Lucene search
K

247 matches found

ATTACKERKB
ATTACKERKB
added 2023/09/08 1:15 p.m.2 views

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

7.5CVSS5.7AI score0.6874EPSS
Exploits2References4
Prion
Prion
added 2023/09/08 1:15 p.m.15 views

Directory traversal

SolarView Compact 6.00 is vulnerable to Directory Traversal...

5CVSS7.4AI score0.6874EPSS
Exploits2References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/08 12:0 a.m.19 views

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

6.8AI score0.6874EPSS
Exploits1References2
Cvelist
Cvelist
added 2023/09/08 12:0 a.m.13 views

CVE-2023-40924

SolarView Compact 6.00 is vulnerable to Directory Traversal...

7.6AI score0.6874EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/09/08 12:0 a.m.1 views

Contec SolarView Compact Path Traversal Vulnerability

Contec SolarView Compact is an application system from Contec Japan. It provides photovoltaic power measurement systems. A security vulnerability exists in SolarView Compact versions prior to 6.00 that stems from the presence of a directory traversal vulnerability...

7.5CVSS6.7AI score0.6874EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2023/09/08 12:0 a.m.3 views

PT-2023-27704

Name of the Vulnerable Software and Affected Versions SolarView Compact versions prior to 6.00 Description The issue is related to Directory Traversal. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

7.5CVSS7.1AI score0.6874EPSS
Exploits1References8
0day.today
0day.today
added 2023/09/06 12:0 a.m.330 views

SolarView Compact 6.00 Remote Command Execution Exploit

This Metasploit module exploits a command injection vulnerability on the SolarView Compact version 6.00 web application via the vulnerable endpoint downloader.php. After exploitation, an attacker will have full access with the same user privileges under which the webserver is running typically as...

9.8CVSS9.8AI score0.94216EPSS
Exploits9
Packet Storm
Packet Storm
added 2023/09/06 12:0 a.m.348 views

SolarView Compact 6.00 Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SolarView Compact unauthenticated remote command execution vulnerability.', 'Description' = %q CONTEC's SolarView™ Series enables you to monitor...

9.8CVSS7.1AI score0.94216EPSS
Exploits9
GithubExploit
GithubExploit
added 2023/08/01 4:24 p.m.148 views

Exploit for Command Injection in Contec Solarview_Compact_Firmware

nmap-CVE-2023-23333-exploit Nmap NSE script to dump /etc/passw...

10CVSS9.5AI score0.94372EPSS
Exploits14
CISA KEV Catalog
CISA KEV Catalog
added 2023/07/13 12:0 a.m.17 views

SolarView Compact Command Injection Vulnerability

SolarView Compact contains a command injection vulnerability due to improper validation of input values on the send test mail console of the product's web server...

10CVSS7.6AI score0.94372EPSS
In wildExploits6
VulnCheck KEV
VulnCheck KEV
added 2023/07/05 12:0 a.m.1 views

VulnCheck KEV: CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

9.8CVSS7.6AI score0.01447EPSS
Exploits1References1
VulnCheck KEV
VulnCheck KEV
added 2023/07/05 12:0 a.m.1 views

VulnCheck KEV: CVE-2023-23333

There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php...

9.8CVSS7.4AI score0.94216EPSS
Exploits9References1
VulnCheck KEV
VulnCheck KEV
added 2023/07/05 12:0 a.m.3 views

VulnCheck KEV: CVE-2022-44354

SolarView Compact 4.0 and 5.0 is vulnerable to Unrestricted File Upload via a crafted php file...

9.8CVSS7.3AI score0.02442EPSS
Exploits1References1
GithubExploit
GithubExploit
added 2023/06/16 2:33 p.m.14 views

Exploit for Command Injection in Contec Solarview_Compact_Firmware

CVE-2023-23333 SolarView Compact through 6.00 downloader.php c...

9.8CVSS9.8AI score0.94216EPSS
Exploits9
NVD
NVD
added 2023/05/23 2:15 a.m.11 views

CVE-2023-27512

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and perform an unintended operation...

7.2CVSS6.9AI score0.00771EPSS
Exploits0References3
OSV
OSV
added 2023/05/23 2:15 a.m.0 views

CVE-2023-27512

Use of hard-coded credentials exists in SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10, and SV-CPT-MC310F versions prior to Ver.8.10, which may allow a remote authenticated attacker to login the affected product with an administrative privilege and perform an unintended operation...

7.2CVSS7.2AI score
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2023/05/23 2:15 a.m.1 views

CVE-2023-27514

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command...

8.8CVSS7.5AI score0.03613EPSS
Exploits0References4
OSV
OSV
added 2023/05/23 2:15 a.m.1 views

CVE-2023-27920

Improper access control vulnerability in the system date/time setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to alter system date/time of the affected product...

4.3CVSS6.5AI score0.00191EPSS
Exploits0References3
NVD
NVD
added 2023/05/23 2:15 a.m.5 views

CVE-2023-27521

OS command injection vulnerability in the mail setting page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows remote authenticated attackers to execute an arbitrary OS command...

8.8CVSS8.7AI score0.03613EPSS
Exploits0References3
OSV
OSV
added 2023/05/23 2:15 a.m.2 views

CVE-2023-27514

OS command injection vulnerability in the download page of SolarView Compact SV-CPT-MC310 versions prior to Ver.8.10 and SV-CPT-MC310F versions prior to Ver.8.10 allows a remote authenticated attacker to execute an arbitrary OS command...

8.8CVSS7.5AI score
Exploits0References3
Rows per page
Query Builder