Crontab Ui
Approved changes feed: RSS · Atom
cpe:2.3:a:alseambusher:crontab-ui:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Alseambusher (10736313-2ee4-5f6c-808a-a72ec423df54) |
|---|---|
| Product | Crontab Ui (485dbf1d-4d7d-526c-9b0a-b89d07e46dd3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-72589 |
vulnerable | 2026-09-16 04:33:08.789291 |
alseambusher crontab-ui - Unauthenticated RCE via Shell Injection in Imported Database hook Field
CRITICAL (9.8)
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database without validation.
Published: 2026-08-10T10:41:42.197Z
Updated: 2026-08-10T13:22:50.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-72590 |
vulnerable | 2026-09-16 04:33:08.581072 |
alseambusher crontab-ui - Unauthenticated RCE via Newline Injection in env_vars Parameter
CRITICAL (9.8)
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter.
Published: 2026-08-10T10:41:45.063Z
Updated: 2026-08-10T13:23:34.292Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.