Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

CVE-2024-13985

CVE-2024-13985 — Dahua EIMS capturehandle.action Remote Code Execution Advisory type: Vendor-coordinated security disclosure · Active exploitation reported CVE ID: CVE-2024-13985 CNVD ID: CNVD-2024-17054 Vendor: Zhejiang Dahua Technology Co., Ltd. Product: EIMS Enterprise Information Management...

Exploit for CVE-2024-13985

CVE-2024-13985 — Dahua EIMS capturehandle.action Remote Cod...

EUVD-2024-54921

Malicious code in bioql PyPI...

CVE-2024-13985

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

CVE-2024-13985 Dahua EIMS capture_handle.action RCE

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

CVE-2024-13985 Dahua EIMS capture_handle.action RCE

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

CVE-2024-13985

CVE-2024-13985 – Dahua EIMS : A command injection flaw affects Dahua EIMS versions prior to 2240008. The issue stems from improper input validation of the captureCommand parameter in the capture_handle.action API, allowing unauthenticated remote attackers to inject OS commands and potentially ful...

CVE-2024-13985: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

Logic Flaw Vulnerability in EIMS Management System of Zhejiang Dahua Technology Co., Ltd (CNVD-2024-29480)

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the EIMS management system of Zhejiang Dahua Technology Co. Ltd. that can be exploited by an attacker to bypass the logi...

Zhejiang Dahua Technology Co., Ltd. EIMS management system has a logic flaw vulnerability

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the EIMS management system of Zhejiang Dahua Technology Co. Ltd. that can be exploited by an attacker to gain unauthoriz...

VulnCheck KEV: CVE-2024-13985

A command injection vulnerability in Dahua EIMS versions prior to 2240008 allows unauthenticated remote attackers to execute arbitrary system commands via the capturehandle.action interface. The flaw stems from improper input validation in the captureCommand parameter, which is processed without...

Command Execution Vulnerability in Dahua EIMS System of Zhejiang Dahua Technology Co.

Zhejiang Dahua Technology Co., Ltd. is the world's leading video-centered intelligent IOT solution provider and operation service provider. A command execution vulnerability exists in the Dahua EIMS system of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to gain server...

EIMS editor vulnerability-vulnerability warning-the black bar safety net

The specific use of the method He is Division 2. 1 2.0 two versions of the enterprise information management system eimsforaccess2. 1 real estate management system eimshouseforaccess2. 1 Using the method posted Version 2.1 The first step to build the SHELL. ASP folder...

CVE-2006-0141

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-2006-0141

CVE-2006-0141 affects Qualcomm’s Eudora Internet Mail Server (EIMS) prior to version 3.2.8. The vulnerability allows remote denial of service (crash) via: (1) malformed NTLM authentication requests, (2) a malformed Incoming Mail X, or (3) a malformed Temporary Mail file. The issue is documented a...

CVE-2006-0141: Undefined Security Weakness

Qualcomm Eudora Internet Mail Server EIMS before 3.2.8 allows remote attackers to cause a denial of service crash via 1 malformed NTLM authentication requests, or a malformed 2 Incoming Mail X or 3 Temporary Mail file...

CVE-1999-1113: Undefined Security Weakness

Buffer overflow in Eudora Internet Mail Server EIMS 2.01 and earlier on MacOS systems allows remote attackers to cause a denial of service via a long USER command to port 106...