CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82794

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2023-23333

CVE-2023-23333 SolarView Compact 6.00まで downloader.php コマンドインジェクション RCE nuclei-templates Burp Nuclei...

CVE-2026-82796

SolarView Compact (Contec) contains a cross-site scripting vulnerability in the Image Management component. An attacker with valid login credentials can exploit it to execute an arbitrary OS command , achieving impact on a subsequent system due to changed scope . The CVSS 3.1 base score is 5.4 (M...

EUVD-2026-77252

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82795

SolarView Compact (Contec) contains a cross-site scripting (XSS) vulnerability in its Schedule Settings and Mail Send Setting features. If exploited, the XSS can be leveraged to execute an arbitrary OS command by an attacker who has valid credentials to log into the product. The CVSS v3.1 score i...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

EUVD-2026-77251

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82794

SolarView Compact (by Contec ) contains an OS command injection vulnerability in its Schedule Settings feature. An attacker with authenticated access can execute arbitrary OS commands on the host system. The CVSS v3.1 score is 8.8 (HIGH) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indic...

EUVD-2026-77250

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82794

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: 攻撃者はdownloader.php?の脆弱性を悪用します。fileパラメータは、ディレクトリトラバーサルを通じて機密ファイルを読み取ります。 downloader.php?file にはディレクトリトラバーサルが存在します 機密ファイル /etc/password を読み取ることができます...

SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

CVE-2023-29919

Summary: Existe una vulnerabilidad de lectura arbitraria de archivos en SolarView Compact 6.00 y version anteriores, los atacantes pueden omitir la autenticación para leer archivos a través de texteditor.php Vendor: SolarView Compact Affected Product: SolarView Compact =ver 6.00 poc:...

CVE-2023-23333

概要: SolarView Compact 6.00 以前には、downloader.php を介して内部制限を回避し、コマンドを実行できるコマンドインジェクションの脆弱性があります。 ベンダー: SolarView Compact 影響を受ける製品: SolarView Compact バージョン: SolarView Compact =ver 6.00 PoC: curl http://example.com/downloader.php?file=;echo%20Y2F0IC9ldGMvcGFzc3dkCg==|base64%20-d|bash%00.zip | grep...

CVE-2022-40881

CVE-2022-40881 fofa root@kitploit: body="SolarView Compact" && title=="Top" 免責事項...

solarview-ics-vulnerability-analysis

Análisis de Vulnerabilidades de SolarView ICS Un análisis de amenazas ciberfísicas del incidente del botnet SolarView Compact / Mirai, en el que los atacantes explotaron CVE-2022-29303 para comprometer aproximadamente 800 dispositivos de monitoreo solar en instalaciones fotovoltaicas japonesas...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...