EUVD-2025-203525

Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under References...

CVE-2025-66635

Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under References...

CVE-2025-66635

Stack-based buffer overflow vulnerability exists in SEIKO EPSON Web Config. Specially crafted data input by a logged-in user may execute arbitrary code. As for the details of the affected products and versions, see the information provided by the vendor under References...

SEIKO EPSON printer Web Config vulnerable to stack-based buffer overflow

Overview Web Config is software installed on multiple SEIKO EPSON printers which allows users to check the status and change the settings via a web browser. Web Config contains the following vulnerability. Stack-based buffer overflow CWE-121 - CVE-2025-66635 Shogo Iyota of GMO Cybersecurity by...

PT-2025-51375

Name of the Vulnerable Software and Affected Versions SEIKO EPSON Web Config affected versions not specified Description A stack-based buffer overflow issue exists in SEIKO EPSON Web Config. A logged-in user providing specially crafted data can potentially execute arbitrary code. Recommendations ...

SEIKO EPSON Web Config 安全漏洞

SEIKO EPSON Web Config is a web configuration page from SEIKO EPSON Japan. A security vulnerability exists in SEIKO EPSON Web Config that originates from a stack buffer overflow and could lead to the execution of arbitrary code...

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

Huntress is warning of a new actively exploited vulnerability in Gladinet's CentreStack and Triofox products stemming from the use of hard-coded cryptographic keys that have affected nine organizations so far. "Threat actors can potentially abuse this as a way to access the web.config file, openi...

SEIKO EPSON Web Config和SEIKO EPSON Web Control 安全漏洞

SEIKO EPSON Web Config and SEIKO EPSON Web Control are both products of SEIKO EPSON Corporation, Japan.SEIKO EPSON Web Config is a Web configuration page.SEIKO EPSON Web Control is a Web management page. A security vulnerability exists in SEIKO EPSON Web Config and SEIKO EPSON Web Control that...

EUVD-2020-10156

Malware in sbrugna...

EUVD-2023-27672

Malicious code in bioql PyPI...

EUVD-2023-42355

Malicious code in bioql PyPI...

EUVD-2023-31282

Malicious code in bioql PyPI...

CVE-2023-38556

Improper input validation vulnerability in SEIKO EPSON printer Web Config allows a remote attacker to turned off the printer. Note Web Config is the software that allows users to check the status and change the settings of SEIKO EPSON printers via a web browser. Web Config is pre-installed in som...

CVE-2023-27520

Cross-site request forgery CSRF vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the authentication and perform unintended operations by having a logged-in user view a malicious page. Note Web Config is the software that allows...

CVE-2020-18230

Cross Site Scripting XSS in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfgswitchshow" of component " /admin/webconfig.php"...

mojoPortal 安全漏洞

mojoPortal is an open source, object-oriented web site architecture WSF and content management system CMS by Joe Audette, an individual developer in the United States. The system provides event calendars, photo albums, file managers, and more. A security vulnerability exists in mojoPortal version...

CVE-2025-27926

In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files web.config containing passwords that are readable by unauthorized users...

Insecure initial password configuration issue in SEIKO EPSON Web Config

Overview Web Config is software that allows users to check the status and change the settings of SEIKO EPSON products, e.g., printers and scanners, via a web browser. In the initial setting no administrative password is set, and when a user connects the device and configures Web Config settings f...

CVE-2024-47295

Insecure initial password configuration issue in SEIKO EPSON Web Config allows a remote unauthenticated attacker to set an arbitrary password and operate the device with an administrative privilege. As for the details of the affected versions, see the information provided by the vendor under...

CVE-2024-47295

CVE-2024-47295 affects SEIKO EPSON Web Config, where insecure initial password configuration allows a remote unauthenticated attacker to set an arbitrary password and operate the device with administrative privileges. Public sources describe the vulnerability in the Web Config software used by SE...