173 matches found
The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.
The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...
CVE-2026-72530-TrueConf-Sandbox-Escape-
CVE-2026-72530: TrueConf Server 沙箱逃逸 - 缓解与检测 PoC 📌 概述 本仓库包含针对 CVE-2026-72530 的缓解与检测教育演示，这是 TrueConf Server 中一个严重的 代码注入与沙箱逃逸 漏洞。 漏洞背景： 该漏洞允许未经认证的远程攻击者逃逸 TrueConf 的隔离环境，并在宿主机系统上执行任意代码 影响 TrueConf Server 5.3.9 之前的 5.3.x 版本、5.4.9 之前的 5.4.x 版本、5.5.5 之前的 5.5.x 版本 CVSS v3：9.0-9.5（严重） CWE-94 ：代码注入 /...
TrueConf Server < 5.3.9.10013 / 5.4.9.10018 / 5.5.5.10010 Multiple Vulnerabilities
The version of TrueConf Server installed on the remote host is prior to 5.3.9.10013, 5.4.9.10018, or 5.5.5.10010. It is, therefore, affected by multiple vulnerabilities: - A remote unauthenticated attacker connecting to TrueConf Server over 4307/TCP can invoke an undocumented critical function an...
TrueConf Server Missing Authentication for Critical Function Vulnerability
TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script...
TrueConf Server Code Injection Vulnerability
TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...
CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...
CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
CVE-2026-72529
TrueConf Server (videoconferencing) is affected by a missing authentication vulnerability in an undocumented function accessible via port 4307/TCP . A remote unauthenticated attacker can invoke this function to execute an arbitrary script on the server. Affected versions: 5.3.X–5.3.9, 5.4.X–5.4.9...
VulnCheck KEV: CVE-2026-72530
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...
VulnCheck KEV: CVE-2026-72529
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...
The vulnerability of the TrueConf Server software, related to improper code generation management, allows a perpetrator to execute arbitrary code.
The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the TrueConf Server software lies in the lack of authentication for critical functions, allowing attackers to execute arbitrary scripts and increase their privileges.
The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...
PT-2026-70005
Name of the Vulnerable Software and Affected Versions TrueConf Server versions 5.3.x through 5.3.9 TrueConf Server versions 5.4.x through 5.4.9 TrueConf Server versions 5.5.x through 5.5.5 TrueConf Server versions prior to 5.5.5 Description An issue exists where a remote unauthorized attacker wit...
PT-2026-70006
Name of the Vulnerable Software and Affected Versions TrueConf server versions 5.3.0 through 5.3.9 TrueConf server versions 5.4.0 through 5.4.9 TrueConf server versions 5.5.0 through 5.5.5 TrueConf server versions prior to 5.3.0 Description Improper management of code generation allows a remote...
The vulnerability of the TrueConf Server software method allows a perpetrator to initiate requests on behalf of the server.
The vulnerability of the TrueConf Server software lies in the insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to initiate requests on behalf of the server remotely...
CVE-2025-66823
An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page conference url/info...
CVE-2025-66834
A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name...
EUVD-2025-205848
An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page conference url/info...