CVE-2016-15047

AVTECH IP cameras, digital video recorders (DVR), and network video recorders (NVR) are vulnerable to authenticated OS command injection via the CloudSetup.cgi management endpoint. The root cause is the lack of proper validation or whitelisting for the exefile parameter, which is passed directly ...

AVTECH IP camera security vulnerability

AVTECH IP camera is a series of network security cameras from AVTECH, a Taiwan, China-based company. A security vulnerability exists in AVTECH IP camera, which stems from an exefile parameter in the CloudSetup.cgi management endpoint that is not properly authenticated or whitelisted, which could...

CVE-2016-15047: Improper Neutralization of Special Elements used in an OS Command

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...

EUVD-2008-3924

Malware in sbrugna...

EUVD-2019-4875

Malware in sbrugna...

EUVD-2025-19644

Malicious code in bioql PyPI...

EUVD-2025-19641

Malicious code in bioql PyPI...

EUVD-2025-19631

Malicious code in bioql PyPI...

EUVD-2025-19646

Malicious code in bioql PyPI...

EUVD-2025-19640

Malicious code in bioql PyPI...

EUVD-2024-31209

Malicious code in bioql PyPI...

EUVD-2025-19647

Malicious code in bioql PyPI...

EUVD-2025-19643

Malicious code in bioql PyPI...

EUVD-2025-19642

Malicious code in bioql PyPI...

EUVD-2024-31208

Malicious code in bioql PyPI...

EUVD-2025-19645

Malicious code in bioql PyPI...

ActionD Daemon DoS

The vulnerability of the DoShellCmd function in the ActionD daemon of Avtech’s microprogramming software for IP cameras and digital/netscreen video recorders lies in insufficient validation of input data during the processing of the strCmd parameter. Exploiting this vulnerability allows a remote...

Search.cgi?action=cgi_query Avtech Code Execution

The vulnerability of the Search.cgi?action=cgiquery component of the Avtech digital video recorder software lies in insufficient validation of input data when processing parameters such as username or queryb64str. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Avtech PwdGrp.cgi Code Execution

The vulnerability of the PwdGrp.cgi component of Avtech’s microprogrammed IP cameras and digital/netscreen video recorders lies in insufficient validation of input data during the processing of the pwd or grp parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Machine.cgi?action=get_capability Avtech Information Disclosure

The vulnerability of the Machine.cgi?action=getcapability component of Avtech’s microprogrammed IP cameras and digital/netscreen video recorders lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...