Lucene search
+L

43 matches found

Cvelist
Cvelist
•added 2025/09/02 7:49 p.m.•27 views

CVE-2025-8613 Vacron Camera ping Command Injection Remote Code Execution Vulnerability

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS0.0122EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/02 7:49 p.m.•7 views

CVE-2025-8613 Vacron Camera ping Command Injection Remote Code Execution Vulnerability

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS7.7AI score0.0122EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/02 12:00 a.m.•13 views

Vacron Camera 操作系统命令注入漏洞

Vacron Camera is a camera from Vacron Corporation of Taiwan, China. Vacron Camera suffers from an operating system command injection vulnerability that stems from insufficient webs.cgi endpoint validation, which could lead to remote code execution...

7.2CVSS7.7AI score0.0122EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/02 12:00 a.m.•2 views

CVE-2025-8613: Improper Neutralization of Special Elements used in an OS Command

Vacron Camera ping Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi...

7.2CVSS6.7AI score0.0122EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2025/08/06 12:00 a.m.•25 views

(0Day) Vacron Camera ping Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Vacron Camera devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the webs.cgi endpoint. The issue results from the lack of proper validation of a...

7.2CVSS7.1AI score0.0122EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/08/06 12:00 a.m.•21 views

PT-2025-32197

Name of the Vulnerable Software and Affected Versions: Vacron Camera affected versions not specified Description: A command injection vulnerability exists in the ping functionality of Vacron Cameras. This allows for remote code execution. The vulnerability was discovered by Steven C Yu of Trend...

7.2CVSS7.6AI score0.0122EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/06/28 4:23 p.m.•17 views

CVE-2025-34043

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

10CVSS9AI score0.07505EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/26 4:15 p.m.•24 views

CVE-2025-34043

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

10CVSS0.07505EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2025/06/26 3:51 p.m.•28 views

CVE-2025-34043 Vacron NVR Remote Command Execution

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

10CVSS0.07505EPSS
SaveExploits0References6
CVE
CVE
•added 2025/06/26 3:51 p.m.•134 views

CVE-2025-34043

Vacron NVR devices (v1.4) are affected by a remote command injection due to improper input sanitization in the board.cgi script. The issue allows unauthenticated attackers to pass arbitrary commands to the underlying OS via crafted HTTP requests, resulting in remote code execution with the web se...

10CVSS8.6AI score0.07505EPSS
SaveIn wildExploits0References6
Vulnrichment
Vulnrichment
•added 2025/06/26 3:51 p.m.•10 views

CVE-2025-34043 Vacron NVR Remote Command Execution

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

10CVSS8.6AI score0.07505EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/06/26 12:00 a.m.•17 views

PT-2025-26992

Name of the Vulnerable Software and Affected Versions: Vacron Network Video Recorder NVR devices version 1.4 Description: A remote command injection issue exists due to improper input sanitization in the board.cgi script. This allows unauthenticated attackers to pass arbitrary commands to the...

10CVSS8.5AI score0.07505EPSS
SaveExploits0References11
CNNVD
CNNVD
•added 2025/06/26 12:00 a.m.•19 views

Vacron Network Video Recorder 安全漏洞

Vacron Network Video Recorder is a webcam from Vacron Corporation of Taiwan, China. A security vulnerability exists in Vacron Network Video Recorder v1.4, which stems from improperly cleaned inputs to the board.cgi script, which could lead to remote command execution...

10CVSS6.9AI score0.07505EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/26 12:00 a.m.•3 views

CVE-2025-34043: Improper Neutralization of Special Elements used in an OS Command

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

10CVSS6.5AI score0.07505EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2017/10/24 12:00 a.m.•22 views

Vacron NVR Web Interface Detection

Binary data vacronnvrdetect.nbin...

7.3AI score
SaveExploits0References1
Check Point Advisories
Check Point Advisories
•added 2017/10/22 12:00 a.m.•7 views

Vacron NVR Remote Code Execution

A remote code execution vulnerability is exist in Vacron devices. A remote attacker can exploit this weakness to execute arbitrary code in the affected router via a crafted request...

6.2AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
•added 2017/10/20 12:00 a.m.•5 views

VulnCheck KEV: CVE-2025-34043

A remote command injection vulnerability exists in Vacron Network Video Recorder NVR devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests...

10CVSS6.5AI score0.07505EPSS
SaveIn wildExploits0References623
OpenVAS
OpenVAS
•added 2017/10/11 12:00 a.m.•22 views

Vacron NVR IP Surveillance Detection (HTTP)

HTTP based detection of Vacron NVR IP Surveillance. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.4AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2017/10/11 12:00 a.m.•3708 views

Vacron NVR RCE Vulnerability (Oct 2017) - Active Check

Vacron NVR is prone to a remote code execution RCE vulnerability. This vulnerability was known to be exploited by the IoT Botnet SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

10CVSS8.1AI score0.07505EPSS
SaveExploits0References3
CNVD
CNVD
•added 2017/10/09 12:00 a.m.•9 views

Vacron NVR Device Remote Command Execution Vulnerability

Vacron is mainly engaged in the production of all kinds of mobile surveillance, CCTV surveillance system, IP remote image monitoring system and other related products, and is able to accept customized orders such as ODM and OEM. Main products: Car Recorder, CCTV Analog Surveillance System, CMS, I...

7.8AI score
SaveExploits0References1
Rows per page
Query Builder