Vulnerabilidades de Magdesign

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de Magdesign: 1 registro(s), com severidade, exploração e correções.

Pocketvj Control Panel Firmware 1

Somente exploradas (KEV) →

CVE-2025-63334 Crítica · 9.8 CWE-78 05/11/2025

OS Command Injection em Magdesign Pocketvj Control Panel Firmware

PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.