108 matches found
CVE-2025-15681
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providing valid credentials. This allows the...
CVE-2025-15681
CVE-2025-15681 affects TBEA TLogger V2.1.0.0B0.0.0.0. The web server contains an authentication bypass: after a user has authenticated, an unauthenticated attacker can access protected functionality via the /index.asp endpoint without valid credentials, potentially exposing or modifying device co...
CVE-2025-15681
TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server. After a user has previously authenticated to the device, an unauthenticated attacker can directly access protected functionality through the /index.asp endpoint without providing valid credentials. This allows the...
CVE-2026-6995
CVE-2026-6995 concerns BDCOM P3310D (firmware 0.4.2, 10.1.0F Build 86345) and its /index.asp New User Page. The vulnerability arises from manipulating the User name argument, enabling cross-site scripting (XSS). The issue is exploitable remotely and public exploits exist. Documented impact is lim...
CVE-2026-6995
A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...
CVE-2026-6995 BDCOM P3310D New User index.asp cross site scripting
A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown function of the file /index.asp of the component New User Page. Performing a manipulation of the argument User name results in cross site scripting. The attack may be initiated...
BDCOM P3310D 跨站脚本漏洞
The BDCOM P3310D is an Ethernet switch device designed for access layer networks by the BDCOM company in China. The version BDCOM P3310D 0.4.2 10.1.0F Build 86345 contains a cross-site scripting vulnerability. This vulnerability stems from an unknown feature of the New User Page component’s...
EUVD-2005-2011
Malware in sbrugna...
EUVD-2006-7100
Malware in sbrugna...
EUVD-2006-6226
Malware in sbrugna...
EUVD-2020-28945
Malware in sbrugna...
EUVD-2009-0338
Malware in sbrugna...
CVE-2020-8033
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field...
CVE-2022-3465
A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The...
PT-2022-22268 · Mediabridge · Mediabridge Medialink
Name of the Vulnerable Software and Affected Versions: Mediabridge Medialink affected versions not specified Description: A critical issue was found in Mediabridge Medialink, affecting the file /index.asp, which leads to improper authentication. The attack can be initiated remotely...
CVE-2022-3465 Mediabridge Medialink index.asp improper authentication
A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2022-3465 Mediabridge Medialink index.asp improper authentication
A vulnerability classified as critical was found in Mediabridge Medialink. This vulnerability affects unknown code of the file /index.asp. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2022-3465
The CVE-2022-3465 entry concerns Mediabridge Medialink devices with an improper authentication flaw in unknown code of /index.asp. The vulnerability can be exploited remotely and has publicly disclosed exploits; documents do not specify affected models/firmware versions or a fix. Some sources rei...
