Description
ilevia EVE X1 Server 是一款智能家居管理系统。该漏洞存在于 /ajax/php/ping.php 接口中，攻击者可以通过构造恶意请求，远程执行任意命令，可能导致系统被完全控制。
ilevia EVE X1 Server /ajax/php/ping.php 命令执行漏洞（CVE-2025-60738）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/iSee857/ilevia-EVE-X1-Server
https://nvd.nist.gov/vuln/detail/CVE-2025-60738
https://cvefeed.io/vuln/detail/CVE-2025-60738
https://feedly.com/cve/CVE-2025-60738
https://www.cyberhub.blog/cves/CVE-2025-60738
https://access.redhat.com/security/cve/cve-2025-60738
https://advisories.checkpoint.com/defense/advisories/public/2025/cpai-2025-7590.html/
https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-60738
https://mondoo.com/vulnerability-intelligence/vulnerability/CVE-2025-60738