CVE-2022-31499

CVE-2022-31499 Exploit Title: Nortek Linear eMerge E3-Series - Blind OS Command Injection...

CVE-2022-31269

CVE-2022-31269 Nortek Control Linear eMerge E3-Series Information Disclosure Optional Arguments: -h, --help show this help message and exit -u url, --url url Target url eg:"http://127.0.0.1" -f file, --file file Targets in file eg:"ip.txt" Use python3 CVE-2022-31269.py -u http://127.0.0.1 python3...

eMerge E3 1.00-06 - Local File Inclusion Detection

Linear eMerge E3-Series devices are vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Linear eMerge E3-Series devices are vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanne...

Linear eMerge E3-Series - Information Disclosure Detection

Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...

Nortek Linear eMerge E3-Series - Cross-Site Scripting Detection

There is a local session fixation vulnerability that, when chained with cross-site scripting, leads to account take over of admin or a lower privileged user. !/usr/bin/env python3 -- coding: utf-8 -- """There is a local session fixation vulnerability that, when chained with cross-site scripting,...

Linear eMerge E3-Series - Cross-Site Scripting Detection

Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badgetemplatev0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based...

CVE-2022-38628

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting XSS vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified...

CVE-2019-7253

Linear eMerge E3-Series devices allow Directory Traversal...

CVE-2019-7262

Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...

CVE-2019-7263

Linear eMerge E3-Series devices have a Version Control Failure...

CVE-2019-7258

Linear eMerge E3-Series devices allow Privilege Escalation...

CVE-2019-7261

Linear eMerge E3-Series devices have Hard-coded Credentials...

EUVD-2019-16807

Malware in sbrugna...

EUVD-2019-16808

Malware in sbrugna...

EUVD-2022-41205

Malicious code in bioql PyPI...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

CVE-2019-7255

Linear eMerge E3-Series devices allow XSS...

CVE-2019-7264

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform...

CVE-2019-7265

Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...

CVE-2024-9441

The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the loginid parameter when invoking the forgotpassword functionality over HTTP...