Design/Logic Flaw

confdatetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field obtained from the web interface...

CVE-2020-14294

CVE-2020-14294 concerns Qiata FTA 1.70.19. The issue is a persistent cross-site scripting (XSS) vulnerability in the comment feature, triggered when reading transfer comments or the global notice board due to insufficient input validation. Affected version: Qiata FTA ≤ 1.70.19. Public advisory SY...

CVE-2020-14294

An issue was discovered in Secudos Qiata FTA 1.70.19. The comment feature allows persistent XSS that is executed when reading transfer comments or the global notice board...

CVE-2020-14293

confdatetime in Secudos DOMOS 5.8 allows remote attackers to execute arbitrary commands as root via shell metacharacters in the zone field obtained from the web interface...

CVE-2020-14293

CVE-2020-14293 affects Secudos DOMOS 5.8 (OS Command Injection). The issue arises from insufficient input validation of user-provided data, allowing remote attackers to inject shell commands via the zone field in the web interface, potentially gaining root privileges. Public disclosures and advis...

Qiata FTA 1.70.19 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-024 Product: Qiata FTA Manufacturer: Secudos GmbH Affected Versions: ' by flipping the direction of the special character. Also, quotation marks are escaped properly. An attacker can use the behavior to construct a malicious...

DOMOS 5.8 Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-025 Product: DOMOS Manufacturer: Secudos GmbH Affected Versions: = DOMOS 5.8 Tested Versions: DOMOS 5.8 Vulnerability Type: OS Command Injection CWE-78 Risk Level: Low Solution Status: Solved Manufacturer Notification:...

Exploit for OS Command Injection in Secudos Domos

CVE-2020-14293 This vulnerablity was discovered and disclosed...

SECUDOS DOMOS Log Module Cross-Site Scripting Vulnerability

SECUDOS DOMOS is an operating system for IoT devices from SECUDOS Germany. log is one of the logging modules. A cross-site scripting vulnerability exists in the Log module in SECUDOS DOMOS versions prior to 5.6. The vulnerability stems from the lack of proper validation of client-side data in the...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

Cross site scripting

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

Design/Logic Flaw

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18664

The Log module in SECUDOS DOMOS before 5.6 allows XSS...

CVE-2019-18664

The affected software is SECUDOS DOMOS, specifically the Log module. The vulnerability is a Cross-Site Scripting (XSS) flaw in the Log module prior to version 5.6, arising from insufficient validation of client-side data in the web application. Impact is client-side code execution within the affe...

CVE-2019-18665

The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion...

CVE-2019-18665

SECUDOS DOMOS (before 5.6) is affected by CVE-2019-18665 via the Log module, enabling Local File Inclusion. Multiple sources confirm an LFI exists in the Log module that could let an attacker read arbitrary server files. Impact is read access to sensitive files; no exploitation details are provid...