48 matches found
CVE-2026-27180-MajorDoMo-unauthenticated-RCE
MajorDoMo RCE CVE-2026-27180 MajorDoMo 中通过更新 URL 投毒实现未认证远程代码执行 CWE-494 – 下载无完整性校验的代码 影响 ：通过放置在 Web 根目录的 webshell 实现服务器完全沦陷 认证要求 ：无 补丁 ：PR 1177 📜 描述 本仓库包含针对 CVE-2026-27180 的概念验证漏洞利用程序——这是 MajorDoMo 智能家居自动化软件中的一个严重未认证远程代码执行漏洞。 攻击者可以： 在无需认证的情况下投毒更新源 URL 强制触发更新，下载并解压恶意 tarball 将任意 PHP 文件（包括...
CVE-2020-7505
A CWE-494 Download of Code Without Integrity Check vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to inject data with dangerous content into the firmware and execute arbitrary code on the system...
EUVD-2020-28630
Malware in sbrugna...
EUVD-2020-20697
Malware in sbrugna...
EUVD-2023-26769
Malicious code in bioql PyPI...
EUVD-2023-58251
Malicious code in bioql PyPI...
CVE-2020-28213
A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert now Unity Pro all versions that could cause unauthorized command execution when sending specially crafted requests over Modbus...
CVE-2025-1058
CVE-2025-1058 affects Schneider Electric ASCO 5310 and ASCO 5350 Remote Annunciator products. The issue is CWE-494: downloading code without integrity checks, which could render the device inoperable if malicious firmware is downloaded. Additional disclosures (CWE-770, CWE-319, CWE-434) appear in...
CVE-2025-1058
CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded...
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2024-1305)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Schneider Electric PowerLogic ION8650,ION8800 Download of Code Without Integrity Check (CVE-2023-5984)
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device. This plugin only works with Tenable.ot. Please visit...
CVE-2023-5630
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware...
Design/Logic Flaw
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware...
CVE-2023-5630
A CWE-494: Download of Code Without Integrity Check vulnerability exists that could allow a privileged user to install an untrusted firmware...
CVE-2023-5630
CVE-2023-5630 describes a CWE-494 vulnerability (Download of Code Without Integrity Check) that could allow a privileged user to install untrusted firmware on Schneider Electric Trio Q-Series Ethernet Data Radio. Publicly documented details across sources indicate the vulnerability affects firmwa...
Buildroot BR_NO_CHECK_HASH_FOR data integrity vulnerability
Talos Vulnerability Report TALOS-2023-1845 Buildroot BRNOCHECKHASHFOR data integrity vulnerability December 5, 2023 CVE Number CVE-2023-43608 SUMMARY A data integrity vulnerability exists in the BRNOCHECKHASHFOR functionality of Buildroot 2023.08.1 and dev commit 622698d7847. A specially crafted...
CVE-2023-5984
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...
Design/Logic Flaw
A CWE-494 Download of Code Without Integrity Check vulnerability exists that could allow modified firmware to be uploaded when an authorized admin user begins a firmware update procedure which could result in full control over the device...
CVE-2023-5984
Affected products: Schneider Electric PowerLogic ION8650 and ION8800. Vulnerability: CWE-494 Download of Code Without Integrity Check allows a modified firmware to be uploaded during a firmware update initiated by an authorized admin. Impact: could result in full control over the device due to un...