CVE-2024-7029

AvTech 장치의 CVE-2024-7029 취약점 악용을 위한 PoC 도구 🎤 README 번역 English فارسی 📸 스크린샷 💎 소개 CVE-2024-7029는 AVTech 장치에서 발견된 심각한 보안 문제로, 공격자가 인증을 우회하고 원격으로 임의의 명령을 실행할 수 있습니다. 이 취약점은 영향을 받는 네트워크의 무결성과 보안에 심각한 위험을 초래합니다. 💀 취약점 개요 CVE-2024-7029는 AVTech 장치의 치명적인 보안 결함으로, 인증 우회를 통한 무단 액세스를 허용하여 잠재적으로 원격 코드 실행으로 이...

AVTECH DVR - Login Verification Code Bypass

AVTECH DVR products are vulnerable to verification code bypass just by entering the "login=quick" parameter to bypass verification code. id: CVE-2013-4982 info: name: AVTECH DVR - Login Verification Code Bypass author: ritikchaddha severity: low description: | AVTECH DVR products are vulnerable t...

AVTECH IP Camera - Command Injection

The endpoint /cgi-bin/supervisor/Factory.cgi is vulnerable to command injection via the action parameter, allowing remote code execution. id: CVE-2024-7029 info: name: AVTECH IP Camera - Command Injection author: DhiyaneshDK severity: high description: | The endpoint /cgi-bin/supervisor/Factory.c...

CVE-2024-7029

EN GenAvTechRCEExploit CVE-2024-7029 취약점에 대한 PoC 익스플로잇으로, AvTech 장치에서 원격 코드 실행RCE을 가능하게 합니다. 이 도구는 취약한 장치를 스캔하고 상호 작용 방식으로 명령을 실행할 수 있습니다. 기능 취약점 탐지 : AvTech 장치가 RCE에 취약한지 확인합니다. 대화형 셸 : 대화형 셸을 통해 대상 장치에서 명령을 실행합니다. 멀티스레드 스캐닝 : 멀티스레딩을 사용하여 여러 대상을 동시에 스캔합니다. 페이로드 실행 : 특수 제작된 페이로드를 전송하여 원격으로 명령을...

AvTech-PoCs

AvTech PoCs CVE-2025-57199, CVE-2025-57200, CVE-2025-57201, CVE-2025-57202 및 CVE-2025-57203에 대한 PoCs입니다. 블로그 포스트를 참조하세요...

avtech-cve-2025-34065-analysis

このリポジトリには README がありません。...

CVE-2025-46408

CVE-2025-46408 Verifica del nome host impropria nell'applicazione Android EagleEyes Lite 1. Panoramica Nome : EagleEyesLite Versione : 2.0.0 Fornitore : AVTECH CWE : CWE-297: Validazione impropria del certificato con host non corrispondente CVSS : 9.8 CRITICO Stringa vettore :...

CVE-2026-56808

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...

EUVD-2026-40265

DGM3103SCT provided by AVTECH Security Corporation contains an OS command injection vulnerability, which may lead to arbitrary command execution with the root privilege by a user who can log in to the web management console of the affected product...

CVE-2026-56808

The CVE-2026-56808 entry concerns the DGM3103SCT device from AVTECH Security Corporation. The vulnerability is described as an OS command injection that can allow arbitrary command execution with root privileges by a user who can log in to the device’s web management console. The available connec...

AVTECH Room Alert Cleartext Transmission of Sensitive Information (CVE-2024-33471)

An individual with administrative access can change the mail server host within the device. An attacker who has obtained administrative access can update the mail server to an attacker controller IP. When the device attempts to authenticate to the mail server, it will pass the previously configur...

AVTECH Room Alert Cleartext Storage of Sensitive Information (CVE-2024-33470)

When an administrator authenticates with the device and browses the settings pages, the SMTP password is loaded from the device and presented in the DOM in plaintext. When settings are saved, the SMTP credentials are sent back to the device in plain text. This allows an actor with administrative...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogramming software-based IP cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the web interface of Avtech’s microprogrammed software-based IP cameras allows a intruder to execute arbitrary commands.

The vulnerability of the web interface of Avtech’s microprogrammed software-based cameras is related to the lack of measures taken at the control level to protect data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

CVE-2025-57201

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

EUVD-2025-200969

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

PT-2025-48938

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...