EUVD-2015-1145

Malware in sbrugna...

CVE-2015-1002

IniNet embeddedWebServer aka eWebServer before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via a crafted string...

Directory traversal

Directory traversal vulnerability in IniNet embeddedWebServer aka eWebServer before 2.02 allows remote attackers to read arbitrary files via a crafted pathname...

CVE-2015-1005: Exposure of Sensitive Information to an Unauthorized Actor

IniNet embeddedWebServer aka eWebServer before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information via unspecified vectors...