Skip to content
Noroxi

rhubcom records

3 published records for vendor rhubcom.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

3 records
  • CVE-2024-38289
    51Plan

    A boolean-based SQL injection issue in the Virtual Meeting Password (VMP) endpoint in R-HUB TurboMeeting through 8.x allows unauthenticated

    CriticalCVSS 9.8Proof of conceptEPSS 40%

    rhubcom · turbomeetingJul 25, 2024

  • CVE-2024-38287
    39Monitor

    The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers

    CriticalCVSS 9.8No exploitEPSS 0%

    rhubcom · turbomeetingJul 25, 2024

  • CVE-2024-38288
    29Monitor

    A command-injection issue in the Certificate Signing Request (CSR) functionality in R-HUB TurboMeeting through 8.x allows authenticated atta

    HighCVSS 7.2Proof of conceptEPSS 3%

    rhubcom · turbomeetingJul 25, 2024