Magdesign vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Magdesign products: 1 record(s), with severity, exploitation and fixes.

Pocketvj Control Panel Firmware 1

Exploited only (KEV) →

CVE-2025-63334 Critical · 9.8 CWE-78 Nov 5, 2025

OS Command Injection in Magdesign Pocketvj Control Panel Firmware

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.