319 matches found
PT-2026-6372
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...
CVE-2025-69983
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...
CVE-2025-69983
FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...
CVE-2025-69981
FUXA v1.2.7 contains an Unrestricted File Upload vulnerability in the /api/upload API endpoint. The endpoint lacks authentication mechanisms, allowing unauthenticated remote attackers to upload arbitrary files. This can be exploited to overwrite critical system files such as the SQLite user...
CVE-2023-31716
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...
CVE-2023-31717
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
EUVD-2023-2610
Malicious code in bioql PyPI...
EUVD-2022-1398
Malicious code in bioql PyPI...
CVE-2023-33831
A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...
CVE-2023-31718
FUXA = 1.1.12 is vulnerable to Local via Inclusion via /api/download...
CVE-2023-31719
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
@frangoteam/fuxa (>=1.1.19, <=1.2.4), @frangoteam/fuxa-min (>=1.1.19, <=1.2.4) +13 more potentially affected by CVE-2024-57086 via node-opcua-alarm-condition (>=2.119.0, <=2.134.0)
node-opcua-alarm-condition NPM version =2.119.0, =1.1.19, =1.1.19, =2.3.1, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =2.119.0, =0.1.0, =0.1.7 - node-red-contrib-opcua-test 0.0.3 Source cves: CVE-2024-57086 Source advisory: OSV:GHSA-GVWQ-6FMX-28XM...
Exploit for Command Injection in Frangoteam Fuxa
exploitCVE-2023-33831 CVE-2023-33831 Installation ba...
VulnCheck KEV: CVE-2023-33831
A remote command execution RCE vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request...
FUXA SQL Injection vulnerability
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
FUXA SQL Injection vulnerability
FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...
GHSA-V9Q5-9CRP-92F9 FUXA SQL Injection vulnerability
A SQL Injection attack in FUXA = 1.1.12 allows exfiltration of confidential information from the database...
GHSA-45C3-C4C3-8RQG FUXA vulnerable to Local File Inclusion
FUXA = 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log...