Lucene search
+L

121 matches found

Kitploit
Kitploit
added 2026/09/15 8:50 p.m.12 views

CVE-2026-52887-NocoBase-SQLi-RCE

CVE-2026-52887 — NocoBase SQL Injection → PostgreSQL-superuser RCE SQL injection in the myInAppChannels:list action of NocoBase's @nocobase/plugin-notification-in-app-message ≤ 2.0.60. The filterlatestMsgReceiveTimestamp$lt request parameter is interpolated directly into a raw Sequelize.literal S...

10CVSS6AI score0.00892EPSS
SaveExploits1References1
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.87 views

NocoBase - SQL Injection

NocoBase @nocobase/plugin-collection-sql versions prior to 2.0.39 are vulnerable to SQL injection via the sqlCollection:update endpoint. The checkSQL function, which blocks dangerous SQL keywords and ensures only SELECT statements are allowed, is not called during collection updates. id:...

7.2CVSS5.7AI score0.01833EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/15 5:39 a.m.140 views

NocoBase - SQL Injection

NocoBase versions prior to 2.0.39 contain a SQL injection vulnerability in the @nocobase/database package. The queryParentSQL function in eager-loading-tree.ts constructs a recursive CTE query by directly concatenating user-controlled primary key values into the SQL WHERE IN clause without...

8.8CVSS5.9AI score0.01875EPSS
SaveExploits1References2
Nuclei
Nuclei
added 2026/09/13 4:24 p.m.62 views

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

9.9CVSS6.1AI score0.34966EPSS
SaveExploits7References3
Kitploit
Kitploit
added 2026/09/10 8:36 p.m.13 views

CVE-2026-34156

🚨 CVE-2026-34156 - NocoBase Critical Sandbox Escape Unauthenticated / Low-Privilege → Root Remote Code Execution in NocoBase 📌 Overview CVE-2026-34156 is a critical sandbox escape vulnerability in NocoBase an open-source no-code/low-code platform. An attacker with the ability to create or execute...

9.9CVSS6.6AI score0.34966EPSS
SaveExploits7References1
Kitploit
Kitploit
added 2026/09/10 5:37 a.m.5 views

CVE-2026-34156-NocoBase-Sandbox-Escape-via-Workflow-Execution-Vulnerability-

CVE-2026-34156 – NocoBase Sandbox Escape RCE -orange Authenticated Remote Code Execution in NocoBase versions ≤ 2.0.26 via workflow sandbox escape. 📋 Description CVE-2026-34156 is a sandbox escape vulnerability in the NocoBase workflow engine. An authenticated attacker can create a malicious...

9.9CVSS6.4AI score0.34966EPSS
SaveExploits7
Veracode
Veracode
added 2026/09/03 12:04 p.m.9 views

Command Injection

NocoBase is vulnerable to Command Injection. The vulnerability is due to unsanitized interpolation of the database.schema value from crafted backup metadata into shell commands executed with childprocess.exec, which allows an authenticated backup-management user to execute arbitrary commands with...

6.7CVSS6.4AI score0.00721EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2026/09/02 1:17 a.m.8 views

CVE-2026-84701

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

5.4CVSS0.00171EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/09/02 12:37 a.m.45 views

CVE-2026-84701 NocoBase Rich Text Field Stored Cross-Site Scripting via API

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

5.4CVSS0.00171EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/09/02 12:37 a.m.9 views

EUVD-2026-69792

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References4
OSV
OSV
added 2026/09/02 12:37 a.m.11 views

CVE-2026-84701 NocoBase Rich Text Field Stored Cross-Site Scripting via API

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

5.1CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2026/09/02 12:37 a.m.13 views

CVE-2026-84701

NocoBase is vulnerable to stored cross-site scripting (XSS) due to insufficient sanitization of rich text field values in the read renderer (specifically ReadPretty.tsx). An attacker with create permissions can inject arbitrary HTML with event handlers via the collection API, which then executes ...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/09/02 12:37 a.m.12 views

CVE-2026-84701 NocoBase Rich Text Field Stored Cross-Site Scripting via API

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

5.4CVSS5.9AI score0.00171EPSS
SaveExploits0References4
Circl
Circl
added 2026/08/20 8:35 p.m.18 views

CVE-2026-55410

creationtimestamp| type| source ---|---|--- 2026-08-20 20:35:18+00:00| published-proof-of-concept| https://github.com/nocobase/nocobase/security/advisories/GHSA-p853-83gj-wjj3...

6.7CVSS5AI score0.00721EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/08/20 6:42 p.m.15 views

NocoBase: Arbitrary File Write chained with Local file Inclusion leads to Remote code execution

Executive Summary Two vulnerabilities were identified and chained to achieve authenticated remote code execution The first vulnerability allows any authenticated admin to redirect the file upload storage root to an arbitrary path on disk including the application directory itself by supplying an...

6.2AI score
SaveExploits0References6Affected Software1
vulnersOsv
vulnersOsv
added 2026/08/20 6:42 p.m.6 views

@nocobase/devtools (>=2.0.0-alpha.2, <=2.1.0-beta.44), @nocobase/test (>=2.0.0-alpha.2, <=2.1.0-beta.44) potentially affected by unknown CVE via @nocobase/server (>=2.0.0, <=2.1.0-beta.44)

@nocobase/server NPM version =2.0.0, =2.0.0-alpha.2, =2.0.0-alpha.2, =2.1.0-beta.44 Source cves: unknown CVE Source advisory: OSV:GHSA-GHVF-QF6H-G8X5...

5.5AI score
SaveExploits0
OSV
OSV
added 2026/08/20 6:30 p.m.14 views

GHSA-P853-83GJ-WJJ3 NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...

6.7CVSS6.5AI score0.00721EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/08/20 6:30 p.m.19 views

EUVD-2026-44804

NocoBase backup restore schema name allows command injection...

6.7CVSS5.2AI score0.00721EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/08/20 6:30 p.m.14 views

NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...

6.7CVSS6.4AI score0.00721EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
added 2026/07/31 7:44 p.m.22 views

EUVD-2026-44802

NocoBase: SQL injection in /api/myInAppChannels:list filter to PG-superuser RCE...

10CVSS5.7AI score0.00892EPSS
SaveExploits1References5
Rows per page
Query Builder