NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC1 · 1 read

CVE-2019-12725

CVSS 3.0: 9.8 critical
EPSS: 90%p100
Published: Jul 19, 2019 · Jul 19, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-12725 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Zeroshell 3.9.0 is prone to a remote command execution vulnerability. Specifically, this issue occurs because the web application mishandles a few HTTP parameters. An unauthenticated attacker can exploit this issue by injecting OS commands inside the vulnerable parameters.

Vendors: zeroshell

Products: zeroshell

Weakness: CWE-78

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (89.8%)

In the news

4 stories

ExCobalt Cybercrime group targets Russian organizations in multiple sectors

Security AffairsJun 24, 07:39 UTC · Jun 24, 2024Data breachCVE-2022-2586 CVE-2021-3156 CVE-2021-4034+63

60

Necro botnet now targets Visual Tools DVRs

Security AffairsOct 12, 22:48 UTC · Oct 12, 2021MalwareExploitedCVE-2020-15568 CVE-2021-2900 CVE-2020-25494+21

60

New Mirai botnet targets tens of flaws in popular IoT devices

Security AffairsJun 22, 20:58 UTC · Jun 22, 2023MalwareCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+131

47

IoT Under Siege: The Anatomy of the Latest Mirai Campaign Leveraging Multiple IoT Exploits

Unit 42 tracks a Mirai botnet campaign exploiting over 20 IoT vulnerabilities in routers, cameras and DVRs to build DDoS botnets since March 2023.

Palo Alto Unit 42Aug 17, 13:04 UTC · Aug 17, 2026MalwareExploitedCVE-2019-12725 CVE-2019-17621 CVE-2019-20500+133 · 1 read

42