ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Vulnerabilities

9 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

ShowKEV onlyPublic PoCCVSS ≥ 9CVSS ≥ 7EPSS ≥ 10%EPSS ≥ 50%Window24h7d30d90dAll
StackAllWordPressE-commerceDrupalJoomlanpmpipMavenGoPackagistRubyGemsNuGet
SortpublishedepsscvssKEV dateupdatedvendor: propumpservice ✕
CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2023-27394
+8 in the same advisory: …27886 …28712 …28398 …28654 …28718 …28375 +2
Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability.

Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability. This can be exploited to inject and execute arbitrary shell commands through a HTTP GET parameter called by DataLogView.php, EventsView.php and AlarmsView.php scripts.

NVD description · AI analysis pending		9.8
group max
18%
  • propumpservice osprey pump controller firmware
—