Skip to content
OpenAdvisories

Weakness (CWE)

CWE-912: Hidden Functionality

Class Incomplete

The product contains functionality that is not documented, not part of the specification, and not accessible through an interface or command sequence that is obvious to the product's users or administrators.

How to prevent it (1 mitigation)

  1. Installation

    Always verify the integrity of the product that is being installed.

Source: MITRE CWE-912

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-61515 Public exploit

    Puwell IP Camera 2.x - 4.x Unauthenticated Command Injection via DebugShell

    Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system commands by sending a crafted JSON payload to the DebugShell interface exposed on…

    Puwell Technology IP Camera
  • Critical 9.3
    CVE-2010-20103 Public exploit EPSS 15%

    ProFTPD 1.3.3c Backdoor Command Execution

    A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell command…

    ProFTPD Project ProFTPD (Professional FTP Daemon)
  • Critical 10.0
    CVE-2011-10018 Public exploit

    myBB 1.6.4 Backdoor Arbitrary Command Execution

    myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code. The backdoor allowed remote attackers to execute arbitrary PHP code by injecting payloads into a specially crafted collapsed cookie. This vulnerability was introduce…

    myBB Group Forum Software
  • Critical 9.3
    CVE-2025-34117 Public exploit EPSS 21%

    Netcore / Netis Routers RCE via UDP Port 53413 Backdoor

    A remote code execution vulnerability exists in multiple Netcore and Netis routers models with firmware released prior to August 2014 due to the presence of an undocumented backdoor listener on UDP port 53413. Exact version boundaries remain undocumented. An …

    Netis Netcore Technology Router firmware Router firmware
  • High 7.2
    CVE-2025-32370 Public exploit

    Kentico Xperience before 13.0.178 has a specific set of allowed ContentUploader file extensions for unauthenticated upl…

    Kentico Xperience
  • Medium 6.8
    CVE-2025-27840 Public exploit

    Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).

    espressif ESP32
  • High 7.5
    CVE-2024-5633 Public exploit

    Longse model LBH30FE200W cameras, as well as products based on this device, provide an unrestricted access for an attac…

    Zamel Longse Technology LBH30FE200W ZMB-01/C