References https://www.ddpoc.com/DVB-2021-2515.html https://www.cnvd.org.cn/flaw/show/CNVD-2021-46257 https://github.com/J1ezds/Vulnerability-Wiki-page/blob/main/webapp/TamronOS-IPTV%E7%B3%BB%E7%BB%9F-ping-%E4%BB%BB%E6%84%8F%E5%91%BD%E4%BB%A4%E6%89%A7%E8%A1%8C%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/Jietewang/article/details/122095631 https://www.saury.net/2383.html https://www.ddpoc.com/DVB-2023-5260.html https://github.com/Threekiii/Awesome-POC/blob/master/Web%E5%BA%94%E7%94%A8%E6%BC%8F%E6%B4%9E/TamronOS%20IPTV%E7%B3%BB%E7%BB%9F%20submit%20%E4%BB%BB%E6%84%8F%E7%94%A8%E6%88%B7%E5%88%9B%E5%BB%BA%E6%BC%8F%E6%B4%9E.md https://www.vulncheck.com/advisories/tamronos-iptv-command-injection-via-api-ping-rce https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2023-0497.html https://github.com/emadshanab/goby-poc/blob/main/TamronOS-IPTV-ping-RCE.json
Related VulnerabilitiesPoCccm-detect: Clear-Com Core Configuration Manager Panel - DetectPoCweb-config: Web Configuration File - DetectPoCzoneminder-system-log: ZoneMinder System Log - DetectPoCmybb-installer: MyBB Installation Panel - DetectPoCosticket-installer: osTicket Installer Panel - DetectPoCCVE-2026-25527: changedetection.io <= 0.52.9 - Unauthenticated Path Traversalchangedetection.io /static/%2e%2e/flask_app.py 目录遍历漏洞(CVE-2026-25527)changedetection.io <= 0.53.9 存在路径遍历漏洞(CVE-2026-25527)PoCspringboot-httpexchanges: Detects Springboot HTTP Exchanges ActuatorPoCdbgate-anonymous-access: DbGate Anonymous Access - DetectionPoCCVE-2026-27645: Changedetection.io RSS Single Watch - Cross-Site Scriptingchangedetection.io存在反射xss漏洞(CVE-2026-27645)PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API