467 matches found
crestron_getsudopwd
crestrongetsudopwd Basado en el descubrimiento de Ricky Lawshae en dispositivos Crestron TSW-X60 y MC3, esta herramienta tiene como objetivo explotar la CVE-2018-13341. Usando la dirección MAC del dispositivo objetivo, puedes recuperar la contraseña de la cuenta oculta "crengsuperuser" que tiene...
CrestCrack
CrestCrack CrestCrack es un script simple que explota CVE-2016-5640 / CLVA-2016-05-002 en Crestron AirMedia AM-100 v1.1.1.11 - v1.2.1. Al proporcionarle argumentos, CrestCrack utilizará netcat para crear una reverse shell entre tu objetivo y un listener netcat de tu elección. Configuración: 1...
CVE-2016-5639
CVE-2016-5639 Crestron AirMedia AM-100 Traversal and Hashdump Metasploit Modules Two similar modules that take advantage of CVE-2016-5639 to dump hashes and retrieve files through path traversal. I made these modules separate because I wanted experience writing something that could "dump" hashes,...
CVE-2019-3929
CVE-2019-3929 Módulo de Metasploit para Inyección Remota de Comandos en Crestron/Barco/Extron/InFocus/TeqAV CVE-2019-3929 Según la descripción de Tenable: Un atacante remoto no autenticado puede ejecutar comandos del sistema operativo como root mediante solicitudes manipuladas al endpoint HTTP...
CVE-2018-13341
CVE-2018-13341 Esta herramienta tiene como objetivo explotar el CVE-2018-13341. Usando la dirección MAC del dispositivo objetivo, se puede recuperar la contraseña de la cuenta oculta "crengsuperuser" , que tiene privilegios elevados y permite ejecutar comandos SUDO. El Protocolo de la Caja de...
Crestron Device - Credentials Disclosure
An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interface. Specifically, aj.html sends a JSON document with uname...
CVE-2016-5640
CVE-2016-5640 Módulo Metasploit para Crestron AirMedia AM-100 RCE CVE-2016-5640 Módulo para explotar una vulnerabilidad de inyección remota de comandos en la página de diagnóstico inalámbrico de dispositivos Crestron AirMedia AM-100 con versión de firmware 1.4.0.13. Los comandos se ejecutan como ...
Barco/AWIND OEM Presentation Platform - Remote Command Injection
The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pr...
CVE-2026-7865
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH conso...
EUVD-2026-27394
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH...
CVE-2026-7865
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH...
CVE-2026-7865
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH...
CVE-2026-7865
The CVE-2026-7865 entry describes a vulnerability in Crestron devices where a hidden console command can be exploited to perform command injection by passing control characters to the second argument of a popen call. Affected software is the Crestron SSH console exposed on eligible devices; the u...
Crestron Touchpanels 参数注入漏洞
Crestron Touchpanels are a series of intelligent network touchscreen devices developed by Crestron Corporation in the United States. These devices are used for scheduling in enterprise meeting rooms, controlling audio-visual systems, and automating smart buildings. Crestron Touchpanels have a...
PT-2026-37084
Name of the Vulnerable Software and Affected Versions Crestron devices affected versions not specified Description A hidden console command contains a command injection flaw occurring when control characters are passed to its second argument. This issue exists in the way the console command is...
CVE-2026-7865: Improper Neutralization of Argument Delimiters in a Command
A hidden console command is vulnerable to command injection flaw when control characters are passed to its second argument. A third party researcher Eugene Lim had discovered vulnerability in the way console command passes to a popen function call. Attackers with authenticated access to SSH...
CVE-2019-18184
Crestron DMC-STRO 1.0 devices allow remote command execution as root via shell metacharacters to the ping function...
EUVD-2019-13540
Malware in sbrugna...