186 matches found
Nortek Linear eMerge E3-Series - SQL Injection
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter. id: CVE-2022-38627 info: name: Nortek Linear eMerge E3-Series - SQL Injection author: daffainfo,omarhashem666...
CVE-2024-9441
Nortek Linear eMerge E3 Pre-Auth RCE PoC CVE-2024-9441 Description: This repository contains a Proof of Concept PoC exploit for Nortek Linear eMerge E3 CVE-2024-9441, which is vulnerable to Remote Code Execution RCE in a pre-authentication state. The vulnerability is triggered via a flaw in the...
CVE-2022-31269
CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...
CVE-2022-31499
CVE-2022-31499 Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection...
Linear eMerge E3-Series 1.00-06 Command Injection
Linear eMerge E3-Series version 1.00-06 and earlier contain an unauthenticated command injection in cardscandecoder.php. This proof of concept uses the hard-coded root credentials tracked as CVE-2019-7261 to execute a benign marker command. https://packetstorm.news/download/238664...
Exploit for OS Command Injection in Nortekcontrol Linear_Emerge_Essential_Firmware
CVE-2019-7256 — Linear eMerge E3: команда без аутентификации...
Exploit for CVE-2024-9441
CVE-2024-9441 — Linear eMerge — unauthenticated OS command inj...
Linear eMerge E3-Series - Cross-Site Scripting Detection
Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badgetemplatev0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based...
Linear eMerge E3 - Cross-Site Scripting Detection
Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter.""" from kittysploit import from...
Nortek Linear eMerge E3-Series - Cross-Site Scripting Detection
There is a local session fixation vulnerability that, when chained with cross-site scripting, leads to account take over of admin or a lower privileged user. !/usr/bin/env python3 -- coding: utf-8 -- """There is a local session fixation vulnerability that, when chained with cross-site scripting,...
Linear eMerge E3-Series - Information Disclosure Detection
Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...
eMerge E3 1.00-06 - Local File Inclusion Detection
Linear eMerge E3-Series devices are vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Linear eMerge E3-Series devices are vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...
CVE-2022-38628
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting XSS vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified...
CVE-2019-7253
Linear eMerge E3-Series devices allow Directory Traversal...
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
CVE-2019-7258
Linear eMerge E3-Series devices allow Privilege Escalation...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
