274 matches found
CVE-2022-31269
CVE : CVE-2022-31269 Exploit Title: Nortek Linear eMerge E3-Series - Information Disclosure leads to access admin dashboard...
CVE-2022-31798
CVE-2022-31798 Exploit Title: Nortek Linear eMerge E3-Series - account takeover...
Linear eMerge E3 - Cross-Site Scripting Detection
Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter. !/usr/bin/env python3 -- coding: utf-8 -- """Linear eMerge E3-Series devices are vulnerable to cross-site scripting via the 'layout' parameter.""" from kittysploit import from...
Nortek Linear eMerge E3-Series - Cross-Site Scripting Detection
There is a local session fixation vulnerability that, when chained with cross-site scripting, leads to account take over of admin or a lower privileged user. !/usr/bin/env python3 -- coding: utf-8 -- """There is a local session fixation vulnerability that, when chained with cross-site scripting,...
Linear eMerge E3-Series - Information Disclosure Detection
Linear eMerge E3-Series devices are susceptible to information disclosure. Admin credentials are stored in clear text at the endpoint /test.txt in situations where the default admin credentials have been changed. An attacker can obtain admin credentials, access the admin dashboard, control buildi...
Linear eMerge E3-Series - Cross-Site Scripting Detection
Linear eMerge E3-Series devices contain a cross-site scripting vulnerability via the type parameter, e.g., to the badging/badgetemplatev0.php component. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site and thus steal cookie-based...
Nortek Linear eMerge Panel - Detect
Nortek Linear eMerge panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Nortek Linear eMerge panel was detected.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Nortek Linear eMerge Panel -...
CVE-2022-31269
Nortek Linear eMerge E3-Series devices through 0.32-09c place admin credentials in /test.txt that allow an attacker to open a building's doors. This occurs in situations where the CVE-2019-7271 default credentials have been changed...
CVE-2022-31798
Nortek Linear eMerge E3-Series 0.32-07p devices are vulnerable to /cardscan.php?CardFormatNo= XSS with session fixation via PHPSESSID when they are chained together. This would allow an attacker to take over an admin account or a user account...
CVE-2019-7260
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
CVE-2019-7268
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
CVE-2019-7253
Linear eMerge E3-Series devices allow Directory Traversal...
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7266
Linear eMerge 50P/5000P devices allow Authentication Bypass...
CVE-2019-7257
Linear eMerge E3-Series devices allow Unrestricted File Upload...
CVE-2019-7263
Linear eMerge E3-Series devices have a Version Control Failure...
CVE-2019-7254
Linear eMerge E3-Series devices allow File Inclusion...