CVE-2026-96774

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774

A vulnerability exists in the SPON Communications IP Network Audio Device XC-9603 (version 1.2.3_20181106 Build 107). The flaw impacts the loadCfg function within the /ini/sys_cfg.txt file of the Configuration File Download component. This issue allows for information disclosure via a remote atta...

EUVD-2026-85761

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774 SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2026-96774 SPON Communications IP Network Audio Device XC-9603 Configuration File Download sys_cfg.txt loadCfg information disclosure

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

PT-2026-97645

Name of the Vulnerable Software and Affected Versions SPON Communications IP Network Audio Device XC-9603 version 1.2.3 20181106 Build 107 Description A remote information disclosure issue exists within the Configuration File Download component. The flaw is located in the loadCfg function when...

CVE-2026-96774: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in SPON Communications IP Network Audio Device XC-9603 1.2.320181106 Build 107. This affects the function loadCfg of the file /ini/syscfg.txt of the component Configuration File Download. The manipulation results in information disclosure. The attack can be launched...

CVE-2020-36963: Missing Authentication for Critical Function

Intelbras Router RF 301K firmware version 1.1.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to download router configuration files. Attackers can send a specific HTTP GET request to /cgi-bin/DownloadCfg/RouterCfm.cfg to retrieve sensitive router...

CVE-2025-65212: Reliance on Cookies without Validation and Integrity Checking

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

CVE-2025-14738: Improper Authentication

Improper authentication vulnerability in TP-Link WA850RE httpd modules allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2160527, ≤ WA850RE V3160922...

EUVD-2018-0803

Malware in sbrugna...

EUVD-2018-6002

Malware in sbrugna...

EUVD-2016-10154

Malware in sbrugna...

EUVD-2024-17319

Malicious code in bioql PyPI...

CVE-2025-29514: Improper Access Control

Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request...

D-Link DSL-7740C security vulnerabilities

The D-Link DSL-7740C is a modem from China AUO D-Link. A security vulnerability exists in the D-Link DSL-7740C DSL7740C.V6.TR069.20211230 version, which stems from improper access control of the config.xgi function, which could result in the downloading of configuration files...

CVE-2024-1575

The improper privilege management vulnerability in the Zyxel WBE660S firmware version 6.70ACGG.3 and earlier versions could allow an authenticated user to escalate privileges and download the configuration files on a vulnerable device...

CVE-2024-31587: Improper Limitation of a Pathname to a Restricted Directory

SecuSTATION Camera V2.5.5.3116-S50-SMA-B20160811A and lower allows an unauthenticated attacker to download device configuration files via a crafted request...

CVE-2021-35326: Undefined Security Weakness

A vulnerability in TOTOLINK A720R router with firmware v4.1.5cu.470B20200911 allows attackers to download the configuration file via sending a crafted HTTP request...

CVE-2020-29138

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...