203 matches found
CVE-2022-31499
CVE-2022-31499 Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection...
CVE-2022-31798
CVE-2022-31798 Exploit Title: Nortek Linear eMerge E3-Series - account takeover...
CVE-2022-31269
CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...
CVE-2022-31269
CVE : CVE-2022-31269 Exploit Title: Nortek Linear eMerge E3-Series - Information Disclosure leads to access admin dashboard...
Linear eMerge E3-Series - Cross-Site Scripting Detection
Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badgetemplatev0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based...
Linear eMerge E3-Series - Information Disclosure Detection
Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...
CVE-2022-38628
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting XSS vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified...
CVE-2019-7253
Linear eMerge E3-Series devices allow Directory Traversal...
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
CVE-2019-7258
Linear eMerge E3-Series devices allow Privilege Escalation...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
EUVD-2019-16797
Malware in sbrugna...
EUVD-2019-16808
Malware in sbrugna...
EUVD-2019-16807
Malware in sbrugna...
EUVD-2019-16804
Malware in sbrugna...
EUVD-2022-41205
Malicious code in bioql PyPI...
VulnCheck KEV: CVE-2022-38627
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter...