254 matches found
CVE-2022-40881
CVE-2022-40881 fofa root@kitploit: body="SolarView Compact" && title=="Top" Disclaimer This tool is intended only for legally authorized enterprise security building activities. If you need to test the usability of this tool, please set up your own target environment. When using this tool for...
CVE-2023-29919
Summary: There is an arbitrary read file vulnerability in SolarView Compact 6.00 and below, attackers can bypass authentication to read files through texteditor.php Vendor: SolarView Compact Affected Product: SolarView Compact =ver 6.00 poc: http://example.com/texteditor.php Details: You can fill...
CVE-2023-23333
Summary: There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php. Vendor: SolarView Compact Affected Product: SolarView Compact Version: SolarView Compact =ver 6.00 poc: curl...
CVE-2023-23333
CVE-2023-23333 SolarView Compact حتى الإصدار 6.00 — حقن الأوامر في downloader.php RCE nuclei-templates Burp Nuclei...
CVE-2023-40924
BUGAuthor: YE Affected version: Contec SolarView Compact 6.00 Vendor: https://www.contecinc.com/ Vulnerability File: downloader.php Description: Attacker exploit the vulnerability through downloader.php? The file parameter reads sensitive files through the directory pass. downloader.php?file...
SolarView Compact < 6.00 - Directory Traversal
SolarView Compact before version 6.00 is vulnerable to directory traversal via the file parameter in downloader.php. An unauthenticated attacker can read arbitrary files from the system by using path traversal sequences with a null byte bypass to access sensitive files such as /etc/passwd. id:...
solarview-ics-vulnerability-analysis
SolarView ICS Vulnerability Analysis A cyber-physical threat analysis of the SolarView Compact / Mirai botnet incident, in which attackers exploited CVE-2022-29303 to compromise roughly 800 solar monitoring appliances at Japanese photovoltaic facilities. Course project for ECE 362 — Cyber-Physica...
SolarView Compact 6.00 - OS Command Injection
SolarView Compact 6.00 was discovered to contain a command injection vulnerability, attackers can execute commands by bypassing internal restrictions through downloader.php. id: CVE-2023-23333 info: name: SolarView Compact 6.00 - OS Command Injection author: Mr-xn severity: critical description: ...
SolarView Compact 6.00 - 'pow' Cross-Site Scripting
SolarView Compact version 6.00 contains a cross-site scripting vulnerability in the 'pow' parameter to SolarSlideSub.php. id: CVE-2022-29301 info: name: SolarView Compact 6.00 - 'pow' Cross-Site Scripting author: For3stCo1d severity: high description: | SolarView Compact version 6.00 contains a...
CVE-2023-29919
SolarView Compact = 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted...
CVE-2023-40924
SolarView Compact 6.00 is vulnerable to Directory Traversal...
CVE-2022-35239
The image file management page of SolarView Compact SV-CPT-MC310 Ver.7.23 and earlier, and SV-CPT-MC310F Ver.7.23 and earlier contains an insufficient verification vulnerability when uploading files. If this vulnerability is exploited, arbitrary PHP code may be executed if a remote authenticated...
EUVD-2022-52899
Malicious code in bioql PyPI...
EUVD-2021-8080
Malicious code in bioql PyPI...
EUVD-2022-52900
Malicious code in bioql PyPI...
EUVD-2021-8079
Malicious code in bioql PyPI...
EUVD-2021-8078
Malicious code in bioql PyPI...
EUVD-2023-45463
Malicious code in bioql PyPI...