CVE-2019-7260

Linear eMerge E3-Series devices have Cleartext Credentials in a Database...

CVE-2019-7268

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...

CVE-2019-7259

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...

CVE-2019-7257

Linear eMerge E3-Series devices allow Unrestricted File Upload...

CVE-2019-7254

Linear eMerge E3-Series devices allow File Inclusion...

CVE-2019-7252

Linear eMerge E3-Series devices have Default Credentials...

EUVD-2019-16814

Malware in sbrugna...

EUVD-2019-16796

Malware in sbrugna...

EUVD-2019-16797

Malware in sbrugna...

EUVD-2019-16803

Malware in sbrugna...

EUVD-2019-16811

Malware in sbrugna...

CVE-2022-46381

Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter e.g., to the badging/badgetemplatev0.php component. This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e...

CVE-2022-42710

Nice formerly Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting XSS...

CVE-2010-2469

The Linear eMerge 50 and 5000 uses a default password of eMerge for the IEIeMerge account, which makes it easier for remote attackers to obtain Video Recorder data by establishing a session to the device...

CVE-2024-9441

The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the loginid parameter when invoking the forgotpassword functionality over HTTP...

CVE-2024-9441

CVE-2024-9441 affects Nortek Linear eMerge E3 Series (versions up to 1.00-07). Root cause is an OS command injection in the forgot_password flow when using the login_id parameter exposed over HTTP, enabling remote unauthenticated command execution. Documented impact is high (arbitrary OS commands...

Linear eMerge Code RCE (CVE-2019-7256)

Binary data linearemergecve-2019-7256.nbin...

Linear eMerge E3-Series Access Controller Command Injection

This module exploits a command injection vulnerability in the Linear eMerge E3-Series Access Controller. The Linear eMerge E3 versions 1.00-06 and below are vulnerable to unauthenticated command injection in cardscandecoder.php via the No and door HTTP GET parameter. Successful exploitation resul...

Linear eMerge E3-Series Access Controller Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/stopwatch' class MetasploitModule 'Linear eMerge E3-Series Access Controller Command Injection', 'Description' = %q This module exploits a command injection...

Linear eMerge E3-Series Access Controller Command Injection Exploit

This Metasploit module exploits a command injection vulnerability in the Linear eMerge E3-Series Access Controller. The Linear eMerge E3 versions 1.00-06 and below are vulnerable to unauthenticated command injection in cardscandecoder.php via the No and door HTTP GET parameter. Successful...