106 matches found
cve-2023-20198-poc-cisco
CVE-2023-20198-poc CVE-2023-20198 — это критическая уязвимость в веб-интерфейсе Cisco IOS XE, позволяющая неаутентифицированному удаленному злоумышленнику создать учетную запись с привилегиями уровня 15 на уязвимом устройстве, полностью захватив контроль над ним. Уязвимость возникает из-за...
CVE-2020-25749
CVE-2020-25749 Description suggérée Le service Telnet des caméras Rubetek RV-3406, RV-3409 et RV-3411 versions de firmware v342, v339 pourrait permettre à un attaquant distant de prendre le contrôle total de l’appareil avec un compte à hauts privilèges. La vulnérabilité existe car un compte systè...
The vulnerability in the web-based administration interface of Check Point Gaia Portal for the Gaia operating system allows a hacker to increase their privileges and gain full control over the device.
The vulnerability in the Check Point Gaia Portal administrative web interface of the Gaia operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to increase their privileges and gain full control over the device...
CVE-2026-57599
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH...
CVE-2026-57599
The CVE concerns privilege escalation in some Hikvision cameras caused by incorrect permission allocation in the device program. Attacking would require authentication via SSH and could grant the attacker full control of the affected device. The entry provides CVSS‑3.1 metrics (Network, High atta...
CVE-2026-57599
There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH...
CVE-2023-45795
A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device...
CVE-2023-45795
A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device...
CVE-2023-45795
The provided CVE describes a cross-site scripting (XSS) vulnerability in the Builder Component of Pilz PASvisu before version 1.14.1. The issue allows a local unauthenticated attacker to inject malicious JavaScript and gain full control over the device. Concrete exploitation details are not provi...
CVE-2026-9151
An OS command injection vulnerability exists in the VPN module of TP-Link Archer AX12 v1, AX17 v1. AX18 v1, and AX1300 v1.6 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration...
PT-2026-48516
Name of the Vulnerable Software and Affected Versions TP-Link Archer AX12 v1 TP-Link Archer AX17 v1 TP-Link Archer AX18 v1 TP-Link Archer AX1300 v1.6 Description An OS command injection issue exists in the VPN module. This occurs due to improper filtering of special characters, allowing an...
CVE-2025-27851
The locally served web site on the Garmin WDU v1 1.4.6 and v2 5.0 allows a cross-site origin WebSocket hijacking attack. Among other uses, the WDU utilizes WebSockets to control settings, including administrative settings. This allows a network attacker to take full control of a WDU. To initiate ...
Garmin WDU 安全漏洞
Garmin WDU is a wireless data unit developed by Garmin Corporation, designed for data updates and maintenance of aviation electronic equipment. Versions 1.1.6 and 2.5.0 of Garmin WDU contain security vulnerabilities. These vulnerabilities stem from the ability to allow cross-source WebSocket...
CVE-2026-30495
The Optoma CinemaX P2 projector (firmware TVOS-04.24.010.04.01 , Android 8.0.0) is vulnerable to unauthorized access because it exposes the Android Debug Bridge (ADB) on TCP port 5555 without authentication. The security risk is heightened because the device is configured with ro.adb.secure=0, di...
PT-2026-38434
Name of the Vulnerable Software and Affected Versions Optoma CinemaX P2 version TVOS-04.24.010.04.01 Description The device exposes Android Debug Bridge ADB on TCP port 5555 over the network without authentication. It is configured with the variable ro.adb.secure set to 0, which disables RSA key...
CVE-2026-7161
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...
CVE-2026-42363
An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device Utility 9.0.5. Listening to broadcast packets can lead to credentials leak. An attacker can listen to broadcast messages to trigger this vulnerability. When interacting with variou...
PT-2026-35277
Name of the Vulnerable Software and Affected Versions GeoVision GV-IP Device Utility version 9.0.5 Description Insufficient encryption in the Device Authentication functionality allows for the leakage of administrator credentials. When the utility sends privileged commands to devices over UDP...
SenseLive X3050 访问控制错误漏洞
The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a access control vulnerability, which stems from the lack of authentication or authorization in the embedded management services. This...
Anviz Multiple Products
ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow attackers to conduct reconnaissance, capture or decrypt sensitive data, alter device configurations, gain unauthorized administrative or root‑level access, execute arbitrary code, compromise credentials or...