Guangzhou 1GE ONU formPing Command Injection

Guangzhou 1GE ONU V2801RW and V2804RGW devices contain an unauthenticated command injection vulnerability in the formPing targetaddr parameter. The included proof of concept demonstrates the issue. https://packetstorm.news/download/238683...

Exploit for OS Command Injection in Gpononu 1Ge_Router_Wifi_Onu_V2801Rw_Firmware

CVE-2020-8958 — Boa formPing — command injection Лаборатория...

CVE-2020-8958

A proof of concept for CVE-2020-8958 written in Python. The script will return the contents of /etc/passwd if successful. CVE-2020-8958 Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS...

CVE-2026-97858 Guangzhou Juan IoT Technology EseeCloud Improperly Controlled Modification of Dynamically-Determined Object Attributes

An attacker can cause the server to unbind the target device from its current owner and rebind it to the requesting account, regardless of whether the device is currently bound to a different account, allowing an attacker to obtain the device's full serial ID...

Guangzhou Juan IoT EseeCloud App Trust Management Vulnerability

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a trust management vulnerability. This vulnerability stems from the use of hard-coded credentials, which may allow attackers to log into EseeCloud devices...

Guangzhou Juan IoT EseeCloud App side-channel information leakage vulnerability

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability related to side-channel information leakage. This vulnerability arises from observable differences in the responses when endpoints process ID value...

Guangzhou Juan IoT EseeCloud App has a vulnerability in input validation.

The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability in input validation. This vulnerability arises from improper verification of device unbinding and re-binding operations by the server. Attackers ca...

Guangzhou Juan IoT Technology EseeCloud

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for...

CVE-2020-24159

NetEase Youdao Dictionary has a DLL hijacking vulnerability, which can be exploited by attackers to gain server permissions. This affects Guangzhou NetEase Youdao Dictionary 8.9.2.0...

EUVD-2020-16897

Malware in sbrugna...

EUVD-2020-16895

Malware in sbrugna...

EUVD-2024-53458

Malicious code in bioql PyPI...

EUVD-2024-50792

Malicious code in bioql PyPI...

EUVD-2025-1637

Malicious code in bioql PyPI...

Guangzhou Red Sea Cloud Computing Company Limited Red Sea Cloud eHr Exists Information Leakage Vulnerability

Redhaven eHR is a digital human resource management solution launched by Redhaven, focusing on providing state-owned enterprises and large-scale enterprises with systematic and precise services for optimizing salary distribution and incentive system. Guangzhou Red Sea Cloud Computing Co. Red Sea...

CVE-2025-0392

A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument storecode leads to sql injection. It is possible to launch t...

CVE-2024-0305

A vulnerability was found in Guangzhou Yingke Electronic Technology Ncast up to 2017 and classified as problematic. Affected by this issue is some unknown functionality of the file /manage/IPSetup.php of the component Guest Login. The manipulation leads to information disclosure. The attack may b...

CVE-2024-10947

A vulnerability classified as critical was found in Guangzhou Tuchuang Computer Software Development Interlib Library Cluster Automation Management System up to 2.0.1. This vulnerability affects unknown code of the file /interlib/order/BatchOrder?cmdACT=adminorder=adminOrderOrderList.xsl. The...

CVE-2024-33435

Insecure Permissions vulnerability in Guangzhou Yingshi Electronic Technology Co. Ncast Yingshi high-definition intelligent recording and playback system 2007-2017 allows a remote attacker to execute arbitrary code via the /manage/IPSetup.php backend function...

CVE-2020-8958

Guangzhou 1GE ONU V2801RW 1.9.1-181203 through 2.9.0-181024 and V2804RGW 1.9.1-181203 through 2.9.0-181024 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the boaform/admin/formPing Dest IP Address field...