CVE-2023-23333

요약: SolarView Compact 6.00까지 명령 삽입 취약점이 존재하며, 공격자는 downloader.php를 통해 내부 제한을 우회하여 명령을 실행할 수 있습니다. 공급업체: SolarView Compact 영향을 받는 제품: SolarView Compact 버전: SolarView Compact =ver 6.00 poc: curl http://example.com/downloader.php?file=;echo%20Y2F0IC9ldGMvcGFzc3dkCg==|base64%20-d|bash%00.zip | grep...

CVE-2022-40881

CVE-2022-40881 fofa body="SolarView Compact" && title=="Top" 면책 조항 본 도구는 합법적으로 승인된 기업 보안 구축 활동만을 대상으로 합니다. 도구의 사용성을 테스트해야 하는 경우 직접 타겟 환경을 구축하시기 바랍니다. 본 도구를 사용하여 점검을 수행할 때에는 해당 행위가 현지 법률 및 규정을 준수하고 충분한 승인을 받았는지 확인해야 합니다. 승인되지 않은 대상에 대한 스캔은 수행하지 마십시오. 위 금지 행위가 발견될 경우, 당사는 귀하의 법적 책임을 추궁할 권리를 보유합니다. ...

CVE-2021-40859

CVE-2021-40859 Auerswald COMpact 8.0B 백도어 익스플로잇 소개 Auerswald COMpact 5500R 7.8A 및 8.0B 장치에서 백도어가 발견되었으며, 웹 기반 관리 애플리케이션에 접근할 수 있는 공격자가 장치에 대한 전체 관리 권한을 얻을 수 있습니다. 제품 세부 정보 제품: COMpact 3000 ISDN, COMpact 3000 analog, COMpact 3000 VoIP, COMpact 4000, COMpact 5000R, COMpact 5200R, COMpact 5500R,...

f32

f32 는 USB-C 리셉터클 바로 뒤에 장착되도록 설계된 초소형 ESP32 개발 보드입니다. PCB 크기는 9.85 mm x 8.45 mm에 불과합니다. ESP32-C3FH4 마이크로컨트롤러로 구동되며, 주로 연구 목적과 ESP32에 대한 일종의 스트레스 테스트를 위해 제작되었습니다. 많은 표준 설계 지침을 의도적으로 무시했기 때문입니다. 노출된 GPIO는 단 하나이며 온보드 LED에 연결되어 있으므로, 여기서의 개발은 주로 Wi-Fi/웹에 맞춰질 것입니다. f32를 테스트하기 위해 사용자가 상호작용할 수 있는 예제...

CVE-2023-23333

CVE-2023-23333 SolarView Compact 6.00 이하 버전의 downloader.php 명령어 삽입 RCE nuclei-templates Burp Nuclei...

SolarView Compact < 6.00 - Directory Traversal

SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...

CVE-2023-40924

BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: 攻撃者はdownloader.php?の脆弱性を悪用します。fileパラメータは、ディレクトリトラバーサルを通じて機密ファイルを読み取ります。 downloader.php?file にはディレクトリトラバーサルが存在します 機密ファイル /etc/password を読み取ることができます...

CVE-2023-29919

概要: SolarView Compact 6.00以下には任意のファイル読み取りの脆弱性が存在し、攻撃者は認証をバイパスしてtexteditor.phpを通じてファイルを読み取ることができます。 ベンダー: SolarView Compact 影響を受ける製品: SolarView Compact =ver 6.00 PoC: http://example.com/texteditor.php 詳細: texteditor.phpページにアクセスすると、読み取りたいファイルの場所を入力できます。...

SolarView Compact 6.00 - OS Command Injection

SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...

solarview-ics-vulnerability-analysis

SolarView ICS 脆弱性分析 SolarView Compact / Mirai ボットネットインシデントのサイバーフィジカル脅威分析。攻撃者はCVE-2022-29303 を悪用し、日本の太陽光発電施設にある約800台の太陽光監視機器を侵害しました。 ECE 362 — サイバーフィジカルシステム コースプロジェクト、テネシー大学ノックスビル校 · 2026年春学期 チーム: Matthew Ferrari、Camden Reed、Camden Goering インシデント Contec SolarView...

PyJWT: Non-canonical signature segments enable raw-token revocation bypass

SummaryPyJWT 2.13.0 accepts compact JWS signature segments containing characters thatare not in the Base64URL alphabet. Appending !!!! to a valid signature doesnot change the decoded signature bytes or authenticated claims, but it changesthe serialized token and its SHA-256 hash. An application...

Malicious code in eslint-config-compact-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dbc01e3a8316b2d4e11b34a9c8cbe1cf5bd2af83a6a70052e40a22b54f13f78b index.js executes on module load and collects host reconnaissance data — os.platform, os.hostname, os.userInfo.username, architecture, Node version,...

Malicious code in eslint-config-compact-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7f8397efb591ffe6f87f9c44e8eb803606eb4789d357abe337d3225cc46f On require, index.js collects host reconnaissance data os.hostname, os.userInfo.username, os.platform, architecture, Node version, current working...

MAL-2026-16417 Malicious code in eslint-config-compact-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 414c7f8397efb591ffe6f87f9c44e8eb803606eb4789d357abe337d3225cc46f On require, index.js collects host reconnaissance data os.hostname, os.userInfo.username, os.platform, architecture, Node version, current working...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: erofs: Stop parsing non-compact HEAD indexes if clusterofs is invalid Syzbot generated a crafted image with a non-compact HEAD index of clusterofs 33024. Valid numbers should be between 0 and lclustersize-1, which causes the...

Multiple vulnerabilities in SolarView Compact

Overview SolarView Compact provided by Contec Co., Ltd. contains multiple vulnerabilities listed below. OS command injection in Schedule Settings CWE-78 - CVE-2026-82794 Cross-site scripting in Schedule Settings and Mail Send Setting CWE-79 - CVE-2026-82795 Cross-site scripting in Image Managemen...

CVE-2026-82795

SolarView Compact contains a cross-site scripting vulnerability in Schedule Settings and Mail Send Setting. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact contains a cross-site scripting vulnerability in Image Management. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82794

SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who can log in to the product...

CVE-2026-82796

SolarView Compact (Contec) contains a cross-site scripting vulnerability in the Image Management component. An attacker with valid login credentials can exploit it to execute an arbitrary OS command , achieving impact on a subsequent system due to changed scope . The CVSS 3.1 base score is 5.4 (M...