Filtered by vendor Alseambusher Subscriptions
Filtered by product Crontab-ui Subscriptions

Search

Switch to Advanced Search (Beta)
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-72589 1 Alseambusher 1 Crontab-ui 2026-08-11 9.8 Critical
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file. The POST /import endpoint accepts arbitrary .db files and overwrites the application database without validation.
CVE-2026-72590 1 Alseambusher 1 Crontab-ui 2026-08-11 9.8 Critical
An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env_vars parameter.