fit2cloud kayıtları
fit2cloud üreticisine ait 77 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %45,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')6
- CWE-862 Missing Authorization6
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
77 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
60Bu hafta | CVE-2023-22463Kavram kanıtı | KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT tokenfit2cloud · kubepi · CWE-798 | Kritik9,8 | — | %69,7 | 4 Oca 2023 |
59Planlayın | CVE-2023-22480Kavram kanıtı | KubeOperator is vulnerable to unauthorized access to system APIfit2cloud · kubeoperator · CWE-285 | Kritik9,8 | — | %66,8 | 13 Oca 2023 |
48Planlayın | CVE-2024-39907Kavram kanıtı | a sqlinjection in 1Panelfit2cloud · 1panel · CWE-89 | Kritik9,8 | — | %29,2 | 18 Tem 2024 |
41Planlayın | CVE-2024-29201İstismar yok | JumpServer's insecure Ansible playbook validation leads to RCE in Celeryfit2cloud · jumpserver · CWE-94 | Kritik9,9 | — | %5,9 | 29 Mar 2024 |
41Planlayın | CVE-2024-29202İstismar yok | JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celeryfit2cloud · jumpserver · CWE-94 | Kritik9,9 | — | %5,9 | 29 Mar 2024 |
40Planlayın | CVE-2024-39911İstismar yok | 1Panel SQL injectionfit2cloud · 1panel · CWE-89 | Kritik9,8 | — | %4,5 | 18 Tem 2024 |
40Planlayın | CVE-2023-38692İstismar yok | Command injection vulnerability in module management function in CloudExplorer Litefit2cloud · cloudexplorer lite · CWE-78 | Kritik9,8 | — | %3,4 | 4 Ağu 2023 |
40Planlayın | CVE-2024-2352İstismar yok | 1Panel swap baseApi.UpdateDeviceSwap command injectionfit2cloud · 1panel · CWE-77 | Kritik9,8 | — | %3,0 | 9 Mar 2024 |
40Planlayın | CVE-2023-43651İstismar yok | Remote code execution on the host system via MongoDB shell in jumpserverfit2cloud · jumpserver · CWE-94 | Kritik9,9 | — | %2,1 | 27 Eyl 2023 |
40Planlayın | CVE-2023-48193İstismar yok | Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command fit2cloud · jumpserver | Kritik9,8 | — | %2,0 | 28 Kas 2023 |
39İzleyin | CVE-2023-42442Kavram kanıtı | JumpServer session replays download without authenticationfit2cloud · jumpserver · CWE-287 | Orta5,3 | — | %58,5 | 15 Eyl 2023 |
39İzleyin | CVE-2024-40629İstismar yok | Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserverfit2cloud · jumpserver · CWE-22 | Kritik9,8 | — | %1,3 | 18 Tem 2024 |
39İzleyin | CVE-2023-42405İstismar yok | SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskServicefit2cloud · rackshift · CWE-89 | Kritik9,8 | — | %1,1 | 14 Eyl 2023 |
39İzleyin | CVE-2025-54424Kavram kanıtı | 1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Executionfit2cloud · 1panel · CWE-77 | Kritik9,8 | — | %0,9 | 1 Ağu 2025 |
39İzleyin | CVE-2023-28110İstismar yok | JumpServer Koko vulnerable to Command Injection for Kubernetes Connectionfit2cloud · jumpserver · CWE-77 | Kritik9,9 | — | %0,8 | 16 Mar 2023 |
39İzleyin | CVE-2023-39966İstismar yok | 1Panel arbitrary file write vulnerability exists in the backgroundfit2cloud · 1panel · CWE-862 | Kritik9,8 | — | %0,8 | 10 Ağu 2023 |
39İzleyin | CVE-2023-42818İstismar yok | SSH public key login without private key challenge if mfa is enabled in jumpserverfit2cloud · jumpserver · CWE-287 | Kritik9,8 | — | %0,7 | 27 Eyl 2023 |
39İzleyin | CVE-2023-44397İstismar yok | CloudExplorer Lite permission bypass vulnerabilityfit2cloud · cloudexplorer lite · CWE-287 | Kritik9,8 | — | %0,6 | 30 Eki 2023 |
39İzleyin | CVE-2023-34240İstismar yok | Weak passwords allowed in cloudexplorer-litefit2cloud · cloudexplorer lite · CWE-521 | Kritik9,8 | — | %0,5 | 27 Haz 2023 |
39İzleyin | CVE-2025-70981İstismar yok | CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.fit2cloud · cordys crm · CWE-89 | Kritik9,8 | — | %0,3 | 12 Şub 2026 |
37İzleyin | CVE-2023-37477İstismar yok | Command injection in firewall ip functionality in 1Panelfit2cloud · 1panel · CWE-78 | Yüksek8,8 | — | %5,8 | 18 Tem 2023 |
37İzleyin | CVE-2026-33324İstismar yok | SQLBot prompt injection allows arbitrary SQL execution and remote code executionfit2cloud · sqlbot · CWE-89 | Kritik9,4 | — | %0,8 | 5 May 2026 |
36İzleyin | CVE-2023-36458İstismar yok | 1Panel vulnerable to ommand injection when entering the container terminalfit2cloud · 1panel · CWE-77 | Yüksek8,8 | — | %2,3 | 5 Tem 2023 |
36İzleyin | CVE-2023-36457İstismar yok | 1Panel vulnerable to command injection when adding container repositoriesfit2cloud · 1panel · CWE-77 | Yüksek8,8 | — | %2,3 | 5 Tem 2023 |
36İzleyin | CVE-2023-42819Kavram kanıtı | Path traversal in Jumpserverfit2cloud · jumpserver · CWE-22 | Yüksek8,8 | — | %2,2 | 27 Eyl 2023 |
- CVE-2023-2246360Bu hafta
KubePi's Hardcoded Jwtsigkeys allows malicious actor to login with a forged JWT token
KritikCVSS 9,8Kavram kanıtıEPSS %70fit2cloud · kubepi4 Oca 2023
- CVE-2023-2248059Planlayın
KubeOperator is vulnerable to unauthorized access to system API
KritikCVSS 9,8Kavram kanıtıEPSS %67fit2cloud · kubeoperator13 Oca 2023
- CVE-2024-3990748Planlayın
a sqlinjection in 1Panel
KritikCVSS 9,8Kavram kanıtıEPSS %29fit2cloud · 1panel18 Tem 2024
- CVE-2024-2920141Planlayın
JumpServer's insecure Ansible playbook validation leads to RCE in Celery
KritikCVSS 9,9İstismar yokEPSS %6fit2cloud · jumpserver29 Mar 2024
- CVE-2024-2920241Planlayın
JumpServer vulnerable to Jinja2 template injection in Ansible leads to RCE in Celery
KritikCVSS 9,9İstismar yokEPSS %6fit2cloud · jumpserver29 Mar 2024
- CVE-2024-3991140Planlayın
1Panel SQL injection
KritikCVSS 9,8İstismar yokEPSS %5fit2cloud · 1panel18 Tem 2024
- CVE-2023-3869240Planlayın
Command injection vulnerability in module management function in CloudExplorer Lite
KritikCVSS 9,8İstismar yokEPSS %3fit2cloud · cloudexplorer lite4 Ağu 2023
- CVE-2024-235240Planlayın
1Panel swap baseApi.UpdateDeviceSwap command injection
KritikCVSS 9,8İstismar yokEPSS %3fit2cloud · 1panel9 Mar 2024
- CVE-2023-4365140Planlayın
Remote code execution on the host system via MongoDB shell in jumpserver
KritikCVSS 9,9İstismar yokEPSS %2fit2cloud · jumpserver27 Eyl 2023
- CVE-2023-4819340Planlayın
Insecure Permissions vulnerability in JumpServer GPLv3 v.3.8.0 allows a remote attacker to execute arbitrary code via bypassing the command
KritikCVSS 9,8İstismar yokEPSS %2fit2cloud · jumpserver28 Kas 2023
- CVE-2023-4244239İzleyin
JumpServer session replays download without authentication
OrtaCVSS 5,3Kavram kanıtıEPSS %59fit2cloud · jumpserver15 Eyl 2023
- CVE-2024-4062939İzleyin
Arbitrary File Write in Ansible Playbooks leads to RCE in Jumpserver
KritikCVSS 9,8İstismar yokEPSS %1fit2cloud · jumpserver18 Tem 2024
- CVE-2023-4240539İzleyin
SQL injection vulnerability in FIT2CLOUD RackShift v1.7.1 allows attackers to execute arbitrary code via the `sort` parameter to taskService
KritikCVSS 9,8İstismar yokEPSS %1fit2cloud · rackshift14 Eyl 2023
- CVE-2025-5442439İzleyin
1Panel Agent Bypasses Certificate Verification Leading to Arbitrary Command Execution
KritikCVSS 9,8Kavram kanıtıEPSS %1fit2cloud · 1panel1 Ağu 2025
- CVE-2023-2811039İzleyin
JumpServer Koko vulnerable to Command Injection for Kubernetes Connection
KritikCVSS 9,9İstismar yokEPSS %1fit2cloud · jumpserver16 Mar 2023
- CVE-2023-3996639İzleyin
1Panel arbitrary file write vulnerability exists in the background
KritikCVSS 9,8İstismar yokEPSS %1fit2cloud · 1panel10 Ağu 2023
- CVE-2023-4281839İzleyin
SSH public key login without private key challenge if mfa is enabled in jumpserver
KritikCVSS 9,8İstismar yokEPSS %1fit2cloud · jumpserver27 Eyl 2023
- CVE-2023-4439739İzleyin
CloudExplorer Lite permission bypass vulnerability
KritikCVSS 9,8İstismar yokEPSS %1fit2cloud · cloudexplorer lite30 Eki 2023
- CVE-2023-3424039İzleyin
Weak passwords allowed in cloudexplorer-lite
KritikCVSS 9,8İstismar yokEPSS %0fit2cloud · cloudexplorer lite27 Haz 2023
- CVE-2025-7098139İzleyin
CordysCRM 1.4.1 is vulnerable to SQL Injection in the employee list query interface (/user/list) via the departmentIds parameter.
KritikCVSS 9,8İstismar yokEPSS %0fit2cloud · cordys crm12 Şub 2026
- CVE-2023-3747737İzleyin
Command injection in firewall ip functionality in 1Panel
YüksekCVSS 8,8İstismar yokEPSS %6fit2cloud · 1panel18 Tem 2023
- CVE-2026-3332437İzleyin
SQLBot prompt injection allows arbitrary SQL execution and remote code execution
KritikCVSS 9,4İstismar yokEPSS %1fit2cloud · sqlbot5 May 2026
- CVE-2023-3645836İzleyin
1Panel vulnerable to ommand injection when entering the container terminal
YüksekCVSS 8,8İstismar yokEPSS %2fit2cloud · 1panel5 Tem 2023
- CVE-2023-3645736İzleyin
1Panel vulnerable to command injection when adding container repositories
YüksekCVSS 8,8İstismar yokEPSS %2fit2cloud · 1panel5 Tem 2023
- CVE-2023-4281936İzleyin
Path traversal in Jumpserver
YüksekCVSS 8,8Kavram kanıtıEPSS %2fit2cloud · jumpserver27 Eyl 2023