juliourena

3 exploits Active since Dec 2019
CVE-2019-19470 NOMISEC HIGH WORKING POC
TinyWall <2.1.12 - Privilege Escalation
Unsafe usage of .NET deserialization in Named Pipe message processing allows privilege escalation to NT AUTHORITY\SYSTEM for a local attacker. Affected product is TinyWall, all versions up to and including 2.1.12. Fixed in version 2.1.13.
CVSS 7.8
CVE-2025-11851 WRITEUP LOW WORKING POC
Apeman ID71 EN75.8.53.20 - Cross-Site Scripting via /set_alias.cgi Alias Parameter
A vulnerability has been found in Apeman ID71 EN75.8.53.20. The affected element is an unknown function of the file /set_alias.cgi. Such manipulation of the argument alias leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 3.5
CVE-2025-11852 WRITEUP MEDIUM WRITEUP
Apeman ID71 218.53.203.117 - Unauthenticated Improper Authentication in ONVIF Service
A vulnerability was found in Apeman ID71 218.53.203.117. The impacted element is an unknown function of the file /onvif/device_service of the component ONVIF Service. Performing manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS 5.3