EyeLock nano NXT 3.3-3.5 unauthenticated command injection vulnerabilities

/scripts/rpc.php: --- 9: if isset$REQUEST'action' 10: 11: switch$REQUEST'action' ... ... 181: case 'updatetime': 182: 183: // do something, the put our response in the response field... 184: $strDate = shellexec"rdate -s $REQUEST'timeserver' 2&1"; 185: 186: // set the hardware clock. 187:...

EyeLock nano NXT 3.5 - Local File Disclosure

Exploit for php platform in category web applications EyeLock nano NXT 3.5 Local File Disclosure Vulnerability Vendor: EyeLock, LLC Product web page: http://www.eyelock.com Affected version: NXT Firmware: 3.05.1193 ICM: 3.5.1 NXT Firmware: 3.04.1108 ICM: 3.4.13 NXT Firmware: 3.03.944 ICM: 3.3.2 N...