CVE-2025-60787-POC

CVE-2025-60787 - motionEye 认证后的远程代码执行 通过未净化的 motion 配置参数在 motionEye = 0.43.1b4 中实现认证后的远程代码执行 作者：d3vn0mi 漏洞概述 字段| 详情 ---|--- CVE ID| CVE-2025-60787 CVSS 评分| 7.2（高） 类型| 操作系统命令注入（CWE-78） 受影响版本| motionEye = 0.43.1b4 修复版本| 0.43.1b5 motionEye 接受配置字段（如 imagefilename）中的任意字符串，并将其直接写入 Motion...

espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

Schneider Electric U.motion Builder - SQL Injection

The vulnerability exists within processing of trackimportexport.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. The underlying SQLite database query is subject to SQL injection on the objectid input parameter. id: CVE-2018-7765 info: name: Schneider Electric U.motion...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 操作系统命令注入 针对 motionEye（一个用于 motion 守护进程的 Web 前端）漏洞的 OS 命令注入概念验证利用。该漏洞滥用了 imagefilename 配置参数，该参数未经净化地直接传递给 shell，允许通过 $command 子 shell 语法进行任意命令注入。 免责声明： 仅用于您已获得明确许可进行测试的系统。未经授权使用是非法的。 目录 漏洞工作原理 前提条件 步骤 1 — 查找管理员密码哈希 步骤 2 — 理解身份验证链 步骤 3 — 理解签名算法 步骤 ...

Astra Linux – Vulnerability in libde265

It was discovered that Libde265 v1.0.8 contains a heap-buffer-overflow vulnerability through the use of mcluma in the motion.cc library. This vulnerability allows attackers to cause a Denial of Service DoS attack by using a specially crafted video file...

gps-sdr-sim

GPS-SDR-SIM GPS-SDR-SIMは、GPSベースバンド信号データストリームを生成し、ADALM-Pluto、bladeRF、HackRF、USRPなどのソフトウェア定義ラジオ（SDR）プラットフォームを使用してRFに変換できます。 Windowsビルド手順 1. Visual Studioを起動します。 2. コンソールアプリケーション用の空のプロジェクトを作成します。 3. 右側のソリューションエクスプローラーで、"gpssim.c"と"getopt.c"をソースファイルフォルダに追加します。 4. ソリューション構成のドロップダウンリストから"Release"を選択しま...

GAZEleak: Passcode Inference against Eye-Tracking XR Devices through External Observation

Mixed-reality headsets such as Apple Vision Pro replace the touch screen with gaze-as-pointer interaction: the wearer looks at a target and confirms with an air pinch. Because the display is inside the headset and the eye tracker is walled off from third-party software, such input is widely assum...

EUVD-2026-81400

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

CVE-2026-15688 Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

CVE-2026-15688

Mitsubishi Electric GX Works3 and Motion Control Setting are affected by an incorrect implementation of the authentication algorithm , allowing a local attacker with low privileges to bypass block password authentication. The attacker achieves this by executing the affected product and modifying ...

CVE-2026-15688 Password Authentication Bypass Vulnerability in GX Works3 and Motion Control Setting

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

Mitsubishi Electric GX Works3 and Motion Control Settings

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modify part of the executable module in memory, and thereby allows the attacker to view, tamper with,...

CVE-2026-15688: Incorrect Implementation of Authentication Algorithm

Incorrect Implementation of Authentication Algorithm Vulnerability in Mitsubishi Electric GX Works3 and Motion Control Setting allows a local attacker to successfully authenticate even with an invalid block password by executing the affected product and modifying part of the executable module in...

PT-2026-94194

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric GX Works3 and Motion Control Setting affected versions not specified Description An incorrect implementation of the authentication algorithm allows a local attacker to bypass block password authentication. By executing the...

CVE-2026-43737

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent...

CVE-2026-43737

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent...

CVE-2026-43737

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent...

EUVD-2026-77951

An authorization issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, watchOS 27. An app may be able to access motion data from headphones without user consent...

CVE-2026-43737

An authorization issue in the CoreMotion framework (specifically affecting watchOS 27 ) allows an application to access motion data from headphones without user consent. This vulnerability was addressed by improving validation processes. Affected products include iOS 26.7/27 , iPadOS 26.7/27 , ma...

Astra Linux – Vulnerability in libde265

It was discovered that libde265 v1.0.10 contains a NULL pointer dereference in the putweightedpred8fallback function located in fallback-motion.cc. This vulnerability allows attackers to cause a Denial of Service DoS attack through a crafted input file...