CVE-2026-84059

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

EUVD-2026-69012

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

CVE-2026-84059

A command injection flaw affects ICP DAS UA-2200 and UA-5200 (firmware up to 20260704). The vulnerable element is the ArmAngstromInstructionSet function in the endpoint /CGI?RestApi=SetHostname ; manipulating the ParameterArray argument allows remote command injection with low privileges and no u...

CVE-2026-84059 ICP DAS UA-2200/UA-5200 CGI ArmAngstromInstructionSet command injection

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

PT-2026-84140

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

CVE-2026-84059: Improper Neutralization of Special Elements used in a Command

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

EUVD-2018-10795

Malware in sbrugna...

EUVD-2023-56340

Malicious code in bioql PyPI...

CVE-2023-51628

D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this...

CVE-2023-51628

The CVE-2023-51628 entry describes a stack-based buffer overflow in D-Link DCS-8300LHV2 caused by improper validation of the length of hostname data in the ONVIF SetHostName call. The flaw can be triggered remotely by network-adjacent attackers and may allow arbitrary code execution with root pri...

CVE-2023-51628: Stack-based Buffer Overflow

D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DCS-8300LHV2 IP cameras. Although authentication is required to exploit this...

Foscam Opticam i5 Cross-Site Scripting Vulnerability

Foscam Opticam i5 is an IP camera from FOSCAM. A persistent cross-site scripting vulnerability exists in the ONVIF devicemgmt SetHostname method of the Foscam Opticam i5 with system firmware 1.5.2.11 and application firmware 2.21.1.128. An unauthenticated attacker could exploit this vulnerability...

CVE-2018-19080

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS...

Cross site scripting

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS...

CVE-2018-19080

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS...

CVE-2018-19080: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Foscam Opticam i5 devices with System Firmware 1.5.2.11 and Application Firmware 2.21.1.128. The ONVIF devicemgmt SetHostname method allows unauthenticated persistent XSS...

Linux/x86-64 - sethostname(Rooted !) + killall Shellcode (33 bytes)

Linux/x8664 sethostname & killall 33 bytes shellcode Date: 2010-04-26 Author: zbt Tested on: x8664 Debian GNU/Linux / ; sethostname"Rooted !"; ; kill-1, SIGKILL; section .text global start start: ;-- setHostName"Rooted !"; 22 bytes --; mov al, 0xaa mov r8, 'Rooted !' push r8 mov rdi, rsp mov sil,...

Trend Micro InterScan Web Security Virtual Appliance ManageIPConfig setHostname Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro InterScan Web Security Virtual Appliance. Authentication is required to exploit this vulnerability. The specific flaw exists within ManageIPConfig's setDataIPConfig method. A crafted...

linux/x86 sethostname to "c0debreaker" shellcode 37 bytes

Exploit for linux/x86 platform in category shellcode ========================================================= linux/x86 sethostname to "c0debreaker" shellcode 37 bytes ========================================================= / Title : sethostname to "c0debreaker" linux shellcode . Name : 37 byt...

linux/x86-64 sethostname() & killall 33 bytes shellcode

Exploit for linux/x86-64 platform in category shellcode ======================================================= linux/x86-64 sethostname & killall shellcode 33 bytes ======================================================= Linux/x8664 sethostname & killall 33 bytes shellcode Date: 2010-04-26 Autho...