Lucene search
+L

4 matches found

VulnCheck KEV
VulnCheck KEV
•added 2026/04/18 12:00 a.m.•11 views

VulnCheck KEV: CVE-2026-27174

MajorDoMo aka Major Domestic Module allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect call that lacks an exit statement, allowing unauthenticated requests to reach th...

9.8CVSS6.7AI score0.05111EPSS
SaveIn wildExploits4References7
Packet Storm
Packet Storm
•added 2026/03/02 12:00 a.m.•167 views

📄 MajorDoMo Console Eval Unauthenticated Remote Code Execution

This Metasploit module exploits an unauthenticated remote code execution vulnerability in MajorDoMo, an open-source home automation platform. The admin panels PHP console is accessible without authentication due to a missing exit after redirect in modules/panel.class.php. The redirect"/" call...

9.8CVSS6.5AI score0.05111EPSS
SaveExploits4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/18 12:00 a.m.•1 views

CVE-2026-27174: Improper Control of Generation of Code

MajorDoMo aka Major Domestic Module allows unauthenticated remote code execution via the admin panel's PHP console feature. An include order bug in modules/panel.class.php causes execution to continue past a redirect call that lacks an exit statement, allowing unauthenticated requests to reach th...

9.8CVSS6.9AI score0.05111EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2025/03/18 12:00 a.m.•12 views

Sytel Softdial Contact Center(Sytel SCC) 代码问题漏洞

Sytel Softdial Contact Center Sytel SCC is a cloud contact center software from Sytel. A code issue vulnerability exists in Sytel Softdial Contact Center Sytel SCC, which originates from an unrestricted file upload in the /softdial/phpconsole/upload.php endpoint, which could lead to code executio...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits0References1
Rows per page
Query Builder