Lucene search
+L

37 matches found

RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•26 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS8.1AI score0.02395EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•21 views

CVE-2025-57201

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.4AI score0.17198EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•25 views

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

6.1CVSS5.7AI score0.00485EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•28 views

CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.4AI score0.03329EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•31 views

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.4AI score0.02809EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/03 4:15 p.m.•26 views

CVE-2025-57201

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS0.17198EPSS
SaveExploits2References1
NVD
NVD
•added 2025/12/03 4:15 p.m.•20 views

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

6.1CVSS0.00485EPSS
SaveExploits2References1
NVD
NVD
•added 2025/12/03 4:15 p.m.•27 views

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS0.02809EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/03 3:30 p.m.•21 views

EUVD-2025-200969

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS7.8AI score0.02395EPSS
SaveExploits2References4
NVD
NVD
•added 2025/12/03 3:15 p.m.•24 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS0.02395EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•9 views

CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.1AI score0.03329EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2025/12/03 12:00 a.m.•42 views

CVE-2025-57201

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

0.17198EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/12/03 12:00 a.m.•52 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

0.02395EPSS
SaveExploits2References1
CVE
CVE
•added 2025/12/03 12:00 a.m.•37 views

CVE-2025-57201

The AVTECH SECURITY Corporation DGM1104 network video recorder, specifically version FullImg-1015-1004-1006-1003 , is vulnerable to an authenticated command injection flaw in the SMB server function . An attacker with low-level privileges can execute arbitrary commands by providing specially craf...

8.8CVSS8.1AI score0.17198EPSS
SaveExploits2References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•9 views

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.2AI score0.02809EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/12/03 12:00 a.m.•22 views

AVTech DGM1104 安全漏洞

AVTech DGM1104 is a network video recorder from AVTech Corporation of Taiwan, China. A security vulnerability exists in the AVTech DGM1104 FullImg-1015-1004-1006-1003 version, which originates from an authenticated command injection in the SMB server functionality, and could lead to the execution...

8.8CVSS7.3AI score0.17198EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2025/12/03 12:00 a.m.•42 views

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

0.00485EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•4 views

CVE-2025-57199: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.2AI score0.03329EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2025/12/03 12:00 a.m.•41 views

CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

0.03329EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2025/12/03 12:00 a.m.•23 views

AVTech DGM1104 安全漏洞

AVTech DGM1104 is a network video recorder from AVTech Corporation of Taiwan, China. A security vulnerability exists in the AVTech DGM1104 FullImg-1015-1004-1006-1003 version, which originates from an authenticated command injection in the NetFailDetectD binary file, and could lead to the executi...

8.8CVSS7.3AI score0.03329EPSS
SaveExploits2References4
Rows per page
Query Builder