CVE-2016-15047

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...

CVE-2016-15047 AVTECH CloudSetup.cgi Authenticated Command Injection

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...

CVE-2016-15047 AVTECH CloudSetup.cgi Authenticated Command Injection

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...

CVE-2016-15047

CVE-2016-15047 (AVTECH CloudSetup.cgi): Authenticated OS command injection via the exefile parameter in CloudSetup.cgi. The parameter is passed to system command execution without proper validation/whitelisting, enabling an authenticated attacker to run arbitrary commands as root and potentially ...

AVTECH IP camera 安全漏洞

AVTECH IP camera is a series of network security cameras from AVTECH, a Taiwan, China-based company. A security vulnerability exists in AVTECH IP camera, which stems from an exefile parameter in the CloudSetup.cgi management endpoint that is not properly authenticated or whitelisted, which could...

EUVD-2019-4875

Malware in sbrugna...

EUVD-2008-3924

Malware in sbrugna...

EUVD-2025-19644

Malicious code in bioql PyPI...

EUVD-2025-19640

Malicious code in bioql PyPI...

EUVD-2025-19643

Malicious code in bioql PyPI...

EUVD-2024-31209

Malicious code in bioql PyPI...

EUVD-2025-19641

Malicious code in bioql PyPI...

EUVD-2025-19631

Malicious code in bioql PyPI...

EUVD-2025-19645

Malicious code in bioql PyPI...

EUVD-2025-19642

Malicious code in bioql PyPI...

EUVD-2025-19647

Malicious code in bioql PyPI...

EUVD-2024-31208

Malicious code in bioql PyPI...

EUVD-2025-19646

Malicious code in bioql PyPI...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...

CVE-2025-46408

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.PushHttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOWALLHOSTNAMEVERIFIER, bypassing domain validation...