CVE-2024-7120-Exploit-by-Dark-07x

Raisecom 设备命令注入 CVE-2024-7120 概念验证！ 概述 已发现 RAISECOM 网关设备中存在命令注入漏洞，影响型号 MSG1200、MSG2100E、MSG2200 和 MSG2300。该漏洞允许远程攻击者通过 Web 界面在系统上执行任意命令。问题存在于 listbaseconfig.php 脚本中，具体通过 template 参数，影响互联网上超过 25,112 台设备。 ✔ FOFA : title="web user login" && body="" 受影响组件 URI：/vpn/listbaseconfig.php 描述：...

CVE-2024-7120

Inyección de Comandos en Dispositivos Raisecom CVE-2024-7120 ¡Prueba de concepto! Resumen Se ha identificado una vulnerabilidad de inyección de comandos en los dispositivos Gateway de RAISECOM, que afecta a los modelos MSG1200, MSG2100E, MSG2200 y MSG2300. Esta vulnerabilidad permite a atacantes...

EUVD-2025-4521

Malicious code in bioql PyPI...

CVE-2025-1536

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536 Raisecom Multi-Service Intelligent Gateway Request Parameter vpn_template_style.php os command injection

A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpntemplatestyle.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os...

CVE-2025-1536

The CVE-2025-1536 entry concerns Raisecom Multi-Service Intelligent Gateway (up to 20250208). The issue is a remote OS command injection in the file /vpn/vpn_template_style.php within the Request Parameter Handler, triggered by manipulating the stylenum argument. Available sources indicate an exp...

Raisecom Multi-Service Intelligent Gateway 命令注入漏洞

Raisecom Multi-Service Intelligent Gateway is a Multi-Service Intelligent Gateway from Raisecom China. A command injection vulnerability exists in Raisecom Multi-Service Intelligent Gateway 20250208 and earlier versions, which stems from improper parameter handling, resulting in OS command...

Raisecom多款产品 安全漏洞

Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in various Raisecom products, which stems from the ability to upload arbitrary files, which may result in unauthorized access to server privileges. The following products are affected:...

Raisecom多款产品 安全漏洞

Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. A security vulnerability exists in various Raisecom products, which stems from the ability to upload arbitrary files, which may result in unauthorized access to server privileges. The following products are affected:...

Raisecom MSG1200、Raisecom MSG2100E、Raisecom MSG2200和Raisecom MSG2300 操作系统命令注入漏洞

The Raisecom MSG1200 and others are a Gigabit Converged Gateway from Raisecom China. An OS command injection vulnerability exists in the Raisecom MSG1200, Raisecom MSG2100E, Raisecom MSG2200, and Raisecom MSG2300 version 3.90, which originates from the parameter template/ in file...