124 matches found
CVE-2025-71450
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
CVE-2025-71450 inih before r63 Stack Buffer Under-Read in ini_parse_stream Discard Loop
inih before r63 contains a one-byte stack buffer under-read in iniparsestream in ini.c that allows attackers to read abyss-1 via an embedded NUL byte after an overlong line. Attackers can supply an INI file or string with a line of at least INIMAXLINE-1 bytes followed by a NUL byte, causing...
PT-2026-135438
Name of the Vulnerable Software and Affected Versions inih versions prior to r63 Description A one-byte stack buffer under-read exists in the ini parse stream function within the ini.c file. This occurs when an attacker provides an INI file or string containing a line of at least INI MAX LINE-1...
abyss-c2
ABYSS C2 — HiSilicon DVR Exploit Framework ⚠️ EDUCATIONAL / DEMONSTRATION PURPOSES ONLY This software is provided exclusively for educational and authorized security research purposes. It is designed to demonstrate common IoT vulnerabilities and post-exploitation techniques in a controlled,...
Abyss Web Server first-run console takeover log-as-CGI RCE
First-run console credential creation, bind access log as /bin/sh CGI, smuggle command via User-Agent, trigger via log URI fetch. """Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306,...
Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Cr — Detect
Fingerprint / reachability check for Abyss Web Server X1 2.16.22.0 - Missing Authentication for Console Credential Creation Reaching a Configuration-Write to Log-as-CGI Command Execution Chain CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Abyss Web Server X1 2.16.22.0...
Aprelium Abyss Web Server X1 2.16.22.0 First-Run Console Takeover
Aprelium Abyss Web Server X1 version 2.16.22.0 permits an unauthenticated client during the first-run configuration state to create a console administrator credential, configure a log file as a CGI shell script, and execute commands as the server process. https://packetstorm.news/download/235391...
Oracle Linux 8 : ELSA-2026-64772-0: / xmlrpc-c (ELSA-2026-647720)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-647720 advisory. 1.51.0-11.1 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928 Tenable has extracted the preceding description block directly from the Oracle...
xmlrpc-c security update
1.51.0-11.1 - Fix HTML injection in Abyss HTTP server responses CVE-2026-15928...
Oracle Linux 9 : ELSA-2026-61316-0: / xmlrpc-c (ELSA-2026-613160)
The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-613160 advisory. 1.51.0-17 - Fix HTML injection in Abyss error responses and directory listings - Resolves: CVE-2026-15928 Tenable has extracted the preceding description bloc...
xmlrpc-c security update
1.51.0-17 - Fix HTML injection in Abyss error responses and directory listings - Resolves: CVE-2026-15928...
Detect Abyss Web Server
Detects Detect Abyss Web Server. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Detect Abyss Web Server.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Detect Abyss Web Server', 'description': 'Detects Detect...
CVE-2003-1363
The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web management port 9999, which allows remote attackers to mount brute force attacks on the administration console without detection...
EUVD-2002-1066
Malware in sbrugna...
EUVD-2003-1354
Malware in sbrugna...
EUVD-2002-1069
Malware in sbrugna...
EUVD-2021-26659
Malware in sbrugna...
EUVD-2003-1353
Malware in sbrugna...