Lucene search
+L

6 matches found

KittySploit
KittySploit
•added 2026/10/05 2:20 p.m.•3 views

Aquatronica Controller Credential Leak (CVE-2025-25037)

Exploits CVE-2025-25037 in Aquatronica Controller =5.1.6: unauthenticated POST to tcp.php WSGETNETWORKCFG exposes plaintext WEBPASSWORD. !/usr/bin/env python3 -- coding: utf-8 -- """Aquatronica tcp.php credential leak CVE-2025-25037.""" from kittysploit import from lib.protocols.http.httpclient...

9.3CVSS5.8AI score0.01574EPSS
SaveExploits3References2
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•5 views

Aquatronica Controller System <= 5.1.6 - Information Disclosure Detection

Aquatronica Controller System firmware 5.1.6 and earlier and web interface 2.0 and earlier contain an information disclosure vulnerability caused by unauthenticated access to tcp.php endpoint, letting remote attackers retrieve sensitive configuration data including plaintext credentials, exploit...

9.3CVSS5.8AI score0.01574EPSS
SaveExploits3References5
CVE
CVE
•added 2025/06/20 6:35 p.m.•54 views

CVE-2025-25037

CVE-2025-25037 affects Aquatronica Controller System firmware versions ≤ 5.1.6 and web interface ≤ 2.0. The issue arises from unauthenticated access to the tcp.php endpoint, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration data, including plaintext adm...

9.3CVSS6.5AI score0.01574EPSS
SaveIn wildExploits3References5
Positive Technologies
Positive Technologies
•added 2025/06/20 12:00 a.m.•20 views

PT-2025-26455

Name of the Vulnerable Software and Affected Versions: Aquatronica Controller System firmware versions = 5.1.6 Aquatronica Controller System web interface versions = 2.0 Description: An information disclosure issue exists, allowing remote attackers to issue crafted POST requests to the "tcp.php"...

9.3CVSS6.1AI score0.01574EPSS
SaveExploits3References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/20 12:00 a.m.•9 views

CVE-2025-25037: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists in Aquatronica Controller System firmware versions = 5.1.6 and web interface versions = 2.0. The tcp.php endpoint fails to restrict unauthenticated access, allowing remote attackers to issue crafted POST requests and retrieve sensitive configuration...

9.3CVSS5.8AI score0.01574EPSS
SaveExploits3References1
Exploit DB
Exploit DB
•added 2024/05/31 12:00 a.m.•255 views

Aquatronica Control System 5.1.6 - Information Disclosure

!/usr/bin/env python -- coding: utf-8 -- Aquatronica Control System 5.1.6 Passwords Leak Vulnerability Vendor: Aquatronica s.r.l. Product web page: https://www.aquatronica.com Affected version: Firmware: 5.1.6 Web: 2.0 Summary: Aquatronica's electronic AQUARIUM CONTROLLER is easy to use, allowing...

5.3AI score
SaveExploits0
Rows per page
Query Builder