Description
Ilevia EVE X1 Server 是一款智能家居管理系统。该漏洞存在于 login.php 文件中，攻击者可以通过发送特制的请求，利用命令注入漏洞执行任意命令，可能导致服务器被完全控制、数据泄露和系统崩溃等严重后果。
Ilevia EVE X1 Server /ajax/php/login.php 命令执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-34184
https://github.com/iSee857/ilevia-EVE-X1-Server
https://fortiguard.fortinet.com/encyclopedia/ips/58761
https://www.exploit-db.com/exploits/52437
https://cve.imfht.com/detail/CVE-2025-34184?lang=en
https://app.opencve.io/cve/?vendor=ilevia&product=eve_x1_server
https://www.cve.org/CVERecord?id=CVE-2025-34184
https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-60738
https://packetstorm.news/files/id/207717/
https://www.vulncheck.com/advisories/ilevia-eve-x1-server-neuro-code-unauth-code-injection