The vulnerability of Moxa EDR-8010, EDR-G9004, EDR-G9010, EDF-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 network devices arises from the failure to eliminate special elements used in the operating system’s command structure. This allows attackers to execute arbitrary code.

The vulnerability of Moxa EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900 network devices stems from the lack of measures taken to neutralize special commands used in the operating system. Exploiting this vulnerability allows a malicious actor to execute...

Dahua Devices Information Disclosure Vulnerability (Jan 2025) - Active Check

Multiple Dahua devices and their OEMs are prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

CVE-2024-13131

Rejected reason: REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-9680. Reason: This candidate is a reservation duplicate of CVE-2019-9680. Notes: All CVE users should reference CVE-2019-9680 instead of this candidate. All references and descriptions in this candidate have been remov...

CVE-2024-13131

...

CVE-2024-13131

CVE-2024-13131 is rejected and should not be used; see CVE-2019-9680.

CVE-2024-13131

...

CVE-2024-13130 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to...

CVE-2024-13130 Dahua IPC-HFW1200S Web Interface Sha1Account1 path traversal

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some unknown functionality of the file ../mtd/Config/Sha1Account1 of the component Web Interface. The manipulation leads to...

CVE-2024-13130

CVE-2024-13130 affects Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S (Web Interface) up to 20241222. Root cause: manipulation of the file ../mtd/Config/Sha1Account1 enabling path traversal via the vulnerable Web Interface. Impact: potential remote access to restricted files ...

PT-2025-2016 · Dahua · Dahua Ipc-Hfw2300R-Z +2

Name of the Vulnerable Software and Affected Versions: Dahua IPC-HFW1200S versions up to 20241222 Dahua IPC-HFW2300R-Z versions up to 20241222 Dahua IPC-HFW5220E-Z versions up to 20241222 Dahua IPC-HDW1200S versions up to 20241222 Description: A vulnerability was found in the Web Interface...

The vulnerability in the web interface for managing microprogrammed routing software from DrayTek, namely DrayTek Vigor2960 and Vigor300B, allows a hacker to execute arbitrary code.

The vulnerability of the web interface for managing DrayTek Vigor2960 and Vigor300B microprogramming systems lies in the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by...

PT-2025-1001 · Moxa · Moxa Secure Routers +2

Name of the Vulnerable Software and Affected Versions: Moxa cellular routers, secure routers, and network security appliances versions 3.13.1 and earlier Description: The vulnerability allows OS command injection due to improperly restricted commands, potentially enabling attackers to execute...

The vulnerability in the web interface for managing D-Link DIR-823G microprogramming routers allows a hacker to alter the device’s configuration.

The vulnerability of the web interface for managing D-Link DIR-823G microprogramming devices is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to alter the device’s configuration by sending a specially crafted HTTP POST request...

CVE-2024-48197

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface...

CVE-2024-48197

Cross Site Scripting vulnerability in Audiocodes MP-202b v.4.4.3 allows a remote attacker to escalate privileges via the login page of the web interface...

CVE-2024-48197

Audiocodes MP-202B running v4.4.3 is affected by a Cross Site Scripting (XSS) vulnerability in the web interface login page that can enable a remote attacker to escalate privileges. Root cause: XSS in the login web page. Affected product/version: Audiocodes MP-202b v4.4.3. Impact: privilege escal...

PT-2024-17753 · Paessler · Paessler Prtg Network Monitor

Name of the Vulnerable Software and Affected Versions: Paessler PRTG Network Monitor affected versions not specified Description: This issue allows network-adjacent attackers to bypass authentication on affected installations of Paessler PRTG Network Monitor. The specific flaw exists within the...

(0Day) Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Paessler PRTG Network Monitor. Some user interaction on the part of an administrator is required to exploit this vulnerability. The specific flaw exists within the PRTG Network Monitor web...

CVE-2024-12984

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /webcaps/webCapsConfig of the component Web Interface. The manipulation...

CVE-2024-12984 Amcrest IP2M-841B Web Interface webCapsConfig information disclosure

A vulnerability classified as problematic has been found in Amcrest IP2M-841B, IP2M-841W, IPC-IP2M-841B, IPC-IP3M-943B, IPC-IP3M-943S, IPC-IP3M-HX2B and IPC-IPM-721S up to 20241211. This affects an unknown part of the file /webcaps/webCapsConfig of the component Web Interface. The manipulation...