Satellian-CVE-2020-7980

Satellian-CVE-2020-7980 Satellianは、Intellian衛星コントローラー（Intellian Aptus Web）におけるRCE脆弱性を示すPoCスクリプトです。 以下のスクリプトは、システム内のすべてのバイナリをリストし、その後テスターがサーバーと直接（通常はrootとして）対話できるようにします。 PoC xh4h@Macbook-xh4h /Satellian python satellian.py -u http:// / \ oo Intellian Satellite Terminal PoC /-------/ --' / / | ||...

CVE-2020-7980

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...

EUVD-2020-28913

Malware in sbrugna...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

VulnCheck KEV: CVE-2020-7980

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...

Exploit for OS Command Injection in Intelliantech Aptus_Web

It is a PoC exploit for CVE-2020-7980, a remote code execution vulnerability in Intellian Satellite controller Intellian Aptus Web. The exploit targets the vulnerability class/vector of RCE Remote Code Execution and is implemented as a Python script named satellian.py. The probable entry point is...

Intellian Aptus Web Remote Code Execution (CVE-2020-7980)

A remote code execution vulnerability exists in Intellian Aptus Web. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Intellian Satellian Aptus Web Console Remote Code Execution Vulnerability

Intellian Satellian Aptus Web is a console system. A remote code execution vulnerability exists in the Intellian Satellian Aptus Web console. An attacker can execute arbitrary code on the target system by sending a malicious construct request to /cgi-bin/libagent.cgi using the Q field in the JSON...

Exploit for OS Command Injection in Intelliantech Aptus_Web

Satellian-CVE-2020-7980 Satellian is a PoC script that shows R...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

Hardcoded credentials

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

CVE-2020-8000

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

CVE-2020-8000

Intellian Aptus Web 1.24 contains a hardcoded intellian account password (12345678). This yields a high-severity, network-exposed risk with potential full impact on confidentiality, integrity, and availability per CVSS 3.1/BASE. The connected sources confirm the issue but do not provide remediati...

CVE-2020-8000: Use of Hard-coded Credentials

Intellian Aptus Web 1.24 has a hardcoded password of 12345678 for the intellian account...

PT-2020-19911

Name of the Vulnerable Software and Affected Versions Intellian Aptus Web version 1.24 Description The issue concerns a hardcoded password. Specifically, the password 12345678 is hardcoded for the intellian account. Recommendations For Intellian Aptus Web version 1.24, change the hardcoded passwo...

CVE-2020-7980

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...

CVE-2020-7980

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...

Design/Logic Flaw

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...

CVE-2020-7980

Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed...