Exploit for OS Command Injection in Secudos Domos

CVE-2020-14293 This vulnerablity was discovered and disclosed...

SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...

SECUDOS DOMOS Log Module Directory Traversal Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A directory traversal vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6, which can be exploited by an attacker to read arbitrary files on the system by sending...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

Cross site scripting

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

Design/Logic Flaw

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664

The affected software is SECUDOS DOMOS, specifically the Log module. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Log module prior to version 5.6, arising from insufficient validation of client-side data in the web application. Impact is client-side code execution within the affe...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

SECUDOS DOMOS (before 5.6) is affected by CVE-2019-18665 via the Log module, enabling Local File Inclusion. Multiple sources confirm an LFI exists in the Log module that could let an attacker read arbitrary server files. Impact is read access to sensitive files; no exploitation details are provid...