Lucene search
+L

227 matches found

BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:16 p.m.•37 views

The vulnerability of the TrueConf Server software, related to the failure to take measures to neutralize special elements, allows a violator to execute arbitrary code.

The vulnerability of the TrueConf Server software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

10CVSS7.4AI score
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/10/08 1:15 p.m.•37 views

The vulnerability of the TrueConf Server software, related to deficiencies in the authentication process, allows a perpetrator to obtain a token with administrator privileges.

The vulnerability of the TrueConf Server software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain an administrator-level token...

8.5CVSS6.1AI score
SaveExploits0Affected Software1
Kitploit
Kitploit
•added 2026/10/01 7:12 p.m.•14 views

CVE-2026-72530-TrueConf-Sandbox-Escape-

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation & Detection PoC 📌 Descripción General Este repositorio contiene una demostración educativa de la mitigación y detección para CVE-2026-72530 , una vulnerabilidad crítica de Code Injection y Sandbox Escape en TrueConf Server. Contexto de l...

9.5CVSS8.9AI score0.01686EPSS
SaveExploits2
Information Security Automation
Information Security Automation
•added 2026/09/29 3:00 p.m.•14 views

September "In the Trend of VM" (#31): vulnerabilities in TeamCity, TrueConf, SharePoint, Windows, and Zimbra Collaboration

September "In the Trend of VM" 31: vulnerabilities in TeamCity, TrueConf, SharePoint, Windows, and Zimbra Collaboration. Here is the traditional monthly roundup of trending vulnerabilities according to Positive Technologies. The previous August edition featured four vulnerabilities. This time,...

9.8CVSS6AI score0.8957EPSS
SaveExploits28
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-104473

Уязвимость программного обеспечения TrueConf Server связана с непринятием мер по нейтрализации специальных элементов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

10CVSS5.9AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/15 12:00 a.m.•13 views

TrueConf Server < 5.3.9.10013 / 5.4.9.10018 / 5.5.5.10010 Multiple Vulnerabilities

The version of TrueConf Server installed on the remote host is prior to 5.3.9.10013, 5.4.9.10018, or 5.5.5.10010. It is, therefore, affected by multiple vulnerabilities: - A remote unauthenticated attacker connecting to TrueConf Server over 4307/TCP can invoke an undocumented critical function an...

9.8CVSS8.6AI score0.01686EPSS
SaveExploits3References3
Information Security Automation
Information Security Automation
•added 2026/09/03 7:00 p.m.•16 views

About Remote Code Execution - TrueConf Server (CVE-2026-72529, CVE-2026-72530) vulnerability

About Remote Code Execution - TrueConf Server CVE-2026-72529, CVE-2026-72530 vulnerability. TrueConf Server is a Russian on-premises corporate messaging and UltraHD video conferencing platform. The attack chain consists of two critical vulnerabilities. The first vulnerability, CVE-2026-72529, is...

9.8CVSS8.6AI score0.01686EPSS
SaveExploits3
GithubExploit
GithubExploit
•added 2026/08/25 9:14 p.m.•26 views

Exploit for Code Injection in Trueconf Trueconf_Server

CVE-2026-72530: TrueConf Server Sandbox Escape - Mitigation &...

9.5CVSS8.4AI score0.01686EPSS
SaveExploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2026/08/20 12:00 a.m.•55 views

TrueConf Server Code Injection Vulnerability

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS8.6AI score0.01686EPSS
SaveIn wildExploits2
CISA KEV Catalog
CISA KEV Catalog
•added 2026/08/20 12:00 a.m.•35 views

TrueConf Server Missing Authentication for Critical Function Vulnerability

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script...

9.8CVSS8.6AI score0.01464EPSS
SaveIn wildExploits1
NVD
NVD
•added 2026/08/19 5:21 p.m.•44 views

CVE-2026-72530

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS0.01686EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2026/08/19 4:55 p.m.•156 views

CVE-2026-72529

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

9.8CVSS0.01464EPSS
SaveExploits1References1
CVE
CVE
•added 2026/08/19 4:55 p.m.•262 views

CVE-2026-72529

TrueConf Server (videoconferencing) is affected by a missing authentication vulnerability in an undocumented function accessible via port 4307/TCP . A remote unauthenticated attacker can invoke this function to execute an arbitrary script on the server. Affected versions: 5.3.X–5.3.9, 5.4.X–5.4.9...

9.8CVSS8.3AI score0.01464EPSS
SaveIn wildExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/08/19 4:55 p.m.•33 views

CVE-2026-72529

A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function...

9.8CVSS8.3AI score0.01464EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2026/08/12 12:00 a.m.•39 views

VulnCheck KEV: CVE-2026-72529

TrueConf Server contains a missing authentication for critical function vulnerability which could allow a remote unauthorized attacker with network access via port 4307/TCP to execute an arbitrary script...

9.8CVSS8.6AI score0.01464EPSS
SaveIn wildExploits1References5
VulnCheck KEV
VulnCheck KEV
•added 2026/08/12 12:00 a.m.•32 views

VulnCheck KEV: CVE-2026-72530

TrueConf Server contains a code injection vulnerability that could allow an unauthorized remote attacker with network access via port 4307/TCP to use a specially crafted script to break out of the isolated environment and execute arbitrary code on the host system...

9.5CVSS8.6AI score0.01686EPSS
SaveIn wildExploits2References5
BDU FSTEC
BDU FSTEC
•added 2026/08/10 12:00 a.m.•20 views

The vulnerability of the TrueConf Server software, related to improper code generation management, allows a perpetrator to execute arbitrary code.

The vulnerability of the TrueConf Server software is related to incorrect code generation management. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.5AI score0.01686EPSS
SaveExploits2References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/10 12:00 a.m.•72 views

The vulnerability of the TrueConf Server software lies in the lack of authentication for critical functions, allowing attackers to execute arbitrary scripts and increase their privileges.

The vulnerability of the TrueConf Server software is related to the lack of authentication for critical functions. Exploiting this vulnerability allows a malicious actor to execute arbitrary scripts and increase their privileges...

10CVSS7.3AI score0.01464EPSS
SaveExploits1References6Affected Software1
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•27 views

PT-2026-70006

Name of the Vulnerable Software and Affected Versions TrueConf server versions 5.3.0 through 5.3.9 TrueConf server versions 5.4.0 through 5.4.9 TrueConf server versions 5.5.0 through 5.5.5 TrueConf server versions prior to 5.3.0 Description Improper management of code generation allows a remote...

9.5CVSS8.3AI score0.01686EPSS
SaveExploits2References20
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•58 views

PT-2026-70005

Name of the Vulnerable Software and Affected Versions TrueConf Server versions 5.3.x through 5.3.9 TrueConf Server versions 5.4.x through 5.4.9 TrueConf Server versions 5.5.x through 5.5.5 TrueConf Server versions prior to 5.5.5 Description An issue exists where a remote unauthorized attacker wit...

9.8CVSS8.2AI score0.01464EPSS
SaveExploits1References23
Rows per page
Query Builder