CVE-2019-10664

概要

参考情報

• packetstormsecurity.com/files/152678/Domoticz-4.10577-Unauthenticated-Remote-Command-Execution.html · Third Party Advisory
• domoticz/domoticz commit ee70db4 · Patch
• exploit-db.com/exploits/46773 · Third Party Advisory

domoticz のその他の脆弱性

• CVE-2026-1001中 4.8Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of…
• CVE-2019-15480中 5.4Domoticz 4.10717 has XSS via item.Name.
• CVE-2019-10678高 7.5Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.