Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/02/2024 Updated: 29/02/2024

F-logic DataCube3 v1.0 is vulnerable to unrestricted file upload, which could allow an authenticated malicious actor to upload a file of dangerous type by manipulating the filename extension.

DataCube3 version 10 suffers from a remote shell upload vulnerability ...

PoC Script for CVE-2024-25832: Exploit chain reverse shell, information disclosure (root password leak) + unrestricted file upload in DataCube3

CVE-2024-25830 and CVE-2024-25832 - DataCube3 Improper Access Control and Unrestricted File Upload Overview This repository features a Proof of Concept (PoC) for a two-step exploit chain targeting DataCube3 devices It combines CVE-2024-25830 (Improper Access Control) to extract root passwords and CVE-2024-25832 (Unrestricted File Upload) to deploy a reverse shell script This

https://neroteam.com/blog/f-logic-datacube3-vulnerability-report https://nvd.nist.gov https://github.com/0xNslabs/CVE-2024-25832-PoC https://packetstormsecurity.com/files/177518/DataCube3-1.0-Shell-Upload.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-25832

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect