Exploits 4233 - exploit.company

Explore Vulnerabilities

Explore all Exploits:

by:

Karn Ganeshen

vendor:

Cambium

Cambium ePMP1000 ‘get_chart’ Shell via Command Injection (v3.1-3.5-RC7)

This module exploits an OS Command Injection vulnerability in Cambium ePMP1000 device management portal. It requires any one of the following login credentials - admin/admin, installer/installer, home/home - to set up a reverse netcat shell. The module has been tested on versions 3.1-3.5-RC7.

Explore Vulnerabilities

Explore all Exploits:

Cambium ePMP1000 ‘get_chart’ Shell via Command Injection (v3.1-3.5-RC7)

Recent Exploits:

openSIS 9.1 – SQL Injection (Authenticated)

dizqueTV 1.5.3 – Remote Code Execution (RCE)

reNgine 2.2.0 – Command Injection (Authenticated)

Stored Cross-Site Scripting (XSS) in NoteMark

Windows IPv6 CVE-2024-38063 Denial-Of-Service Vulnerability

Invesalius 3.1 – Remote Code Execution (RCE)

Stored XSS in Gitea

Elber ESE DVB-S/S2 Satellite Receiver 1.5.x Device Configuration Vulnerability

Elber Wayber Analog/Digital Audio STL 4.00 Authentication Bypass

Elber Wayber Analog/Digital Audio STL 4.00 Device Configuration Vulnerability