24078./assets/78485709/5385a824-8000-4731-8d30-dc6ef27b0dd2...
CVE-2023-24078
CVE-2023-24078 CVE-2023-24078 は FuguHub / BarracudaDrive 向け...
CVE-2025-65790
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline...
CVE-2025-65790
CVE-2025-65790 affects FuguHub 8.1. The vulnerability arises in the internal file manager interface (/fs/) where SVG files are served without sanitizing or restricting inline script execution, allowing a crafted SVG with a [removed] element to execute attacker-controlled JavaScript in the victim’...
PT-2025-52679
Name of the Vulnerable Software and Affected Versions FuguHub version 8.1 Description A reflected cross-site scripting XSS issue exists when serving SVG files through the /fs/ file manager interface. The software does not sanitize or restrict script execution within SVG content. An attacker can...
CVE-2025-65790
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline element, the browser executes...
Real Time Logic FuguHub 安全漏洞
Real Time Logic FuguHub is a consumer product from Real Time Logic developed using the Barracuda Application Server SDK. A security vulnerability exists in Real Time Logic FuguHub version 8.1 that stems from the /fs/ file manager interface not cleaning up or restricting script execution when...
CVE-2025-65790
A reflected cross-site scripting XSS vulnerability exists in FuguHub 8.1 when serving SVG files through the /fs/ file manager interface. FuguHub does not sanitize or restrict script execution inside SVG content. When a victim opens a crafted SVG containing an inline element, the browser executes...
Exploit for CVE-2025-65790
CVE-2025-65790 - FuguHub 8.1 Reflected SVG XSS Reflecte...
Exploit for CVE-2024-27697
FuguHub 8.4 Authenticated RCE Fuguhub is a Cloud Media Serve...
Exploit for Code Injection in Realtimelogic Fuguhub
Description This script is a Proof of Concept PoC exploit I...
FuguHub 8.1 - Remote Code Execution Exploit
Exploit Title: FuguHub 8.1 - Remote Code Execution Date: 6/24/2023 Exploit Author: redfire359 Vendor Homepage: https://fuguhub.com/ Software Link: https://fuguhub.com/download.lsp Version: 8.1 Tested on: Ubuntu 22.04.1 CVE : CVE-2023-24078 import requests from bs4 import BeautifulSoup import...
FuguHub 8.1 - Remote Code Execution
Exploit Title: FuguHub 8.1 - Remote Code Execution Date: 6/24/2023 Exploit Author: redfire359 Vendor Homepage: https://fuguhub.com/ Software Link: https://fuguhub.com/download.lsp Version: 8.1 Tested on: Ubuntu 22.04.1 CVE : CVE-2023-24078 import requests from bs4 import BeautifulSoup import...
FuguHub 8.1 Remote Code Execution
Exploit Title: FuguHub 8.1 - Remote Code Execution Date: 6/24/2023 Exploit Author: redfire359 Vendor Homepage: https://fuguhub.com/ Software Link: https://fuguhub.com/download.lsp Version: 8.1 Tested on: Ubuntu 22.04.1 CVE : CVE-2023-24078 import requests from bs4 import BeautifulSoup import...
Exploit for Code Injection in Realtimelogic Fuguhub
CVE-2023-24078. CVE-2023-24078...
Exploit for Code Injection in Realtimelogic Fuguhub
CVE-2023-24078 CVE-2023-24078 f...
