317 matches found
Homematic CCU3 - Local File Inclusion
eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem, aka local file inclusion. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. id: CVE-2019-9726 info: name: Homematic CCU3 - Local...
HomeMatic CCU2 - TCL RCE Detection (CVE-2018-7297)
Detects CVE-2018-7297 by POSTing system.Exec"id" TCL to /Text.exe and checking for uid= output. !/usr/bin/env python3 -- coding: utf-8 -- """HomeMatic CCU2 TCL interpreter RCE CVE-2018-7297.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class...
HomeMatic CCU2 - TCL RCE (CVE-2018-7297)
Exploits unauthenticated TCL system.Exec via /Text.exe on HomeMatic CCU2. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """HomeMatic CCU2 TCL interpreter RCE CVE-2018-7297 — opens execute session.""" import re from kittysploit import from...
Homematic CCU3 - Local File Inclusion Detection
eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesystem, aka local file inclusion. This vulnerability can be exploited by unauthenticated attackers with access to the web interface. !/usr/bin/env python3 -- coding: utf-8 -- """eQ-3 AG...
Homematic Panel - Detect
Homematic panel was deetcted. !/usr/bin/env python3 -- coding: utf-8 -- """Homematic panel was deetcted.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Homematic Panel - Detect', 'description': 'Homematic panel was...
CVE-2019-18938
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the E-Mail AddOn through 1.6.8.c installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the save.cgi script for payload upload and the testtcl.cgi script for its execution...
CVE-2019-18939
eQ-3 Homematic CCU2 2.47.20 and CCU3 3.47.18 with the HM-Print AddOn through 1.2a installed allow Remote Code Execution by unauthenticated attackers with access to the web interface via the exec.cgi and exec1.cgi scripts, which execute TCL script content from an HTTP POST request...
CVE-2019-16199
eQ-3 Homematic CCU2 before 2.47.18 and CCU3 before 3.47.18 allow Remote Code Execution by unauthenticated attackers with access to the web interface via an HTTP POST request to certain URLs related to the ReGa core process...
EUVD-2019-2161
Malware in sbrugna...
EUVD-2019-18953
Malware in sbrugna...
EUVD-2019-4598
Malware in sbrugna...
EUVD-2018-19035
Malware in sbrugna...
EUVD-2017-8848
Malware in sbrugna...
EUVD-2019-18956
Malware in sbrugna...
EUVD-2018-19033
Malware in sbrugna...
EUVD-2019-19092
Malware in sbrugna...
EUVD-2018-19030
Malware in sbrugna...
EUVD-2019-2164
Malware in sbrugna...