CVE-2023-23333

CVE-2023-23333 SolarView Compact 6.00まで downloader.php コマンドインジェクション RCE nuclei-templates Burp Nuclei...

CVE-2022-40881

CVE-2022-40881 fofa root@kitploit: body="SolarView Compact" && title=="Top" 免责声明 本工具仅面向合法授权的企业安全建设行为，如您需要测试本工具的可用性，请自行搭建靶机环境。 在使用本工具进行检测时，您应确保该行为符合当地的法律法规，并且已经取得了足够的授权。请勿对非授权目标进行扫描。如果发现上述禁止行为，我们将保留追究您法律责任的权利。 如您在使用本工具的过程中存在任何非法行为，您需自行承担相应后果，我们将不承担任何法律及连带责任。...

f32

The f32 is an ultra-compact ESP32 development board designed to mount directly behind a USB-C receptacle. The PCB measures just 9.85 mm x 8.45 mm. It's powered by the ESP32-C3FH4 microcontroller and was created primarily for research and as a bit of a stress test for the ESP32, since it...

CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: 攻撃者はdownloader.php?の脆弱性を悪用します。fileパラメータは、ディレクトリトラバーサルを通じて機密ファイルを読み取ります。 downloader.php?file にはディレクトリトラバーサルが存在します 機密ファイル /etc/password を読み取ることができます...

CVE-2023-29919

概要: SolarView Compact 6.00以下には任意のファイル読み取りの脆弱性が存在し、攻撃者は認証をバイパスしてtexteditor.phpを通じてファイルを読み取ることができます。 ベンダー: SolarView Compact 影響を受ける製品: SolarView Compact =ver 6.00 PoC: http://example.com/texteditor.php 詳細: texteditor.phpページにアクセスすると、読み取りたいファイルの場所を入力できます。...

SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

CVE-2023-23333

Summary: There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php. Vendor: SolarView Compact Affected Product: SolarView Compact Version: SolarView Compact =ver 6.00 poc: curl...

solarview-ics-vulnerability-analysis

Análisis de Vulnerabilidades de SolarView ICS Un análisis de amenazas ciberfísicas del incidente del botnet SolarView Compact / Mirai, en el que los atacantes explotaron CVE-2022-29303 para comprometer aproximadamente 800 dispositivos de monitoreo solar en instalaciones fotovoltaicas japonesas...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B Backdoors exploit About Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device. Product Details Product: COMpact 3000 ISDN,...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...

Astra Linux – Vulnerabilities in Linux, Linux-5.15, Linux-5.10

In the Linux kernel, the following vulnerability has been resolved: erofs: Stop parsing non-compact HEAD indexes if clusterofs is invalid Syzbot generated a crafted image with a non-compact HEAD index of clusterofs 33024. Valid numbers should be between 0 and lclustersize-1, which causes the...

MAL-2026-13925 Malicious code in bcs-compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b93f1a0694dc37c94e18c12eb32ebe9cab96ded318e46ee5c774db80f4a648 On require'bcs-compact', index.js runs a self-scrubbing IIFE that reads the installer's Sui wallet keystore at /.sui/sui.keystore,...

Malicious code in bcs-compact (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b93f1a0694dc37c94e18c12eb32ebe9cab96ded318e46ee5c774db80f4a648 On require'bcs-compact', index.js runs a self-scrubbing IIFE that reads the installer's Sui wallet keystore at /.sui/sui.keystore,...

CVE-2026-14985 CVE-2026-14985

The Analog Way Picturall Quad Compact Mark II version 3.5.8, contains a local privilege escalation vulnerability in the core firmware. This is due to improper privilege delegation and insufficient input validation in a maintenance script...

PT-2026-63421

Name of the Vulnerable Software and Affected Versions Analog Way Picturall Quad Compact Mark II version 3.5.8 Description A local privilege escalation flaw exists in the core firmware due to improper privilege delegation and insufficient input validation within a maintenance script. The create...

Local Privilege escalation vulnerability in Analog Way Picturall Quad Compact Mark II version 3.5.8

Overview Version 3.5.8 of Analog Way's Picturall Quad Compact Mark II server contains a local privilege escalation vulnerability, tracked as CVE-2026-14985, due to improper privilege delegation and insufficient input validation in a maintenance script. Description The Picturall Quad Compact Mark ...

Twin Agent: Context Residual Compression for Privilege Separated Agents

Large language model LLM agents are vulnerable to security risks, such as prompt injection attacks from untrusted context that manipulate downstream reasoning and tool use. Existing secure-by-design approaches mitigate this risk by separating untrusted observations from privileged execution and...

CVE-2025-11698

The CVE-2025-11698 vulnerability affects 5380/5480/5580 controllers with boot firmware versions below 1.072. It enables a denial-of-service by allowing a malicious actor to write invalid file data to the controller, potentially causing a major non-recoverable fault (MNRF). The documents do not pr...

CVE-2025-12012

The CVE-2025-12012 entry concerns Rockwell Automation 5380/5480/5580 controllers. A denial-of-service vulnerability could allow a malicious user to write invalid file data to the controller, potentially triggering a major non-recoverable fault (MNRF). The available documents do not specify affect...

CVE-2025-12011 CompactLogix ®, ControlLogix ®, Compact GuardLogix ® and GuardLogix ® Buffer Overflow

A denial-of-service issue exists in 5370/5570 controllers. This vulnerability could potentially allow a remote user to load an invalid project, causing the device to enter a major non-recoverable fault MNRF...