Lucene search
+L

17 matches found

RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•22 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS8.4AI score0.02395EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
•added 2025/12/04 12:11 a.m.•23 views

CVE-2025-57199

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.4AI score0.03329EPSS
SaveExploits2References1
NVD
NVD
•added 2025/12/03 4:15 p.m.•24 views

CVE-2025-57201

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS0.17198EPSS
SaveExploits2References1
NVD
NVD
•added 2025/12/03 3:15 p.m.•20 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS0.02395EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•3 views

CVE-2025-57201: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.2AI score0.17198EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2025/12/03 12:00 a.m.•15 views

AVTech DGM1104 安全漏洞

AVTech DGM1104 is a network video recorder from AVTech Corporation of Taiwan, China. A security vulnerability exists in the AVTech DGM1104 FullImg-1015-1004-1006-1003 version, which originates from an authenticated command injection in the testmail function and could lead to the execution of...

6.5CVSS7.3AI score0.02395EPSS
SaveExploits2References4
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•6 views

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.2AI score0.02809EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•0 views

CVE-2025-57200: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

6.5CVSS8.2AI score0.02395EPSS
SaveExploits2References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•1 views

CVE-2025-57202: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

6.1CVSS6.1AI score0.00485EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2025/12/03 12:00 a.m.•17 views

AVTech DGM1104 安全漏洞

AVTech DGM1104 is a network video recorder from AVTech Corporation of Taiwan, China. A security vulnerability exists in the AVTech DGM1104 FullImg-1015-1004-1006-1003 version, which originates from an authenticated command injection in the SMB server functionality, and could lead to the execution...

8.8CVSS7.3AI score0.17198EPSS
SaveExploits2References4
Cvelist
Cvelist
•added 2025/12/03 12:00 a.m.•40 views

CVE-2025-57198

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

0.02809EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•7 views

CVE-2025-57201

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the SMB server function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.1AI score0.17198EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•7 views

CVE-2025-57200

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the testmail function. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.1AI score0.02395EPSS
SaveExploits2References2
CVE
CVE
•added 2025/12/03 12:00 a.m.•60 views

CVE-2025-57200

The AVTECH SECURITY Corporation DGM1104 network video recorder (version FullImg-1015-1004-1006-1003 ) is vulnerable to an authenticated command injection flaw within the test_mail function. This vulnerability allows an attacker to execute arbitrary commands by providing specially crafted input, p...

6.5CVSS8.1AI score0.02395EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•2 views

CVE-2025-57198: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the Machine.cgi endpoint. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.2AI score0.02809EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/03 12:00 a.m.•3 views

CVE-2025-57199: Improper Neutralization of Special Elements used in a Command

AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 was discovered to contain an authenticated command injection vulnerability in the NetFailDetectD binary. This vulnerability allows attackers to execute arbitrary commands via a crafted input...

8.8CVSS8.2AI score0.03329EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2025/12/03 12:00 a.m.•6 views

CVE-2025-57202

A stored cross-site scripting XSS vulnerability in the PwdGrp.cgi endpoint of AVTECH SECURITY Corporation DGM1104 FullImg-1015-1004-1006-1003 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the username field...

6.3AI score0.00485EPSS
SaveExploits2References2
Rows per page
Query Builder