research@onekey.com
organization01
roles
Roles this identity holds.
02
references
Other names and identifiers for this entity.
nvdUS research@onekey.com
03
assessed vulnerabilities (20)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-10365US | — | — | ||
The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management inte… | ||||
| CVE-2025-10364US | — | — | ||
The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management inte… | ||||
| CVE-2025-5113US | — | — | ||
The Diviotec professional series exposes a web interface. One endpoint is vulnerable to arbitrary command injection and hardcoded passwords are used. | ||||
| CVE-2025-4010US | — | — | ||
The Netcom NTC 6200 and NWL 222 series expose a web interface to be configured and set up by operators. Multiple endpoints of the web interface are vulnerable to arbitrary command… | ||||
| CVE-2025-4009US | — | — | ||
The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management inte… | ||||
| CVE-2025-4008US | high8.8OT critical | KEV | ||
The Meteobridge web interface let meteobridge administrator manage their weather station data collection and administer their meteobridge system through a web application written i… | ||||
| CVE-2024-6199US | — | — | ||
An unauthenticated attacker on the WAN interface, with the ability to intercept Dynamic DNS (DDNS) traffic between DDNS services and the modem, could manipulate specific responses… | ||||
| CVE-2024-6198US | — | — | ||
The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buf… | ||||
| CVE-2024-11666US | critical9.8OT elevated | — | ||
Affected devices beacon to eCharge cloud infrastructure asking if there are any command they should run. This communication is established over an insecure channel since peer verif… | ||||
| CVE-2024-11665US | high8.8 | — | ||
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in hardy-barth cph2_echarge_firmware allows OS Command Injection.This issue affect… | ||||
| CVE-2024-5035US | — | — | ||
The affected device expose a network service called "rftest" that is vulnerable to unauthenticated command injection on ports TCP/8888, TCP/8889, and TCP/8890. By successfully expl… | ||||
| CVE-2024-4999US | — | — | ||
A vulnerability in the web-based management interface of multiple Ligowave devices could allow an authenticated remote attacker to execute arbitrary commands with elevated privileg… | ||||
| CVE-2024-3871US | — | — | ||
The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements multiple features that are affected by command injections and s… | ||||
| CVE-2023-0862US | high8.8 | — | ||
The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicious files to the web r… | ||||
| CVE-2023-0861US | high8.8 | Exploit | ||
NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful exploit could allow an authenticated user to execute arbitr… | ||||
| CVE-2023-0593US | medium5.5 | — | ||
A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction… | ||||
| CVE-2023-0592US | medium5.5 | — | ||
A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction… | ||||
| CVE-2023-0591US | medium5.5 | — | ||
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction direc… | ||||
| CVE-2022-4510US | high7.8 | Exploit | ||
A path traversal vulnerability was identified in ReFirm Labs binwalk from version 2.1.2b through 2.3.3 included. By crafting a malicious PFS filesystem file, an attacker can get bi… | ||||
| CVE-2022-4221US | critical9.8 | — | ||
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS c… | ||||