CVE-2020-7384

CVE-2020-7384 这是一个用 Bash 编写的针对 CVE-2020-7384 的利用程序。 它基于 nikhil1232 的代码修改而来：https://github.com/nikhil1232/CVE-2020-7384/blob/main/CVE-2020-7384.sh 我的目标是让这个利用程序更易于运行，同时增加一些质量改进。 使用方法 bash CVE-2020-7384.sh...

Design/Logic Flaw

Qolsys IQ Panel aka QOL before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers to bypass intended access restrictions via a modified update...

CVE-2015-6033

CVE-2015-6033 affects the Qolsys IQ Panel (aka QOL) before 1.5.1. Root cause: the device does not verify digital signatures of software updates, allowing a man‑in‑the‑middle to deliver a modified update and bypass access restrictions. Impact: remote, unauthenticated attacker could inject maliciou...