2 matches found
VulnCheck KEV: CVE-2025-2611
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...
9.3CVSS7.8AI score0.08102EPSS
SaveIn wildExploits3References102
EUVD-2025-23629
The ICTBroadcast application unsafely passes session cookie data to shell processing, allowing an attacker to inject shell commands into a session cookie that get executed on the server. This results in unauthenticated remote code execution in the session handling. Versions 7.4 and below are know...
9.3CVSS8.3AI score0.08102EPSS
SaveExploits3References1
20