276 matches found
Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control Vulnerability
The Akuvox Smart Intercom/Doorphone suffers from an insecure service API access control. The vulnerability in ServicesHTTPAPI endpoint allows users with "User" privileges to modify API access settings and configurations. This improper access control permits privilege escalation, enabling...
Akuvox Smart Intercom/Doorphone ServicesHTTPAPI Improper Access Control
Summary Vandal-resistant Door Phone for High-end Buildings. Offering top-of-the-line features, Akuvox X912 is targeted at high-end residential and commercial projects. With a compact size, it is perfect for buildings with limited installation space. Description The Akuvox Smart Intercom/Doorphone...
AIPHONE IX SYSTEM和AIPHONE IXG SYSTEM 安全漏洞
AIPHONE IX SYSTEM and AIPHONE IXG SYSTEM are both products of AIPHONE CORPORATION Japan AIPHONE IX SYSTEM is an IP visual intercom system.AIPHONE IXG SYSTEM is an IP-based residential system. A security vulnerability exists in AIPHONE IX SYSTEM and AIPHONE IXG SYSTEM that stems from the presence ...
Malware in intercom-openapi
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Akuvox Smart Intercom/Doorphone Unauthenticated Stream Disclosure
Akuvox Smart Intercom/Doorphone Unauthenticated Stream Disclosure Vendor: The Akuvox Company Product web page: https://www.akuvox.com Affected version: Doorphone: S539 S532 X916 X915 X912 R29 Intercom: R20K-2 R20A-2 C313W-2 NS-2 NC-2 NX-2 Firmware: 912.30.1.137 Summary: Vandal-resistant Door Phon...
CVE-2024-29206
CVE-2024-29206 concerns multiple Ubiquiti UniFi devices. The issue is described as an improper access control that, if an attacker is authenticated in the API, can enable Android Debug Bridge (ADB) and make unsupported changes to the system. Affected products and versions include: UniFi Connect E...
CVE-2024-31680
File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local attacker to execute arbitrary code via the myparser.php component...
IP Network Intercom Broadcasting System 安全漏洞
Spon IP Network Intercom Broadcasting System is an IP network based intercom broadcasting system from Spon Communications China. A security vulnerability exists in IP Network Intercom Broadcasting System version 1.0, which is caused by a file upload vulnerability. The vulnerability can be exploit...
CVE-2024-31680: Unrestricted Upload of File with Dangerous Type
File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local attacker to execute arbitrary code via the myparser.php component...
CVE-2024-31680
File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local attacker to execute arbitrary code via the myparser.php component...
CVE-2024-31680
File Upload vulnerability in Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 allows a local attacker to execute arbitrary code via the myparser.php component...
CVE-2024-31680
The Shibang Communications Co., Ltd. IP network intercom broadcasting system v.1.0 is vulnerable to a File Upload flaw in the my_parser.php component. This vulnerability allows a local attacker to execute arbitrary code on the system. To mitigate this risk, it is recommended to disable the my_par...
PT-2024-24187 · Shibang Communications · Shibang Communications Co.
Name of the Vulnerable Software and Affected Versions: Shibang Communications Co., Ltd. IP network intercom broadcasting system version 1.0 Description: The issue allows a local attacker to execute arbitrary code via the my parser.php component. This is a result of a File Upload vulnerability in...
CVE-2024-3218
The CVE-2024-3218 entry affects Shibang Communications IP Network Intercom Broadcasting System v1.0, specifically the /php/busyscreenshotpush.php endpoint. The vulnerability arises from path traversal via manipulation of jsondata[callee]/jsondata[imagename] to escalate outside the intended direct...
CVE-2024-3218 Shibang Communications IP Network Intercom Broadcasting System busyscreenshotpush.php path traversal
A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondatacallee/jsondataimagename leads to path traversal: '../filedir...
CVE-2024-3218 Shibang Communications IP Network Intercom Broadcasting System busyscreenshotpush.php path traversal
A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondatacallee/jsondataimagename leads to path traversal: '../filedir...
IP Network Intercom Broadcasting System 安全漏洞
Spon IP Network Intercom Broadcasting System is an IP network based intercom broadcasting system from Spon Communications China. A security vulnerability exists in IP Network Intercom Broadcasting System version 1.0, which is caused by path traversal due to misuse of the parameter...
PT-2024-24456 · Shibang Communications · Shibang Communications Ip Network Intercom Broadcasting System
Name of the Vulnerable Software and Affected Versions: Shibang Communications IP Network Intercom Broadcasting System version 1.0 Description: A critical vulnerability has been found in the Shibang Communications IP Network Intercom Broadcasting System. This issue affects an unknown part of the...
CVE-2024-3218: Path Traversal: '../filedir'
A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscreenshotpush.php. The manipulation of the argument jsondatacallee/jsondataimagename leads to path traversal: '../filedir...
