Lucene search
+L

20 matches found

NVD
NVD
added 2026/07/13 2:16 p.m.8 views

CVE-2026-61498

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gengraphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key, or format HTTP GET parameters. Attacke...

9.8CVSS0.02165EPSS
Exploits1References3
CVE
CVE
added 2026/07/13 1:12 p.m.18 views

CVE-2026-61498

CVE-2026-61498 affects Vitec Flamingo 4.12.2. The vulnerability is an unauthenticated OS command injection in the admin/ajax/gen_graphs.php endpoint, where input values from GET parameters (start, end, key, format) are unsafely passed to shell commands via passthru(), enabling remote command exec...

9.8CVSS6.3AI score0.02165EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2026/07/13 1:12 p.m.9 views

CVE-2026-61498

Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gengraphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in the start, end, key, or format HTTP GET parameters. Attacke...

9.8CVSS6.3AI score0.02165EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/13 12:0 a.m.6 views

PT-2026-57817

Name of the Vulnerable Software and Affected Versions Vitec Flamingo version 4.12.2 Description An unauthenticated OS command injection exists in the 'admin/ajax/gen graphs.php' endpoint. Remote attackers can execute arbitrary commands with root privileges by providing shell metacharacters throug...

9.8CVSS6.3AI score0.02165EPSS
Exploits1References10
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2021-29095

Malicious code in bioql PyPI...

10CVSS9.5AI score0.01611EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-35194

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00522EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/14 12:42 a.m.12 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

8.8CVSS7AI score0.00522EPSS
Exploits0References1
NVD
NVD
added 2024/05/15 7:15 p.m.12 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

8.8CVSS6.7AI score0.00522EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/05/15 6:25 p.m.20 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

7AI score0.00522EPSS
Exploits0References1
CVE
CVE
added 2024/05/15 6:25 p.m.131 views

CVE-2024-35102

VITEC AvediaServer (model avsrv-m8105) with version 8.6.2-1 is affected by an Insecure Permissions vulnerability that allows a remote attacker to escalate privileges via a crafted script. The core issue is improper permissions handling in the server, enabling privilege escalation without user int...

8.8CVSS7AI score0.00522EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/05/15 6:25 p.m.17 views

CVE-2024-35102

Insecure Permissions vulnerability in VITEC AvediaServer Model avsrv-m8105 8.6.2-1 allows a remote attacker to escalate privileges via a crafted script...

7.1AI score0.00522EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/05/15 12:0 a.m.7 views

VITEC AvediaServer 安全漏洞

VITEC AvediaServer is a centralized server from VITEC France. A security vulnerability exists in VITEC AvediaServer version 8.6.2-1, which stems from the presence of an insecure privilege vulnerability that allows remote attackers to escalate privileges via a crafted script...

8.8CVSS7.1AI score0.00522EPSS
Exploits0References3
ThreatPost
ThreatPost
added 2021/10/14 8:38 p.m.70 views

Rickroll Grad Prank Exposes Exterity IPTV Bug

UPDATE When Township High School District 214 in Illinois got rickrolled all at once across its six different schools just before graduation, it was more than a meticulously executed senior prank. Cybersecurity star-in-the-making and recent high-school graduate Minh Duong found, and was able to...

10CVSS8.1AI score0.01611EPSS
Exploits1References6
CNVD
CNVD
added 2021/10/11 12:0 a.m.27 views

VITEC Exterity IPTV Elevation of Privilege Vulnerability

VITEC Exterity IPTV is a new technology from the French company VITEC that uses the broadband cable network to provide a variety of interactive services, including digital TV, to home users by integrating various technologies such as Internet, multimedia and communications. root...

10CVSS4AI score0.01611EPSS
Exploits1References1
OSV
OSV
added 2021/10/08 6:15 p.m.6 views

CVE-2021-42109

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root...

9.8CVSS5.8AI score0.01611EPSS
Exploits1References2
NVD
NVD
added 2021/10/08 6:15 p.m.19 views

CVE-2021-42109

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root...

10CVSS0.01611EPSS
Exploits1References2
Prion
Prion
added 2021/10/08 6:15 p.m.22 views

Privilege escalation

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root...

10CVSS9.6AI score0.01611EPSS
Exploits1References2Affected Software10
Cvelist
Cvelist
added 2021/10/08 5:45 p.m.23 views

CVE-2021-42109

VITEC Exterity IPTV products through 2021-04-30 allow privilege escalation to root...

9.8AI score0.01611EPSS
Exploits1References2
CVE
CVE
added 2021/10/08 5:45 p.m.78 views

CVE-2021-42109

CVE-2021-42109 affects VITEC Exterity IPTV products; the issue allows privilege escalation to root on affected devices (through 2021-04-30). Connected sources reference a zero-day context and describe Exterity’s IPTV stack (AvediaPlayer/Server/Stream with embedded Linux/BusyBox) but do not provid...

10CVSS9.6AI score0.01611EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2021/10/08 12:0 a.m.5 views

VITEC Exterity IPTV 安全漏洞

VITEC Exterity IPTV is a new technology from the French company VITEC that uses the broadband cable network to provide a variety of interactive services, including digital TV, to home users by integrating various technologies such as Internet, multimedia and communications. root...

10CVSS8.4AI score0.01611EPSS
Exploits1References3
Rows per page
Query Builder