CVE-2025-66834

TrueConf Server is affected by a CSV Formula Injection in version 5.5.2.10813. A normal user can inject malicious spreadsheet formulas into exported chat logs by crafting the Display Name, indicating a CSV macro/formula injection vulnerability. Impact per sources is high confidentiality and integ...

TrueConf Server 安全漏洞

TrueConf Server is a self-hosted and secure video collaboration platform from the Russian company TrueConf. A security vulnerability exists in TrueConf Server version 5.5.2.10813, which stems from a vulnerability that allows injection of malicious spreadsheet formulas via specially crafted displa...

CVE-2025-66824

TrueConf Server v5.5.2.10813 is affected by a Stored XSS in the Meeting location field (Create/Edit Conference) where input in the meeting_room parameter is stored and executed on the Conference Info page, enabling full Account Takeover (ATO). Root cause: improper sanitization of user-supplied in...

CVE-2025-66823

CVE-2025-66823 describes an HTML injection vulnerability in TrueConf Server 5.5.2.10813 in the conference description field. The issue allows an attacker to inject arbitrary HTML in Create/Edit conference functionality, with execution when the victim views the Conference Info page. Affected compo...

CVE-2025-66835

TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context...

EUVD-2017-11125

Malware in sbrugna...

EUVD-2017-11122

Malware in sbrugna...

EUVD-2017-11127

Malware in sbrugna...

EUVD-2017-11120

Malware in sbrugna...

EUVD-2017-11126

Malware in sbrugna...

EUVD-2017-11124

Malware in sbrugna...

EUVD-2017-11121

Malware in sbrugna...

EUVD-2017-11123

Malware in sbrugna...

EUVD-2022-49546

Malicious code in bioql PyPI...

The vulnerability of the TrueConf Server software, related to errors in processing the relative path to the directory, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the TrueConf Server software is related to errors in processing the relative path to the directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the TrueConf Server software lies in its ability to bypass the authentication process by using an alternative path or channel. This allows a perpetrator to execute certain requests to the application programming interface (API).

The vulnerability of the TrueConf Server software relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to execute certain requests to the application programming interface API remotely...

The vulnerability of the TrueConf Server software exists due to the lack of measures taken to neutralize special elements, allowing a violator to execute arbitrary code.

The software of TrueConf Server is vulnerable because measures are not taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

CVE-2022-46763

A SQL injection issue in a database stored function in TrueConf Server 5.2.0.10225 fixed in 5.2.6.10025 allows a low-privileged database user to execute arbitrary SQL commands as the database administrator, resulting in execution of arbitrary code...

CVE-2022-46764

A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 fixed in 5.2.6.10025 allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution...

CVE-2017-20120

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...