Skip to content
Noroxi

sourcefabric records

26 published records for vendor sourcefabric.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 22
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

26 records
  • CVE-2022-36749
    40Plan

    RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php.

    CriticalCVSS 9.8No exploitEPSS 3%

    sourcefabric · rpi-jukebox-rfidAug 30, 2022

  • CVE-2024-0714
    39Monitor

    MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection

    CriticalCVSS 9.8No exploitEPSS 2%

    sourcefabric · phonieboxJan 19, 2024

  • CVE-2024-41368
    39Monitor

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php

    CriticalCVSS 9.8No exploitEPSS 1%

    sourcefabric · phonieboxAug 29, 2024

  • CVE-2024-41367
    39Monitor

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.p

    CriticalCVSS 9.8No exploitEPSS 1%

    sourcefabric · phonieboxAug 29, 2024

  • CVE-2024-41366
    39Monitor

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php

    CriticalCVSS 9.8No exploitEPSS 1%

    sourcefabric · phonieboxAug 29, 2024

  • CVE-2024-41364
    39Monitor

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php

    CriticalCVSS 9.8No exploitEPSS 1%

    sourcefabric · phonieboxAug 29, 2024

  • CVE-2024-41369
    39Monitor

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php

    CriticalCVSS 9.8No exploitEPSS 1%

    sourcefabric · phonieboxAug 29, 2024

  • CVE-2024-41361
    39Monitor

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php

    CriticalCVSS 9.8No exploitEPSS 1%

    sourcefabric · phonieboxAug 29, 2024

  • CVE-2024-3799
    38Monitor

    Shell command injection in Phoniebox

    HighCVSS 8.7No exploitEPSS 15%

    phoniebox · phonieboxJul 10, 2024

  • CVE-2024-3798
    34Monitor

    Insecure handling of GET argument in Phoniebox

    HighCVSS 8.7No exploitEPSS 0%

    phoniebox · phonieboxJul 10, 2024

  • CVE-2012-1934
    31Monitor

    SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbit

    HighCVSS 7.5Proof of conceptEPSS 3%

    sourcefabric · newscoopAug 27, 2012

  • CVE-2020-11807
    31Monitor

    Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrar

    HighCVSS 7.8No exploitEPSS 1%

    sourcefabric · newscoopMay 19, 2020

  • CVE-2025-63951
    30Monitor

    An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0a

    HighCVSS 7.5No exploitEPSS 1%

    sourcefabric · phonieboxDec 18, 2025

  • CVE-2012-1933
    29Monitor

    Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow

    MediumCVSS 6.8Proof of conceptEPSS 6%

    sourcefabric · newscoopAug 27, 2012

  • CVE-2012-1935
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arb

    MediumCVSS 4.3Proof of conceptEPSS 3%

    sourcefabric · newscoopAug 27, 2012

  • CVE-2012-4679
    18Monitor

    Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script

    MediumCVSS 4.3Proof of conceptEPSS 2%

    sourcefabric · newscoopAug 27, 2012

  • CVE-2013-0730
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or H

    MediumCVSS 4.3No exploitEPSS 2%

    sourcefabric · newscoopFeb 21, 2013

  • CVE-2010-4973
    17Monitor

    Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or H

    MediumCVSS 4.3No exploitEPSS 1%

    sourcefabric · campsiteNov 1, 2011

  • CVE-2025-10327
    11Monitor

    MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

    LowCVSS 2.1Proof of conceptEPSS 10%

    sourcefabric · rpi-jukebox-rfidSep 12, 2025

  • CVE-2025-10328
    11Monitor

    MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection

    LowCVSS 2.1No exploitEPSS 9%

    sourcefabric · rpi-jukebox-rfidSep 12, 2025

  • CVE-2025-10326
    10Monitor

    MiczFlor RPi-Jukebox-RFID single.php os command injection

    LowCVSS 2.1No exploitEPSS 7%

    sourcefabric · rpi-jukebox-rfidSep 12, 2025

  • CVE-2025-10370
    8Monitor

    MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

    LowCVSS 2.0Proof of conceptEPSS 1%

    sourcefabric · rpi-jukebox-rfidSep 13, 2025

  • CVE-2025-10369
    8Monitor

    MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting

    LowCVSS 2.0No exploitEPSS 0%

    sourcefabric · rpi-jukebox-rfidSep 13, 2025

  • CVE-2025-10367
    8Monitor

    MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting

    LowCVSS 2.0No exploitEPSS 0%

    sourcefabric · rpi-jukebox-rfidSep 13, 2025

  • CVE-2025-10368
    8Monitor

    MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting

    LowCVSS 2.0No exploitEPSS 0%

    sourcefabric · rpi-jukebox-rfidSep 13, 2025