Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/03/04 9:31 a.m.•25 views

EUVD-2026-9364

A path traversal vulnerability exists in the /IDCLogging/checkifdone.cgi script in International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web management portal version 101. An authenticated attacker can manipulate the file parameter to traverse directories and enumerate...

5.3CVSS6.1AI score0.00823EPSS
SaveExploits1References2
CVE
CVE
•added 2026/03/04 7:02 a.m.•58 views

CVE-2026-28769

The CVE concerns IDC SFX Series SuperFlex Satellite Receiver Web management portal (version 101). An authenticated user can abuse the /IDC_Logging/checkifdone.cgi script by manipulating the file parameter to perform directory traversal, enabling enumeration of arbitrary filesystem files. The root...

6.5CVSS6AI score0.00823EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2026/03/04 12:00 a.m.•27 views

International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface 安全漏洞

The International Datacasting SFX Series SuperFlex Satellite Receiver Web management interface is a web-based management backend for the satellite receiver devices produced by International Datacasting. Version 101 of the International Datacasting SFX Series SuperFlex Satellite Receiver Web...

6.5CVSS5.8AI score0.00823EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•24 views

PT-2026-22871

Name of the Vulnerable Software and Affected Versions International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web management portal version 101 Description A path traversal issue exists in the /IDC Logging/checkifdone.cgi script. An authenticated attacker can manipulate...

5.3CVSS6.1AI score0.00823EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•4 views

CVE-2026-28769: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the /IDCLogging/checkifdone.cgi script in International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web management portal version 101. An authenticated attacker can manipulate the file parameter to traverse directories and enumerate...

6.5CVSS6AI score0.00823EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•8 views

CVE-2026-28770: XML Injection (aka Blind XPath Injection)

Improper neutralization of special elements in the /IDCLogging/checkifdone.cgi script in International Datacasting Corporation IDC SFX Series SuperFlex Satellite Receiver Web management Interface version 101 allows for XML Injection. The application reflects un-sanitized user input from the file...

8.8CVSS6AI score0.00566EPSS
SaveExploits1References1
Rows per page
Query Builder