725 matches found
cs4239-cve-2020-15873
CVE-2020-15873 CVE-2020-15873 的概念验证 - LibreNMS librenms librenms 开发 调试 LibreNMS Docker 实例 1. 获取容器的 shell： $ sudo docker exec -it librenmsvuln /bin/bash 2. 读取 LibreNMS 生成的日志： $ tail -f /opt/librenms/logs/librenms.log 调试 MariaDB Docker 实例 1. 获取容器的 shell： $ sudo docker exec -it librenmsdbvuln...
CVE-2018-18441-exploit
CVE-2018-18441-exploit root@kitploit: D-Link DCS系列Wi-Fi摄像头会暴露有关设备配置的敏感信息。 受影响的设备包括许多DCS系列，如：DCS-936L、DCS-942L、DCS-8000LH、 DCS-942LB1、DCS-5222L、DCS-825L、DCS-2630L、DCS-820L、DCS-855L、DCS-2121、DCS-5222LB1、DCS-5020L等。 受影响的固件版本从1.00及以上。 配置文件可以通过远程访问：/common/info.cgi，无需认证。 配置文件包含以下字段： model, product,...
CVE-2026-73125
Ebyte NE2-D11 devices are affected by a missing authentication flaw in the web management interface . The interface does not consistently enforce authentication before granting access to administrative functionality, allowing an unauthenticated remote attacker to read sensitive configuration data...
CVE-2026-73125 Ebyte NA111-M Missing Authentication for Critical Function
Ebyte device web management interface does not consistently enforce authentication before granting access to administrative functionality. An unauthenticated remote attacker could access sensitive configuration information, modify device settings, or disrupt availability...
FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration
Overview FA-50 CLASS B AIS TRANSPONDER provided by FURUNO ELECTRIC CO., LTD. contains the following vulnerabilities. Use of hard-coded credentials CWE-798 - CVE-2026-59769 The CVSS evaluation above assumes that an attacker who knows the credentials and has access to the network to which the devic...
CVE-2026-13196 Out-of-bounds Write in KUNBUS piControl
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
PT-2026-72031
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to write attacker-controlled data outside the bounds of the...
CVE-2026-15141
The web interface of the affected device relies on the HTTP referrer header as part of request validation. Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient validation logic. Successful exploitation may allow an...
CVE-2026-6181
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...
CVE-2026-6181
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...
CVE-2026-6181
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...
EUVD-2026-55962
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...
CVE-2026-6181
The Device Configuration Framework is vulnerable to an authentication bypass flaw. This flaw can only be exploited after authenticating with a viewer-privileged service account...
CVE-2026-6181
The CVE-2026-6181 entry concerns the Device Configuration Framework. Vulnerability: authentication bypass achievable after an attacker authenticates with a viewer-privileged service account. Root cause: flawed auth logic permitting bypass once logged in with a high-privilege viewer account. Impac...
PT-2026-70071
Name of the Vulnerable Software and Affected Versions Device Configuration Framework affected versions not specified Description An authentication bypass flaw exists within the Device Configuration Framework. This issue can be exploited by an attacker who has already authenticated using a service...
CVE-2025-15681
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providing valid credentials. This allows the...
CVE-2026-71264
WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...
EUVD-2026-53349
WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...
CVE-2026-71264
WLED's GET /json/cfg endpoint registered in wled00/wledserver.cpp calls serveJson with no settings-PIN check, unlike the /edit endpoint which explicitly checks correctPIN, disclosing the device's general configuration network, hardware, LED setup to any unauthenticated client on the network...
EUVD-2026-48986
In the Linux kernel, the following vulnerability has been resolved: Input: goodix - clamp the device-reported contact count goodixtsreadinputreport copies the number of touch points reported by the device into an on-stack buffer u8 pointdata2 + GOODIXMAXCONTACTSIZE GOODIXMAXCONTACTS; which is siz...