Eaton-Intelligent-Power-Manager-Local-File-Inclusion

Eaton-Intelligent-Power-Manager-Local-File-Inclusion Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file, it can lead to sensitive information disclosure, denial of service and code execution. CVE-2018-12031 To exploit vulnerability, someone could use...

Eaton IPM LFI (CVE-2018-12031)

Exploits CVE-2018-12031 in Eaton Intelligent Power Manager 1.6: directory traversal via nodeupgradesrv.js downloadFirmware reads /etc/passwd and more. !/usr/bin/env python3 -- coding: utf-8 -- """Eaton Intelligent Power Manager traversal LFI CVE-2018-12031.""" import re from kittysploit import fr...

Eaton Intelligent Power Manager 1.6 - Directory Traversal Detection

Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via directory traversal, which can lead to sensitive information disclosure, denial of service and code execution. !/usr/bin/env python3 -- coding: utf-8 -- """Eaton Intelligent Power Manager v1.""" import re from kittysplo...

EUVD-2021-10376

Malware in sbrugna...

EUVD-2021-10371

Malware in sbrugna...

EUVD-2021-10374

Malware in sbrugna...

EUVD-2021-10381

Malware in sbrugna...

EUVD-2021-10373

Malware in sbrugna...

EUVD-2021-10379

Malware in sbrugna...

EUVD-2020-27799

Malware in sbrugna...

EUVD-2021-10375

Malware in sbrugna...

CVE-2021-23282

CVE-2021-23282 affects Eaton Intelligent Power Manager (IPM) versions prior to 1.70. The issue is a stored cross-site scripting vulnerability caused by insufficient validation of input from certain resources in the IPM software. Exploitation requires access to the local subnet and administrator i...

CVE-2021-23282: Improper Neutralization of Input During Web Page Generation

Eaton Intelligent Power Manager IPM prior to 1.70 is vulnerable to stored Cross site scripting. The vulnerability exists due to insufficient validation of input from certain resources by the IPM software. The attacker would need access to the local Subnet and an administrator interaction to...

VulnCheck KEV: CVE-2018-12031

Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/nodeupgradesrv.js directory traversal with the firmware parameter in a downloadFirmware action...

PT-2022-9391

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager Infrastructure IPM Infrastructure versions 1.5.0plus205 and prior versions Description The issue is a reflected Cross-site Scripting vulnerability. This vulnerability affects Eaton Intelligent Power Manager...

CVE-2021-23286: Improper Neutralization of Formula Elements in a CSV File

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to CSV Formula Injection. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior versions...

PT-2022-9392

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager Infrastructure IPM Infrastructure versions 1.5.0plus205 and prior versions. Description The issue is related to CSV Formula Injection. This affects all versions of Eaton Intelligent Power Manager Infrastructure...

PT-2022-9390

Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager Infrastructure IPM Infrastructure versions 1.5.0plus205 and prior versions. Description The issue is related to a Stored Cross-site Scripting vulnerability. This vulnerability affects Eaton Intelligent Power...

CVE-2021-23285: Improper Neutralization of Input During Web Page Generation

Eaton Intelligent Power Manager Infrastructure IPM Infrastructure version 1.5.0plus205 and all prior versions are vulnerable to reflected Cross-site Scripting vulnerability. This issue affects: Eaton Intelligent Power Manager Infrastructure IPM Infrastructure all version 1.5.0plus205 and prior...

Eaton Intelligent Power Manager Cross-Site Script Vulnerability

Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. A security vulnerability exists in Eaton Intelligent Power Manager Infrastructure IPM Infrastructure versio...