İçeriğe atla
Noroxi

sourcefabric kayıtları

sourcefabric üreticisine ait 26 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
12
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 20
  2. 22
  3. 24
  4. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

26 kayıt
  • CVE-2022-36749
    40Planlayın

    RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php.

    KritikCVSS 9,8İstismar yokEPSS %3

    sourcefabric · rpi-jukebox-rfid30 Ağu 2022

  • CVE-2024-0714
    39İzleyin

    MiczFlor RPi-Jukebox-RFID HTTP Request userScripts.php os command injection

    KritikCVSS 9,8İstismar yokEPSS %2

    sourcefabric · phoniebox19 Oca 2024

  • CVE-2024-41368
    39İzleyin

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWlanIpMail.php

    KritikCVSS 9,8İstismar yokEPSS %1

    sourcefabric · phoniebox29 Ağu 2024

  • CVE-2024-41367
    39İzleyin

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\api\playlist\appendFileToPlaylist.p

    KritikCVSS 9,8İstismar yokEPSS %1

    sourcefabric · phoniebox29 Ağu 2024

  • CVE-2024-41366
    39İzleyin

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\userScripts.php

    KritikCVSS 9,8İstismar yokEPSS %1

    sourcefabric · phoniebox29 Ağu 2024

  • CVE-2024-41364
    39İzleyin

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\trackEdit.php

    KritikCVSS 9,8İstismar yokEPSS %1

    sourcefabric · phoniebox29 Ağu 2024

  • CVE-2024-41369
    39İzleyin

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\inc.setWifi.php

    KritikCVSS 9,8İstismar yokEPSS %1

    sourcefabric · phoniebox29 Ağu 2024

  • CVE-2024-41361
    39İzleyin

    RPi-Jukebox-RFID v2.7.0 was discovered to contain a remote code execution (RCE) vulnerability via htdocs\manageFilesFolders.php

    KritikCVSS 9,8İstismar yokEPSS %1

    sourcefabric · phoniebox29 Ağu 2024

  • CVE-2024-3799
    38İzleyin

    Shell command injection in Phoniebox

    YüksekCVSS 8,7İstismar yokEPSS %15

    phoniebox · phoniebox10 Tem 2024

  • CVE-2024-3798
    34İzleyin

    Insecure handling of GET argument in Phoniebox

    YüksekCVSS 8,7İstismar yokEPSS %0

    phoniebox · phoniebox10 Tem 2024

  • CVE-2012-1934
    31İzleyin

    SQL injection vulnerability in admin/country/edit.php in Newscoop before 3.5.5 and 4.x before 4 RC4 allows remote attackers to execute arbit

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    sourcefabric · newscoop27 Ağu 2012

  • CVE-2020-11807
    31İzleyin

    Because of Unrestricted Upload of a File with a Dangerous Type, Sourcefabric Newscoop 4.4.7 allows an authenticated user to execute arbitrar

    YüksekCVSS 7,8İstismar yokEPSS %1

    sourcefabric · newscoop19 May 2020

  • CVE-2025-63951
    30İzleyin

    An insecure deserialization vulnerability exists in the rss-mp3.php script of the MiczFlor RPi-Jukebox-RFID project through commit 4b2334f0a

    YüksekCVSS 7,5İstismar yokEPSS %1

    sourcefabric · phoniebox18 Ara 2025

  • CVE-2012-1933
    29İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4 before RC4, when register_globals is enabled, allow

    OrtaCVSS 6,8Kavram kanıtıEPSS %6

    sourcefabric · newscoop27 Ağu 2012

  • CVE-2012-1935
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 3.5.x before 3.5.5 and 4.x before 4 RC4 allow remote attackers to inject arb

    OrtaCVSS 4,3Kavram kanıtıEPSS %3

    sourcefabric · newscoop27 Ağu 2012

  • CVE-2012-4679
    18İzleyin

    Cross-site scripting (XSS) vulnerability in admin/login.php in Newscoop before 3.5.5 allows remote attackers to inject arbitrary web script

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    sourcefabric · newscoop27 Ağu 2012

  • CVE-2013-0730
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Newscoop 4.x through 4.1.0 allow remote attackers to inject arbitrary web script or H

    OrtaCVSS 4,3İstismar yokEPSS %2

    sourcefabric · newscoop21 Şub 2013

  • CVE-2010-4973
    17İzleyin

    Cross-site scripting (XSS) vulnerability in the search feature in Campsite 3.4.0 allows remote attackers to inject arbitrary web script or H

    OrtaCVSS 4,3İstismar yokEPSS %1

    sourcefabric · campsite1 Kas 2011

  • CVE-2025-10327
    11İzleyin

    MiczFlor RPi-Jukebox-RFID shuffle.php os command injection

    DüşükCVSS 2,1Kavram kanıtıEPSS %10

    sourcefabric · rpi-jukebox-rfid12 Eyl 2025

  • CVE-2025-10328
    11İzleyin

    MiczFlor RPi-Jukebox-RFID playsinglefile.php os command injection

    DüşükCVSS 2,1İstismar yokEPSS %9

    sourcefabric · rpi-jukebox-rfid12 Eyl 2025

  • CVE-2025-10326
    10İzleyin

    MiczFlor RPi-Jukebox-RFID single.php os command injection

    DüşükCVSS 2,1İstismar yokEPSS %7

    sourcefabric · rpi-jukebox-rfid12 Eyl 2025

  • CVE-2025-10370
    8İzleyin

    MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

    DüşükCVSS 2,0Kavram kanıtıEPSS %1

    sourcefabric · rpi-jukebox-rfid13 Eyl 2025

  • CVE-2025-10369
    8İzleyin

    MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting

    DüşükCVSS 2,0İstismar yokEPSS %0

    sourcefabric · rpi-jukebox-rfid13 Eyl 2025

  • CVE-2025-10367
    8İzleyin

    MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting

    DüşükCVSS 2,0İstismar yokEPSS %0

    sourcefabric · rpi-jukebox-rfid13 Eyl 2025

  • CVE-2025-10368
    8İzleyin

    MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting

    DüşükCVSS 2,0İstismar yokEPSS %0

    sourcefabric · rpi-jukebox-rfid13 Eyl 2025